21 /
tcp
1090329081 | 2025-03-11T16:22:39.507698
220-FileZilla Server 0.9.60 beta
220-written by Tim Kosse (tim.kosse@filezilla-project.org)
220 Please visit https://filezilla-project.org/
530 Login or password incorrect!
214-The following commands are recognized:
ABOR ADAT ALLO APPE AUTH CDUP CLNT CWD
DELE EPRT EPSV FEAT HASH HELP LIST MDTM
MFMT MKD MLSD MLST MODE NLST NOOP NOP
OPTS PASS PASV PBSZ PORT PROT PWD QUIT
REST RETR RMD RNFR RNTO SITE SIZE STOR
STRU SYST TYPE USER XCUP XCWD XMKD XPWD
XRMD
214 Have a nice day.
211-Features:
MDTM
REST STREAM
SIZE
MLST type*;size*;modify*;
MLSD
UTF8
CLNT
MFMT
EPSV
EPRT
211 End
-955721981 | 2025-03-10T20:06:31.302498
HTTP/1.1 200 OK
Content-Type: text/html; charset=UTF-8
Server: Microsoft-IIS/10.0
X-Powered-By: ASP.NET
Date: Mon, 10 Mar 2025 20:06:30 GMT
Content-Length: 436
104 /
tcp
1142079880 | 2025-03-11T13:40:44.890728
\x03\x00\x00\x00\x00\x04\x00\x01\x02\x07
135 /
tcp
568660204 | 2025-02-19T08:08:48.770584
Microsoft RPC Endpoint Mapper
51a227ae-825b-41f2-b4a9-1ac9557a1018
version: v1.0
annotation: Ngc Pop Key Service
ncacn_ip_tcp: 103.85.103.134:49664
ncalrpc: samss lpc
ncalrpc: SidKey Local End Point
ncalrpc: protected_storage
ncalrpc: lsasspirpc
ncalrpc: lsapolicylookup
ncalrpc: LSA_EAS_ENDPOINT
ncalrpc: LSA_IDPEXT_ENDPOINT
ncalrpc: lsacap
ncalrpc: LSARPC_ENDPOINT
ncalrpc: securityevent
ncalrpc: audit
ncacn_np: \\CLOUD-PC\pipe\lsass
ncalrpc: imsfk
ncalrpc: clipsfk
8fb74744-b2ff-4c00-be0d-9ef9a191fe1b
version: v1.0
annotation: Ngc Pop Key Service
ncacn_ip_tcp: 103.85.103.134:49664
ncalrpc: samss lpc
ncalrpc: SidKey Local End Point
ncalrpc: protected_storage
ncalrpc: lsasspirpc
ncalrpc: lsapolicylookup
ncalrpc: LSA_EAS_ENDPOINT
ncalrpc: LSA_IDPEXT_ENDPOINT
ncalrpc: lsacap
ncalrpc: LSARPC_ENDPOINT
ncalrpc: securityevent
ncalrpc: audit
ncacn_np: \\CLOUD-PC\pipe\lsass
ncalrpc: imsfk
ncalrpc: clipsfk
b25a52bf-e5dd-4f4a-aea6-8ca7272a0e86
version: v2.0
annotation: KeyIso
ncacn_ip_tcp: 103.85.103.134:49664
ncalrpc: samss lpc
ncalrpc: SidKey Local End Point
ncalrpc: protected_storage
ncalrpc: lsasspirpc
ncalrpc: lsapolicylookup
ncalrpc: LSA_EAS_ENDPOINT
ncalrpc: LSA_IDPEXT_ENDPOINT
ncalrpc: lsacap
ncalrpc: LSARPC_ENDPOINT
ncalrpc: securityevent
ncalrpc: audit
ncacn_np: \\CLOUD-PC\pipe\lsass
ncalrpc: imsfk
ncalrpc: clipsfk
12345778-1234-abcd-ef00-0123456789ac
version: v1.0
protocol: [MS-SAMR]: Security Account Manager (SAM) Remote Protocol
provider: samsrv.dll
ncacn_ip_tcp: 103.85.103.134:49664
ncalrpc: samss lpc
ncalrpc: SidKey Local End Point
ncalrpc: protected_storage
ncalrpc: lsasspirpc
ncalrpc: lsapolicylookup
ncalrpc: LSA_EAS_ENDPOINT
ncalrpc: LSA_IDPEXT_ENDPOINT
ncalrpc: lsacap
ncalrpc: LSARPC_ENDPOINT
ncalrpc: securityevent
ncalrpc: audit
ncacn_np: \\CLOUD-PC\pipe\lsass
ncalrpc: imsfk
ncalrpc: clipsfk
d95afe70-a6d5-4259-822e-2c84da1ddb0d
version: v1.0
protocol: [MS-RSP]: Remote Shutdown Protocol
provider: wininit.exe
ncacn_ip_tcp: 103.85.103.134:49665
ncalrpc: WindowsShutdown
ncacn_np: \\CLOUD-PC\PIPE\InitShutdown
ncalrpc: WMsgKRpc08EC20
76f226c3-ec14-4325-8a99-6a46348418af
version: v1.0
provider: winlogon.exe
ncalrpc: WindowsShutdown
ncacn_np: \\CLOUD-PC\PIPE\InitShutdown
ncalrpc: WMsgKRpc08EC20
ncalrpc: WMsgKRpc08F541
c9ac6db5-82b7-4e55-ae8a-e464ed7b4277
version: v1.0
annotation: Impl friendly name
provider: sysntfy.dll
ncalrpc: LRPC-1c64ccff4891afb45f
ncalrpc: IUserProfile2
ncalrpc: LRPC-7e1dcb6bb53f29c04a
ncalrpc: senssvc
ncalrpc: LRPC-4a2469a4745d3ed9e3
fc48cd89-98d6-4628-9839-86f7a3e4161a
version: v1.0
ncalrpc: dabrpc
ncalrpc: csebpub
ncalrpc: LRPC-e74712ec92e08ee575
ncalrpc: LRPC-c0a4a5defaf831123c
ncalrpc: LRPC-850fc1e818eb37c37d
ncalrpc: LRPC-359bac9eb9f91620de
ncalrpc: OLE78A276F5A3A05E90CA96D96B2BD5
ncalrpc: LRPC-1771c21537f9f9aad3
ncalrpc: actkernel
ncalrpc: umpo
d09bdeb5-6171-4a34-bfe2-06fa82652568
version: v1.0
ncalrpc: csebpub
ncalrpc: LRPC-e74712ec92e08ee575
ncalrpc: LRPC-c0a4a5defaf831123c
ncalrpc: LRPC-850fc1e818eb37c37d
ncalrpc: LRPC-359bac9eb9f91620de
ncalrpc: OLE78A276F5A3A05E90CA96D96B2BD5
