Loading
1,916 results ( 0 unique IP ) ,3256 ms ,Keyword Search.
Nearly year results, click to view all results.
智能排除蜜罐/仿冒数据 0 条, 点击 查看。
API
Lastupdate time
All
- All
- Protocol
- Website
Fields
共 1916 条
- 10条/页
无数据
- 1
- 2
- 3
- 4
- 5
- 6
- 192
74.113.212.112:139
\xff\x02index\x00\x00\x00\x00\x00\x00\x01\x01Y\x00\x00\x00\x003804168534 31788 advtool.dll 6.48.6
1865125579 38689 secure.dll 6.48.6
2796268233 39626 dhcp.dll 6.48.6
772956305 43967 ppp.dll 6.48.6
4198862952 55388 roting4.dll 6.48.6
3865650372 39312 mpls.dll 6.48.6
1934373982 39570 hotspot.dll 6.48l\xff.6
3727716800 79592 wlan6.dll 6.48.6
2359567342 750609 roteros.dll 6.48.6
1014255979 2541 system.dll 6.48.6
\x05\x00
\x03\x10\x00\x00\x00\x18\x00\x00\x00\x01\x00\x00\x00\x04\x00\x01\x05\x00\x00\x00\x00
ServerAlive2:
IP1: Exchange02
IP2: 10.0.0.212
IP3: 74.113.212.6
IP4: 169.254.2.240
NTLMSSP:
Target_Name: ASPOSELocal
Product_Version: 10.0.20348 Ntlm 15
OS: Windows Server 2022
NetBIOS_Domain_Name: ASPOSELocal
NetBIOS_Computer_Name: EXCHANGE02
DNS_Domain_Name: aspose.local
DNS_Computer_Name: Exchange02.aspose.local
MsvAvDnsTreeName: aspose.local
System_Time: 2024-09-22 11:48:18 +0000 UTC
DCERPC Dump:
3c4728c5-f0ab-448b-bda1-6ce01eb0a6d6 (dhcpcore6.dll):
- NCALRPC: dhcpcsvc6\x00
- NCALRPC: dhcpcsvc\x00
2fb92682-6599-42dc-ae13-bd2ca89bd11c (mpssvc.dll):
- NCALRPC: LRPC-2720f0f7b6dfc60643\x00
- NCALRPC: LRPC-e8891a3fc8793afb5f\x00
- NCALRPC: LRPC-2b86fe5d6ed57e6c4a\x00
- NCALRPC: LRPC-c028639b7177799579\x00
1088a980-eae5-11d0-8d9b-00a02453c337 ([MS-MQQP]: Message Queuing (MSMQ):):
- NCACN: 74.113.212.6:2105
- NCACN: 74.113.212.6:2103
- NCACN: 74.113.212.6:2107
- NCACN: 74.113.212.6:6440
- NCACN: 74.113.212.6:6439
- NCACN: 74.113.212.6:6438
- NCALRPC: QMMgmtFacility$exchange02\x00
- NCALRPC: QMsvc$exchange02\x00
0fc77b1a-95d8-4a2e-a0c0-cff54237462b (modernexecserver.dll):
- NCALRPC: LRPC-abec8ab46a34a57093\x00
- NCALRPC: OLE7DE169A7BCF85E1DE95E0742DF48\x00
c9ac6db5-82b7-4e55-ae8a-e464ed7b4277 (SYSNTFY.dll):
- NCALRPC: LRPC-c126361eeb9784184e\x00
- unknow
- NCALRPC: LRPC-5aad592c796fc6ac58\x00
- NCALRPC: LRPC-c8bd6230ed8b70736f\x00
- NCALRPC: senssvc\x00
- NCALRPC: IUserProfile2\x00
- NCALRPC: LRPC-cb60fd9a812d83a86e\x00
d4051bde-9cdd-4910-b393-4aa85ec3c482:
- NCALRPC: LRPC-b96671cdd7789efef1\x00
- NCALRPC: OLE633FAE94D6A83E44B16F37389AF7\x00
650a7e26-eab8-5533-ce43-9c1dfce11511 (rascustom.dll):
- NCALRPC: LRPC-b773c5065021294219\x00
- NCALRPC: VpnikeRpc\x00
- NCALRPC: RasmanLrpc\x00
- NCACN: \\EXCHANGE02\x00\\PIPE\ROUTER\x00
d95afe70-a6d5-4259-822e-2c84da1ddb0d (wininit.exe):
- NCACN: 74.113.212.6:6401
- NCALRPC: WindowsShutdown\x00
- NCACN: \\EXCHANGE02\x00\\PIPE\InitShutdown\x00
- NCALRPC: WMsgKRpc058F60\x00
55e6b932-1979-45d6-90c5-7f6270724112 (resourcepolicyserver.dll):
- NCALRPC: LRPC-79aef1f0bf61ad4688\x00
- NCALRPC: LRPC-260f2389864c60292e\x00
- NCALRPC: OLE4B4BA5700AD72DF680B5E40AC250\x00
- NCALRPC: actkernel\x00
- NCALRPC: umpo\x00
2eb08e3e-639f-4fba-97b1-14f878961076:
- NCALRPC: LRPC-77ab6a82708967ad0e\x00
3c4728c5-f0ab-448b-bda1-6ce01eb0a6d5 (dhcpcore.dll):
- NCALRPC: dhcpcsvc\x00
7f9d11bf-7fb9-436b-a812-b2d50c5d4c03 (mpssvc.dll):
- NCALRPC: LRPC-2b86fe5d6ed57e6c4a\x00
- NCALRPC: LRPC-c028639b7177799579\x00
98cd761e-e77d-41c8-a3c0-0fb756d90ec2 (tellib.dll):
- NCALRPC: LRPC-b96671cdd7789efef1\x00
- NCALRPC: OLE633FAE94D6A83E44B16F37389AF7\x00
5a4d59fe-42ac-4c6e-b554-b12c6af35956:
- NCALRPC: LRPC-b367151c7dd291ee7d\x00
- NCACN: 74.113.212.6:6592
- NCALRPC: OLEC025670ACD7A1C888127F40BFD31\x00
0b1c2170-5732-4e0e-8cd3-d9b16f3b84d7 ([MS-RAA]: Remote Authorization API Protocol):
- NCACN: 74.113.212.6:6407
- NCALRPC: NETLOGON_LRPC\x00
- NCACN: 74.113.212.6:6400
- NCALRPC: MicrosoftLaps_LRPC_0fb2f016-fe45-4a08-a7f9-a467f5e5fa0b\x00
- NCALRPC: samss lpc\x00
- NCALRPC: SidKey Local End Point\x00
- NCALRPC: protected_storage\x00
- NCALRPC: lsasspirpc\x00
- NCALRPC: lsapolicylookup\x00
- NCALRPC: LSA_EAS_ENDPOINT\x00
- NCALRPC: LSA_IDPEXT_ENDPOINT\x00
- NCALRPC: lsacap\x00
- NCALRPC: LSARPC_ENDPOINT\x00
- NCALRPC: securityevent\x00
- NCALRPC: audit\x00
- NCACN: \\EXCHANGE02\x00\\pipe\lsass\x00
d09bdeb5-6171-4a34-bfe2-06fa82652568 (BrokerLib.dll):
- NCALRPC: csebpub\x00
- NCALRPC: LRPC-dd07d83ddf42c89832\x00
- NCALRPC: LRPC-6fa9aad46205e0f4e7\x00
- NCALRPC: LRPC-ba273134c02820af12\x00
- NCALRPC: LRPC-79aef1f0bf61ad4688\x00
- NCALRPC: LRPC-260f2389864c60292e\x00
- NCALRPC: OLE4B4BA5700AD72DF680B5E40AC250\x00
- NCALRPC: actkernel\x00
- NCALRPC: umpo\x00
- NCALRPC: LRPC-dee6b386d33cef4e57\x00
- NCALRPC: LRPC-92f31879804f2ad9ad\x00
857fb1be-084f-4fb5-b59c-4b2c4be5f0cf (bisrv.dll):
- NCALRPC: LRPC-260f2389864c60292e\x00
- NCALRPC: OLE4B4BA5700AD72DF680B5E40AC250\x00
- NCALRPC: actkernel\x00
- NCALRPC: umpo\x00
0361ae94-0316-4c6c-8ad8-c594375800e2 (psmsrv.dll):
- NCALRPC: umpo\x00
5824833b-3c1a-4ad2-bdfd-c31d19e23ed2 (psmsrv.dll):
- NCALRPC: umpo\x00
1ff70682-0a51-30e8-076d-740be8cee98b (taskcomp.dll):
- NCACN: \\EXCHANGE02\x00\\PIPE\atsvc\x00
- NCALRPC: LRPC-90ca944b884f8b8833\x00
0d47017b-b33b-46ad-9e18-fe96456c5078 (psmserviceexthost.dll):
- NCALRPC: umpo\x00
e53d94ca-7464-4839-b044-09a2fb8b3ae5 (psmserviceexthost.dll):
- NCALRPC: umpo\x00
a398e520-d59a-4bdd-aa7a-3c1e0303a511:
- NCALRPC: LRPC-6ad5af6cf4fb600130\x00
76d12b80-3467-11d3-91ff-0090272f9ea3 ([MS-MQMP]: Message Queuing (MSMQ):):
- NCACN: 74.113.212.6:2105
- NCACN: 74.113.212.6:2103
- NCACN: 74.113.212.6:2107
- NCACN: 74.113.212.6:6440
- NCACN: 74.113.212.6:6439
- NCACN: 74.113.212.6:6438
- NCALRPC: QMMgmtFacility$exchange02\x00
- NCALRPC: QMsvc$exchange02\x00
3a9ef155-691d-4449-8d05-09ad57031823 (schedsvc.dll):
- NCACN: 74.113.212.6:6405
- NCALRPC: LRPC-59064e846dd9975e22\x00
- NCALRPC: ubpmtaskhostchannel\x00
- NCACN: \\EXCHANGE02\x00\\PIPE\atsvc\x00
- NCALRPC: LRPC-90ca944b884f8b8833\x00
b18fbab6-56f8-4702-84e0-41053293a869 (usermgr.dll):
- NCALRPC: LRPC-697fd5fb29bb8be1e0\x00
- NCALRPC: OLE987B39C82B791CD0BEC0E24D6083\x00
1a9134dd-7b39-45ba-ad88-44d01ca47f28 ([MS-MQRR]: Message Queuing (MSMQ):):
- NCACN: 74.113.212.6:2105
- NCACN: 74.113.212.6:2103
- NCACN: 74.113.212.6:2107
- NCACN: 74.113.212.6:6440
- NCACN: 74.113.212.6:6439
- NCACN: 74.113.212.6:6438
- NCALRPC: QMMgmtFacility$exchange02\x00
- NCALRPC: QMsvc$exchange02\x00
1544f5e0-613c-11d1-93df-00c04fd7bd09 ([MS-OXABREF]: Address Book Name Service Provider Interface (NSPI) Referral Protocol):
- unknow
- NCALRPC: LRPC-c04e050cb2208f4814\x00
- NCACN: 74.113.212.6:6699
- NCALRPC: OLE01DCE5527575F0ABE8D61E1F8FE5\x00
3f787932-3452-4363-8651-6ea97bb373bb:
- NCALRPC: LRPC-3b17b56da37619b307\x00
- NCALRPC: OLE07D4370074CFAB669020B07B0380\x00
0a74ef1c-41a4-4e06-83ae-dc74fb1cdd53 (schedsvc.dll):
- NCALRPC: LRPC-90ca944b884f8b8833\x00
b25a52bf-e5dd-4f4a-aea6-8ca7272a0e86 (keyiso.dll):
- NCACN: 74.113.212.6:6407
- NCALRPC: NETLOGON_LRPC\x00
- NCACN: 74.113.212.6:6400
- NCALRPC: MicrosoftLaps_LRPC_0fb2f016-fe45-4a08-a7f9-a467f5e5fa0b\x00
- NCALRPC: samss lpc\x00
- NCALRPC: SidKey Local End Point\x00
- NCALRPC: protected_storage\x00
- NCALRPC: lsasspirpc\x00
- NCALRPC: lsapolicylookup\x00
- NCALRPC: LSA_EAS_ENDPOINT\x00
- NCALRPC: LSA_IDPEXT_ENDPOINT\x00
- NCALRPC: lsacap\x00
- NCALRPC: LSARPC_ENDPOINT\x00
- NCALRPC: securityevent\x00
- NCALRPC: audit\x00
- NCACN: \\EXCHANGE02\x00\\pipe\lsass\x00
fae436b0-b864-4a87-9eda-298547cd82f2 (psmserviceexthost.dll):
- NCALRPC: umpo\x00
c521facf-09a9-42c5-b155-72388595cbf0 (psmserviceexthost.dll):
- NCALRPC: umpo\x00
e40f7b57-7a25-4cd3-a135-7f7d3df9d16b (ncbservice.dll):
- NCALRPC: LRPC-a43f566d8437158500\x00
f47433c3-3e9d-4157-aad4-83aa1f5c2d4c (mpssvc.dll):
- NCALRPC: LRPC-e8891a3fc8793afb5f\x00
- NCALRPC: LRPC-2b86fe5d6ed57e6c4a\x00
- NCALRPC: LRPC-c028639b7177799579\x00
b58aa02e-2884-4e97-8176-4ee06d794184 (sysmain.dll):
- NCALRPC: LRPC-ff6ddbce39969c2dbf\x00
d8140e00-5c46-4ae6-80ac-2f9a76df224c:
- NCALRPC: LRPC-747fc87d913e9376d4\x00
178d84be-9291-4994-82c6-3f909aca5a03 (psmserviceexthost.dll):
- NCALRPC: umpo\x00
880fd55e-43b9-11e0-b1a8-cf4edfd72085 (ncbservice.dll):
- NCALRPC: LRPC-68299d1eee7b09b7f6\x00
- NCALRPC: OLEA9E89CF2763224C540C8A80CEE24\x00
- NCALRPC: LRPC-dee6b386d33cef4e57\x00
a500d4c6-0dd1-4543-bc0c-d5f93486eaf8 (timebrokerserver.dll):
- NCALRPC: LRPC-d88b2c0a3eff286b0d\x00
- NCALRPC: LRPC-92f31879804f2ad9ad\x00
7f1343fe-50a9-4927-a778-0c5859517bac (wkssvc.dll):
- NCACN: \\EXCHANGE02\x00\\PIPE\wkssvc\x00
- NCALRPC: LRPC-d3c74255c41fdbc10b\x00
2e6035b2-e8f1-41a7-a044-656b439c4c34 (httpprxm.dll):
- NCALRPC: TeredoControl\x00
- NCALRPC: TeredoDiagnostics\x00
- NCALRPC: LRPC-22114b346b42736d0f\x00
d249bd56-4cc0-4fd3-8ce6-6fe050d590cb:
- NCALRPC: LRPC-747fc87d913e9376d4\x00
12e65dd8-887f-41ef-91bf-8d816c42c2e7 (WinLogon.exe):
- NCALRPC: WMsgKRpc05AA71\x00
- NCALRPC: WMsgKRpc0A136A2\x00
