GeneralInformation

Hostnames	v2202406222629272888.bestsrv.de server.ksw-legal.de
Domains	bestsrv.de ksw-legal.de
Country	Austria
City	Vienna
Organization	ANX Holding GmbH
ISP	netcup GmbH
ASN	AS197540
Operating System	Windows

OpenPorts

53 80 88 123 135 389 443 445 593 636 3268 3391 5357

53 / tcp

-553166942 | 2025-03-17T05:12:57.812387

Recursion: enabled

80 / tcp

1489525118 | 2025-03-10T14:38:36.497084

Hashes

hash

1475256342

http.dom_hash

1386055181

http.html_hash

1489525118

http.server_hash

-761617706

http.title_hash

1009235027

Not Found

HTTP/1.1 404 Not Found
Content-Type: text/html; charset=us-ascii
Server: Microsoft-HTTPAPI/2.0
Date: Mon, 10 Mar 2025 14:38:36 GMT
Connection: close
Content-Length: 315

88 / udp

1185853813 | 2025-03-04T00:22:45.179360

Microsoft Windows Kerberos
Server Time: 2025-03-04 00:22:44Z

123 / udp

-1607218538 | 2025-03-21T22:48:09.674458

NTP
protocolversion: 3
stratum: 2
leap: 0
precision: -23
rootdelay: 0.0185546875
rootdisp: 0.0479888916016
refid: 3224725352
reftime: 3951585806.2
poll: 0

135 / tcp

-515705500 | 2025-03-22T00:34:20.403810

Microsoft RPC Endpoint Mapper

d95afe70-a6d5-4259-822e-2c84da1ddb0d
  version: v1.0
  protocol: [MS-RSP]: Remote Shutdown Protocol
  provider: wininit.exe
  ncacn_ip_tcp: 152.53.44.220:49664
  ncalrpc: WindowsShutdown
  ncacn_np: \\SERVER\PIPE\InitShutdown
  ncalrpc: WMsgKRpc0920E0

76f226c3-ec14-4325-8a99-6a46348418af
  version: v1.0
  provider: winlogon.exe
  ncalrpc: WindowsShutdown
  ncacn_np: \\SERVER\PIPE\InitShutdown
  ncalrpc: WMsgKRpc0920E0
  ncalrpc: WMsgKRpc097FE1

fc48cd89-98d6-4628-9839-86f7a3e4161a
  version: v1.0
  ncalrpc: dabrpc
  ncalrpc: csebpub
  ncalrpc: LRPC-e27ffebfc5554d55ff
  ncalrpc: LRPC-ca2a35cfa5a6d33e1a
  ncalrpc: LRPC-57ae89d76411ed8ae4
  ncalrpc: LRPC-6278fff1bda7c96c08
  ncalrpc: LRPC-d7f1cda1186d3a432d
  ncalrpc: OLE62DDC0ECBF4B6D76FCD81F1FFB44
  ncalrpc: LRPC-b57ee0442421c04d27
  ncalrpc: actkernel
  ncalrpc: umpo

d09bdeb5-6171-4a34-bfe2-06fa82652568
  version: v1.0
  ncalrpc: csebpub
  ncalrpc: LRPC-e27ffebfc5554d55ff
  ncalrpc: LRPC-ca2a35cfa5a6d33e1a
  ncalrpc: LRPC-57ae89d76411ed8ae4
  ncalrpc: LRPC-6278fff1bda7c96c08
  ncalrpc: LRPC-d7f1cda1186d3a432d
  ncalrpc: OLE62DDC0ECBF4B6D76FCD81F1FFB44
  ncalrpc: LRPC-b57ee0442421c04d27
  ncalrpc: actkernel
  ncalrpc: umpo
  ncalrpc: LRPC-ca2a35cfa5a6d33e1a
  ncalrpc: LRPC-57ae89d76411ed8ae4
  ncalrpc: LRPC-6278fff1bda7c96c08
  ncalrpc: LRPC-d7f1cda1186d3a432d
  ncalrpc: OLE62DDC0ECBF4B6D76FCD81F1FFB44
  ncalrpc: LRPC-b57ee0442421c04d27
  ncalrpc: actkernel
  ncalrpc: umpo
  ncalrpc: LRPC-57ae89d76411ed8ae4
  ncalrpc: LRPC-6278fff1bda7c96c08
  ncalrpc: LRPC-d7f1cda1186d3a432d
  ncalrpc: OLE62DDC0ECBF4B6D76FCD81F1FFB44
  ncalrpc: LRPC-b57ee0442421c04d27
  ncalrpc: actkernel
  ncalrpc: umpo
  ncalrpc: LRPC-3c9a420227d9b6b8c4
  ncalrpc: LRPC-4729da4bc89c87dca9
  ncalrpc: LRPC-3756e0566fd18519ce

697dcda9-3ba9-4eb2-9247-e11f1901b0d2
  version: v1.0
  ncalrpc: LRPC-e27ffebfc5554d55ff
  ncalrpc: LRPC-ca2a35cfa5a6d33e1a
  ncalrpc: LRPC-57ae89d76411ed8ae4
  ncalrpc: LRPC-6278fff1bda7c96c08
  ncalrpc: LRPC-d7f1cda1186d3a432d
  ncalrpc: OLE62DDC0ECBF4B6D76FCD81F1FFB44
  ncalrpc: LRPC-b57ee0442421c04d27
  ncalrpc: actkernel
  ncalrpc: umpo