ncalrpc: LRPC-1771c21537f9f9aad3
ncalrpc: actkernel
ncalrpc: umpo
ncalrpc: LRPC-c0a4a5defaf831123c
ncalrpc: LRPC-850fc1e818eb37c37d
ncalrpc: LRPC-359bac9eb9f91620de
ncalrpc: OLE78A276F5A3A05E90CA96D96B2BD5
ncalrpc: LRPC-1771c21537f9f9aad3
ncalrpc: actkernel
ncalrpc: umpo
ncalrpc: LRPC-850fc1e818eb37c37d
ncalrpc: LRPC-359bac9eb9f91620de
ncalrpc: OLE78A276F5A3A05E90CA96D96B2BD5
ncalrpc: LRPC-1771c21537f9f9aad3
ncalrpc: actkernel
ncalrpc: umpo
ncalrpc: LRPC-d451af7f588b64f018
ncalrpc: LRPC-0c4ce28960a633cd3e
ncalrpc: LRPC-a342467df3885cc85e
ncalrpc: LRPC-4b20121b2f93c127b2
ncalrpc: OLEDC2D404CDFAEE4F6FBE408832E72
ncalrpc: LRPC-4b20121b2f93c127b2
ncalrpc: OLEDC2D404CDFAEE4F6FBE408832E72
697dcda9-3ba9-4eb2-9247-e11f1901b0d2
version: v1.0
ncalrpc: LRPC-e74712ec92e08ee575
ncalrpc: LRPC-c0a4a5defaf831123c
ncalrpc: LRPC-850fc1e818eb37c37d
ncalrpc: LRPC-359bac9eb9f91620de
ncalrpc: OLE78A276F5A3A05E90CA96D96B2BD5
ncalrpc: LRPC-1771c21537f9f9aad3
ncalrpc: actkernel
ncalrpc: umpo
9b008953-f195-4bf9-bde0-4471971e58ed
version: v1.0
ncalrpc: LRPC-c0a4a5defaf831123c
ncalrpc: LRPC-850fc1e818eb37c37d
ncalrpc: LRPC-359bac9eb9f91620de
ncalrpc: OLE78A276F5A3A05E90CA96D96B2BD5
ncalrpc: LRPC-1771c21537f9f9aad3
ncalrpc: actkernel
ncalrpc: umpo
0d47017b-b33b-46ad-9e18-fe96456c5078
version: v1.0
ncalrpc: umpo
95406f0b-b239-4318-91bb-cea3a46ff0dc
version: v1.0
ncalrpc: umpo
4ed8abcc-f1e2-438b-981f-bb0e8abc010c
version: v1.0
ncalrpc: umpo
0ff1f646-13bb-400a-ab50-9a78f2b7a85a
version: v1.0
ncalrpc: umpo
6982a06e-5fe2-46b1-b39c-a2c545bfa069
version: v1.0
ncalrpc: umpo
082a3471-31b6-422a-b931-a54401960c62
version: v1.0
ncalrpc: umpo
fae436b0-b864-4a87-9eda-298547cd82f2
version: v1.0
ncalrpc: umpo
e53d94ca-7464-4839-b044-09a2fb8b3ae5
version: v1.0
ncalrpc: umpo
178d84be-9291-4994-82c6-3f909aca5a03
version: v1.0
ncalrpc: umpo
4dace966-a243-4450-ae3f-9b7bcb5315b8
version: v2.0
ncalrpc: umpo
2c7fd9ce-e706-4b40-b412-953107ef9bb0
version: v0.0
ncalrpc: umpo
88abcbc3-34ea-76ae-8215-767520655a23
version: v0.0
ncalrpc: LRPC-359bac9eb9f91620de
ncalrpc: OLE78A276F5A3A05E90CA96D96B2BD5
ncalrpc: LRPC-1771c21537f9f9aad3
ncalrpc: actkernel
ncalrpc: umpo
76c217bc-c8b4-4201-a745-373ad9032b1a
version: v1.0
ncalrpc: LRPC-359bac9eb9f91620de
ncalrpc: OLE78A276F5A3A05E90CA96D96B2BD5
ncalrpc: LRPC-1771c21537f9f9aad3
ncalrpc: actkernel
ncalrpc: umpo
55e6b932-1979-45d6-90c5-7f6270724112
version: v1.0
ncalrpc: LRPC-359bac9eb9f91620de
ncalrpc: OLE78A276F5A3A05E90CA96D96B2BD5
ncalrpc: LRPC-1771c21537f9f9aad3
ncalrpc: actkernel
ncalrpc: umpo
857fb1be-084f-4fb5-b59c-4b2c4be5f0cf
version: v1.0
ncalrpc: OLE78A276F5A3A05E90CA96D96B2BD5
ncalrpc: LRPC-1771c21537f9f9aad3
ncalrpc: actkernel
ncalrpc: umpo
20c40295-8dba-48e6-aebf-3e78ef3bb144
version: v2.0
ncalrpc: OLE78A276F5A3A05E90CA96D96B2BD5
ncalrpc: LRPC-1771c21537f9f9aad3
ncalrpc: actkernel
ncalrpc: umpo
2513bcbe-6cd4-4348-855e-7efb3c336dd3
version: v2.0
ncalrpc: OLE78A276F5A3A05E90CA96D96B2BD5
ncalrpc: LRPC-1771c21537f9f9aad3
ncalrpc: actkernel
ncalrpc: umpo
0d3e2735-cea0-4ecc-a9e2-41a2d81aed4e
version: v1.0
ncalrpc: LRPC-1771c21537f9f9aad3
ncalrpc: actkernel
ncalrpc: umpo
c605f9fb-f0a3-4e2a-a073-73560f8d9e3e
version: v1.0
ncalrpc: LRPC-1771c21537f9f9aad3
ncalrpc: actkernel
ncalrpc: umpo
1b37ca91-76b1-4f5e-a3c7-2abfc61f2bb0
version: v1.0
ncalrpc: LRPC-1771c21537f9f9aad3
ncalrpc: actkernel
ncalrpc: umpo
8bfc3be1-6def-4e2d-af74-7c47cd0ade4a
version: v1.0
ncalrpc: LRPC-1771c21537f9f9aad3
ncalrpc: actkernel
ncalrpc: umpo
2d98a740-581d-41b9-aa0d-a88b9d5ce938
version: v1.0
ncalrpc: LRPC-1771c21537f9f9aad3
ncalrpc: actkernel
ncalrpc: umpo
dd59071b-3215-4c59-8481-972edadc0f6a
version: v1.0
ncalrpc: actkernel
ncalrpc: umpo
0361ae94-0316-4c6c-8ad8-c594375800e2
version: v1.0
ncalrpc: umpo
5824833b-3c1a-4ad2-bdfd-c31d19e23ed2
version: v1.0
ncalrpc: umpo
bdaa0970-413b-4a3e-9e5d-f6dc9d7e0760
version: v1.0
ncalrpc: umpo
3b338d89-6cfa-44b8-847e-531531bc9992
version: v1.0
ncalrpc: umpo
8782d3b9-ebbd-4644-a3d8-e8725381919b
version: v1.0
ncalrpc: umpo
085b0334-e454-4d91-9b8c-4134f9e793f3
version: v1.0