552d076a-cb29-4e44-8b6a-d15e59e2c0af (iphlpsvc.dll):
- NCALRPC: LRPC-22114b346b42736d0f\x00
d9318e75-8a8b-4abb-88e7-aceb01f09e60:
- NCALRPC: LRPC-e9d775340f17e17be3\x00
- NCACN: 74.113.212.6:6631
- NCALRPC: OLE98CC178C0DC87B963CCA021997EA\x00
95406f0b-b239-4318-91bb-cea3a46ff0dc (psmserviceexthost.dll):
- NCALRPC: umpo\x00
f2c9b409-c1c9-4100-8639-d8ab1486694a (wkssvc.dll):
- NCALRPC: LRPC-d3c74255c41fdbc10b\x00
b37f900a-eae4-4304-a2ab-12bb668c0188 (wcmsvc.dll):
- NCALRPC: LRPC-da62e732fa7ed7b881\x00
b97db8b2-4c63-11cf-bff6-08002be23f2f ([MS-CMRP]: Failover Cluster:):
- NCALRPC: LRPC-e0017a9daebe532669\x00
- NCACN: 74.113.212.6:6465
51a227ae-825b-41f2-b4a9-1ac9557a1018 (keyiso.dll):
- NCACN: 74.113.212.6:6407
- NCALRPC: NETLOGON_LRPC\x00
- NCACN: 74.113.212.6:6400
- NCALRPC: MicrosoftLaps_LRPC_0fb2f016-fe45-4a08-a7f9-a467f5e5fa0b\x00
- NCALRPC: samss lpc\x00
- NCALRPC: SidKey Local End Point\x00
- NCALRPC: protected_storage\x00
- NCALRPC: lsasspirpc\x00
- NCALRPC: lsapolicylookup\x00
- NCALRPC: LSA_EAS_ENDPOINT\x00
- NCALRPC: LSA_IDPEXT_ENDPOINT\x00
- NCALRPC: lsacap\x00
- NCALRPC: LSARPC_ENDPOINT\x00
- NCALRPC: securityevent\x00
- NCALRPC: audit\x00
- NCACN: \\EXCHANGE02\x00\\pipe\lsass\x00
082a3471-31b6-422a-b931-a54401960c62 (psmserviceexthost.dll):
- NCALRPC: umpo\x00
3b338d89-6cfa-44b8-847e-531531bc9992 (psmsrv.dll):
- NCALRPC: umpo\x00
4bec6bb8-b5c2-4b6f-b2c1-5da5cf92d0d9 (psmsrv.dll):
- NCALRPC: umpo\x00
37c6221b-cc4b-47ae-8366-7449f2fe9a06:
- NCALRPC: LRPC-e9d775340f17e17be3\x00
- NCACN: 74.113.212.6:6631
- NCALRPC: OLE98CC178C0DC87B963CCA021997EA\x00
8ec21e98-b5ce-4916-a3d6-449fa428a007 (modernexecserver.dll):
- NCALRPC: LRPC-abec8ab46a34a57093\x00
- NCALRPC: OLE7DE169A7BCF85E1DE95E0742DF48\x00
2d98a740-581d-41b9-aa0d-a88b9d5ce938 (bisrv.dll):
- NCALRPC: LRPC-260f2389864c60292e\x00
- NCALRPC: OLE4B4BA5700AD72DF680B5E40AC250\x00
- NCALRPC: actkernel\x00
- NCALRPC: umpo\x00
fc48cd89-98d6-4628-9839-86f7a3e4161a (ACPBackgroundManagerPolicy.dll):
- NCALRPC: dabrpc\x00
- NCALRPC: csebpub\x00
- NCALRPC: LRPC-dd07d83ddf42c89832\x00
- NCALRPC: LRPC-6fa9aad46205e0f4e7\x00
- NCALRPC: LRPC-ba273134c02820af12\x00
- NCALRPC: LRPC-79aef1f0bf61ad4688\x00
- NCALRPC: LRPC-260f2389864c60292e\x00
- NCALRPC: OLE4B4BA5700AD72DF680B5E40AC250\x00
- NCALRPC: actkernel\x00
- NCALRPC: umpo\x00
ecca92d9-07d1-4136-87f7-2ac4109337ee:
- NCALRPC: LRPC-aa3645a572cfaf75b3\x00
- NCACN: 74.113.212.6:6622
- NCALRPC: OLE84494F2FBECA5C1D8AECECCC119B\x00
0d3e2735-cea0-4ecc-a9e2-41a2d81aed4e (bisrv.dll):
- NCALRPC: LRPC-260f2389864c60292e\x00
- NCALRPC: OLE4B4BA5700AD72DF680B5E40AC250\x00
- NCALRPC: actkernel\x00
- NCALRPC: umpo\x00
5222821f-d5e2-4885-84f1-5f6185a0ec41 (ncbservice.dll):
- NCALRPC: LRPC-8fc15164dcb70c195f\x00
338cd001-2244-31f1-aaaa-900038001003 ([MS-RRP]: Windows Remote Registry Protocol):
- NCACN: \\EXCHANGE02\x00\\PIPE\winreg\x00
29770a8f-829b-4158-90a2-78cd488501f7 (sessenv.dll):
- NCACN: 74.113.212.6:6410
- NCACN: \\EXCHANGE02\x00\\pipe\SessEnvPublicRpc\x00
- NCALRPC: SessEnvPrivateRpc\x00
- NCALRPC: LRPC-cb60fd9a812d83a86e\x00
d22895ef-aff4-42c5-a5b2-b14466d34ab4 (diagtrack.dll):
- NCALRPC: LRPC-b96671cdd7789efef1\x00
- NCALRPC: OLE633FAE94D6A83E44B16F37389AF7\x00
4dace966-a243-4450-ae3f-9b7bcb5315b8 (psmserviceexthost.dll):
- NCALRPC: umpo\x00
1b37ca91-76b1-4f5e-a3c7-2abfc61f2bb0 (bisrv.dll):
- NCALRPC: LRPC-260f2389864c60292e\x00
- NCALRPC: OLE4B4BA5700AD72DF680B5E40AC250\x00
- NCALRPC: actkernel\x00
- NCALRPC: umpo\x00
5261574a-4572-206e-b268-6b199213b4e4 ([MS-OXCRPC]: Wire Format Protocol):
- unknow
- NCALRPC: LRPC-c04e050cb2208f4814\x00
- NCACN: 74.113.212.6:6699
- NCALRPC: OLE01DCE5527575F0ABE8D61E1F8FE5\x00
1832bcf6-cab8-41d4-85d2-c9410764f75a (psmserviceexthost.dll):
- NCALRPC: umpo\x00
88abcbc3-34ea-76ae-8215-767520655a23 (resourcepolicyserver.dll):
- NCALRPC: LRPC-79aef1f0bf61ad4688\x00
- NCALRPC: LRPC-260f2389864c60292e\x00
- NCALRPC: OLE4B4BA5700AD72DF680B5E40AC250\x00
- NCALRPC: actkernel\x00
- NCALRPC: umpo\x00
085b0334-e454-4d91-9b8c-4134f9e793f3 (psmsrv.dll):
- NCALRPC: umpo\x00
30b044a5-a225-43f0-b3a4-e060df91f9c1 (certprop.dll):
- NCALRPC: LRPC-9b79051235fda245db\x00
2c7fd9ce-e706-4b40-b412-953107ef9bb0 (psmserviceexthost.dll):
- NCALRPC: umpo\x00
f44e62af-dab1-44c2-8013-049a9de417d6 (wcmsvc.dll):
- NCALRPC: LRPC-da62e732fa7ed7b881\x00
d014c423-0d54-40a3-90dc-56c7a6071e6f:
- NCALRPC: LRPC-e9d775340f17e17be3\x00
- NCACN: 74.113.212.6:6631
- NCALRPC: OLE98CC178C0DC87B963CCA021997EA\x00
4ed8abcc-f1e2-438b-981f-bb0e8abc010c (psmserviceexthost.dll):
- NCALRPC: umpo\x00
8782d3b9-ebbd-4644-a3d8-e8725381919b (psmsrv.dll):
- NCALRPC: umpo\x00
eb081a0d-10ee-478a-a1dd-50995283e7a8 (wkssvc.dll):
- NCALRPC: LRPC-d3c74255c41fdbc10b\x00
30adc50c-5cbc-46ce-9a0e-91914789e23c (nrpsrv.DLL):
- NCALRPC: LRPC-ec5cd419bd201dc6fd\x00
- NCALRPC: DNSResolver\x00
13560fa9-8c09-4b56-a1fd-04d083b9b2a1:
- NCALRPC: LRPC-da62e732fa7ed7b881\x00
95095ec8-32ea-4eb0-a3e2-041f97b36168 (diagtrack.dll):
- NCALRPC: LRPC-b96671cdd7789efef1\x00
- NCALRPC: OLE633FAE94D6A83E44B16F37389AF7\x00
8fd9e884-86a5-4b2f-bc7c-2adaa75d0469:
- NCALRPC: LRPC-e9d775340f17e17be3\x00
- NCACN: 74.113.212.6:6631
- NCALRPC: OLE98CC178C0DC87B963CCA021997EA\x00
ba3fa067-8d56-4b56-ba1f-9cbae8db3478:
- unknow
- NCALRPC: LRPC-c04e050cb2208f4814\x00
- NCACN: 74.113.212.6:6699
- NCALRPC: OLE01DCE5527575F0ABE8D61E1F8FE5\x00
378e52b0-c0a9-11cf-822d-00aa0051e40f (taskcomp.dll):
- NCACN: \\EXCHANGE02\x00\\PIPE\atsvc\x00
- NCALRPC: LRPC-90ca944b884f8b8833\x00
dd490425-5325-4565-b774-7e27d6c09c24 (bfe.dll):
- NCALRPC: LRPC-c028639b7177799579\x00
76c217bc-c8b4-4201-a745-373ad9032b1a (resourcepolicyserver.dll):
- NCALRPC: LRPC-79aef1f0bf61ad4688\x00
- NCALRPC: LRPC-260f2389864c60292e\x00
- NCALRPC: OLE4B4BA5700AD72DF680B5E40AC250\x00
- NCALRPC: actkernel\x00
- NCALRPC: umpo\x00
c49a5a70-8a7f-4e70-ba16-1e8f1f193ef1 (adhsvc.dll):
- NCALRPC: OLEA9986CB6F99734E553E894A366DC\x00
- NCALRPC: TeredoControl\x00
- NCALRPC: TeredoDiagnostics\x00
- NCALRPC: LRPC-22114b346b42736d0f\x00
b396a3ff-9203-4c75-a367-244cf29b419f:
- NCALRPC: LRPC-e9d775340f17e17be3\x00
- NCACN: 74.113.212.6:6631
- NCALRPC: OLE98CC178C0DC87B963CCA021997EA\x00
20c40295-8dba-48e6-aebf-3e78ef3bb144 (bisrv.dll):
- NCALRPC: LRPC-260f2389864c60292e\x00
- NCALRPC: OLE4B4BA5700AD72DF680B5E40AC250\x00
- NCALRPC: actkernel\x00
- NCALRPC: umpo\x00
c605f9fb-f0a3-4e2a-a073-73560f8d9e3e (bisrv.dll):
- NCALRPC: LRPC-260f2389864c60292e\x00
- NCALRPC: OLE4B4BA5700AD72DF680B5E40AC250\x00
- NCALRPC: actkernel\x00
- NCALRPC: umpo\x00
bdaa0970-413b-4a3e-9e5d-f6dc9d7e0760 (psmsrv.dll):
- NCALRPC: umpo\x00
c2d1b5dd-fa81-4460-9dd6-e7658b85454b:
- NCALRPC: LRPC-da62e732fa7ed7b881\x00
98716d03-89ac-44c7-bb8c-285824e51c4a (srvsvc.dll):
- NCALRPC: LRPC-3dba596b8a317a5395\x00
fdb3a030-065f-11d1-bb9b-00a024ea5525 ([MS-MQMP]: Message Queuing (MSMQ):):
- NCACN: 74.113.212.6:2105
- NCACN: 74.113.212.6:2103
- NCACN: 74.113.212.6:2107
- NCACN: 74.113.212.6:6440
- NCACN: 74.113.212.6:6439
- NCACN: 74.113.212.6:6438
- NCALRPC: QMMgmtFacility$exchange02\x00
- NCALRPC: QMsvc$exchange02\x00
4c9dbf19-d39e-4bb9-90ee-8f7179b20283 (diagtrack.dll):
- NCALRPC: LRPC-b96671cdd7789efef1\x00
- NCALRPC: OLE633FAE94D6A83E44B16F37389AF7\x00
4d88f820-8c32-4453-9e30-7297e2fcf025:
- NCALRPC: LRPC-69d39c27e59b4a85b7\x00
- NCACN: 74.113.212.6:6600
- NCALRPC: OLEAFC3924BD32560BEA02092E2DAB5\x00
3473dd4d-2e88-4006-9cba-22570909dd10 (winhttp.dll):
- NCALRPC: e0c9208f-43cc-4ed9-8fe0-eb7af8c98dd2\x00
- NCALRPC: LRPC-a6b13f2fe56184401c\x00
abfb6ca3-0c5e-4734-9285-0aee72fe8d1c (wcmsvc.dll):
- NCALRPC: LRPC-da62e732fa7ed7b881\x00
da5a86c5-12c2-4943-ab30-7f74a813d853 ([MS-PCQ]: Performance Counter Query Protocol):
- NCACN: \\EXCHANGE02\x00\\PIPE\winreg\x00
c36be077-e14b-4fe9-8abc-e856ef4f048b (httpprxm.dll):
- NCALRPC: TeredoControl\x00
- NCALRPC: TeredoDiagnostics\x00
- NCALRPC: LRPC-22114b346b42736d0f\x00
0d3c7f20-1c8d-4654-a1b3-51563b298bda (usermgr.dll):
- NCALRPC: LRPC-697fd5fb29bb8be1e0\x00
- NCALRPC: OLE987B39C82B791CD0BEC0E24D6083\x00
e38f5360-8572-473e-b696-1b46873beeab (diagtrack.dll):
- NCALRPC: LRPC-b96671cdd7789efef1\x00
- NCALRPC: OLE633FAE94D6A83E44B16F37389AF7\x00
a4f1db00-ca47-1067-b31f-00dd010662da ([MS-OXCRPC]: Wire Format Protocol):
- unknow
- NCALRPC: LRPC-c04e050cb2208f4814\x00
- NCACN: 74.113.212.6:6699
- NCALRPC: OLE01DCE5527575F0ABE8D61E1F8FE5\x00
9b008953-f195-4bf9-bde0-4471971e58ed (systemeventsbrokerserver.dll):
- NCALRPC: LRPC-6fa9aad46205e0f4e7\x00
- NCALRPC: LRPC-ba273134c02820af12\x00
- NCALRPC: LRPC-79aef1f0bf61ad4688\x00
- NCALRPC: LRPC-260f2389864c60292e\x00
- NCALRPC: OLE4B4BA5700AD72DF680B5E40AC250\x00
- NCALRPC: actkernel\x00
- NCALRPC: umpo\x00
fd8be72b-a9cd-4b2c-a9ca-4ded242fbe4d (diagtrack.dll):
- NCALRPC: LRPC-b96671cdd7789efef1\x00
- NCALRPC: OLE633FAE94D6A83E44B16F37389AF7\x00