9b008953-f195-4bf9-bde0-4471971e58ed
  version: v1.0
  ncalrpc: LRPC-ca2a35cfa5a6d33e1a
  ncalrpc: LRPC-57ae89d76411ed8ae4
  ncalrpc: LRPC-6278fff1bda7c96c08
  ncalrpc: LRPC-d7f1cda1186d3a432d
  ncalrpc: OLE62DDC0ECBF4B6D76FCD81F1FFB44
  ncalrpc: LRPC-b57ee0442421c04d27
  ncalrpc: actkernel
  ncalrpc: umpo

dd59071b-3215-4c59-8481-972edadc0f6a
  version: v1.0
  ncalrpc: umpo

0d47017b-b33b-46ad-9e18-fe96456c5078
  version: v1.0
  ncalrpc: umpo

95406f0b-b239-4318-91bb-cea3a46ff0dc
  version: v1.0
  ncalrpc: umpo

4ed8abcc-f1e2-438b-981f-bb0e8abc010c
  version: v1.0
  ncalrpc: umpo

0ff1f646-13bb-400a-ab50-9a78f2b7a85a
  version: v1.0
  ncalrpc: umpo

6982a06e-5fe2-46b1-b39c-a2c545bfa069
  version: v1.0
  ncalrpc: umpo

082a3471-31b6-422a-b931-a54401960c62
  version: v1.0
  ncalrpc: umpo

fae436b0-b864-4a87-9eda-298547cd82f2
  version: v1.0
  ncalrpc: umpo

e53d94ca-7464-4839-b044-09a2fb8b3ae5
  version: v1.0
  ncalrpc: umpo

178d84be-9291-4994-82c6-3f909aca5a03
  version: v1.0
  ncalrpc: umpo

4dace966-a243-4450-ae3f-9b7bcb5315b8
  version: v2.0
  ncalrpc: umpo

1832bcf6-cab8-41d4-85d2-c9410764f75a
  version: v1.0
  ncalrpc: umpo

c521facf-09a9-42c5-b155-72388595cbf0
  version: v0.0
  ncalrpc: umpo

2c7fd9ce-e706-4b40-b412-953107ef9bb0
  version: v0.0
  ncalrpc: umpo

88abcbc3-34ea-76ae-8215-767520655a23
  version: v0.0
  ncalrpc: LRPC-6278fff1bda7c96c08
  ncalrpc: LRPC-d7f1cda1186d3a432d
  ncalrpc: OLE62DDC0ECBF4B6D76FCD81F1FFB44
  ncalrpc: LRPC-b57ee0442421c04d27
  ncalrpc: actkernel
  ncalrpc: umpo

76c217bc-c8b4-4201-a745-373ad9032b1a
  version: v1.0
  ncalrpc: LRPC-6278fff1bda7c96c08
  ncalrpc: LRPC-d7f1cda1186d3a432d
  ncalrpc: OLE62DDC0ECBF4B6D76FCD81F1FFB44
  ncalrpc: LRPC-b57ee0442421c04d27
  ncalrpc: actkernel
  ncalrpc: umpo

55e6b932-1979-45d6-90c5-7f6270724112
  version: v1.0
  ncalrpc: LRPC-6278fff1bda7c96c08
  ncalrpc: LRPC-d7f1cda1186d3a432d
  ncalrpc: OLE62DDC0ECBF4B6D76FCD81F1FFB44
  ncalrpc: LRPC-b57ee0442421c04d27
  ncalrpc: actkernel
  ncalrpc: umpo

857fb1be-084f-4fb5-b59c-4b2c4be5f0cf
  version: v1.0
  ncalrpc: LRPC-d7f1cda1186d3a432d
  ncalrpc: OLE62DDC0ECBF4B6D76FCD81F1FFB44
  ncalrpc: LRPC-b57ee0442421c04d27
  ncalrpc: actkernel
  ncalrpc: umpo

b8cadbaf-e84b-46b9-84f2-6f71c03f9e55
  version: v1.0
  ncalrpc: LRPC-d7f1cda1186d3a432d
  ncalrpc: OLE62DDC0ECBF4B6D76FCD81F1FFB44
  ncalrpc: LRPC-b57ee0442421c04d27
  ncalrpc: actkernel
  ncalrpc: umpo

20c40295-8dba-48e6-aebf-3e78ef3bb144
  version: v1.0
  ncalrpc: LRPC-d7f1cda1186d3a432d
  ncalrpc: OLE62DDC0ECBF4B6D76FCD81F1FFB44
  ncalrpc: LRPC-b57ee0442421c04d27
  ncalrpc: actkernel
  ncalrpc: umpo

2513bcbe-6cd4-4348-855e-7efb3c336dd3
  version: v1.0
  ncalrpc: LRPC-d7f1cda1186d3a432d
  ncalrpc: OLE62DDC0ECBF4B6D76FCD81F1FFB44
  ncalrpc: LRPC-b57ee0442421c04d27
  ncalrpc: actkernel
  ncalrpc: umpo

0d3e2735-cea0-4ecc-a9e2-41a2d81aed4e
  version: v1.0
  ncalrpc: LRPC-b57ee0442421c04d27
  ncalrpc: actkernel
  ncalrpc: umpo

c605f9fb-f0a3-4e2a-a073-73560f8d9e3e
  version: v1.0
  ncalrpc: LRPC-b57ee0442421c04d27
  ncalrpc: actkernel
  ncalrpc: umpo

1b37ca91-76b1-4f5e-a3c7-2abfc61f2bb0
  version: v1.0
  ncalrpc: LRPC-b57ee0442421c04d27
  ncalrpc: actkernel
  ncalrpc: umpo