ncalrpc: umpo
4bec6bb8-b5c2-4b6f-b2c1-5da5cf92d0d9
version: v1.0
ncalrpc: umpo
12e65dd8-887f-41ef-91bf-8d816c42c2e7
version: v1.0
annotation: Secure Desktop LRPC interface
provider: winlogon.exe
ncalrpc: WMsgKRpc08F541
e40f7b57-7a25-4cd3-a135-7f7d3df9d16b
version: v1.0
ncalrpc: LRPC-95c7114433741cef9a
880fd55e-43b9-11e0-b1a8-cf4edfd72085
version: v1.0
annotation: KAPI Service endpoint
ncalrpc: LRPC-4a3d8c8fa45fd3c97f
ncalrpc: OLEE1262309A458B2CA3E21E52B1EE4
ncalrpc: LRPC-d451af7f588b64f018
5222821f-d5e2-4885-84f1-5f6185a0ec41
version: v1.0
ncalrpc: LRPC-5014b6f3ffd8ec2cfa
a500d4c6-0dd1-4543-bc0c-d5f93486eaf8
version: v1.0
ncalrpc: LRPC-91d983e73335612e2a
ncalrpc: LRPC-0c4ce28960a633cd3e
7ea70bcf-48af-4f6a-8968-6a440754d5fa
version: v1.0
annotation: NSI server endpoint
provider: nsisvc.dll
ncalrpc: LRPC-4210ed4c5a633901f5
ba4aa15a-be94-47fb-9bfb-fef110e7efad
version: v1.0
annotation: DevQueryBroker client query RPC interface
ncalrpc: LRPC-c5bf37d04f58dc825a
3a9ef155-691d-4449-8d05-09ad57031823
version: v1.0
ncacn_ip_tcp: 103.85.103.134:49666
ncalrpc: LRPC-9be91ac4961243c87d
ncalrpc: ubpmtaskhostchannel
ncacn_np: \\CLOUD-PC\PIPE\atsvc
ncalrpc: LRPC-cbddceea5db9f19c0f
86d35949-83c9-4044-b424-db363231fd0c
version: v1.0
protocol: [MS-TSCH]: Task Scheduler Service Remoting Protocol
provider: schedsvc.dll
ncacn_ip_tcp: 103.85.103.134:49666
ncalrpc: LRPC-9be91ac4961243c87d
ncalrpc: ubpmtaskhostchannel
ncacn_np: \\CLOUD-PC\PIPE\atsvc
ncalrpc: LRPC-cbddceea5db9f19c0f
33d84484-3626-47ee-8c6f-e7e98b113be1
version: v2.0
ncalrpc: LRPC-9be91ac4961243c87d
ncalrpc: ubpmtaskhostchannel
ncacn_np: \\CLOUD-PC\PIPE\atsvc
ncalrpc: LRPC-cbddceea5db9f19c0f
378e52b0-c0a9-11cf-822d-00aa0051e40f
version: v1.0
protocol: [MS-TSCH]: Task Scheduler Service Remoting Protocol
provider: taskcomp.dll
ncacn_np: \\CLOUD-PC\PIPE\atsvc
ncalrpc: LRPC-cbddceea5db9f19c0f
1ff70682-0a51-30e8-076d-740be8cee98b
version: v1.0
protocol: [MS-TSCH]: Task Scheduler Service Remoting Protocol
provider: taskcomp.dll
ncacn_np: \\CLOUD-PC\PIPE\atsvc
ncalrpc: LRPC-cbddceea5db9f19c0f
0a74ef1c-41a4-4e06-83ae-dc74fb1cdd53
version: v1.0
provider: schedsvc.dll
ncalrpc: LRPC-cbddceea5db9f19c0f
4c8d0bef-d7f1-49f0-9102-caa05f58d114
version: v1.0
ncalrpc: LRPC-1dcc0a96ec847e5390
ncalrpc: OLE1489730E207B88DC6DB41F118E59
bd6ca954-842e-468f-8b07-89cbfa9522dc
version: v1.0
annotation: NetworkProfiles Telemetry RPC Interface
ncalrpc: LRPC-1dcc0a96ec847e5390
ncalrpc: OLE1489730E207B88DC6DB41F118E59
3f787932-3452-4363-8651-6ea97bb373bb
version: v1.0
annotation: NSP Rpc Interface
ncalrpc: LRPC-1dcc0a96ec847e5390
ncalrpc: OLE1489730E207B88DC6DB41F118E59
f6beaff7-1e19-4fbb-9f8f-b89e2018337c
version: v1.0
annotation: Windows Event Log
protocol: [MS-EVEN6]: EventLog Remoting Protocol
provider: wevtsvc.dll
ncacn_ip_tcp: 103.85.103.134:49667
ncacn_np: \\CLOUD-PC\pipe\eventlog
ncalrpc: eventlog
0d3c7f20-1c8d-4654-a1b3-51563b298bda
version: v1.0
annotation: UserMgrCli
ncalrpc: LRPC-d98e4a4f8e32ff997d
ncalrpc: OLEFB3BF49261F7C534FC52A01E363C
b18fbab6-56f8-4702-84e0-41053293a869
version: v1.0
annotation: UserMgrCli
ncalrpc: LRPC-d98e4a4f8e32ff997d
ncalrpc: OLEFB3BF49261F7C534FC52A01E363C
7f1343fe-50a9-4927-a778-0c5859517bac
version: v1.0
annotation: DfsDs service
ncacn_np: \\CLOUD-PC\PIPE\wkssvc
ncalrpc: LRPC-02f897ed06f766d57e
eb081a0d-10ee-478a-a1dd-50995283e7a8
version: v3.0
annotation: Witness Client Test Interface
ncalrpc: LRPC-02f897ed06f766d57e
f2c9b409-c1c9-4100-8639-d8ab1486694a
version: v1.0
annotation: Witness Client Upcall Server
ncalrpc: LRPC-02f897ed06f766d57e
30b044a5-a225-43f0-b3a4-e060df91f9c1
version: v1.0
provider: certprop.dll
ncalrpc: LRPC-048a121d6c6bfd9c5a
29770a8f-829b-4158-90a2-78cd488501f7
version: v1.0
ncacn_ip_tcp: 103.85.103.134:49668
ncacn_np: \\CLOUD-PC\pipe\SessEnvPublicRpc
ncalrpc: SessEnvPrivateRpc
ncalrpc: LRPC-4a2469a4745d3ed9e3
30adc50c-5cbc-46ce-9a0e-91914789e23c
version: v1.0
annotation: NRP server endpoint
provider: nrpsrv.dll
ncalrpc: LRPC-a7d81fe48512b5ee5d
ncalrpc: DNSResolver
3c4728c5-f0ab-448b-bda1-6ce01eb0a6d5