245a2854-fcdf-4215-adf4-0b4c364e79fb:
- NCALRPC: LRPC-e9d775340f17e17be3\x00
- NCACN: 74.113.212.6:6631
- NCALRPC: OLE98CC178C0DC87B963CCA021997EA\x00
20434699-5e7e-47d6-95f6-698c4a0ec2f0:
- NCALRPC: LRPC-e9d775340f17e17be3\x00
- NCACN: 74.113.212.6:6631
- NCALRPC: OLE98CC178C0DC87B963CCA021997EA\x00
52d3f3f5-248c-4d74-a01f-a06e41d5cd59:
- NCALRPC: LRPC-3a77200af49eb4ef5c\x00
- NCACN: 74.113.212.6:6682
- NCALRPC: OLE5AD4C7F52D2A0C176E6375CBBED4\x00
76f226c3-ec14-4325-8a99-6a46348418af (WinLogon.exe):
- NCALRPC: WindowsShutdown\x00
- NCACN: \\EXCHANGE02\x00\\PIPE\InitShutdown\x00
- NCALRPC: WMsgKRpc058F60\x00
- NCALRPC: WMsgKRpc05AA71\x00
- NCALRPC: WMsgKRpc0A136A2\x00
7ea70bcf-48af-4f6a-8968-6a440754d5fa (nsisvc.dll):
- NCALRPC: LRPC-b265e099c4b4d54bd4\x00
f1f21151-7185-4170-ac8d-9bb077c29bd3:
- NCALRPC: LRPC-8e8582a42920501f25\x00
- NCACN: 74.113.212.6:6634
- NCALRPC: OLE4E65C7722751459517839EE0A5AA\x00
b1ef227e-dfa5-421e-82bb-67a6a129c496 (modernexecserver.dll):
- NCALRPC: LRPC-abec8ab46a34a57093\x00
- NCALRPC: OLE7DE169A7BCF85E1DE95E0742DF48\x00
697dcda9-3ba9-4eb2-9247-e11f1901b0d2 (systemeventsbrokerserver.dll):
- NCALRPC: LRPC-dd07d83ddf42c89832\x00
- NCALRPC: LRPC-6fa9aad46205e0f4e7\x00
- NCALRPC: LRPC-ba273134c02820af12\x00
- NCALRPC: LRPC-79aef1f0bf61ad4688\x00
- NCALRPC: LRPC-260f2389864c60292e\x00
- NCALRPC: OLE4B4BA5700AD72DF680B5E40AC250\x00
- NCALRPC: actkernel\x00
- NCALRPC: umpo\x00
2513bcbe-6cd4-4348-855e-7efb3c336dd3 (bisrv.dll):
- NCALRPC: LRPC-260f2389864c60292e\x00
- NCALRPC: OLE4B4BA5700AD72DF680B5E40AC250\x00
- NCALRPC: actkernel\x00
- NCALRPC: umpo\x00
8bfc3be1-6def-4e2d-af74-7c47cd0ade4a (bisrv.dll):
- NCALRPC: LRPC-260f2389864c60292e\x00
- NCALRPC: OLE4B4BA5700AD72DF680B5E40AC250\x00
- NCALRPC: actkernel\x00
- NCALRPC: umpo\x00
dd59071b-3215-4c59-8481-972edadc0f6a (psmserviceexthost.dll):
- NCALRPC: actkernel\x00
- NCALRPC: umpo\x00
5df3c257-334b-4e96-9efb-a0619255be09:
- NCALRPC: LRPC-b367151c7dd291ee7d\x00
- NCACN: 74.113.212.6:6592
- NCALRPC: OLEC025670ACD7A1C888127F40BFD31\x00
- NCALRPC: LRPC-69d39c27e59b4a85b7\x00
- NCACN: 74.113.212.6:6600
- NCALRPC: OLEAFC3924BD32560BEA02092E2DAB5\x00
- NCALRPC: LRPC-aa3645a572cfaf75b3\x00
- NCACN: 74.113.212.6:6622
- NCALRPC: OLE84494F2FBECA5C1D8AECECCC119B\x00
- NCALRPC: LRPC-e9d775340f17e17be3\x00
- NCACN: 74.113.212.6:6631
- NCALRPC: OLE98CC178C0DC87B963CCA021997EA\x00
- NCALRPC: LRPC-4cd05b02faa009d3ab\x00
- NCACN: 74.113.212.6:6650
- NCALRPC: OLE101213995B6AAFA6B235E4D3040E\x00
- NCALRPC: LRPC-252d98a63082603cc5\x00
- NCACN: 74.113.212.6:6664
- NCALRPC: OLEFFA6ED9ED67A1E5A74365B232A0B\x00
- NCALRPC: LRPC-c3478410e0a0e301fd\x00
- NCACN: 74.113.212.6:6696
- NCALRPC: OLE70C927560AEC8DA27A425B8E70DF\x00
- NCALRPC: LRPC-c04e050cb2208f4814\x00
- NCACN: 74.113.212.6:6699
- NCALRPC: OLE01DCE5527575F0ABE8D61E1F8FE5\x00
0ff1f646-13bb-400a-ab50-9a78f2b7a85a:
- NCALRPC: umpo\x00
6982a06e-5fe2-46b1-b39c-a2c545bfa069:
- NCALRPC: umpo\x00
f6beaff7-1e19-4fbb-9f8f-b89e2018337c (wevtsvc.dll):
- NCACN: 74.113.212.6:6402
- NCACN: \\EXCHANGE02\x00\\pipe\eventlog\x00
- NCALRPC: eventlog\x00
33d84484-3626-47ee-8c6f-e7e98b113be1 (WPTaskScheduler.dll):
- NCALRPC: LRPC-59064e846dd9975e22\x00
- NCALRPC: ubpmtaskhostchannel\x00
- NCACN: \\EXCHANGE02\x00\\PIPE\atsvc\x00
- NCALRPC: LRPC-90ca944b884f8b8833\x00
8fb74744-b2ff-4c00-be0d-9ef9a191fe1b (keyiso.dll):
- NCACN: 74.113.212.6:6407
- NCALRPC: NETLOGON_LRPC\x00
- NCACN: 74.113.212.6:6400
- NCALRPC: MicrosoftLaps_LRPC_0fb2f016-fe45-4a08-a7f9-a467f5e5fa0b\x00
- NCALRPC: samss lpc\x00
- NCALRPC: SidKey Local End Point\x00
- NCALRPC: protected_storage\x00
- NCALRPC: lsasspirpc\x00
- NCALRPC: lsapolicylookup\x00
- NCALRPC: LSA_EAS_ENDPOINT\x00
- NCALRPC: LSA_IDPEXT_ENDPOINT\x00
- NCALRPC: lsacap\x00
- NCALRPC: LSARPC_ENDPOINT\x00
- NCALRPC: securityevent\x00
- NCALRPC: audit\x00
- NCACN: \\EXCHANGE02\x00\\pipe\lsass\x00
12345778-1234-abcd-ef00-0123456789ac (samsrv.dll):
- NCACN: 74.113.212.6:6400
- NCALRPC: MicrosoftLaps_LRPC_0fb2f016-fe45-4a08-a7f9-a467f5e5fa0b\x00
- NCALRPC: samss lpc\x00
- NCALRPC: SidKey Local End Point\x00
- NCALRPC: protected_storage\x00
- NCALRPC: lsasspirpc\x00
- NCALRPC: lsapolicylookup\x00
- NCALRPC: LSA_EAS_ENDPOINT\x00
- NCALRPC: LSA_IDPEXT_ENDPOINT\x00
- NCALRPC: lsacap\x00
- NCALRPC: LSARPC_ENDPOINT\x00
- NCALRPC: securityevent\x00
- NCALRPC: audit\x00
- NCACN: \\EXCHANGE02\x00\\pipe\lsass\x00
86d35949-83c9-4044-b424-db363231fd0c (schedsvc.dll):
- NCACN: 74.113.212.6:6405
- NCALRPC: LRPC-59064e846dd9975e22\x00
- NCALRPC: ubpmtaskhostchannel\x00
- NCACN: \\EXCHANGE02\x00\\PIPE\atsvc\x00
- NCALRPC: LRPC-90ca944b884f8b8833\x00
1a0d010f-1c33-432c-b0f5-8cf4e8053099 (srvsvc.dll):
- NCALRPC: LRPC-3dba596b8a317a5395\x00
7df1ceae-de4e-4e6f-ab14-49636e7c2052:
- NCALRPC: LRPC-099994d286cb73e626\x00
\x05\x00
\x03\x10\x00\x00\x00\x18\x00\x00\x00\x01\x00\x00\x00\x04\x00\x01\x05\x00\x00\x00\x00
ServerAlive2:
IP1: exgtest-aspose
IP2: 192.168.101.124
NTLMSSP:
Target_Name: EXCHANGE
Product_Version: 6.2.9200 Ntlm 15
OS: Windows Server 2012/Windows 8
NetBIOS_Domain_Name: EXCHANGE
NetBIOS_Computer_Name: EXGTEST-ASPOSE
DNS_Domain_Name: exchange.conholdate.local
DNS_Computer_Name: exgtest-aspose.exchange.conholdate.local
MsvAvDnsTreeName: exchange.conholdate.local
System_Time: 2024-09-22 11:46:46 +0000 UTC
DCERPC Dump:
3a9ef155-691d-4449-8d05-09ad57031823 (schedsvc.dll):
- NCACN: 192.168.101.124:17102
- NCACN: \\EXGTEST-ASPOSE\x00\\PIPE\atsvc\x00
- NCALRPC: senssvc\x00
- NCALRPC: OLE77A945F3D4ADFF6F22EF91C2FC0E\x00
- NCALRPC: IUserProfile2\x00
0b6edbfa-4a24-4fc6-8a23-942b1eca65d1 (spoolsv.exe):
- NCALRPC: spoolss\x00
367abb81-9844-35f1-ad32-98f038001003 (services.exe):
- NCACN: 192.168.101.124:17301
552d076a-cb29-4e44-8b6a-d15e59e2c0af (iphlpsvc.dll):
- NCACN: \\EXGTEST-ASPOSE\x00\\PIPE\srvsvc\x00
- NCACN: 192.168.101.124:17102
- NCACN: \\EXGTEST-ASPOSE\x00\\PIPE\atsvc\x00
- NCALRPC: senssvc\x00
- NCALRPC: OLE77A945F3D4ADFF6F22EF91C2FC0E\x00
- NCALRPC: IUserProfile2\x00
bf6dd426-77b4-44b3-984e-d413fc075562:
- NCALRPC: LRPC-67d56970097d376ef7\x00
- NCACN: 192.168.101.124:17295
e40f7b57-7a25-4cd3-a135-7f7d3df9d16b (ncbservice.dll):
- NCALRPC: LRPC-e6efa1c2c55c381c35\x00
- NCACN: \\EXGTEST-ASPOSE\x00\\PIPE\srvsvc\x00
- NCACN: 192.168.101.124:17102
- NCACN: \\EXGTEST-ASPOSE\x00\\PIPE\atsvc\x00
- NCALRPC: senssvc\x00
- NCALRPC: OLE77A945F3D4ADFF6F22EF91C2FC0E\x00
- NCALRPC: IUserProfile2\x00
f5cc5a18-4264-101a-8c59-08002b2f8426 ([MS-NSPI]: Name Service Provider Interface (NSPI) Protocol):
- NCACN: \\EXGTEST-ASPOSE\x00\\pipe\f5f5a5a792340e72\x00
- unknow
- NCALRPC: NTDS_LPC\x00
- NCACN: 192.168.101.124:17104
- NCALRPC: samss lpc\x00
- NCALRPC: SidKey Local End Point\x00
- NCALRPC: protected_storage\x00
- NCALRPC: lsasspirpc\x00
- NCALRPC: lsapolicylookup\x00
- NCALRPC: LSA_EAS_ENDPOINT\x00
- NCALRPC: lsacap\x00
- NCALRPC: LSARPC_ENDPOINT\x00
- NCALRPC: securityevent\x00
- NCALRPC: audit\x00
- NCACN: \\EXGTEST-ASPOSE\x00\\pipe\lsass\x00
ae33069b-a2a8-46ee-a235-ddfd339be281 (spoolsv.exe):
- NCALRPC: spoolss\x00
f6beaff7-1e19-4fbb-9f8f-b89e2018337c (wevtsvc.dll):
- NCACN: 192.168.101.124:17101
- NCACN: \\EXGTEST-ASPOSE\x00\\pipe\eventlog\x00
- NCALRPC: eventlog\x00
8879d5aa-30a7-4eb2-9023-bec055dbe648:
- NCALRPC: LRPC-e7ec34da1dd7682d15\x00
- NCACN: 192.168.101.124:19721
- NCALRPC: OLEBCA831DB10A0A903F6E47195F021\x00
fdb3a030-065f-11d1-bb9b-00a024ea5525 ([MS-MQMP]: Message Queuing (MSMQ):):
- NCACN: 192.168.101.124:2105
- NCACN: 192.168.101.124:2103
- NCACN: 192.168.101.124:2107
- NCACN: 192.168.101.124:17112
- NCALRPC: QMMgmtFacility$exgtest-aspose\x00
- NCALRPC: QmReplService\x00
- NCALRPC: QMsvc$exgtest-aspose\x00
f224209f-9076-40f7-98ad-5416dbfa178e:
- NCALRPC: LRPC-ba6c586b21b74148d8\x00
- NCACN: 192.168.101.124:17263
7f1343fe-50a9-4927-a778-0c5859517bac (wkssvc.dll):
- NCACN: \\EXGTEST-ASPOSE\x00\\PIPE\wkssvc\x00
- NCALRPC: LRPC-d1dafbb935577c9fff\x00
- NCALRPC: DNSResolver\x00
ecca92d9-07d1-4136-87f7-2ac4109337ee:
- NCALRPC: LRPC-2556b11f6617bd0c39\x00
- NCACN: 192.168.101.124:17147
880fd55e-43b9-11e0-b1a8-cf4edfd72085 (ncbservice.dll):
- NCALRPC: LRPC-e6efa1c2c55c381c35\x00
- NCACN: \\EXGTEST-ASPOSE\x00\\PIPE\srvsvc\x00
- NCACN: 192.168.101.124:17102
- NCACN: \\EXGTEST-ASPOSE\x00\\PIPE\atsvc\x00
- NCALRPC: senssvc\x00
- NCALRPC: OLE77A945F3D4ADFF6F22EF91C2FC0E\x00
- NCALRPC: IUserProfile2\x00
df831451-edad-415d-905f-9d3793f92db3:
- NCACN: 192.168.101.124:17183
- NCALRPC: LRPC-1c1c8f1163fecd98bf\x00
75f47e04-c7c9-411e-a9eb-080b174b03a9:
- NCALRPC: LRPC-e7ec34da1dd7682d15\x00
- NCACN: 192.168.101.124:19721
- NCALRPC: OLEBCA831DB10A0A903F6E47195F021\x00
c36be077-e14b-4fe9-8abc-e856ef4f048b (httpprxm.dll):
- NCACN: \\EXGTEST-ASPOSE\x00\\PIPE\srvsvc\x00
- NCACN: 192.168.101.124:17102
- NCACN: \\EXGTEST-ASPOSE\x00\\PIPE\atsvc\x00