8bfc3be1-6def-4e2d-af74-7c47cd0ade4a
  version: v1.0
  ncalrpc: LRPC-b57ee0442421c04d27
  ncalrpc: actkernel
  ncalrpc: umpo

2d98a740-581d-41b9-aa0d-a88b9d5ce938
  version: v1.0
  ncalrpc: LRPC-b57ee0442421c04d27
  ncalrpc: actkernel
  ncalrpc: umpo

0361ae94-0316-4c6c-8ad8-c594375800e2
  version: v1.0
  ncalrpc: umpo

5824833b-3c1a-4ad2-bdfd-c31d19e23ed2
  version: v1.0
  ncalrpc: umpo

bdaa0970-413b-4a3e-9e5d-f6dc9d7e0760
  version: v1.0
  ncalrpc: umpo

3b338d89-6cfa-44b8-847e-531531bc9992
  version: v1.0
  ncalrpc: umpo

8782d3b9-ebbd-4644-a3d8-e8725381919b
  version: v1.0
  ncalrpc: umpo

085b0334-e454-4d91-9b8c-4134f9e793f3
  version: v1.0
  ncalrpc: umpo

4bec6bb8-b5c2-4b6f-b2c1-5da5cf92d0d9
  version: v1.0
  ncalrpc: umpo

c9ac6db5-82b7-4e55-ae8a-e464ed7b4277
  version: v1.0
  annotation: Impl friendly name
  provider: sysntfy.dll
  ncalrpc: LRPC-5e6d35ebd0a33bcde3
  ncalrpc: LRPC-0bbaafa30688d54b52
  ncalrpc: IUserProfile2
  ncalrpc: LRPC-8379ce70464ebc4f9b
  ncalrpc: senssvc
  ncalrpc: LRPC-4ee1b45428ab413660
  ncalrpc: LRPC-288d972310c2820478
  ncalrpc: OLE228EA9D87B780B2894F7582A76DC
  ncacn_ip_tcp: 152.53.44.220:49672
  ncalrpc: MicrosoftLaps_LRPC_0fb2f016-fe45-4a08-a7f9-a467f5e5fa0b
  ncalrpc: samss lpc
  ncalrpc: SidKey Local End Point
  ncalrpc: protected_storage
  ncalrpc: lsasspirpc
  ncalrpc: lsapolicylookup
  ncalrpc: LSA_EAS_ENDPOINT
  ncalrpc: lsacap
  ncalrpc: LSARPC_ENDPOINT
  ncalrpc: securityevent
  ncalrpc: audit
  ncacn_np: \\SERVER\pipe\lsass
  ncalrpc: LRPC-e18a94ee2b54839389

30adc50c-5cbc-46ce-9a0e-91914789e23c
  version: v1.0
  annotation: NRP server endpoint
  provider: nrpsrv.dll
  ncalrpc: LRPC-c98439a498b2aa799a

7ea70bcf-48af-4f6a-8968-6a440754d5fa
  version: v1.0
  annotation: NSI server endpoint
  provider: nsisvc.dll
  ncalrpc: LRPC-7a05b716baefdf684e

a500d4c6-0dd1-4543-bc0c-d5f93486eaf8
  version: v1.0
  ncalrpc: LRPC-0f492801b513a1fbcb
  ncalrpc: LRPC-3c9a420227d9b6b8c4

e40f7b57-7a25-4cd3-a135-7f7d3df9d16b
  version: v1.0
  annotation: Network Connection Broker server endpoint
  ncalrpc: LRPC-cf4047ed16a95b6491
  ncalrpc: OLE77616E532FC22E6341DA69F706B6
  ncalrpc: LRPC-042b4795bca67665bd
  ncalrpc: LRPC-4729da4bc89c87dca9

880fd55e-43b9-11e0-b1a8-cf4edfd72085
  version: v1.0
  annotation: KAPI Service endpoint
  ncalrpc: LRPC-cf4047ed16a95b6491
  ncalrpc: OLE77616E532FC22E6341DA69F706B6
  ncalrpc: LRPC-042b4795bca67665bd
  ncalrpc: LRPC-4729da4bc89c87dca9

5222821f-d5e2-4885-84f1-5f6185a0ec41
  version: v1.0
  annotation: Network Connection Broker server endpoint for NCB Reset module
  ncalrpc: LRPC-042b4795bca67665bd
  ncalrpc: LRPC-4729da4bc89c87dca9

3c4728c5-f0ab-448b-bda1-6ce01eb0a6d6
  version: v1.0
  annotation: DHCPv6 Client LRPC Endpoint
  provider: dhcpcsvc6.dll
  ncalrpc: dhcpcsvc6
  ncalrpc: dhcpcsvc

3c4728c5-f0ab-448b-bda1-6ce01eb0a6d5
  version: v1.0
  annotation: DHCP Client LRPC Endpoint
  provider: dhcpcsvc.dll
  ncalrpc: dhcpcsvc6
  ncalrpc: dhcpcsvc

f6beaff7-1e19-4fbb-9f8f-b89e2018337c
  version: v1.0
  annotation: Event log TCPIP
  protocol: [MS-EVEN6]: EventLog Remoting Protocol
  provider: wevtsvc.dll
  ncacn_ip_tcp: 152.53.44.220:49665
  ncacn_np: \\SERVER\pipe\eventlog
  ncalrpc: eventlog