version: v1.0
annotation: DHCP Client LRPC Endpoint
provider: dhcpcsvc.dll
ncalrpc: dhcpcsvc
ncalrpc: dhcpcsvc6
3c4728c5-f0ab-448b-bda1-6ce01eb0a6d6
version: v1.0
annotation: DHCPv6 Client LRPC Endpoint
provider: dhcpcsvc6.dll
ncalrpc: dhcpcsvc6
3473dd4d-2e88-4006-9cba-22570909dd10
version: v5.256
annotation: WinHttp Auto-Proxy Service
ncalrpc: LRPC-30e042ffe153d06e42
76f03f96-cdfd-44fc-a22c-64950a001209
version: v1.0
protocol: [MS-PAR]: Print System Asynchronous Remote Protocol
provider: spoolsv.exe
ncacn_ip_tcp: 103.85.103.134:49670
ncalrpc: LRPC-2a76f41375e0477642
4a452661-8290-4b36-8fbe-7f4093a94978
version: v1.0
provider: spoolsv.exe
ncacn_ip_tcp: 103.85.103.134:49670
ncalrpc: LRPC-2a76f41375e0477642
ae33069b-a2a8-46ee-a235-ddfd339be281
version: v1.0
protocol: [MS-PAN]: Print System Asynchronous Notification Protocol
provider: spoolsv.exe
ncacn_ip_tcp: 103.85.103.134:49670
ncalrpc: LRPC-2a76f41375e0477642
0b6edbfa-4a24-4fc6-8a23-942b1eca65d1
version: v1.0
protocol: [MS-PAN]: Print System Asynchronous Notification Protocol
provider: spoolsv.exe
ncacn_ip_tcp: 103.85.103.134:49670
ncalrpc: LRPC-2a76f41375e0477642
12345678-1234-abcd-ef00-0123456789ab
version: v1.0
protocol: [MS-RPRN]: Print System Remote Protocol
provider: spoolsv.exe
ncacn_ip_tcp: 103.85.103.134:49670
ncalrpc: LRPC-2a76f41375e0477642
13560fa9-8c09-4b56-a1fd-04d083b9b2a1
version: v1.0
ncalrpc: LRPC-d2239f1e7f156fb3e5
ncalrpc: OLE2D1E1952C79DCA21022FF8AE8C62
c2d1b5dd-fa81-4460-9dd6-e7658b85454b
version: v1.0
ncalrpc: LRPC-d2239f1e7f156fb3e5
ncalrpc: OLE2D1E1952C79DCA21022FF8AE8C62
f44e62af-dab1-44c2-8013-049a9de417d6
version: v1.0
ncalrpc: LRPC-d2239f1e7f156fb3e5
ncalrpc: OLE2D1E1952C79DCA21022FF8AE8C62
b37f900a-eae4-4304-a2ab-12bb668c0188
version: v1.0
ncalrpc: LRPC-d2239f1e7f156fb3e5
ncalrpc: OLE2D1E1952C79DCA21022FF8AE8C62
abfb6ca3-0c5e-4734-9285-0aee72fe8d1c
version: v1.0
ncalrpc: LRPC-d2239f1e7f156fb3e5
ncalrpc: OLE2D1E1952C79DCA21022FF8AE8C62
2fb92682-6599-42dc-ae13-bd2ca89bd11c
version: v1.0
annotation: Fw APIs
provider: MPSSVC.dll
ncalrpc: LRPC-ccf2ec5006ee2d07db
ncalrpc: LRPC-6c2a14927cdb7b4118
ncalrpc: LRPC-fbe10ca5ae8ea26fc2
ncalrpc: LRPC-254464994d69339ad1
f47433c3-3e9d-4157-aad4-83aa1f5c2d4c
version: v1.0
annotation: Fw APIs
ncalrpc: LRPC-6c2a14927cdb7b4118
ncalrpc: LRPC-fbe10ca5ae8ea26fc2
ncalrpc: LRPC-254464994d69339ad1
7f9d11bf-7fb9-436b-a812-b2d50c5d4c03
version: v1.0
annotation: Fw APIs
provider: MPSSVC.dll
ncalrpc: LRPC-fbe10ca5ae8ea26fc2
ncalrpc: LRPC-254464994d69339ad1
dd490425-5325-4565-b774-7e27d6c09c24
version: v1.0
annotation: Base Firewall Engine API
provider: BFE.DLL
ncalrpc: LRPC-254464994d69339ad1
c36be077-e14b-4fe9-8abc-e856ef4f048b
version: v1.0
annotation: Proxy Manager client server endpoint
ncalrpc: OLE805D7CDCAAB8737CC5791C77FF1D
ncalrpc: TeredoControl
ncalrpc: TeredoDiagnostics
ncalrpc: LRPC-608f671da61e3612ea
2e6035b2-e8f1-41a7-a044-656b439c4c34
version: v1.0
annotation: Proxy Manager provider server endpoint
ncalrpc: OLE805D7CDCAAB8737CC5791C77FF1D
ncalrpc: TeredoControl
ncalrpc: TeredoDiagnostics
ncalrpc: LRPC-608f671da61e3612ea
c49a5a70-8a7f-4e70-ba16-1e8f1f193ef1
version: v1.0
annotation: Adh APIs
ncalrpc: TeredoControl
ncalrpc: TeredoDiagnostics
ncalrpc: LRPC-608f671da61e3612ea
552d076a-cb29-4e44-8b6a-d15e59e2c0af
version: v1.0
annotation: IP Transition Configuration endpoint
provider: iphlpsvc.dll
ncalrpc: LRPC-608f671da61e3612ea
6319e220-2fd5-48bc-a92f-ba70384e4d24
version: v1.0
annotation: Device Association Framework Provider Management RPC Interface
ncalrpc: LRPC-a75ad49b5853f3b50f
5b665b9a-a086-4e26-ae24-96ab050b0ec3
version: v1.0
annotation: Device Association Framework AEP Store Access RPC Interface
ncalrpc: LRPC-a75ad49b5853f3b50f
bd84cd86-9825-4376-813d-334c543f89b1
version: v1.0
annotation: Device Association Framework Query RPC Interface
ncalrpc: LRPC-a75ad49b5853f3b50f
2e7d4935-59d2-4312-a2c8-41900aa5495f
version: v1.0
annotation: Device Association Framework Challenge RPC Interface
ncalrpc: LRPC-a75ad49b5853f3b50f