- NCALRPC: senssvc\x00
- NCALRPC: OLE77A945F3D4ADFF6F22EF91C2FC0E\x00
- NCALRPC: IUserProfile2\x00
245a2854-fcdf-4215-adf4-0b4c364e79fb:
- NCALRPC: LRPC-15b45ee0468849f953\x00
- NCACN: 192.168.101.124:17223
e62eb024-ee96-4d89-b24a-746cf02a3e98:
- NCALRPC: LRPC-e7ec34da1dd7682d15\x00
- NCACN: 192.168.101.124:19721
- NCALRPC: OLEBCA831DB10A0A903F6E47195F021\x00
938fe036-ede6-4f6c-966e-a3d7300279c8:
- NCACN: 192.168.101.124:17183
- NCALRPC: LRPC-1c1c8f1163fecd98bf\x00
- NCALRPC: LRPC-67d56970097d376ef7\x00
- NCACN: 192.168.101.124:17295
1b37ca91-76b1-4f5e-a3c7-2abfc61f2bb0 (bisrv.dll):
- NCALRPC: actkernel\x00
- NCALRPC: umpo\x00
99e64010-b032-11d0-97a4-00c04fd6551d:
- NCACN: 192.168.101.124:17183
- NCALRPC: LRPC-1c1c8f1163fecd98bf\x00
- NCALRPC: LRPC-67d56970097d376ef7\x00
- NCACN: 192.168.101.124:17295
c605f9fb-f0a3-4e2a-a073-73560f8d9e3e (bisrv.dll):
- NCALRPC: actkernel\x00
- NCALRPC: umpo\x00
7f9d11bf-7fb9-436b-a812-b2d50c5d4c03 (mpssvc.dll):
- NCALRPC: LRPC-fa4944880c755eea9b\x00
- NCALRPC: LRPC-f414feabbf074fcbd3\x00
8384fc47-956a-4d1e-ab2a-1205014f96ec:
- NCALRPC: LRPC-1d512da6a15eed7386\x00
- NCACN: 192.168.101.124:17261
f763c91c-2ab1-47fa-868f-7de7efd42194:
- NCALRPC: RdvVmAllowListRpc\x00
- NCALRPC: OLEB09F492358E23BCC9F6738DDF1FD\x00
d3444dd6-ee15-4564-83fc-0b16b8f5e8d4:
- NCALRPC: LRPC-e7ec34da1dd7682d15\x00
- NCACN: 192.168.101.124:19721
- NCALRPC: OLEBCA831DB10A0A903F6E47195F021\x00
30b044a5-a225-43f0-b3a4-e060df91f9c1 (certprop.dll):
- NCALRPC: LRPC-4076cf72b9f380be67\x00
- NCALRPC: LRPC-e6efa1c2c55c381c35\x00
- NCACN: \\EXGTEST-ASPOSE\x00\\PIPE\srvsvc\x00
- NCACN: 192.168.101.124:17102
- NCACN: \\EXGTEST-ASPOSE\x00\\PIPE\atsvc\x00
- NCALRPC: senssvc\x00
- NCALRPC: OLE77A945F3D4ADFF6F22EF91C2FC0E\x00
- NCALRPC: IUserProfile2\x00
f1f21151-7185-4170-ac8d-9bb077c29bd3:
- NCALRPC: LRPC-b72579643a674eade6\x00
- NCACN: 192.168.101.124:17144
a4f1db00-ca47-1067-b31f-00dd010662da ([MS-OXCRPC]: Wire Format Protocol):
- NCALRPC: LRPC-3ab1500bb06ebf8f97\x00
- unknow
6f08d61c-fd57-42b0-bb11-f30aedaca66e:
- NCALRPC: LRPC-e7ec34da1dd7682d15\x00
- NCACN: 192.168.101.124:19721
- NCALRPC: OLEBCA831DB10A0A903F6E47195F021\x00
4bec6bb8-b5c2-4b6f-b2c1-5da5cf92d0d9 (psmsrv.dll):
- NCALRPC: actkernel\x00
- NCALRPC: umpo\x00
1ff70682-0a51-30e8-076d-740be8cee98b (taskcomp.dll):
- NCACN: \\EXGTEST-ASPOSE\x00\\PIPE\atsvc\x00
- NCALRPC: senssvc\x00
- NCALRPC: OLE77A945F3D4ADFF6F22EF91C2FC0E\x00
- NCALRPC: IUserProfile2\x00
f47433c3-3e9d-4157-aad4-83aa1f5c2d4c (mpssvc.dll):
- NCALRPC: LRPC-fa4944880c755eea9b\x00
- NCALRPC: LRPC-f414feabbf074fcbd3\x00
dd490425-5325-4565-b774-7e27d6c09c24 (bfe.dll):
- NCALRPC: LRPC-f414feabbf074fcbd3\x00
9b48e5eb-b4cd-4b6d-ae73-656e0a777bda:
- NCACN: 192.168.101.124:17183
- NCALRPC: LRPC-1c1c8f1163fecd98bf\x00
- NCALRPC: LRPC-67d56970097d376ef7\x00
- NCACN: 192.168.101.124:17295
bd5790c9-d855-42b0-990f-3dfed8c184b3:
- NCALRPC: LRPC-1d512da6a15eed7386\x00
- NCACN: 192.168.101.124:17261
d95afe70-a6d5-4259-822e-2c84da1ddb0d (wininit.exe):
- NCACN: 192.168.101.124:17100
- NCALRPC: WindowsShutdown\x00
- NCACN: \\EXGTEST-ASPOSE\x00\\PIPE\InitShutdown\x00
- NCALRPC: WMsgKRpc092380\x00
0a74ef1c-41a4-4e06-83ae-dc74fb1cdd53 (schedsvc.dll):
- NCALRPC: senssvc\x00
- NCALRPC: OLE77A945F3D4ADFF6F22EF91C2FC0E\x00
- NCALRPC: IUserProfile2\x00
0b1c2170-5732-4e0e-8cd3-d9b16f3b84d7 ([MS-RAA]: Remote Authorization API Protocol):
- NCALRPC: NETLOGON_LRPC\x00
- NCALRPC: OLE03AE65F15D842B259E99B2147191\x00
- NCACN: 192.168.101.124:17106
- NCACN: \\EXGTEST-ASPOSE\x00\\pipe\f5f5a5a792340e72\x00
- unknow
- NCALRPC: NTDS_LPC\x00
- NCACN: 192.168.101.124:17104
- NCALRPC: samss lpc\x00
- NCALRPC: SidKey Local End Point\x00
- NCALRPC: protected_storage\x00
- NCALRPC: lsasspirpc\x00
- NCALRPC: lsapolicylookup\x00
- NCALRPC: LSA_EAS_ENDPOINT\x00
- NCALRPC: lsacap\x00
- NCALRPC: LSARPC_ENDPOINT\x00
- NCALRPC: securityevent\x00
- NCALRPC: audit\x00
- NCACN: \\EXGTEST-ASPOSE\x00\\pipe\lsass\x00
2fb92682-6599-42dc-ae13-bd2ca89bd11c (mpssvc.dll):
- NCALRPC: LRPC-fa4944880c755eea9b\x00
- NCALRPC: LRPC-f414feabbf074fcbd3\x00
c49a5a70-8a7f-4e70-ba16-1e8f1f193ef1 (adhsvc.dll):
- NCACN: \\EXGTEST-ASPOSE\x00\\PIPE\srvsvc\x00
- NCACN: 192.168.101.124:17102
- NCACN: \\EXGTEST-ASPOSE\x00\\PIPE\atsvc\x00
- NCALRPC: senssvc\x00
- NCALRPC: OLE77A945F3D4ADFF6F22EF91C2FC0E\x00
- NCALRPC: IUserProfile2\x00
76d12b80-3467-11d3-91ff-0090272f9ea3 ([MS-MQMP]: Message Queuing (MSMQ):):
- NCACN: 192.168.101.124:2105
- NCACN: 192.168.101.124:2103
- NCACN: 192.168.101.124:2107
- NCACN: 192.168.101.124:17112
- NCALRPC: QMMgmtFacility$exgtest-aspose\x00
- NCALRPC: QmReplService\x00
- NCALRPC: QMsvc$exgtest-aspose\x00
d014c423-0d54-40a3-90dc-56c7a6071e6f:
- NCALRPC: LRPC-15b45ee0468849f953\x00
- NCACN: 192.168.101.124:17223
1544f5e0-613c-11d1-93df-00c04fd7bd09 ([MS-OXABREF]: Address Book Name Service Provider Interface (NSPI) Referral Protocol):
- NCALRPC: LRPC-3ab1500bb06ebf8f97\x00
- unknow
2eb08e3e-639f-4fba-97b1-14f878961076:
- NCALRPC: LRPC-6afdc612e7b3306b4b\x00
12345778-1234-abcd-ef00-0123456789ac (samsrv.dll):
- NCACN: 192.168.101.124:17106
- NCACN: \\EXGTEST-ASPOSE\x00\\pipe\f5f5a5a792340e72\x00
- unknow
- NCALRPC: NTDS_LPC\x00
- NCACN: 192.168.101.124:17104
- NCALRPC: samss lpc\x00
- NCALRPC: SidKey Local End Point\x00
- NCALRPC: protected_storage\x00
- NCALRPC: lsasspirpc\x00
- NCALRPC: lsapolicylookup\x00
- NCALRPC: LSA_EAS_ENDPOINT\x00
- NCALRPC: lsacap\x00
- NCALRPC: LSARPC_ENDPOINT\x00
- NCALRPC: securityevent\x00
- NCALRPC: audit\x00
- NCACN: \\EXGTEST-ASPOSE\x00\\pipe\lsass\x00
3473dd4d-2e88-4006-9cba-22570909dd10 (winhttp.dll):
- NCACN: \\EXGTEST-ASPOSE\x00\\PIPE\W32TIME_ALT\x00
- NCALRPC: W32TIME_ALT\x00
- NCALRPC: LRPC-9a11b37bf888370d0a\x00
- NCALRPC: OLE8FC8B4C96B5E01D7EBBCCC985C2F\x00
76c0d124-a18e-49d4-adf1-d8c6ba868ea6:
- NCALRPC: LRPC-81412d3ba69c54fad2\x00
- NCACN: 192.168.101.124:17218
ba3fa067-8d56-4b56-ba1f-9cbae8db3478:
- NCALRPC: LRPC-3ab1500bb06ebf8f97\x00
- unknow
f2d0ca50-457a-4d87-ab1e-45f3a324993f:
- NCALRPC: LRPC-e7ec34da1dd7682d15\x00
- NCACN: 192.168.101.124:19721
- NCALRPC: OLEBCA831DB10A0A903F6E47195F021\x00
085b0334-e454-4d91-9b8c-4134f9e793f3 (psmsrv.dll):
- NCALRPC: actkernel\x00
- NCALRPC: umpo\x00
37fc1b02-da36-4b27-a745-bf2f58a98ff6:
- NCALRPC: LRPC-ba6c586b21b74148d8\x00
- NCACN: 192.168.101.124:17263
4a020372-bb0a-4031-a5a7-7c6896522c00:
- NCALRPC: LRPC-81412d3ba69c54fad2\x00
- NCACN: 192.168.101.124:17218
f2c9b409-c1c9-4100-8639-d8ab1486694a (wkssvc.dll):
- NCALRPC: LRPC-d1dafbb935577c9fff\x00
- NCALRPC: DNSResolver\x00
4d88f820-8c32-4453-9e30-7297e2fcf025:
- NCALRPC: LRPC-bc48580617aaee927a\x00
- NCACN: 192.168.101.124:17237
7ea70bcf-48af-4f6a-8968-6a440754d5fa (nsisvc.dll):
- NCALRPC: LRPC-9a11b37bf888370d0a\x00
- NCALRPC: OLE8FC8B4C96B5E01D7EBBCCC985C2F\x00
52d3f3f5-248c-4d74-a01f-a06e41d5cd59:
- NCALRPC: LRPC-4c629d1ae10fad0bd7\x00
- NCACN: 192.168.101.124:17250
906b0ce0-c70b-1067-b317-00dd010662da ([MS-CMPO]: MSDTC Connection Manager:):
- NCALRPC: LRPC-9bebb9c200857d2c80\x00
30adc50c-5cbc-46ce-9a0e-91914789e23c (nrpsrv.DLL):
- NCALRPC: LRPC-5bb01c88d0aaaea6fc\x00
- NCACN: 192.168.101.124:17101
- NCACN: \\EXGTEST-ASPOSE\x00\\pipe\eventlog\x00
- NCALRPC: eventlog\x00
5261574a-4572-206e-b268-6b199213b4e4 ([MS-OXCRPC]: Wire Format Protocol):
- NCALRPC: LRPC-3ab1500bb06ebf8f97\x00
- unknow
897e2e5f-93f3-4376-9c9c-fd2277495c27 ([MS-FRS2]: Distributed File System Replication Protocol):
- NCACN: 192.168.101.124:17322
- NCALRPC: OLE26AB6A35BE326D6AA27C7E98806F\x00
3b338d89-6cfa-44b8-847e-531531bc9992 (psmsrv.dll):
- NCALRPC: actkernel\x00
- NCALRPC: umpo\x00
1a0d010f-1c33-432c-b0f5-8cf4e8053099 (srvsvc.dll):
- NCACN: 192.168.101.124:17102
- NCACN: \\EXGTEST-ASPOSE\x00\\PIPE\atsvc\x00
- NCALRPC: senssvc\x00
- NCALRPC: OLE77A945F3D4ADFF6F22EF91C2FC0E\x00
- NCALRPC: IUserProfile2\x00
86d35949-83c9-4044-b424-db363231fd0c (schedsvc.dll):
- NCACN: 192.168.101.124:17102
- NCACN: \\EXGTEST-ASPOSE\x00\\PIPE\atsvc\x00
- NCALRPC: senssvc\x00
- NCALRPC: OLE77A945F3D4ADFF6F22EF91C2FC0E\x00
- NCALRPC: IUserProfile2\x00
b2507c30-b126-494a-92ac-ee32b6eeb039:
- NCALRPC: LRPC-a8a0bb267c41b2bc35\x00
- NCALRPC: OLE7E3F5DBF2C9564160A79EC3A3BF1\x00
12345778-1234-abcd-ef00-0123456789ab (lsasrv.dll):
- NCACN: \\EXGTEST-ASPOSE\x00\\pipe\f5f5a5a792340e72\x00
- unknow
- NCALRPC: NTDS_LPC\x00
- NCACN: 192.168.101.124:17104
- NCALRPC: samss lpc\x00
- NCALRPC: SidKey Local End Point\x00
- NCALRPC: protected_storage\x00
- NCALRPC: lsasspirpc\x00
- NCALRPC: lsapolicylookup\x00
- NCALRPC: LSA_EAS_ENDPOINT\x00
- NCALRPC: lsacap\x00
- NCALRPC: LSARPC_ENDPOINT\x00
- NCALRPC: securityevent\x00
- NCALRPC: audit\x00
- NCACN: \\EXGTEST-ASPOSE\x00\\pipe\lsass\x00
2e6035b2-e8f1-41a7-a044-656b439c4c34 (httpprxm.dll):
- NCACN: \\EXGTEST-ASPOSE\x00\\PIPE\srvsvc\x00