89759fce-5a25-4086-8967-de12f39a60b5
  version: v1.0
  provider: tssdjet.dll
  ncacn_ip_tcp: 152.53.44.220:49666
  ncalrpc: LcRpc
  ncalrpc: OLECB628FDA41C1C5D08FC7DAD531B3

9b3195fe-d603-43d1-a0d5-9072d7cde122
  version: v1.0
  provider: tssdjet.dll
  ncacn_ip_tcp: 152.53.44.220:49666
  ncalrpc: LcRpc
  ncalrpc: OLECB628FDA41C1C5D08FC7DAD531B3

8833d1d0-965f-4216-b3e9-fbe58cad3100
  version: v1.0
  provider: SCardSvr.dll
  ncalrpc: LRPC-5880db8c8cebaf15af
  ncalrpc: LRPC-3756e0566fd18519ce

c6b5235a-e413-481d-9ac8-31681b1faaf5
  version: v1.256
  ncalrpc: LRPC-5880db8c8cebaf15af
  ncalrpc: LRPC-3756e0566fd18519ce

30b044a5-a225-43f0-b3a4-e060df91f9c1
  version: v1.0
  provider: certprop.dll
  ncalrpc: LRPC-348b0e359dbd78f99a

12e65dd8-887f-41ef-91bf-8d816c42c2e7
  version: v1.0
  annotation: Secure Desktop LRPC interface
  provider: winlogon.exe
  ncalrpc: WMsgKRpc097FE1

2eb08e3e-639f-4fba-97b1-14f878961076
  version: v1.0
  annotation: Group Policy RPC Interface
  provider: gpsvc.dll
  ncalrpc: LRPC-a3726efdc0ad194c99

3a9ef155-691d-4449-8d05-09ad57031823
  version: v1.0
  ncacn_ip_tcp: 152.53.44.220:49667
  ncalrpc: LRPC-e9174801ccc7122b0e
  ncalrpc: ubpmtaskhostchannel
  ncacn_np: \\SERVER\PIPE\atsvc
  ncalrpc: LRPC-f44c4c038ba3fe02c3

86d35949-83c9-4044-b424-db363231fd0c
  version: v1.0
  protocol: [MS-TSCH]: Task Scheduler Service Remoting Protocol
  provider: schedsvc.dll
  ncacn_ip_tcp: 152.53.44.220:49667
  ncalrpc: LRPC-e9174801ccc7122b0e
  ncalrpc: ubpmtaskhostchannel
  ncacn_np: \\SERVER\PIPE\atsvc
  ncalrpc: LRPC-f44c4c038ba3fe02c3

33d84484-3626-47ee-8c6f-e7e98b113be1
  version: v2.0
  ncalrpc: LRPC-e9174801ccc7122b0e
  ncalrpc: ubpmtaskhostchannel
  ncacn_np: \\SERVER\PIPE\atsvc
  ncalrpc: LRPC-f44c4c038ba3fe02c3

378e52b0-c0a9-11cf-822d-00aa0051e40f
  version: v1.0
  protocol: [MS-TSCH]: Task Scheduler Service Remoting Protocol
  provider: taskcomp.dll
  ncacn_np: \\SERVER\PIPE\atsvc
  ncalrpc: LRPC-f44c4c038ba3fe02c3

1ff70682-0a51-30e8-076d-740be8cee98b
  version: v1.0
  protocol: [MS-TSCH]: Task Scheduler Service Remoting Protocol
  provider: taskcomp.dll
  ncacn_np: \\SERVER\PIPE\atsvc
  ncalrpc: LRPC-f44c4c038ba3fe02c3

0a74ef1c-41a4-4e06-83ae-dc74fb1cdd53
  version: v1.0
  provider: schedsvc.dll
  ncalrpc: LRPC-f44c4c038ba3fe02c3

2fb92682-6599-42dc-ae13-bd2ca89bd11c
  version: v1.0
  annotation: Fw APIs
  provider: MPSSVC.dll
  ncalrpc: LRPC-5e6aea1829fe5ce6dd
  ncalrpc: LRPC-a87d0ecea71f0237d6
  ncalrpc: LRPC-6633cec1301d3c77cb
  ncalrpc: LRPC-31d5e685201c3e00b7

f47433c3-3e9d-4157-aad4-83aa1f5c2d4c
  version: v1.0
  annotation: Fw APIs
  ncalrpc: LRPC-a87d0ecea71f0237d6
  ncalrpc: LRPC-6633cec1301d3c77cb
  ncalrpc: LRPC-31d5e685201c3e00b7

7f9d11bf-7fb9-436b-a812-b2d50c5d4c03
  version: v1.0
  annotation: Fw APIs
  provider: MPSSVC.dll
  ncalrpc: LRPC-6633cec1301d3c77cb
  ncalrpc: LRPC-31d5e685201c3e00b7

dd490425-5325-4565-b774-7e27d6c09c24
  version: v1.0
  annotation: Base Firewall Engine API
  provider: BFE.DLL
  ncalrpc: LRPC-31d5e685201c3e00b7

3473dd4d-2e88-4006-9cba-22570909dd10
  version: v5.256
  annotation: WinHttp Auto-Proxy Service
  ncalrpc: cfaa8780-d944-4e81-a83b-7da955313e6d
  ncalrpc: LRPC-a08f59cdaa7f3a0cc2

c2d1b5dd-fa81-4460-9dd6-e7658b85454b
  version: v1.0
  ncalrpc: LRPC-fa79fff47fb5608547
  ncalrpc: OLE01DFDA78902DDC242A73E082DB4A

f44e62af-dab1-44c2-8013-049a9de417d6
  version: v1.0
  ncalrpc: LRPC-fa79fff47fb5608547
  ncalrpc: OLE01DFDA78902DDC242A73E082DB4A