a1d4eae7-39f8-4bca-8e72-832767f5082a
version: v1.0
annotation: Device Association Framework Inbound RPC Interface
ncalrpc: LRPC-a75ad49b5853f3b50f
850cee52-3038-4277-b9b4-e05db8b2c35c
version: v1.0
annotation: Device Association Framework Association RPC Interface
ncalrpc: LRPC-a75ad49b5853f3b50f
c27f3c08-92ba-478c-b446-b419c4cef0e2
version: v1.0
ncalrpc: LRPC-88f90a497149bf8f86
1a0d010f-1c33-432c-b0f5-8cf4e8053099
version: v1.0
annotation: IdSegSrv service
ncalrpc: LRPC-4ebba14173000d7c0f
98716d03-89ac-44c7-bb8c-285824e51c4a
version: v1.0
annotation: XactSrv service
provider: srvsvc.dll
ncalrpc: LRPC-4ebba14173000d7c0f
b58aa02e-2884-4e97-8176-4ee06d794184
version: v1.0
provider: sysmain.dll
ncalrpc: LRPC-849fe51592136321e8
1a9134dd-7b39-45ba-ad88-44d01ca47f28
version: v1.0
annotation: Message Queuing - RemoteRead V1
protocol: [MS-MQRR]: Message Queuing (MSMQ):
provider: mqqm.dll
ncacn_ip_tcp: 103.85.103.134:2105
ncacn_ip_tcp: 103.85.103.134:2103
ncacn_ip_tcp: 103.85.103.134:2107
ncacn_ip_tcp: 103.85.103.134:49673
ncalrpc: QMMgmtFacility$cloud-pc
ncalrpc: QMsvc$cloud-pc
1088a980-eae5-11d0-8d9b-00a02453c337
version: v1.0
annotation: Message Queuing - QM2QM V1
protocol: [MS-MQQP]: Message Queuing (MSMQ):
provider: mqqm.dll
ncacn_ip_tcp: 103.85.103.134:2105
ncacn_ip_tcp: 103.85.103.134:2103
ncacn_ip_tcp: 103.85.103.134:2107
ncacn_ip_tcp: 103.85.103.134:49673
ncalrpc: QMMgmtFacility$cloud-pc
ncalrpc: QMsvc$cloud-pc
76d12b80-3467-11d3-91ff-0090272f9ea3
version: v1.0
annotation: Message Queuing - QMRT V2
protocol: [MS-MQMP]: Message Queuing (MSMQ):
provider: mqqm.dll
ncacn_ip_tcp: 103.85.103.134:2105
ncacn_ip_tcp: 103.85.103.134:2103
ncacn_ip_tcp: 103.85.103.134:2107
ncacn_ip_tcp: 103.85.103.134:49673
ncalrpc: QMMgmtFacility$cloud-pc
ncalrpc: QMsvc$cloud-pc
fdb3a030-065f-11d1-bb9b-00a024ea5525
version: v1.0
annotation: Message Queuing - QMRT V1
protocol: [MS-MQMP]: Message Queuing (MSMQ):
provider: mqqm.dll
ncacn_ip_tcp: 103.85.103.134:2105
ncacn_ip_tcp: 103.85.103.134:2103
ncacn_ip_tcp: 103.85.103.134:2107
ncacn_ip_tcp: 103.85.103.134:49673
ncalrpc: QMMgmtFacility$cloud-pc
ncalrpc: QMsvc$cloud-pc
714dc5c4-c5f6-466a-b037-a573c958031e
version: v1.0
annotation: ProcessTag Server Endpoint
ncalrpc: LRPC-3b96d35c62794336f0
ncalrpc: OLEC8965D7DEE0D59E8274547871D78
650a7e26-eab8-5533-ce43-9c1dfce11511
version: v1.0
annotation: Vpn APIs
ncalrpc: LRPC-84904f7f2598a207bf
ncalrpc: VpnikeRpc
ncalrpc: RasmanLrpc
ncacn_np: \\CLOUD-PC\PIPE\ROUTER
367abb81-9844-35f1-ad32-98f038001003
version: v2.0
protocol: [MS-SCMR]: Service Control Manager Remote Protocol
provider: services.exe
ncacn_ip_tcp: 103.85.103.134:49676
78dcce84-7f13-4139-b8cd-ef222aa0408b
version: v1.0
annotation: StateRepository
ncalrpc: LRPC-28800b5dc6067bbed4
ncalrpc: OLEC44C141A18C78B491996F700B8CA
509bc7ae-77be-4ee8-b07c-0d096bb44345
version: v1.0
ncalrpc: LRPC-0795ab768a08f35b24
ncalrpc: OLE830086FE78BA50591762BA2E3672
4b112204-0e19-11d3-b42b-0000f81feb9f
version: v1.0
provider: ssdpsrv.dll
ncalrpc: LRPC-8b04ce64071192f554
1d45e083-478f-437c-9618-3594ced8c235
version: v1.0
ncalrpc: LRPC-57b4cb5b2be3fc47b2
ncalrpc: OLEE127C4654D6C468BD0D6DE0DDD84
98cd761e-e77d-41c8-a3c0-0fb756d90ec2
version: v1.0
ncalrpc: LRPC-57b4cb5b2be3fc47b2
ncalrpc: OLEE127C4654D6C468BD0D6DE0DDD84
d22895ef-aff4-42c5-a5b2-b14466d34ab4
version: v1.0
ncalrpc: LRPC-57b4cb5b2be3fc47b2
ncalrpc: OLEE127C4654D6C468BD0D6DE0DDD84
e38f5360-8572-473e-b696-1b46873beeab
version: v1.0
ncalrpc: LRPC-57b4cb5b2be3fc47b2
ncalrpc: OLEE127C4654D6C468BD0D6DE0DDD84
95095ec8-32ea-4eb0-a3e2-041f97b36168
version: v1.0
ncalrpc: LRPC-57b4cb5b2be3fc47b2
ncalrpc: OLEE127C4654D6C468BD0D6DE0DDD84
fd8be72b-a9cd-4b2c-a9ca-4ded242fbe4d
version: v1.0
ncalrpc: LRPC-57b4cb5b2be3fc47b2
ncalrpc: OLEE127C4654D6C468BD0D6DE0DDD84
4c9dbf19-d39e-4bb9-90ee-8f7179b20283
version: v1.0
ncalrpc: LRPC-57b4cb5b2be3fc47b2
ncalrpc: OLEE127C4654D6C468BD0D6DE0DDD84
d4051bde-9cdd-4910-b393-4aa85ec3c482
version: v1.0
ncalrpc: LRPC-57b4cb5b2be3fc47b2
ncalrpc: OLEE127C4654D6C468BD0D6DE0DDD84
7df1ceae-de4e-4e6f-ab14-49636e7c2052