- NCACN: 192.168.101.124:17102
- NCACN: \\EXGTEST-ASPOSE\x00\\PIPE\atsvc\x00
- NCALRPC: senssvc\x00
- NCALRPC: OLE77A945F3D4ADFF6F22EF91C2FC0E\x00
- NCALRPC: IUserProfile2\x00
12345678-1234-abcd-ef00-01234567cffb ([MS-NRPC]: Netlogon Remote Protocol):
- NCALRPC: NETLOGON_LRPC\x00
- NCALRPC: OLE03AE65F15D842B259E99B2147191\x00
- NCACN: 192.168.101.124:17106
- NCACN: \\EXGTEST-ASPOSE\x00\\pipe\f5f5a5a792340e72\x00
- unknow
- NCALRPC: NTDS_LPC\x00
- NCACN: 192.168.101.124:17104
- NCALRPC: samss lpc\x00
- NCALRPC: SidKey Local End Point\x00
- NCALRPC: protected_storage\x00
- NCALRPC: lsasspirpc\x00
- NCALRPC: lsapolicylookup\x00
- NCALRPC: LSA_EAS_ENDPOINT\x00
- NCALRPC: lsacap\x00
- NCALRPC: LSARPC_ENDPOINT\x00
- NCALRPC: securityevent\x00
- NCALRPC: audit\x00
- NCACN: \\EXGTEST-ASPOSE\x00\\pipe\lsass\x00
d9318e75-8a8b-4abb-88e7-aceb01f09e60:
- NCALRPC: LRPC-15b45ee0468849f953\x00
- NCACN: 192.168.101.124:17223
1febdc2a-1734-4e06-8998-ed919c26ad43:
- NCALRPC: LRPC-e7ec34da1dd7682d15\x00
- NCACN: 192.168.101.124:19721
- NCALRPC: OLEBCA831DB10A0A903F6E47195F021\x00
8782d3b9-ebbd-4644-a3d8-e8725381919b (psmsrv.dll):
- NCALRPC: actkernel\x00
- NCALRPC: umpo\x00
a398e520-d59a-4bdd-aa7a-3c1e0303a511:
- NCACN: \\EXGTEST-ASPOSE\x00\\PIPE\srvsvc\x00
- NCACN: 192.168.101.124:17102
- NCACN: \\EXGTEST-ASPOSE\x00\\PIPE\atsvc\x00
- NCALRPC: senssvc\x00
- NCALRPC: OLE77A945F3D4ADFF6F22EF91C2FC0E\x00
- NCALRPC: IUserProfile2\x00
50abc2a4-574d-40b3-9d66-ee4fd5fba076 ([MS-DNSP]: Domain Name Service (DNS) Server Management):
- NCACN: 192.168.101.124:17117
da107c01-2b50-44d7-9d5f-bfd4fd8e95ed:
- NCACN: 192.168.101.124:17183
- NCALRPC: LRPC-1c1c8f1163fecd98bf\x00
- NCALRPC: LRPC-67d56970097d376ef7\x00
- NCACN: 192.168.101.124:17295
41f5fae1-e0ac-414c-a721-0d287466cb23:
- NCALRPC: LRPC-1d512da6a15eed7386\x00
- NCACN: 192.168.101.124:17261
3c4728c5-f0ab-448b-bda1-6ce01eb0a6d6 (dhcpcore6.dll):
- NCALRPC: dhcpcsvc6\x00
- NCALRPC: LRPC-5bb01c88d0aaaea6fc\x00
- NCACN: 192.168.101.124:17101
- NCACN: \\EXGTEST-ASPOSE\x00\\pipe\eventlog\x00
- NCALRPC: eventlog\x00
0d3e2735-cea0-4ecc-a9e2-41a2d81aed4e (bisrv.dll):
- NCALRPC: actkernel\x00
- NCALRPC: umpo\x00
378e52b0-c0a9-11cf-822d-00aa0051e40f (taskcomp.dll):
- NCACN: \\EXGTEST-ASPOSE\x00\\PIPE\atsvc\x00
- NCALRPC: senssvc\x00
- NCALRPC: OLE77A945F3D4ADFF6F22EF91C2FC0E\x00
- NCALRPC: IUserProfile2\x00
5df3c257-334b-4e96-9efb-a0619255be09:
- NCALRPC: LRPC-2556b11f6617bd0c39\x00
- NCACN: 192.168.101.124:17147
- NCALRPC: LRPC-ffe45a53485808a1ff\x00
- NCACN: 192.168.101.124:17148
- NCALRPC: LRPC-58d860748ffcc25ea6\x00
- NCACN: 192.168.101.124:17155
- NCACN: 192.168.101.124:17183
- NCALRPC: LRPC-1c1c8f1163fecd98bf\x00
- NCALRPC: LRPC-e7d7d1d35dfd59a47b\x00
- NCACN: 192.168.101.124:17199
- NCALRPC: LRPC-81412d3ba69c54fad2\x00
- NCACN: 192.168.101.124:17218
- NCALRPC: LRPC-15b45ee0468849f953\x00
- NCACN: 192.168.101.124:17223
- NCALRPC: LRPC-1f3fcae065d976de75\x00
- NCACN: 192.168.101.124:17241
- NCALRPC: LRPC-1d512da6a15eed7386\x00
- NCACN: 192.168.101.124:17261
- NCALRPC: LRPC-67d56970097d376ef7\x00
- NCACN: 192.168.101.124:17295
640aa52e-d472-443a-952c-4d3fe97f480c:
- NCALRPC: LRPC-1d512da6a15eed7386\x00
- NCACN: 192.168.101.124:17261
3c4728c5-f0ab-448b-bda1-6ce01eb0a6d5 (dhcpcore.dll):
- NCALRPC: dhcpcsvc\x00
- NCALRPC: dhcpcsvc6\x00
- NCALRPC: LRPC-5bb01c88d0aaaea6fc\x00
- NCACN: 192.168.101.124:17101
- NCACN: \\EXGTEST-ASPOSE\x00\\pipe\eventlog\x00
- NCALRPC: eventlog\x00
4a452661-8290-4b36-8fbe-7f4093a94978 (spoolsv.exe):
- NCALRPC: spoolss\x00
0e4a0156-dd5d-11d2-8c2f-00c04fb6bcde:
- NCALRPC: LRPC-67d56970097d376ef7\x00
- NCACN: 192.168.101.124:17295
1453c42c-0fa6-11d2-a910-00c04f990f3b:
- NCALRPC: LRPC-67d56970097d376ef7\x00
- NCACN: 192.168.101.124:17295
c9ac6db5-82b7-4e55-ae8a-e464ed7b4277 (SYSNTFY.dll):
- NCALRPC: LRPC-2a286f6fef4f8de615\x00
- NCALRPC: actkernel\x00
- NCALRPC: umpo\x00
- NCALRPC: LRPC-e6efa1c2c55c381c35\x00
- NCACN: \\EXGTEST-ASPOSE\x00\\PIPE\srvsvc\x00
- NCACN: 192.168.101.124:17102
- NCACN: \\EXGTEST-ASPOSE\x00\\PIPE\atsvc\x00
- NCALRPC: senssvc\x00
- NCALRPC: OLE77A945F3D4ADFF6F22EF91C2FC0E\x00
- NCALRPC: IUserProfile2\x00
- NCALRPC: samss lpc\x00
- NCALRPC: SidKey Local End Point\x00
- NCALRPC: protected_storage\x00
- NCALRPC: lsasspirpc\x00
- NCALRPC: lsapolicylookup\x00
- NCALRPC: LSA_EAS_ENDPOINT\x00
- NCALRPC: lsacap\x00
- NCALRPC: LSARPC_ENDPOINT\x00
- NCALRPC: securityevent\x00
- NCALRPC: audit\x00
- NCACN: \\EXGTEST-ASPOSE\x00\\pipe\lsass\x00
e3514235-4b06-11d1-ab04-00c04fc2dcd2 ([MS-DRSR]: Directory Replication Service (DRS) Remote Protocol):
- NCACN: \\EXGTEST-ASPOSE\x00\\pipe\f5f5a5a792340e72\x00
- unknow
- NCALRPC: NTDS_LPC\x00
- NCACN: 192.168.101.124:17104
- NCALRPC: samss lpc\x00
- NCALRPC: SidKey Local End Point\x00
- NCALRPC: protected_storage\x00
- NCALRPC: lsasspirpc\x00
- NCALRPC: lsapolicylookup\x00
- NCALRPC: LSA_EAS_ENDPOINT\x00
- NCALRPC: lsacap\x00
- NCALRPC: LSARPC_ENDPOINT\x00
- NCALRPC: securityevent\x00
- NCALRPC: audit\x00
- NCACN: \\EXGTEST-ASPOSE\x00\\pipe\lsass\x00
31e68719-d4fc-401a-8788-bc56169a336b:
- NCACN: 192.168.101.124:17183
- NCALRPC: LRPC-1c1c8f1163fecd98bf\x00
76f226c3-ec14-4325-8a99-6a46348418af (WinLogon.exe):
- NCALRPC: WindowsShutdown\x00
- NCACN: \\EXGTEST-ASPOSE\x00\\PIPE\InitShutdown\x00
- NCALRPC: WMsgKRpc092380\x00
- NCALRPC: WMsgKRpc0930F1\x00
eb081a0d-10ee-478a-a1dd-50995283e7a8 (wkssvc.dll):
- NCALRPC: LRPC-d1dafbb935577c9fff\x00
- NCALRPC: DNSResolver\x00
8fd9e884-86a5-4b2f-bc7c-2adaa75d0469:
- NCALRPC: OLEC2042FA05B9509B791A3D501FBD1\x00
- NCALRPC: LRPC-15b45ee0468849f953\x00
- NCACN: 192.168.101.124:17223
12345678-1234-abcd-ef00-0123456789ab (spoolsv.exe):
- NCALRPC: LRPC-1af77f39f2203aa839\x00
2d98a740-581d-41b9-aa0d-a88b9d5ce938 (bisrv.dll):
- NCALRPC: actkernel\x00
- NCALRPC: umpo\x00
ea0c3893-d1fd-4fb3-82d0-8e9a86486dc5:
- NCALRPC: LRPC-e7ec34da1dd7682d15\x00
- NCACN: 192.168.101.124:19721
- NCALRPC: OLEBCA831DB10A0A903F6E47195F021\x00
10f24e8e-0fa6-11d2-a910-00c04f990f3b:
- NCALRPC: LRPC-67d56970097d376ef7\x00
- NCACN: 192.168.101.124:17295
98716d03-89ac-44c7-bb8c-285824e51c4a (srvsvc.dll):
- NCACN: 192.168.101.124:17102
- NCACN: \\EXGTEST-ASPOSE\x00\\PIPE\atsvc\x00
- NCALRPC: senssvc\x00
- NCALRPC: OLE77A945F3D4ADFF6F22EF91C2FC0E\x00
- NCALRPC: IUserProfile2\x00
1088a980-eae5-11d0-8d9b-00a02453c337 ([MS-MQQP]: Message Queuing (MSMQ):):
- NCACN: 192.168.101.124:2105
- NCACN: 192.168.101.124:2103
- NCACN: 192.168.101.124:2107
- NCACN: 192.168.101.124:17112
- NCALRPC: QMMgmtFacility$exgtest-aspose\x00
- NCALRPC: QmReplService\x00
- NCALRPC: QMsvc$exgtest-aspose\x00
89742ace-a9ed-11cf-9c0c-08002be7ae86:
- NCACN: 192.168.101.124:17183
- NCALRPC: LRPC-1c1c8f1163fecd98bf\x00
- NCALRPC: LRPC-67d56970097d376ef7\x00
- NCACN: 192.168.101.124:17295
a9e05b20-6f57-4e24-a540-52412017e6ff:
- NCALRPC: LRPC-67d56970097d376ef7\x00
- NCACN: 192.168.101.124:17295
8bfc3be1-6def-4e2d-af74-7c47cd0ade4a (bisrv.dll):
- NCALRPC: actkernel\x00
- NCALRPC: umpo\x00
1a9134dd-7b39-45ba-ad88-44d01ca47f28 ([MS-MQRR]: Message Queuing (MSMQ):):
- NCACN: 192.168.101.124:2105
- NCACN: 192.168.101.124:2103
- NCACN: 192.168.101.124:2107
- NCACN: 192.168.101.124:17112
- NCALRPC: QMMgmtFacility$exgtest-aspose\x00
- NCALRPC: QmReplService\x00
- NCALRPC: QMsvc$exgtest-aspose\x00
9
\x81\x05\x00\x01\x00\x00\x00\x00\x00\x00\x08clients1\x06google\x03com\x00\x00\x01\x00\x01
\x00\x06\x85\x00\x00\x01\x00\x01\x00\x00\x00\x00\x07version\x04bind\x00\x00\x10\x00\x03\xc0\x00\x10\x00\x03\x00\x00\x00\x05\x00dcPowerDNS Authoritative Server 4.9.1 (built Jul 19 2024 14:43:27 by root@bh-centos-7.dev.cpanel.net)
\x05\x00
\x03\x10\x00\x00\x00\x18\x00\x00\x00\x01\x00\x00\x00\x04\x00\x01\x05\x00\x00\x00\x00
ServerAlive2:
IP1: Exchange01
IP2: 10.0.0.211
IP3: 172.16.11.211
IP4: 74.113.212.5
IP5: 169.254.1.31
NTLMSSP:
Target_Name: ASPOSELocal
Product_Version: 10.0.20348 Ntlm 15
OS: Windows Server 2022
NetBIOS_Domain_Name: ASPOSELocal
NetBIOS_Computer_Name: EXCHANGE01
DNS_Domain_Name: aspose.local
DNS_Computer_Name: Exchange01.aspose.local
MsvAvDnsTreeName: aspose.local
System_Time: 2024-09-22 10:32:30 +0000 UTC
DCERPC Dump:
fd8be72b-a9cd-4b2c-a9ca-4ded242fbe4d (diagtrack.dll):
- NCALRPC: LRPC-760a3f9d04128adbe3\x00
- NCALRPC: OLED887F425491177D1ACB224533D08\x00
1544f5e0-613c-11d1-93df-00c04fd7bd09 ([MS-OXABREF]: Address Book Name Service Provider Interface (NSPI) Referral Protocol):
- unknow
- NCALRPC: LRPC-32d11752f76d59e139\x00
- NCACN: 74.113.212.5:6656
- NCALRPC: OLEC30D9D86AE6C4885E83D1BDEA15F\x00
0d47017b-b33b-46ad-9e18-fe96456c5078 (psmserviceexthost.dll):
- NCALRPC: umpo\x00
bdaa0970-413b-4a3e-9e5d-f6dc9d7e0760 (psmsrv.dll):
- NCALRPC: umpo\x00
f44e62af-dab1-44c2-8013-049a9de417d6 (wcmsvc.dll):
- NCALRPC: LRPC-0547cad29762f52814\x00