7aeb6705-3ae6-471a-882d-f39c109edc12
  version: v1.0
  ncalrpc: LRPC-fa79fff47fb5608547
  ncalrpc: OLE01DFDA78902DDC242A73E082DB4A

e7f76134-9ef5-4949-a2d6-3368cc0988f3
  version: v1.0
  ncalrpc: LRPC-fa79fff47fb5608547
  ncalrpc: OLE01DFDA78902DDC242A73E082DB4A

b37f900a-eae4-4304-a2ab-12bb668c0188
  version: v1.0
  ncalrpc: LRPC-fa79fff47fb5608547
  ncalrpc: OLE01DFDA78902DDC242A73E082DB4A

abfb6ca3-0c5e-4734-9285-0aee72fe8d1c
  version: v1.0
  ncalrpc: LRPC-fa79fff47fb5608547
  ncalrpc: OLE01DFDA78902DDC242A73E082DB4A

c49a5a70-8a7f-4e70-ba16-1e8f1f193ef1
  version: v1.0
  annotation: Adh APIs
  ncalrpc: TeredoControl
  ncalrpc: TeredoDiagnostics
  ncalrpc: LRPC-b08a3a5b7bf71b4453

c36be077-e14b-4fe9-8abc-e856ef4f048b
  version: v1.0
  annotation: Proxy Manager client server endpoint
  ncalrpc: TeredoControl
  ncalrpc: TeredoDiagnostics
  ncalrpc: LRPC-b08a3a5b7bf71b4453

2e6035b2-e8f1-41a7-a044-656b439c4c34
  version: v1.0
  annotation: Proxy Manager provider server endpoint
  ncalrpc: TeredoControl
  ncalrpc: TeredoDiagnostics
  ncalrpc: LRPC-b08a3a5b7bf71b4453

552d076a-cb29-4e44-8b6a-d15e59e2c0af
  version: v1.0
  annotation: IP Transition Configuration endpoint
  provider: iphlpsvc.dll
  ncalrpc: LRPC-b08a3a5b7bf71b4453

0d3c7f20-1c8d-4654-a1b3-51563b298bda
  version: v1.0
  annotation: UserMgrCli
  ncalrpc: LRPC-6aebbc96e1f207e68e
  ncalrpc: OLE72C0B339EBAF72DBE26B7D5030BB

b18fbab6-56f8-4702-84e0-41053293a869
  version: v1.0
  annotation: UserMgrCli
  ncalrpc: LRPC-6aebbc96e1f207e68e
  ncalrpc: OLE72C0B339EBAF72DBE26B7D5030BB

266f33b4-c7c1-4bd1-8f52-ddb8f2214eb0
  version: v1.0
  annotation: Wlan Service LowPriv
  ncalrpc: LRPC-5e625fd40007a11844
  ncalrpc: LRPC-4ee1b45428ab413660

266f33b4-c7c1-4bd1-8f52-ddb8f2214ea9
  version: v1.0
  annotation: Wlan Service
  provider: wlansvc.dll
  ncalrpc: LRPC-5e625fd40007a11844
  ncalrpc: LRPC-4ee1b45428ab413660

25952c5d-7976-4aa1-a3cb-c35f7ae79d1b
  version: v1.256
  annotation: Wireless Diagnostics
  ncalrpc: LRPC-4ee1b45428ab413660

7f1343fe-50a9-4927-a778-0c5859517bac
  version: v1.0
  annotation: DfsDs service
  ncacn_np: \\SERVER\PIPE\wkssvc
  ncalrpc: LRPC-68188acaf2932811bc

eb081a0d-10ee-478a-a1dd-50995283e7a8
  version: v3.0
  annotation: Witness Client Test Interface
  ncalrpc: LRPC-68188acaf2932811bc

f2c9b409-c1c9-4100-8639-d8ab1486694a
  version: v1.0
  annotation: Witness Client Upcall Server
  ncalrpc: LRPC-68188acaf2932811bc

29770a8f-829b-4158-90a2-78cd488501f7
  version: v1.0
  ncacn_ip_tcp: 152.53.44.220:49671
  ncacn_np: \\SERVER\pipe\SessEnvPublicRpc
  ncalrpc: SessEnvPrivateRpc
  ncalrpc: OLE3136423E4DF3C401C63CB3C0ABC8
  ncalrpc: LRPC-288d972310c2820478

04eeb297-cbf4-466b-8a2a-bfd6a2f10bba
  version: v1.0
  annotation: EFSK RPC Interface
  provider: efssvc.dll
  ncacn_np: \\SERVER\pipe\efsrpc
  ncalrpc: LRPC-b8406e6af4db880825

df1941c5-fe89-4e79-bf10-463657acf44d
  version: v1.0
  annotation: EFS RPC Interface
  provider: efssvc.dll
  ncacn_np: \\SERVER\pipe\efsrpc
  ncalrpc: LRPC-b8406e6af4db880825