version: v1.0
ncalrpc: LRPC-65e2b221e4ea93eedd
c503f532-443a-4c69-8300-ccd1fbdb3839
version: v2.0
ncalrpc: LRPC-d0e4295d7918adcf67
ncalrpc: OLED9452C169F1A04A9D41B3F6EE845
49461cac-a1e3-42b7-9328-972783b9391e
version: v1.0
annotation: camsvc
ncalrpc: LRPC-830ab43c2d358268cf
ncalrpc: OLE8732274418421BE3ADD36449F340
10d20e7a-2530-494a-ac01-b8dd04480ad2
version: v1.0
annotation: camsvc
ncalrpc: LRPC-830ab43c2d358268cf
ncalrpc: OLE8732274418421BE3ADD36449F340
b1ef227e-dfa5-421e-82bb-67a6a129c496
version: v0.0
ncalrpc: LRPC-facd3fabb5165b7e60
ncalrpc: OLE1058DCE41FA876CEB871B7496E3F
0fc77b1a-95d8-4a2e-a0c0-cff54237462b
version: v0.0
ncalrpc: LRPC-facd3fabb5165b7e60
ncalrpc: OLE1058DCE41FA876CEB871B7496E3F
8ec21e98-b5ce-4916-a3d6-449fa428a007
version: v0.0
ncalrpc: LRPC-facd3fabb5165b7e60
ncalrpc: OLE1058DCE41FA876CEB871B7496E3F
0f738e20-73c0-4ca8-aa6a-8dfef545fea8
version: v1.0
annotation: AppInfo
ncalrpc: LRPC-841f8ba9e6a5650b33
58e604e8-9adb-4d2e-a464-3b0683fb1480
version: v1.0
annotation: AppInfo
provider: appinfo.dll
ncalrpc: LRPC-841f8ba9e6a5650b33
fd7a0523-dc70-43dd-9b2e-9c5ed48225b1
version: v1.0
annotation: AppInfo
provider: appinfo.dll
ncalrpc: LRPC-841f8ba9e6a5650b33
5f54ce7d-5b79-4175-8584-cb65313a0e98
version: v1.0
annotation: AppInfo
provider: appinfo.dll
ncalrpc: LRPC-841f8ba9e6a5650b33
201ef99a-7fa0-444c-9399-19ba84f12a1a
version: v1.0
annotation: AppInfo
provider: appinfo.dll
ncalrpc: LRPC-841f8ba9e6a5650b33
0497b57d-2e66-424f-a0c6-157cd5d41700
version: v1.0
annotation: AppInfo
ncalrpc: LRPC-841f8ba9e6a5650b33
0767a036-0d22-48aa-ba69-b619480f38cb
version: v1.0
annotation: PcaSvc
provider: pcasvc.dll
ncalrpc: LRPC-ccf000908e98c29352
28942101-43df-4eb7-b1dd-2c0c0ebf99c0
version: v0.0
ncalrpc: LRPC-c9cdffa53d8fc91237
44d1520b-6133-41f0-8a66-d37305ecc357
version: v0.0
ncalrpc: LRPC-c9cdffa53d8fc91237
06bba54a-be05-49f9-b0a0-30f790261023
version: v1.0
annotation: Security Center
provider: wscsvc.dll
ncalrpc: LRPC-c3ae91bebc76565b88
ncalrpc: OLE2C600DCD205BE0794EBE6477A9E0
43890c94-bfd7-4655-ad6a-b4a68397cdcb
version: v0.0
ncalrpc: LRPC-716d8583b67e8989bd
ncalrpc: OLE12E065EB6E65103C0488558DA9E0
c8ba73d2-3d55-429c-8e9a-c44f006f69fc
version: v0.0
ncalrpc: LRPC-716d8583b67e8989bd
ncalrpc: OLE12E065EB6E65103C0488558DA9E0
e8748f69-a2a4-40df-9366-62dbeb696e26
version: v0.0
ncalrpc: LRPC-716d8583b67e8989bd
ncalrpc: OLE12E065EB6E65103C0488558DA9E0
923c9623-db7f-4b34-9e6d-e86580f8ca2a
version: v1.0
ncalrpc: LRPC-716d8583b67e8989bd
ncalrpc: OLE12E065EB6E65103C0488558DA9E0
0c53aa2e-fb1c-49c5-bfb6-c54f8e5857cd
version: v1.0
ncalrpc: LRPC-716d8583b67e8989bd
ncalrpc: OLE12E065EB6E65103C0488558DA9E0
d2716e94-25cb-4820-bc15-537866578562
version: v1.0
ncalrpc: LRPC-716d8583b67e8989bd
ncalrpc: OLE12E065EB6E65103C0488558DA9E0
a4b8d482-80ce-40d6-934d-b22a01a44fe7
version: v1.0
annotation: LicenseManager
ncalrpc: LicenseServiceEndpoint
c100beab-d33a-4a4b-bf23-bbef4663d017
version: v1.0
annotation: wcncsvc.wcnprpc
provider: wcncsvc.dll
ncalrpc: wcncsvc.wcnprpc
ncalrpc: wcncsvc.transport
c100beac-d33a-4a4b-bf23-bbef4663d017
version: v1.0
annotation: wcncsvc.transport
provider: wcncsvc.dll
ncalrpc: wcncsvc.transport
bf4dc912-e52f-4904-8ebe-9317c1bdd497
version: v1.0
ncalrpc: LRPC-392dc784556af7973b
ncalrpc: OLE0D5B4AB6AC8EF7FFEA082ADB1941
8c7daf44-b6dc-11d1-9a4c-0020af6e7c57
version: v1.0
annotation: Group Policy RPC Interface
provider: appmgmts.dll
ncalrpc: LRPC-b283724de152e1149a
a398e520-d59a-4bdd-aa7a-3c1e0303a511
version: v1.0
annotation: IKE/Authip API
provider: IKEEXT.DLL
ncalrpc: LRPC-97962096023fca2fa8
ff9fd3c4-742e-45e0-91dd-2f5bc632a1df
version: v1.0
annotation: appxsvc
ncalrpc: LRPC-60a30911f37f639d5b
ae2dc901-312d-41df-8b79-e835e63db874
version: v1.0
annotation: appxsvc
ncalrpc: LRPC-60a30911f37f639d5b
137 /
udp
-1195399572 | 2025-02-19T06:27:29.194741
NetBIOS Response:
Server Name: CLOUD-PC
MAC Address: 04:7C:16:3E:ED:E7
Names:
CLOUD-PC <0x0>
WORKGROUP <0x0>
CLOUD-PC <0x20>MAC Addresses
04:7C:16:3E:ED:E7
OUI: 04:7C:16
Organization: Micro-Star INTL CO., LTD.