5222821f-d5e2-4885-84f1-5f6185a0ec41 (ncbservice.dll):
- NCALRPC: LRPC-41bcfbcd933c67131a\x00
76d12b80-3467-11d3-91ff-0090272f9ea3 ([MS-MQMP]: Message Queuing (MSMQ):):
- NCACN: 74.113.212.5:2105
- NCACN: 74.113.212.5:2103
- NCACN: 74.113.212.5:2107
- NCACN: 74.113.212.5:6448
- NCACN: 74.113.212.5:6447
- NCALRPC: QMMgmtFacility$exchange01\x00
- NCALRPC: QMsvc$exchange01\x00
d09bdeb5-6171-4a34-bfe2-06fa82652568 (BrokerLib.dll):
- NCALRPC: csebpub\x00
- NCALRPC: LRPC-254a4b99facd411e55\x00
- NCALRPC: LRPC-ad276e691a3856c869\x00
- NCALRPC: LRPC-d4a2e512464a3d4921\x00
- NCALRPC: LRPC-23d24a85a23c0d5544\x00
- NCALRPC: OLE26DAD9F5D4F742C6E614FB3765D5\x00
- NCALRPC: LRPC-9c52a171c53c4b8933\x00
- NCALRPC: actkernel\x00
- NCALRPC: umpo\x00
- NCALRPC: LRPC-7c8633244a78c76e93\x00
- NCALRPC: LRPC-754eb1d535dfa419e8\x00
697dcda9-3ba9-4eb2-9247-e11f1901b0d2 (systemeventsbrokerserver.dll):
- NCALRPC: LRPC-254a4b99facd411e55\x00
- NCALRPC: LRPC-ad276e691a3856c869\x00
- NCALRPC: LRPC-d4a2e512464a3d4921\x00
- NCALRPC: LRPC-23d24a85a23c0d5544\x00
- NCALRPC: OLE26DAD9F5D4F742C6E614FB3765D5\x00
- NCALRPC: LRPC-9c52a171c53c4b8933\x00
- NCALRPC: actkernel\x00
- NCALRPC: umpo\x00
4bec6bb8-b5c2-4b6f-b2c1-5da5cf92d0d9 (psmsrv.dll):
- NCALRPC: umpo\x00
4dace966-a243-4450-ae3f-9b7bcb5315b8 (psmserviceexthost.dll):
- NCALRPC: umpo\x00
2c7fd9ce-e706-4b40-b412-953107ef9bb0 (psmserviceexthost.dll):
- NCALRPC: umpo\x00
650a7e26-eab8-5533-ce43-9c1dfce11511 (rascustom.dll):
- NCALRPC: LRPC-c0833df4e6826ccc4e\x00
- NCALRPC: VpnikeRpc\x00
- NCALRPC: RasmanLrpc\x00
- NCACN: \\EXCHANGE01\x00\\PIPE\ROUTER\x00
c36be077-e14b-4fe9-8abc-e856ef4f048b (httpprxm.dll):
- NCALRPC: TeredoControl\x00
- NCALRPC: TeredoDiagnostics\x00
- NCALRPC: LRPC-b042c973bf457ff3db\x00
178d84be-9291-4994-82c6-3f909aca5a03 (psmserviceexthost.dll):
- NCALRPC: umpo\x00
0d3e2735-cea0-4ecc-a9e2-41a2d81aed4e (bisrv.dll):
- NCALRPC: LRPC-9c52a171c53c4b8933\x00
- NCALRPC: actkernel\x00
- NCALRPC: umpo\x00
abfb6ca3-0c5e-4734-9285-0aee72fe8d1c (wcmsvc.dll):
- NCALRPC: LRPC-0547cad29762f52814\x00
b396a3ff-9203-4c75-a367-244cf29b419f:
- NCALRPC: LRPC-cb24ff6622f0a0f1b8\x00
- NCACN: 74.113.212.5:6678
- NCALRPC: OLEE873391C24F8C774046E522E0305\x00
95406f0b-b239-4318-91bb-cea3a46ff0dc (psmserviceexthost.dll):
- NCALRPC: umpo\x00
3473dd4d-2e88-4006-9cba-22570909dd10 (winhttp.dll):
- NCALRPC: 3a828725-97f8-4070-838a-6f736617f294\x00
- NCALRPC: LRPC-9f46d3ad0c77b45542\x00
d4051bde-9cdd-4910-b393-4aa85ec3c482:
- NCALRPC: LRPC-760a3f9d04128adbe3\x00
- NCALRPC: OLED887F425491177D1ACB224533D08\x00
3a9ef155-691d-4449-8d05-09ad57031823 (schedsvc.dll):
- NCACN: 74.113.212.5:6405
- NCALRPC: LRPC-68247854f3fa7cf902\x00
- NCALRPC: ubpmtaskhostchannel\x00
- NCACN: \\EXCHANGE01\x00\\PIPE\atsvc\x00
- NCALRPC: LRPC-ddbc46779da2aa7b65\x00
29770a8f-829b-4158-90a2-78cd488501f7 (sessenv.dll):
- NCACN: 74.113.212.5:6410
- NCACN: \\EXCHANGE01\x00\\pipe\SessEnvPublicRpc\x00
- NCALRPC: SessEnvPrivateRpc\x00
- NCALRPC: LRPC-01f816f96c9d73ac7d\x00
1088a980-eae5-11d0-8d9b-00a02453c337 ([MS-MQQP]: Message Queuing (MSMQ):):
- NCACN: 74.113.212.5:2105
- NCACN: 74.113.212.5:2103
- NCACN: 74.113.212.5:2107
- NCACN: 74.113.212.5:6448
- NCACN: 74.113.212.5:6447
- NCALRPC: QMMgmtFacility$exchange01\x00
- NCALRPC: QMsvc$exchange01\x00
31e68719-d4fc-401a-8788-bc56169a336b:
- NCACN: 74.113.212.5:6725
- NCALRPC: LRPC-eae09ca50afd7f1059\x00
- NCALRPC: OLE2054530EB4628094CEC0E71CC450\x00
76f226c3-ec14-4325-8a99-6a46348418af (WinLogon.exe):
- NCALRPC: WindowsShutdown\x00
- NCACN: \\EXCHANGE01\x00\\PIPE\InitShutdown\x00
- NCALRPC: WMsgKRpc058CC0\x00
9b008953-f195-4bf9-bde0-4471971e58ed (systemeventsbrokerserver.dll):
- NCALRPC: LRPC-ad276e691a3856c869\x00
- NCALRPC: LRPC-d4a2e512464a3d4921\x00
- NCALRPC: LRPC-23d24a85a23c0d5544\x00
- NCALRPC: OLE26DAD9F5D4F742C6E614FB3765D5\x00
- NCALRPC: LRPC-9c52a171c53c4b8933\x00
- NCALRPC: actkernel\x00
- NCALRPC: umpo\x00
2513bcbe-6cd4-4348-855e-7efb3c336dd3 (bisrv.dll):
- NCALRPC: OLE26DAD9F5D4F742C6E614FB3765D5\x00
- NCALRPC: LRPC-9c52a171c53c4b8933\x00
- NCALRPC: actkernel\x00
- NCALRPC: umpo\x00
98716d03-89ac-44c7-bb8c-285824e51c4a (srvsvc.dll):
- NCALRPC: LRPC-cc4d271bfca3858233\x00
30adc50c-5cbc-46ce-9a0e-91914789e23c (nrpsrv.DLL):
- NCALRPC: LRPC-50eb6ca18888036d0c\x00
- NCALRPC: DNSResolver\x00
0a74ef1c-41a4-4e06-83ae-dc74fb1cdd53 (schedsvc.dll):
- NCALRPC: LRPC-ddbc46779da2aa7b65\x00
8fb74744-b2ff-4c00-be0d-9ef9a191fe1b (keyiso.dll):
- NCACN: 74.113.212.5:6406
- NCALRPC: NETLOGON_LRPC\x00
- NCACN: 74.113.212.5:6400
- NCALRPC: MicrosoftLaps_LRPC_0fb2f016-fe45-4a08-a7f9-a467f5e5fa0b\x00
- NCALRPC: samss lpc\x00
- NCALRPC: SidKey Local End Point\x00
- NCALRPC: protected_storage\x00
- NCALRPC: lsasspirpc\x00
- NCALRPC: lsapolicylookup\x00
- NCALRPC: LSA_EAS_ENDPOINT\x00
- NCALRPC: LSA_IDPEXT_ENDPOINT\x00
- NCALRPC: lsacap\x00
- NCALRPC: LSARPC_ENDPOINT\x00
- NCALRPC: securityevent\x00
- NCALRPC: audit\x00
- NCACN: \\EXCHANGE01\x00\\pipe\lsass\x00
1b37ca91-76b1-4f5e-a3c7-2abfc61f2bb0 (bisrv.dll):
- NCALRPC: LRPC-9c52a171c53c4b8933\x00
- NCALRPC: actkernel\x00
- NCALRPC: umpo\x00
2d98a740-581d-41b9-aa0d-a88b9d5ce938 (bisrv.dll):
- NCALRPC: LRPC-9c52a171c53c4b8933\x00
- NCALRPC: actkernel\x00
- NCALRPC: umpo\x00
f2c9b409-c1c9-4100-8639-d8ab1486694a (wkssvc.dll):
- NCALRPC: LRPC-c4a5b87ab7883c4235\x00
dd490425-5325-4565-b774-7e27d6c09c24 (bfe.dll):
- NCALRPC: LRPC-9529a1631779b3ba35\x00
ba3fa067-8d56-4b56-ba1f-9cbae8db3478:
- unknow
- NCALRPC: LRPC-32d11752f76d59e139\x00
- NCACN: 74.113.212.5:6656
- NCALRPC: OLEC30D9D86AE6C4885E83D1BDEA15F\x00
52d3f3f5-248c-4d74-a01f-a06e41d5cd59:
- NCALRPC: LRPC-7e3d29ac8599cf5549\x00
- NCACN: 74.113.212.5:6659
- NCALRPC: OLEC26A0D46A5F009717D6669111225\x00
d95afe70-a6d5-4259-822e-2c84da1ddb0d (wininit.exe):
- NCACN: 74.113.212.5:6401
- NCALRPC: WindowsShutdown\x00
- NCACN: \\EXCHANGE01\x00\\PIPE\InitShutdown\x00
- NCALRPC: WMsgKRpc058CC0\x00
1832bcf6-cab8-41d4-85d2-c9410764f75a (psmserviceexthost.dll):
- NCALRPC: umpo\x00
5df3c257-334b-4e96-9efb-a0619255be09:
- NCALRPC: LRPC-584fc568427e324cd1\x00
- NCACN: 74.113.212.5:6565
- NCALRPC: OLEE944A3761B6FB1F2360935170DBC\x00
- NCALRPC: LRPC-3391d5015043c04bd9\x00
- NCACN: 74.113.212.5:6579
- NCALRPC: OLE2A87A0F404DC7BCA54E75F8341AB\x00
- NCALRPC: LRPC-eec6463204f2c16d28\x00
- NCACN: 74.113.212.5:6628
- NCALRPC: OLEDAC118703F4077B0BEA65115ACE5\x00
- NCALRPC: LRPC-cb28640f8f4ada2bd9\x00
- NCACN: 74.113.212.5:6650
- NCALRPC: OLEA8DE4B8A5D8103EBFF091E7590DB\x00
- NCALRPC: LRPC-32d11752f76d59e139\x00
- NCACN: 74.113.212.5:6656
- NCALRPC: OLEC30D9D86AE6C4885E83D1BDEA15F\x00
- NCALRPC: LRPC-a0b59aa8cfc12d2ee0\x00
- NCACN: 74.113.212.5:6662
- NCALRPC: OLE5C9AF4A26FB497B327B28B805AA7\x00
- NCALRPC: LRPC-43b9bfa47b53edf5d0\x00
- NCACN: 74.113.212.5:6663
- NCALRPC: OLEB9E2101B22AA79A8838E5F6BD0E8\x00
- NCALRPC: LRPC-a79c6c4e455004fc46\x00
- NCACN: 74.113.212.5:6676
- NCALRPC: OLEED3DB198DD37B3D66EC5B02727F4\x00
- NCALRPC: LRPC-cb24ff6622f0a0f1b8\x00
- NCACN: 74.113.212.5:6678
- NCALRPC: OLEE873391C24F8C774046E522E0305\x00
- NCALRPC: LRPC-469db8c483fcd8fd5f\x00
- NCACN: 74.113.212.5:6681
- NCALRPC: OLEE2BE5A37A5F008C0FA22D8268C1B\x00
- NCALRPC: LRPC-a60a30083bd544b41d\x00
- NCACN: 74.113.212.5:6690
- NCALRPC: OLE5308F59ECE40787E6836445FB6EB\x00
- NCACN: 74.113.212.5:6725
- NCALRPC: LRPC-eae09ca50afd7f1059\x00
- NCALRPC: OLE2054530EB4628094CEC0E71CC450\x00
0ff1f646-13bb-400a-ab50-9a78f2b7a85a:
- NCALRPC: umpo\x00
c2d1b5dd-fa81-4460-9dd6-e7658b85454b:
- NCALRPC: LRPC-0547cad29762f52814\x00
a398e520-d59a-4bdd-aa7a-3c1e0303a511:
- NCALRPC: LRPC-2c3d1c3db6187b35b0\x00
5261574a-4572-206e-b268-6b199213b4e4 ([MS-OXCRPC]: Wire Format Protocol):
- unknow
- NCALRPC: LRPC-32d11752f76d59e139\x00
- NCACN: 74.113.212.5:6656
- NCALRPC: OLEC30D9D86AE6C4885E83D1BDEA15F\x00
55e6b932-1979-45d6-90c5-7f6270724112 (resourcepolicyserver.dll):
- NCALRPC: LRPC-23d24a85a23c0d5544\x00
- NCALRPC: OLE26DAD9F5D4F742C6E614FB3765D5\x00
- NCALRPC: LRPC-9c52a171c53c4b8933\x00
- NCALRPC: actkernel\x00
- NCALRPC: umpo\x00
dd59071b-3215-4c59-8481-972edadc0f6a (psmserviceexthost.dll):
- NCALRPC: actkernel\x00
- NCALRPC: umpo\x00
552d076a-cb29-4e44-8b6a-d15e59e2c0af (iphlpsvc.dll):
- NCALRPC: LRPC-b042c973bf457ff3db\x00
2e6035b2-e8f1-41a7-a044-656b439c4c34 (httpprxm.dll):
- NCALRPC: TeredoControl\x00
- NCALRPC: TeredoDiagnostics\x00
- NCALRPC: LRPC-b042c973bf457ff3db\x00
b18fbab6-56f8-4702-84e0-41053293a869 (usermgr.dll):
- NCALRPC: LRPC-51e57abfd0053cf8c7\x00
- NCALRPC: OLEB634751389350871E7B6DF4FC43F\x00
0b1c2170-5732-4e0e-8cd3-d9b16f3b84d7 ([MS-RAA]: Remote Authorization API Protocol):
- NCACN: 74.113.212.5:6406
- NCALRPC: NETLOGON_LRPC\x00
- NCACN: 74.113.212.5:6400
- NCALRPC: MicrosoftLaps_LRPC_0fb2f016-fe45-4a08-a7f9-a467f5e5fa0b\x00
- NCALRPC: samss lpc\x00