51a227ae-825b-41f2-b4a9-1ac9557a1018
  version: v1.0
  annotation: Ngc Pop Key Service
  ncacn_ip_tcp: 152.53.44.220:49688
  ncalrpc: NETLOGON_LRPC
  ncacn_np: \\SERVER\pipe\3f9777d7e6d95a17
  ncacn_ip_http: 152.53.44.220:49686
  ncalrpc: NTDS_LPC
  ncacn_ip_tcp: 152.53.44.220:49685
  ncalrpc: OLE228EA9D87B780B2894F7582A76DC
  ncacn_ip_tcp: 152.53.44.220:49672
  ncalrpc: MicrosoftLaps_LRPC_0fb2f016-fe45-4a08-a7f9-a467f5e5fa0b
  ncalrpc: samss lpc
  ncalrpc: SidKey Local End Point
  ncalrpc: protected_storage
  ncalrpc: lsasspirpc
  ncalrpc: lsapolicylookup
  ncalrpc: LSA_EAS_ENDPOINT
  ncalrpc: lsacap
  ncalrpc: LSARPC_ENDPOINT
  ncalrpc: securityevent
  ncalrpc: audit
  ncacn_np: \\SERVER\pipe\lsass

8fb74744-b2ff-4c00-be0d-9ef9a191fe1b
  version: v1.0
  annotation: Ngc Pop Key Service
  ncacn_ip_tcp: 152.53.44.220:49688
  ncalrpc: NETLOGON_LRPC
  ncacn_np: \\SERVER\pipe\3f9777d7e6d95a17
  ncacn_ip_http: 152.53.44.220:49686
  ncalrpc: NTDS_LPC
  ncacn_ip_tcp: 152.53.44.220:49685
  ncalrpc: OLE228EA9D87B780B2894F7582A76DC
  ncacn_ip_tcp: 152.53.44.220:49672
  ncalrpc: MicrosoftLaps_LRPC_0fb2f016-fe45-4a08-a7f9-a467f5e5fa0b
  ncalrpc: samss lpc
  ncalrpc: SidKey Local End Point
  ncalrpc: protected_storage
  ncalrpc: lsasspirpc
  ncalrpc: lsapolicylookup
  ncalrpc: LSA_EAS_ENDPOINT
  ncalrpc: lsacap
  ncalrpc: LSARPC_ENDPOINT
  ncalrpc: securityevent
  ncalrpc: audit
  ncacn_np: \\SERVER\pipe\lsass

b25a52bf-e5dd-4f4a-aea6-8ca7272a0e86
  version: v2.0
  annotation: KeyIso
  ncacn_ip_tcp: 152.53.44.220:49688
  ncalrpc: NETLOGON_LRPC
  ncacn_np: \\SERVER\pipe\3f9777d7e6d95a17
  ncacn_ip_http: 152.53.44.220:49686
  ncalrpc: NTDS_LPC
  ncacn_ip_tcp: 152.53.44.220:49685
  ncalrpc: OLE228EA9D87B780B2894F7582A76DC
  ncacn_ip_tcp: 152.53.44.220:49672
  ncalrpc: MicrosoftLaps_LRPC_0fb2f016-fe45-4a08-a7f9-a467f5e5fa0b
  ncalrpc: samss lpc
  ncalrpc: SidKey Local End Point
  ncalrpc: protected_storage
  ncalrpc: lsasspirpc
  ncalrpc: lsapolicylookup
  ncalrpc: LSA_EAS_ENDPOINT
  ncalrpc: lsacap
  ncalrpc: LSARPC_ENDPOINT
  ncalrpc: securityevent
  ncalrpc: audit
  ncacn_np: \\SERVER\pipe\lsass

12345678-1234-abcd-ef00-01234567cffb
  version: v1.0
  protocol: [MS-NRPC]: Netlogon Remote Protocol
  provider: netlogon.dll
  ncacn_ip_tcp: 152.53.44.220:49688
  ncalrpc: NETLOGON_LRPC
  ncacn_np: \\SERVER\pipe\3f9777d7e6d95a17
  ncacn_ip_http: 152.53.44.220:49686
  ncalrpc: NTDS_LPC
  ncacn_ip_tcp: 152.53.44.220:49685
  ncalrpc: OLE228EA9D87B780B2894F7582A76DC
  ncacn_ip_tcp: 152.53.44.220:49672
  ncalrpc: MicrosoftLaps_LRPC_0fb2f016-fe45-4a08-a7f9-a467f5e5fa0b
  ncalrpc: samss lpc
  ncalrpc: SidKey Local End Point
  ncalrpc: protected_storage
  ncalrpc: lsasspirpc
  ncalrpc: lsapolicylookup
  ncalrpc: LSA_EAS_ENDPOINT
  ncalrpc: lsacap
  ncalrpc: LSARPC_ENDPOINT
  ncalrpc: securityevent
  ncalrpc: audit
  ncacn_np: \\SERVER\pipe\lsass