Assignment: MA-L
Registration Date: 2022-02-18
-1917297735 | 2025-03-11T13:07:03.513951
HTTP/1.1 200 OK
Content-Length: 1021
Content-Type: text/html
Last-Modified: Tue, 11 Mar 2025 05:29:57 GMT
Accept-Ranges: bytes
ETag: "1db9246a0297b7d"
Server: Microsoft-IIS/10.0
Strict-Transport-Security: max-age=2592000
X-Powered-By: ASP.NET
Date: Tue, 11 Mar 2025 13:06:58 GMT
SSL Certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
ca:46:e0:d7:8d:fa:87:80:f0:b7:b2:46:ae:66:e2:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: C=GB, ST=Greater Manchester, L=Salford, O=Sectigo Limited, CN=Sectigo RSA Domain Validation Secure Server CA
Validity
Not Before: Feb 26 00:00:00 2025 GMT
Not After : Feb 26 23:59:59 2026 GMT
Subject: CN=star.softtact.com
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
Public-Key: (2048 bit)
Modulus:
00:c1:7b:3e:ed:92:69:10:5b:25:99:86:b9:ce:09:
ee:69:68:18:89:87:70:9d:26:73:24:f1:9b:34:d6:
7d:2e:42:ca:ab:3f:01:27:d8:34:77:4e:2e:8c:eb:
ea:07:20:45:4b:c3:a7:12:13:52:32:66:64:ec:7f:
78:48:13:95:08:df:22:4c:b8:a4:b4:4a:54:2d:ce:
bf:b9:c0:f6:3c:a6:a5:ba:65:de:72:ce:80:75:d1:
12:80:d8:41:d1:ab:c6:e4:04:91:9a:e0:a6:ce:16:
61:a3:30:5e:98:57:8e:d4:17:a6:d1:10:8e:50:a5:
0a:0a:19:c5:0a:7c:83:39:b6:b7:fb:41:c9:37:fc:
53:da:be:e8:96:a6:21:4d:c1:50:90:c9:62:44:05:
d4:3b:75:da:43:59:c1:37:79:36:b5:53:1e:75:3c:
6c:e3:26:f9:7b:4a:40:cd:8e:14:15:54:5b:b1:08:
f3:e0:13:1e:d9:a8:7c:2f:4e:6f:7a:89:4a:4c:60:
8e:15:f7:20:25:cc:e0:1d:96:08:98:e6:48:af:4e:
73:e9:bd:5f:0f:5b:45:16:ed:cf:63:20:61:50:e8:
1f:ba:07:1f:e1:8f:00:78:00:27:08:2b:2c:68:3d:
5b:35:62:2e:66:6d:c7:ef:7d:d6:74:fb:6f:9a:5e:
3b:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Authority Key Identifier:
8D:8C:5E:C4:54:AD:8A:E1:77:E9:9B:F9:9B:05:E1:B8:01:8D:61:E1
X509v3 Subject Key Identifier:
0F:24:1E:CF:7F:4C:72:F9:60:10:B7:F8:A1:88:CC:E2:1D:B0:87:71
X509v3 Key Usage: critical
Digital Signature, Key Encipherment
X509v3 Basic Constraints: critical
CA:FALSE
X509v3 Extended Key Usage:
TLS Web Server Authentication, TLS Web Client Authentication
X509v3 Certificate Policies:
Policy: 1.3.6.1.4.1.6449.1.2.2.7
CPS: https://sectigo.com/CPS
Policy: 2.23.140.1.2.1
Authority Information Access:
CA Issuers - URI:http://crt.sectigo.com/SectigoRSADomainValidationSecureServerCA.crt
OCSP - URI:http://ocsp.sectigo.com
X509v3 Subject Alternative Name:
DNS:star.softtact.com, DNS:www.star.softtact.com
CT Precertificate SCTs:
Signed Certificate Timestamp:
Version : v1 (0x0)
Log ID : 96:97:64:BF:55:58:97:AD:F7:43:87:68:37:08:42:77:
E9:F0:3A:D5:F6:A4:F3:36:6E:46:A4:3F:0F:CA:A9:C6
Timestamp : Feb 26 10:39:16.044 2025 GMT
Extensions: none
Signature : ecdsa-with-SHA256
30:46:02:21:00:DB:D6:11:36:84:1C:D2:54:EF:A1:22:
7D:B9:92:84:F0:9B:EC:B3:C0:F0:77:C5:64:4C:5F:2B:
0E:C8:C4:76:88:02:21:00:C3:B2:8D:B8:F7:D8:43:F0:
75:63:00:76:B3:E5:15:41:DE:6A:0F:E7:FB:3F:F0:4E:
21:5B:ED:89:7B:E5:D8:AB
Signed Certificate Timestamp:
Version : v1 (0x0)
Log ID : 19:86:D4:C7:28:AA:6F:FE:BA:03:6F:78:2A:4D:01:91:
AA:CE:2D:72:31:0F:AE:CE:5D:70:41:2D:25:4C:C7:D4
Timestamp : Feb 26 10:39:15.924 2025 GMT
Extensions: none
Signature : ecdsa-with-SHA256
30:45:02:20:07:4A:79:D0:39:E9:64:91:F8:A3:C7:6D:
95:8B:8B:85:FC:09:65:6B:32:DF:95:F1:5C:DB:C4:C4:
68:2A:5F:A5:02:21:00:EE:AB:9F:E8:D0:26:5D:34:90:
F0:EC:00:C5:02:28:DA:BC:89:BA:64:2B:F0:FE:65:F1:
88:07:58:38:9E:D0:92
Signed Certificate Timestamp:
Version : v1 (0x0)
Log ID : CB:38:F7:15:89:7C:84:A1:44:5F:5B:C1:DD:FB:C9:6E:
F2:9A:59:CD:47:0A:69:05:85:B0:CB:14:C3:14:58:E7
Timestamp : Feb 26 10:39:15.967 2025 GMT
Extensions: none
Signature : ecdsa-with-SHA256
30:45:02:21:00:CC:47:5A:B1:7B:71:88:5E:DD:33:D9:
3B:A6:5C:80:50:AF:37:1E:BC:0E:A8:D0:8C:84:5A:A6:
CF:82:05:2D:20:02:20:3B:DA:79:48:BC:82:4E:D8:8E:
BC:46:C4:01:42:E8:30:3E:EC:D3:0B:60:78:96:5D:DD:
90:50:7B:39:84:E7:76
Signature Algorithm: sha256WithRSAEncryption
Signature Value:
c1:62:3c:79:e1:8c:24:3f:c8:8a:e1:c1:c3:af:55:14:dd:34:
82:de:52:74:50:09:e7:f5:f3:6d:52:ff:cb:ca:07:05:9e:05:
86:5d:cf:c0:2e:0c:81:e8:64:b0:e2:24:a2:d3:6e:36:1a:35:
bd:b1:96:a4:ab:a9:56:20:ee:a0:e8:dd:9a:ed:8d:7d:f8:c2:
94:2d:14:fe:c1:4e:3a:ce:15:8f:35:af:df:4e:47:65:dc:d0:
0e:93:40:a8:13:69:1c:74:f9:07:72:8c:e0:1a:9e:c6:1d:cc:
aa:06:5d:54:18:63:72:15:99:ea:bc:b0:06:c2:80:b2:59:a2:
41:1a:ce:30:69:c1:a2:06:2d:dc:cc:e1:4b:e7:29:3d:15:46:
ba:fa:a1:13:09:03:8a:f4:08:32:4e:bf:a6:4e:1b:65:92:be:
d9:cc:06:ed:60:eb:f1:18:a0:85:ea:92:09:53:41:89:de:ae:
c5:96:7a:4b:42:af:6a:21:f2:71:5c:c2:f4:ba:35:8d:87:97:
6b:50:91:5b:1f:b2:a8:a8:5b:5c:2c:c2:4b:ee:74:5f:e7:f8:
64:d8:05:0d:0e:d2:1f:d6:19:a9:bd:28:ed:fd:f8:b5:65:4f:
28:ae:83:b2:0c:e7:8e:e6:cf:a7:87:3e:a9:03:d4:82:dd:8b:
68:b7:07:dc
1433 /
tcp
1825039904 | 2025-03-11T11:00:03.410246
MS-SQL NTLM Info:
OS: Windows 11
OS Build: 10.0.26100