- NCALRPC: SidKey Local End Point\x00
- NCALRPC: protected_storage\x00
- NCALRPC: lsasspirpc\x00
- NCALRPC: lsapolicylookup\x00
- NCALRPC: LSA_EAS_ENDPOINT\x00
- NCALRPC: LSA_IDPEXT_ENDPOINT\x00
- NCALRPC: lsacap\x00
- NCALRPC: LSARPC_ENDPOINT\x00
- NCALRPC: securityevent\x00
- NCALRPC: audit\x00
- NCACN: \\EXCHANGE01\x00\\pipe\lsass\x00
e40f7b57-7a25-4cd3-a135-7f7d3df9d16b (ncbservice.dll):
- NCALRPC: LRPC-e19b71816f887b34a9\x00
b58aa02e-2884-4e97-8176-4ee06d794184 (sysmain.dll):
- NCALRPC: LRPC-84bceef6426e0d19b7\x00
d22895ef-aff4-42c5-a5b2-b14466d34ab4 (diagtrack.dll):
- NCALRPC: LRPC-760a3f9d04128adbe3\x00
- NCALRPC: OLED887F425491177D1ACB224533D08\x00
e38f5360-8572-473e-b696-1b46873beeab (diagtrack.dll):
- NCALRPC: LRPC-760a3f9d04128adbe3\x00
- NCALRPC: OLED887F425491177D1ACB224533D08\x00
6982a06e-5fe2-46b1-b39c-a2c545bfa069:
- NCALRPC: umpo\x00
857fb1be-084f-4fb5-b59c-4b2c4be5f0cf (bisrv.dll):
- NCALRPC: OLE26DAD9F5D4F742C6E614FB3765D5\x00
- NCALRPC: LRPC-9c52a171c53c4b8933\x00
- NCALRPC: actkernel\x00
- NCALRPC: umpo\x00
c605f9fb-f0a3-4e2a-a073-73560f8d9e3e (bisrv.dll):
- NCALRPC: LRPC-9c52a171c53c4b8933\x00
- NCALRPC: actkernel\x00
- NCALRPC: umpo\x00
fae436b0-b864-4a87-9eda-298547cd82f2 (psmserviceexthost.dll):
- NCALRPC: umpo\x00
76c217bc-c8b4-4201-a745-373ad9032b1a (resourcepolicyserver.dll):
- NCALRPC: LRPC-23d24a85a23c0d5544\x00
- NCALRPC: OLE26DAD9F5D4F742C6E614FB3765D5\x00
- NCALRPC: LRPC-9c52a171c53c4b8933\x00
- NCALRPC: actkernel\x00
- NCALRPC: umpo\x00
13560fa9-8c09-4b56-a1fd-04d083b9b2a1:
- NCALRPC: LRPC-0547cad29762f52814\x00
1a0d010f-1c33-432c-b0f5-8cf4e8053099 (srvsvc.dll):
- NCALRPC: LRPC-cc4d271bfca3858233\x00
98cd761e-e77d-41c8-a3c0-0fb756d90ec2 (tellib.dll):
- NCALRPC: LRPC-760a3f9d04128adbe3\x00
- NCALRPC: OLED887F425491177D1ACB224533D08\x00
df831451-edad-415d-905f-9d3793f92db3:
- NCACN: 74.113.212.5:6725
- NCALRPC: LRPC-eae09ca50afd7f1059\x00
- NCALRPC: OLE2054530EB4628094CEC0E71CC450\x00
51a227ae-825b-41f2-b4a9-1ac9557a1018 (keyiso.dll):
- NCACN: 74.113.212.5:6406
- NCALRPC: NETLOGON_LRPC\x00
- NCACN: 74.113.212.5:6400
- NCALRPC: MicrosoftLaps_LRPC_0fb2f016-fe45-4a08-a7f9-a467f5e5fa0b\x00
- NCALRPC: samss lpc\x00
- NCALRPC: SidKey Local End Point\x00
- NCALRPC: protected_storage\x00
- NCALRPC: lsasspirpc\x00
- NCALRPC: lsapolicylookup\x00
- NCALRPC: LSA_EAS_ENDPOINT\x00
- NCALRPC: LSA_IDPEXT_ENDPOINT\x00
- NCALRPC: lsacap\x00
- NCALRPC: LSARPC_ENDPOINT\x00
- NCALRPC: securityevent\x00
- NCALRPC: audit\x00
- NCACN: \\EXCHANGE01\x00\\pipe\lsass\x00
f6beaff7-1e19-4fbb-9f8f-b89e2018337c (wevtsvc.dll):
- NCACN: 74.113.212.5:6402
- NCACN: \\EXCHANGE01\x00\\pipe\eventlog\x00
- NCALRPC: eventlog\x00
7f1343fe-50a9-4927-a778-0c5859517bac (wkssvc.dll):
- NCACN: \\EXCHANGE01\x00\\PIPE\wkssvc\x00
- NCALRPC: LRPC-c4a5b87ab7883c4235\x00
b97db8b2-4c63-11cf-bff6-08002be23f2f ([MS-CMRP]: Failover Cluster:):
- NCALRPC: LRPC-4d83180cba87339fc8\x00
- NCACN: 74.113.212.5:6465
8fd9e884-86a5-4b2f-bc7c-2adaa75d0469:
- NCALRPC: LRPC-cb24ff6622f0a0f1b8\x00
- NCACN: 74.113.212.5:6678
- NCALRPC: OLEE873391C24F8C774046E522E0305\x00
20434699-5e7e-47d6-95f6-698c4a0ec2f0:
- NCALRPC: LRPC-cb24ff6622f0a0f1b8\x00
- NCACN: 74.113.212.5:6678
- NCALRPC: OLEE873391C24F8C774046E522E0305\x00
12345778-1234-abcd-ef00-0123456789ac (samsrv.dll):
- NCACN: 74.113.212.5:6400
- NCALRPC: MicrosoftLaps_LRPC_0fb2f016-fe45-4a08-a7f9-a467f5e5fa0b\x00
- NCALRPC: samss lpc\x00
- NCALRPC: SidKey Local End Point\x00
- NCALRPC: protected_storage\x00
- NCALRPC: lsasspirpc\x00
- NCALRPC: lsapolicylookup\x00
- NCALRPC: LSA_EAS_ENDPOINT\x00
- NCALRPC: LSA_IDPEXT_ENDPOINT\x00
- NCALRPC: lsacap\x00
- NCALRPC: LSARPC_ENDPOINT\x00
- NCALRPC: securityevent\x00
- NCALRPC: audit\x00
- NCACN: \\EXCHANGE01\x00\\pipe\lsass\x00
7f9d11bf-7fb9-436b-a812-b2d50c5d4c03 (mpssvc.dll):
- NCALRPC: LRPC-674ca451a2e1f5bd89\x00
- NCALRPC: LRPC-9529a1631779b3ba35\x00
c49a5a70-8a7f-4e70-ba16-1e8f1f193ef1 (adhsvc.dll):
- NCALRPC: TeredoControl\x00
- NCALRPC: TeredoDiagnostics\x00
- NCALRPC: LRPC-b042c973bf457ff3db\x00
e53d94ca-7464-4839-b044-09a2fb8b3ae5 (psmserviceexthost.dll):
- NCALRPC: umpo\x00
1a9134dd-7b39-45ba-ad88-44d01ca47f28 ([MS-MQRR]: Message Queuing (MSMQ):):
- NCACN: 74.113.212.5:2105
- NCACN: 74.113.212.5:2103
- NCACN: 74.113.212.5:2107
- NCACN: 74.113.212.5:6448
- NCACN: 74.113.212.5:6447
- NCALRPC: QMMgmtFacility$exchange01\x00
- NCALRPC: QMsvc$exchange01\x00
938fe036-ede6-4f6c-966e-a3d7300279c8:
- NCACN: 74.113.212.5:6725
3f787932-3452-4363-8651-6ea97bb373bb:
- NCALRPC: LRPC-2cecf57157a552457b\x00
- NCALRPC: OLE7AEBEED9E1AF626CA183D3B6BD10\x00
2fb92682-6599-42dc-ae13-bd2ca89bd11c (mpssvc.dll):
- NCALRPC: LRPC-87f7d8b41c53274917\x00
- NCALRPC: LRPC-07dd8df9757a39f9fe\x00
- NCALRPC: LRPC-674ca451a2e1f5bd89\x00
- NCALRPC: LRPC-9529a1631779b3ba35\x00
37c6221b-cc4b-47ae-8366-7449f2fe9a06:
- NCALRPC: LRPC-cb24ff6622f0a0f1b8\x00
- NCACN: 74.113.212.5:6678
- NCALRPC: OLEE873391C24F8C774046E522E0305\x00
b25a52bf-e5dd-4f4a-aea6-8ca7272a0e86 (keyiso.dll):
- NCACN: 74.113.212.5:6406
- NCALRPC: NETLOGON_LRPC\x00
- NCACN: 74.113.212.5:6400
- NCALRPC: MicrosoftLaps_LRPC_0fb2f016-fe45-4a08-a7f9-a467f5e5fa0b\x00
- NCALRPC: samss lpc\x00
- NCALRPC: SidKey Local End Point\x00
- NCALRPC: protected_storage\x00
- NCALRPC: lsasspirpc\x00
- NCALRPC: lsapolicylookup\x00
- NCALRPC: LSA_EAS_ENDPOINT\x00
- NCALRPC: LSA_IDPEXT_ENDPOINT\x00
- NCALRPC: lsacap\x00
- NCALRPC: LSARPC_ENDPOINT\x00
- NCALRPC: securityevent\x00
- NCALRPC: audit\x00
- NCACN: \\EXCHANGE01\x00\\pipe\lsass\x00
4ed8abcc-f1e2-438b-981f-bb0e8abc010c (psmserviceexthost.dll):
- NCALRPC: umpo\x00
a500d4c6-0dd1-4543-bc0c-d5f93486eaf8 (timebrokerserver.dll):
- NCALRPC: LRPC-7f61a3327d87779a3b\x00
- NCALRPC: LRPC-754eb1d535dfa419e8\x00
c9ac6db5-82b7-4e55-ae8a-e464ed7b4277 (SYSNTFY.dll):
- NCALRPC: LRPC-6699b8959095735980\x00
- unknow
- NCALRPC: LRPC-6819bc55b43f3d9d81\x00
- NCALRPC: senssvc\x00
- NCALRPC: IUserProfile2\x00
- NCALRPC: LRPC-8f89ef7c93ca6efcbd\x00
- NCALRPC: LRPC-01f816f96c9d73ac7d\x00
7ea70bcf-48af-4f6a-8968-6a440754d5fa (nsisvc.dll):
- NCALRPC: LRPC-34b203ff40e4876f9e\x00
b37f900a-eae4-4304-a2ab-12bb668c0188 (wcmsvc.dll):
- NCALRPC: LRPC-0547cad29762f52814\x00
d014c423-0d54-40a3-90dc-56c7a6071e6f:
- NCALRPC: LRPC-cb24ff6622f0a0f1b8\x00
- NCACN: 74.113.212.5:6678
- NCALRPC: OLEE873391C24F8C774046E522E0305\x00
c521facf-09a9-42c5-b155-72388595cbf0 (psmserviceexthost.dll):
- NCALRPC: umpo\x00
20c40295-8dba-48e6-aebf-3e78ef3bb144 (bisrv.dll):
- NCALRPC: OLE26DAD9F5D4F742C6E614FB3765D5\x00
- NCALRPC: LRPC-9c52a171c53c4b8933\x00
- NCALRPC: actkernel\x00
- NCALRPC: umpo\x00
8bfc3be1-6def-4e2d-af74-7c47cd0ade4a (bisrv.dll):
- NCALRPC: LRPC-9c52a171c53c4b8933\x00
- NCALRPC: actkernel\x00
- NCALRPC: umpo\x00
7df1ceae-de4e-4e6f-ab14-49636e7c2052:
- NCALRPC: LRPC-fe1e5ee0d5a7cf462a\x00
fc48cd89-98d6-4628-9839-86f7a3e4161a (ACPBackgroundManagerPolicy.dll):
- NCALRPC: dabrpc\x00
- NCALRPC: csebpub\x00
- NCALRPC: LRPC-254a4b99facd411e55\x00
- NCALRPC: LRPC-ad276e691a3856c869\x00
- NCALRPC: LRPC-d4a2e512464a3d4921\x00
- NCALRPC: LRPC-23d24a85a23c0d5544\x00
- NCALRPC: OLE26DAD9F5D4F742C6E614FB3765D5\x00
- NCALRPC: LRPC-9c52a171c53c4b8933\x00
- NCALRPC: actkernel\x00
- NCALRPC: umpo\x00
3b338d89-6cfa-44b8-847e-531531bc9992 (psmsrv.dll):
- NCALRPC: umpo\x00
86d35949-83c9-4044-b424-db363231fd0c (schedsvc.dll):
- NCACN: 74.113.212.5:6405
- NCALRPC: LRPC-68247854f3fa7cf902\x00
- NCALRPC: ubpmtaskhostchannel\x00
- NCACN: \\EXCHANGE01\x00\\PIPE\atsvc\x00
- NCALRPC: LRPC-ddbc46779da2aa7b65\x00
95095ec8-32ea-4eb0-a3e2-041f97b36168 (diagtrack.dll):
- NCALRPC: LRPC-760a3f9d04128adbe3\x00
- NCALRPC: OLED887F425491177D1ACB224533D08\x00
fdb3a030-065f-11d1-bb9b-00a024ea5525 ([MS-MQMP]: Message Queuing (MSMQ):):
- NCACN: 74.113.212.5:2105
- NCACN: 74.113.212.5:2103
- NCACN: 74.113.212.5:2107
- NCACN: 74.113.212.5:6448
- NCACN: 74.113.212.5:6447
- NCALRPC: QMMgmtFacility$exchange01\x00
- NCALRPC: QMsvc$exchange01\x00
d249bd56-4cc0-4fd3-8ce6-6fe050d590cb:
- NCALRPC: LRPC-946e06ebbef4bf8511\x00
082a3471-31b6-422a-b931-a54401960c62 (psmserviceexthost.dll):
- NCALRPC: umpo\x00
3c4728c5-f0ab-448b-bda1-6ce01eb0a6d6 (dhcpcore6.dll):
- NCALRPC: dhcpcsvc6\x00
33d84484-3626-47ee-8c6f-e7e98b113be1 (WPTaskScheduler.dll):
- NCALRPC: LRPC-68247854f3fa7cf902\x00
- NCALRPC: ubpmtaskhostchannel\x00
- NCACN: \\EXCHANGE01\x00\\PIPE\atsvc\x00
- NCALRPC: LRPC-ddbc46779da2aa7b65\x00
8782d3b9-ebbd-4644-a3d8-e8725381919b (psmsrv.dll):
- NCALRPC: umpo\x00
4d88f820-8c32-4453-9e30-7297e2fcf025:
- NCALRPC: LRPC-3391d5015043c04bd9\x00
- NCACN: 74.113.212.5:6579
- NCALRPC: OLE2A87A0F404DC7BCA54E75F8341AB\x00
88abcbc3-34ea-76ae-8215-767520655a23 (resourcepolicyserver.dll):
- NCALRPC: LRPC-23d24a85a23c0d5544\x00
- NCALRPC: OLE26DAD9F5D4F742C6E614FB3765D5\x00
- NCALRPC: LRPC-9c52a171c53c4b8933\x00