0b1c2170-5732-4e0e-8cd3-d9b16f3b84d7
  version: v0.0
  annotation: RemoteAccessCheck
  protocol: [MS-RAA]: Remote Authorization API Protocol
  ncalrpc: NETLOGON_LRPC
  ncacn_np: \\SERVER\pipe\3f9777d7e6d95a17
  ncacn_ip_http: 152.53.44.220:49686
  ncalrpc: NTDS_LPC
  ncacn_ip_tcp: 152.53.44.220:49685
  ncalrpc: OLE228EA9D87B780B2894F7582A76DC
  ncacn_ip_tcp: 152.53.44.220:49672
  ncalrpc: MicrosoftLaps_LRPC_0fb2f016-fe45-4a08-a7f9-a467f5e5fa0b
  ncalrpc: samss lpc
  ncalrpc: SidKey Local End Point
  ncalrpc: protected_storage
  ncalrpc: lsasspirpc
  ncalrpc: lsapolicylookup
  ncalrpc: LSA_EAS_ENDPOINT
  ncalrpc: lsacap
  ncalrpc: LSARPC_ENDPOINT
  ncalrpc: securityevent
  ncalrpc: audit
  ncacn_np: \\SERVER\pipe\lsass
  ncalrpc: NETLOGON_LRPC
  ncacn_np: \\SERVER\pipe\3f9777d7e6d95a17
  ncacn_ip_http: 152.53.44.220:49686
  ncalrpc: NTDS_LPC
  ncacn_ip_tcp: 152.53.44.220:49685
  ncalrpc: OLE228EA9D87B780B2894F7582A76DC
  ncacn_ip_tcp: 152.53.44.220:49672
  ncalrpc: MicrosoftLaps_LRPC_0fb2f016-fe45-4a08-a7f9-a467f5e5fa0b
  ncalrpc: samss lpc
  ncalrpc: SidKey Local End Point
  ncalrpc: protected_storage
  ncalrpc: lsasspirpc
  ncalrpc: lsapolicylookup
  ncalrpc: LSA_EAS_ENDPOINT
  ncalrpc: lsacap
  ncalrpc: LSARPC_ENDPOINT
  ncalrpc: securityevent
  ncalrpc: audit
  ncacn_np: \\SERVER\pipe\lsass

12345778-1234-abcd-ef00-0123456789ab
  version: v0.0
  protocol: [MS-LSAT]: Local Security Authority (Translation Methods) Remote
  provider: lsasrv.dll
  ncacn_np: \\SERVER\pipe\3f9777d7e6d95a17
  ncacn_ip_http: 152.53.44.220:49686
  ncalrpc: NTDS_LPC
  ncacn_ip_tcp: 152.53.44.220:49685
  ncalrpc: OLE228EA9D87B780B2894F7582A76DC
  ncacn_ip_tcp: 152.53.44.220:49672
  ncalrpc: MicrosoftLaps_LRPC_0fb2f016-fe45-4a08-a7f9-a467f5e5fa0b
  ncalrpc: samss lpc
  ncalrpc: SidKey Local End Point
  ncalrpc: protected_storage
  ncalrpc: lsasspirpc
  ncalrpc: lsapolicylookup
  ncalrpc: LSA_EAS_ENDPOINT
  ncalrpc: lsacap
  ncalrpc: LSARPC_ENDPOINT
  ncalrpc: securityevent
  ncalrpc: audit
  ncacn_np: \\SERVER\pipe\lsass

e3514235-4b06-11d1-ab04-00c04fc2dcd2
  version: v4.0
  annotation: MS NT Directory DRS Interface
  protocol: [MS-DRSR]: Directory Replication Service (DRS) Remote Protocol
  provider: ntdsai.dll
  ncacn_np: \\SERVER\pipe\3f9777d7e6d95a17
  ncacn_ip_http: 152.53.44.220:49686
  ncalrpc: NTDS_LPC
  ncacn_ip_tcp: 152.53.44.220:49685
  ncalrpc: OLE228EA9D87B780B2894F7582A76DC
  ncacn_ip_tcp: 152.53.44.220:49672
  ncalrpc: MicrosoftLaps_LRPC_0fb2f016-fe45-4a08-a7f9-a467f5e5fa0b
  ncalrpc: samss lpc
  ncalrpc: SidKey Local End Point
  ncalrpc: protected_storage
  ncalrpc: lsasspirpc
  ncalrpc: lsapolicylookup
  ncalrpc: LSA_EAS_ENDPOINT
  ncalrpc: lsacap
  ncalrpc: LSARPC_ENDPOINT
  ncalrpc: securityevent
  ncalrpc: audit
  ncacn_np: \\SERVER\pipe\lsass

12345778-1234-abcd-ef00-0123456789ac
  version: v1.0
  protocol: [MS-SAMR]: Security Account Manager (SAM) Remote Protocol
  provider: samsrv.dll
  ncacn_ip_tcp: 152.53.44.220:49685
  ncalrpc: OLE228EA9D87B780B2894F7582A76DC
  ncacn_ip_tcp: 152.53.44.220:49672
  ncalrpc: MicrosoftLaps_LRPC_0fb2f016-fe45-4a08-a7f9-a467f5e5fa0b
  ncalrpc: samss lpc
  ncalrpc: SidKey Local End Point
  ncalrpc: protected_storage
  ncalrpc: lsasspirpc
  ncalrpc: lsapolicylookup
  ncalrpc: LSA_EAS_ENDPOINT
  ncalrpc: lsacap
  ncalrpc: LSARPC_ENDPOINT
  ncalrpc: securityevent
  ncalrpc: audit
  ncacn_np: \\SERVER\pipe\lsass

1a0d010f-1c33-432c-b0f5-8cf4e8053099
  version: v1.0
  annotation: IdSegSrv service
  ncalrpc: LRPC-60960fa326dea60bff

98716d03-89ac-44c7-bb8c-285824e51c4a
  version: v1.0
  annotation: XactSrv service
  provider: srvsvc.dll
  ncalrpc: LRPC-60960fa326dea60bff

76f03f96-cdfd-44fc-a22c-64950a001209
  version: v1.0
  protocol: [MS-PAR]: Print System Asynchronous Remote Protocol
  provider: spoolsv.exe
  ncacn_ip_tcp: 152.53.44.220:49689
  ncalrpc: LRPC-255647bc043e18c5bb