Target Name: CLOUD-PC
NetBIOS Domain Name: CLOUD-PC
NetBIOS Computer Name: CLOUD-PC
DNS Domain Name: CLOUD-PC
FQDN: CLOUD-PC
1434 /
udp
-815806098 | 2025-03-11T14:45:56.218855
SQL Server Browser Service:
Instance #1:
Server Name: CLOUD-PC
Instance Name: SQLEXPRESS
Is Clustered: False
Version: 16.0.1000.6
TCP Port: 1433
Named Pipe: \\CLOUD-PC\pipe\MSSQL$SQLEXPRESS\sql\query
Version Name: MS-SQL Server 2022 RTM
1801 /
tcp
21210647 | 2025-03-11T10:22:57.970910
\x10Z\x0b\x00LIOR<\x02\x00\x00\xff\xff\xff\xff\x00\x00\x12\x00\x06U=Q6\xdf\xc7@\x96C\x17\\<\xe7l\xaac\xc5\xb4#s\x8f\xf3M\x9a<\xf6\xb48\xf0D\xce\x00\x00\x00\x00\x10\x00\x00\x00ZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZ
1009235027 | 2025-03-11T12:29:39.278829
HTTP/1.1 404 Not Found
X-Powered-By: Express
Content-Type: text/html; charset=utf-8
Content-Length: 9
ETag: W/"9-0gXL1ngzMqISxa6S1zx3F4wtLyg"
Date: Tue, 11 Mar 2025 12:29:38 GMT
Connection: keep-alive
Keep-Alive: timeout=5
3389 /
tcp
-1383808642 | 2025-03-11T16:36:46.685095
Remote Desktop Protocol
\x03\x00\x00\x13\x0e\xd0\x00\x00\x124\x00\x02/\x08\x00\x02\x00\x00\x00
Remote Desktop Protocol NTLM Info:
OS: Windows 11
OS Build: 10.0.26100
Target Name: CLOUD-PC
NetBIOS Domain Name: CLOUD-PC
NetBIOS Computer Name: CLOUD-PC
DNS Domain Name: CLOUD-PC
FQDN: CLOUD-PC
SSL Certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2f:eb:52:cc:ea:0a:02:9d:4d:e7:c8:e3:ae:42:b7:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=CLOUD-PC
Validity
Not Before: Feb 6 05:07:15 2025 GMT
Not After : Aug 8 05:07:15 2025 GMT
Subject: CN=CLOUD-PC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
Public-Key: (2048 bit)
Modulus:
00:b9:a3:ee:b3:7f:e2:28:91:e6:4d:0b:6d:21:c9:
8e:83:6b:1b:ce:1b:77:fb:3e:3b:1f:d8:25:9d:9f:
7f:ae:b7:ce:1b:aa:8c:e2:2e:a7:5f:26:60:47:ed:
5e:86:c9:f1:65:1b:85:a0:55:6b:81:2e:35:a5:41:
42:65:03:bc:49:05:2a:6f:bc:14:bd:5f:ff:12:b2:
5b:86:7c:ac:4d:e0:3a:d9:6b:a4:6c:43:c0:f4:8c:
93:ab:ca:0c:6b:43:35:26:86:d5:af:72:72:c6:4a:
14:d1:a4:e8:dc:75:1e:eb:fb:82:8b:22:ec:7b:f6:
6d:c2:ce:3f:3f:25:f3:74:8c:28:bd:b1:05:07:cb:
a4:f2:f8:41:b7:f7:05:ba:5c:b2:9f:86:ac:c4:01:
3a:ea:2a:11:c5:fe:a7:44:44:e1:e5:2b:85:d8:f2:
ab:ac:d4:56:00:8b:0c:b9:09:6b:d4:df:c1:af:e7:
9e:ec:d5:15:dc:d9:d4:77:7f:df:29:7b:d8:46:f0:
29:6e:ac:b0:af:78:b2:b1:59:72:59:e6:be:d2:bf:
f3:24:1f:cb:39:32:5a:c7:d7:25:bc:0e:34:4e:73:
8d:96:82:d0:33:fb:77:af:6b:d9:cc:3d:f3:78:f8:
26:58:0e:1a:f9:ca:b6:07:88:6b:32:e4:60:66:6c:
8e:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Extended Key Usage:
TLS Web Server Authentication
X509v3 Key Usage:
Key Encipherment, Data Encipherment
Signature Algorithm: sha256WithRSAEncryption
Signature Value:
1e:65:a7:8a:87:ca:06:a9:36:b8:a4:03:86:f8:ba:6e:93:19:
6c:10:6c:0e:07:aa:e3:1c:1b:b2:b4:a8:f5:e9:05:73:2a:5c:
f0:0e:c4:7a:f2:2e:3b:4f:3d:39:a3:b6:7b:cf:cf:c8:91:29:
44:ad:e5:e0:30:1a:ce:83:47:ad:47:4b:d4:22:42:ea:e0:4d:
66:1c:06:cc:62:7b:e6:89:fb:d7:35:b7:31:03:94:90:93:eb:
a8:e5:52:72:8a:13:2f:3c:8e:12:5d:f9:98:9a:12:ca:e4:ba:
f5:3a:b1:25:3b:a1:3d:dd:06:d2:17:ce:d6:68:94:8e:9e:ee:
b5:3a:de:4b:73:77:2e:9e:91:c7:13:9d:c1:e3:ee:85:ff:45:
37:71:9a:ea:84:43:77:c1:e7:f8:ee:cc:fe:f1:c4:fa:92:ce:
01:63:60:68:15:21:56:c4:0e:46:42:84:ab:0b:a8:4b:56:eb:
50:6f:79:51:1c:74:86:ed:8a:51:5a:85:20:d1:ed:8f:c4:b9:
95:d1:fc:aa:90:84:b6:ff:b0:42:fc:12:27:85:e3:bb:fd:af:
98:e9:9a:51:c9:65:98:dc:46:8b:97:3a:4d:bb:67:e3:a9:10:
a7:e7:4b:7a:34:24:4d:01:54:4c:5b:1d:e7:ec:9e:76:eb:05:
f6:64:d2:0a
3389 /
udp
-552001231 | 2025-02-15T13:21:18.903851
\x0b\x12\x7f\x15\x00@\x10\x05\xc30\xe9\xec\x04\xd0\x04\xd0\x00\x01\x00\x02\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00
4242 /
tcp
-620775845 | 2025-03-11T17:19:38.377074
DICOM Server Response
\x02\x00\x00\x00\x00\xb8\x00\x01\x00\x00ANY-SCP FINDSCU \x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x10\x00\x00\x151.2.840.10008.3.1.1.1!\x00\x00\x19\x01\x00\x03\x00@\x00\x00\x111.2.840.10008.1.2P\x00\x00:Q\x00\x00\x04\x00\x00@\x00R\x00\x00\x1b1.2.276.0.7230010.3.0.3.6.8U\x00\x00\x0fOFFIS_DCMTK_368
-74528676 | 2025-03-11T15:11:15.163921
HTTP/1.1 200 OK
Access-Control-Allow-Origin: *
Access-Control-Expose-Headers: filename
Access-Control-Allow-Credentials: true
content-length: 23
connection: keep-alive
content-type: text/plain; charset=utf-8
0 | 2025-02-24T11:51:07.555477
HTTP/1.1 401 Unauthorized
Connection: keep-alive
Keep-Alive: timeout=1
WWW-Authenticate: Basic realm="Orthanc Secure Area"
X-Content-Type-Options: nosniff
Content-Length: 0
-873735140 | 2025-03-11T13:21:29.798877
HTTP/1.1 200 OK
Content-Type: text/html
Last-Modified: Mon, 23 Dec 2024 18:39:58 GMT
Accept-Ranges: bytes
ETag: "366095116a55db1:0"
Server: Microsoft-IIS/10.0
X-Powered-By: ASP.NET
Date: Tue, 11 Mar 2025 13:21:28 GMT
Content-Length: 2646