- NCALRPC: actkernel\x00
- NCALRPC: umpo\x00
5824833b-3c1a-4ad2-bdfd-c31d19e23ed2 (psmsrv.dll):
- NCALRPC: umpo\x00
0d3c7f20-1c8d-4654-a1b3-51563b298bda (usermgr.dll):
- NCALRPC: LRPC-51e57abfd0053cf8c7\x00
- NCALRPC: OLEB634751389350871E7B6DF4FC43F\x00
880fd55e-43b9-11e0-b1a8-cf4edfd72085 (ncbservice.dll):
- NCALRPC: LRPC-32e43f60317cf2a744\x00
- NCALRPC: OLE6DFD4D64E48921E5B71F9607D327\x00
- NCALRPC: LRPC-7c8633244a78c76e93\x00
2eb08e3e-639f-4fba-97b1-14f878961076:
- NCALRPC: LRPC-6289fb6f06b636fa0a\x00
30b044a5-a225-43f0-b3a4-e060df91f9c1 (certprop.dll):
- NCALRPC: LRPC-85176f804246177fef\x00
1ff70682-0a51-30e8-076d-740be8cee98b (taskcomp.dll):
- NCACN: \\EXCHANGE01\x00\\PIPE\atsvc\x00
- NCALRPC: LRPC-ddbc46779da2aa7b65\x00
f47433c3-3e9d-4157-aad4-83aa1f5c2d4c (mpssvc.dll):
- NCALRPC: LRPC-07dd8df9757a39f9fe\x00
- NCALRPC: LRPC-674ca451a2e1f5bd89\x00
- NCALRPC: LRPC-9529a1631779b3ba35\x00
d9318e75-8a8b-4abb-88e7-aceb01f09e60:
- NCALRPC: LRPC-cb24ff6622f0a0f1b8\x00
- NCACN: 74.113.212.5:6678
- NCALRPC: OLEE873391C24F8C774046E522E0305\x00
0361ae94-0316-4c6c-8ad8-c594375800e2 (psmsrv.dll):
- NCALRPC: umpo\x00
a4f1db00-ca47-1067-b31f-00dd010662da ([MS-OXCRPC]: Wire Format Protocol):
- unknow
- NCALRPC: LRPC-32d11752f76d59e139\x00
- NCACN: 74.113.212.5:6656
- NCALRPC: OLEC30D9D86AE6C4885E83D1BDEA15F\x00
378e52b0-c0a9-11cf-822d-00aa0051e40f (taskcomp.dll):
- NCACN: \\EXCHANGE01\x00\\PIPE\atsvc\x00
- NCALRPC: LRPC-ddbc46779da2aa7b65\x00
eb081a0d-10ee-478a-a1dd-50995283e7a8 (wkssvc.dll):
- NCALRPC: LRPC-c4a5b87ab7883c4235\x00
3c4728c5-f0ab-448b-bda1-6ce01eb0a6d5 (dhcpcore.dll):
- NCALRPC: dhcpcsvc\x00
- NCALRPC: dhcpcsvc6\x00
4c9dbf19-d39e-4bb9-90ee-8f7179b20283 (diagtrack.dll):
- NCALRPC: LRPC-760a3f9d04128adbe3\x00
- NCALRPC: OLED887F425491177D1ACB224533D08\x00
ecca92d9-07d1-4136-87f7-2ac4109337ee:
- NCALRPC: LRPC-eec6463204f2c16d28\x00
- NCACN: 74.113.212.5:6628
- NCALRPC: OLEDAC118703F4077B0BEA65115ACE5\x00
9b48e5eb-b4cd-4b6d-ae73-656e0a777bda:
- NCACN: 74.113.212.5:6725
- NCALRPC: LRPC-eae09ca50afd7f1059\x00
- NCALRPC: OLE2054530EB4628094CEC0E71CC450\x00
5a4d59fe-42ac-4c6e-b554-b12c6af35956:
- NCALRPC: LRPC-584fc568427e324cd1\x00
- NCACN: 74.113.212.5:6565
- NCALRPC: OLEE944A3761B6FB1F2360935170DBC\x00
f1f21151-7185-4170-ac8d-9bb077c29bd3:
- NCALRPC: LRPC-6bc94c1ebfc081a7fb\x00
- NCACN: 74.113.212.5:6602
- NCALRPC: OLE4C11CE9F8F848A4DB81813BAF324\x00
245a2854-fcdf-4215-adf4-0b4c364e79fb:
- NCALRPC: LRPC-cb24ff6622f0a0f1b8\x00
- NCACN: 74.113.212.5:6678
- NCALRPC: OLEE873391C24F8C774046E522E0305\x00
085b0334-e454-4d91-9b8c-4134f9e793f3 (psmsrv.dll):
- NCALRPC: umpo\x00
d8140e00-5c46-4ae6-80ac-2f9a76df224c:
- NCALRPC: LRPC-946e06ebbef4bf8511\x00
\xff\x02index\x00\x00\x00\x00\x00\x00\x01\x01\x96\x00\x00\x00\x002741865285 31785 advtool.dll 6.49.7
2682198183 39399 secure.dll 6.49.7
2613813910 39626 dhcp.dll 6.49.7
3988146006 43966 ppp.dll 6.49.7
3499206739 55386 roting4.dll 6.49.7
1554773290 39311 mpls.dll 6.49.7
2996815531 39570 hotspot.dll 6.4\xa9\xff9.7
975297022 79803 wlan6.dll 6.49.7
2087426818 29553 ups.dll 6.49.7
94740269 64132 dude.dll 6.49.7
32931782 752176 roteros.dll 6.49.7
1536072325 2541 system.dll 6.49.7
\x05\x00
\x03\x10\x00\x00\x00\x18\x00\x00\x00\x01\x00\x00\x00\x04\x00\x01\x05\x00\x00\x00\x00
ServerAlive2:
IP1: Web2
IP2: 74.113.214.164
IP3: 2002:4a71:d6a4::4a71:d6a4
NTLMSSP:
Target_Name: TYLERCLOUD
Product_Version: 6.1.7601 Ntlm 15
OS: Windows 7, Service Pack 1/Windows Server 2008 R2, Service Pack 1
NetBIOS_Domain_Name: TYLERCLOUD
NetBIOS_Computer_Name: WEB2
DNS_Domain_Name: TylerCloud.com
DNS_Computer_Name: Web2.TylerCloud.com
MsvAvDnsTreeName: TylerCloud.com
System_Time: 2024-09-22 09:46:52 +0000 UTC
DCERPC Dump:
0b6edbfa-4a24-4fc6-8a23-942b1eca65d1 (spoolsv.exe):
- NCALRPC: spoolss\x00
c9ac6db5-82b7-4e55-ae8a-e464ed7b4277 (SYSNTFY.dll):
- NCALRPC: LRPC-e2b8701d68b70995b2\x00
- NCACN: \\WEB2\x00\\PIPE\srvsvc\x00
- NCACN: 74.113.214.164:49154
- NCACN: \\WEB2\x00\\PIPE\atsvc\x00
- NCALRPC: senssvc\x00
- NCALRPC: OLE6BD9771F36DD4BB89586837AD06D\x00
- NCALRPC: IUserProfile2\x00
3c4728c5-f0ab-448b-bda1-6ce01eb0a6d6 (dhcpcore6.dll):
- NCALRPC: dhcpcsvc6\x00
- NCACN: 74.113.214.164:49153
- NCACN: \\WEB2\x00\\pipe\eventlog\x00
- NCALRPC: eventlog\x00
30b044a5-a225-43f0-b3a4-e060df91f9c1 (certprop.dll):
- NCACN: \\WEB2\x00\\PIPE\srvsvc\x00
- NCACN: 74.113.214.164:49154
- NCACN: \\WEB2\x00\\PIPE\atsvc\x00
- NCALRPC: senssvc\x00
- NCALRPC: OLE6BD9771F36DD4BB89586837AD06D\x00
- NCALRPC: IUserProfile2\x00
0a74ef1c-41a4-4e06-83ae-dc74fb1cdd53 (schedsvc.dll):
- NCALRPC: senssvc\x00
- NCALRPC: OLE6BD9771F36DD4BB89586837AD06D\x00
- NCALRPC: IUserProfile2\x00
7f9d11bf-7fb9-436b-a812-b2d50c5d4c03 (mpssvc.dll):
- NCALRPC: LRPC-32058bd100fc50c115\x00
4a452661-8290-4b36-8fbe-7f4093a94978 (spoolsv.exe):
- NCALRPC: spoolss\x00
d95afe70-a6d5-4259-822e-2c84da1ddb0d (wininit.exe):
- NCACN: 74.113.214.164:49152
- NCALRPC: WindowsShutdown\x00
- NCACN: \\WEB2\x00\\PIPE\InitShutdown\x00
- NCALRPC: WMsgKRpc05EA10\x00
2eb08e3e-639f-4fba-97b1-14f878961076:
- NCALRPC: IUserProfile2\x00
3473dd4d-2e88-4006-9cba-22570909dd10 (winhttp.dll):
- NCACN: \\WEB2\x00\\PIPE\W32TIME_ALT\x00
- NCALRPC: W32TIME_ALT\x00
- NCALRPC: LRPC-135e9382dfcea8ae49\x00
- NCALRPC: OLEC54E60CB83CC435F90472973274E\x00
7f1343fe-50a9-4927-a778-0c5859517bac (wkssvc.dll):
- NCACN: \\WEB2\x00\\PIPE\wkssvc\x00
- NCALRPC: DNSResolver\x00
367abb81-9844-35f1-ad32-98f038001003 (services.exe):
- NCACN: 74.113.214.164:49158
a398e520-d59a-4bdd-aa7a-3c1e0303a511:
- NCACN: 74.113.214.164:49154
- NCACN: \\WEB2\x00\\PIPE\atsvc\x00
- NCALRPC: senssvc\x00
- NCALRPC: OLE6BD9771F36DD4BB89586837AD06D\x00
- NCALRPC: IUserProfile2\x00
7ea70bcf-48af-4f6a-8968-6a440754d5fa (nsisvc.dll):
- NCALRPC: LRPC-135e9382dfcea8ae49\x00
- NCALRPC: OLEC54E60CB83CC435F90472973274E\x00
f6beaff7-1e19-4fbb-9f8f-b89e2018337c (wevtsvc.dll):
- NCACN: 74.113.214.164:49153
- NCACN: \\WEB2\x00\\pipe\eventlog\x00
- NCALRPC: eventlog\x00
98716d03-89ac-44c7-bb8c-285824e51c4a (srvsvc.dll):
- NCACN: 74.113.214.164:49154
- NCACN: \\WEB2\x00\\PIPE\atsvc\x00
- NCALRPC: senssvc\x00
- NCALRPC: OLE6BD9771F36DD4BB89586837AD06D\x00
- NCALRPC: IUserProfile2\x00
24019106-a203-4642-b88d-82dae9158929:
- NCALRPC: LRPC-5f253c8ee4612eed02\x00
f763c91c-2ab1-47fa-868f-7de7efd42194:
- NCALRPC: RdvVmAllowListRpc\x00
- NCALRPC: OLE38970FDFE6C24601A3278BC661F7\x00
76f226c3-ec14-4325-8a99-6a46348418af (WinLogon.exe):
- NCALRPC: WindowsShutdown\x00
- NCACN: \\WEB2\x00\\PIPE\InitShutdown\x00
- NCALRPC: WMsgKRpc05EA10\x00
- NCALRPC: WMsgKRpc060831\x00
378e52b0-c0a9-11cf-822d-00aa0051e40f (taskcomp.dll):
- NCACN: \\WEB2\x00\\PIPE\atsvc\x00
- NCALRPC: senssvc\x00
- NCALRPC: OLE6BD9771F36DD4BB89586837AD06D\x00
- NCALRPC: IUserProfile2\x00
ae33069b-a2a8-46ee-a235-ddfd339be281 (spoolsv.exe):
- NCALRPC: spoolss\x00
12345778-1234-abcd-ef00-0123456789ac (samsrv.dll):
- NCACN: 74.113.214.164:49156
- NCALRPC: samss lpc\x00
- NCALRPC: dsrole\x00
- NCACN: \\WEB2\x00\\PIPE\protected_storage\x00
- NCALRPC: protected_storage\x00
- NCALRPC: lsasspirpc\x00
- NCALRPC: lsapolicylookup\x00
- NCALRPC: LSARPC_ENDPOINT\x00
- NCALRPC: securityevent\x00
- NCALRPC: audit\x00
- NCALRPC: LRPC-24cf9877929b82c345\x00
- NCACN: \\WEB2\x00\\pipe\lsass\x00
76209fe5-9049-4336-ba84-632d907cb154:
- NCALRPC: ReportingServices$MSRS10_50.MSSQLSERVER\x00
- NCALRPC: OLE88B3F4F62ADA4A01A2A469180FDF\x00
906b0ce0-c70b-1067-b317-00dd010662da ([MS-CMPO]: MSDTC Connection Manager:):
- NCALRPC: LRPC-843e20e6cbd991c640\x00
552d076a-cb29-4e44-8b6a-d15e59e2c0af (iphlpsvc.dll):
- NCACN: 74.113.214.164:49154
- NCACN: \\WEB2\x00\\PIPE\atsvc\x00
- NCALRPC: senssvc\x00
- NCALRPC: OLE6BD9771F36DD4BB89586837AD06D\x00
- NCALRPC: IUserProfile2\x00
2fb92682-6599-42dc-ae13-bd2ca89bd11c (mpssvc.dll):
- NCALRPC: LRPC-32058bd100fc50c115\x00
30adc50c-5cbc-46ce-9a0e-91914789e23c (nrpsrv.DLL):
- NCACN: 74.113.214.164:49153
- NCACN: \\WEB2\x00\\pipe\eventlog\x00
- NCALRPC: eventlog\x00
1ff70682-0a51-30e8-076d-740be8cee98b (taskcomp.dll):
- NCACN: \\WEB2\x00\\PIPE\atsvc\x00
- NCALRPC: senssvc\x00
- NCALRPC: OLE6BD9771F36DD4BB89586837AD06D\x00
- NCALRPC: IUserProfile2\x00
12345678-1234-abcd-ef00-0123456789ab (spoolsv.exe):
- NCALRPC: LRPC-5b0d801e0a3c403cdf\x00
3c4728c5-f0ab-448b-bda1-6ce01eb0a6d5 (dhcpcore.dll):
- NCALRPC: dhcpcsvc\x00
- NCALRPC: dhcpcsvc6\x00
- NCACN: 74.113.214.164:49153
- NCACN: \\WEB2\x00\\pipe\eventlog\x00
- NCALRPC: eventlog\x00
86d35949-83c9-4044-b424-db363231fd0c (schedsvc.dll):
- NCACN: 74.113.214.164:49154
- NCACN: \\WEB2\x00\\PIPE\atsvc\x00
- NCALRPC: senssvc\x00
- NCALRPC: OLE6BD9771F36DD4BB89586837AD06D\x00
- NCALRPC: IUserProfile2\x00
dd490425-5325-4565-b774-7e27d6c09c24 (bfe.dll):
- NCALRPC: LRPC-32058bd100fc50c115\x00
共 1916 条
- 10条/页
无数据
- 1
- 2
- 3
- 4
- 5
- 6
- 192