4a452661-8290-4b36-8fbe-7f4093a94978
  version: v1.0
  provider: spoolsv.exe
  ncacn_ip_tcp: 152.53.44.220:49689
  ncalrpc: LRPC-255647bc043e18c5bb

ae33069b-a2a8-46ee-a235-ddfd339be281
  version: v1.0
  protocol: [MS-PAN]: Print System Asynchronous Notification Protocol
  provider: spoolsv.exe
  ncacn_ip_tcp: 152.53.44.220:49689
  ncalrpc: LRPC-255647bc043e18c5bb

0b6edbfa-4a24-4fc6-8a23-942b1eca65d1
  version: v1.0
  protocol: [MS-PAN]: Print System Asynchronous Notification Protocol
  provider: spoolsv.exe
  ncacn_ip_tcp: 152.53.44.220:49689
  ncalrpc: LRPC-255647bc043e18c5bb

12345678-1234-abcd-ef00-0123456789ab
  version: v1.0
  protocol: [MS-RPRN]: Print System Remote Protocol
  provider: spoolsv.exe
  ncacn_ip_tcp: 152.53.44.220:49689
  ncalrpc: LRPC-255647bc043e18c5bb

df4df73a-c52d-4e3a-8003-8437fdf8302a
  version: v0.0
  annotation: WM_WindowManagerRPC\Server
  ncalrpc: LRPC-179587b28cbf34f781

b58aa02e-2884-4e97-8176-4ee06d794184
  version: v1.0
  provider: sysmain.dll
  ncalrpc: LRPC-e88f7cc76ab8609daf

a398e520-d59a-4bdd-aa7a-3c1e0303a511
  version: v1.0
  annotation: IKE/Authip API
  provider: IKEEXT.DLL
  ncalrpc: LRPC-68fc0d6ea05caeef8c

98cd761e-e77d-41c8-a3c0-0fb756d90ec2
  version: v1.0
  ncalrpc: LRPC-62aba14c8b6867a41f

d22895ef-aff4-42c5-a5b2-b14466d34ab4
  version: v1.0
  ncalrpc: LRPC-62aba14c8b6867a41f

e38f5360-8572-473e-b696-1b46873beeab
  version: v1.0
  ncalrpc: LRPC-62aba14c8b6867a41f

95095ec8-32ea-4eb0-a3e2-041f97b36168
  version: v1.0
  ncalrpc: LRPC-62aba14c8b6867a41f

fd8be72b-a9cd-4b2c-a9ca-4ded242fbe4d
  version: v1.0
  ncalrpc: LRPC-62aba14c8b6867a41f

4c9dbf19-d39e-4bb9-90ee-8f7179b20283
  version: v1.0
  ncalrpc: LRPC-62aba14c8b6867a41f

3d267954-eeb7-11d1-b94e-00c04fa3080d
  version: v1.0
  provider: lserver.dll
  ncacn_ip_tcp: 152.53.44.220:49725
  ncacn_np: \\SERVER\pipe\HydraLsPipe
  ncalrpc: LRPC-16de91335d7def2476

2f5f6521-cb55-1059-b446-00df0bce31db
  version: v1.0
  annotation: Unimodem LRPC Endpoint
  ncalrpc: unimdmsvc
  ncalrpc: tapsrvlpc
  ncacn_np: \\SERVER\pipe\tapsrv

650a7e26-eab8-5533-ce43-9c1dfce11511
  version: v1.0
  annotation: Vpn APIs
  ncalrpc: LRPC-116c33b122a932012e
  ncalrpc: VpnikeRpc
  ncalrpc: RasmanLrpc
  ncacn_np: \\SERVER\PIPE\ROUTER

c503f532-443a-4c69-8300-ccd1fbdb3839
  version: v2.0
  ncalrpc: LRPC-2a2de55df70b0ef19e
  ncalrpc: OLE246629C408D5A79DB86559F08421

32e36e84-4ba2-496c-ba85-fb450f325107
  version: v2.0
  ncalrpc: TSSessionDirectoryQueryApi
  ncacn_ip_tcp: 152.53.44.220:49793

c95fc993-f460-4763-a00d-bb3b9e5c7e2e
  version: v1.0
  ncacn_ip_tcp: 152.53.44.220:49793

aa177641-fc9b-41bd-80ff-f964a701596f
  version: v1.0
  provider: tssdis.exe
  ncacn_ip_tcp: 152.53.44.220:49793

ed96b012-c8ce-4f60-a682-35535b12ff75
  version: v2.0
  ncacn_ip_tcp: 152.53.44.220:5504
  ncalrpc: OLED727186421A3E4D61C0D9002A470

367abb81-9844-35f1-ad32-98f038001003
  version: v2.0
  protocol: [MS-SCMR]: Service Control Manager Remote Protocol
  provider: services.exe
  ncacn_ip_tcp: 152.53.44.220:49794

50abc2a4-574d-40b3-9d66-ee4fd5fba076
  version: v5.0
  protocol: [MS-DNSP]: Domain Name Service (DNS) Server Management
  provider: dns.exe
  ncacn_ip_tcp: 152.53.44.220:49810

906b0ce0-c70b-1067-b317-00dd010662da
  version: v1.0
  protocol: [MS-CMPO]: MSDTC Connection Manager:
  provider: msdtcprx.dll
  ncalrpc: LRPC-06669c33a8e7a2fa49
  ncalrpc: LRPC-06669c33a8e7a2fa49
  ncalrpc: LRPC-06669c33a8e7a2fa49
  ncalrpc: LRPC-a9b4e120c528c5efbc
  ncalrpc: OLE4EF02857246D1E7542FCB3335366

b1ef227e-dfa5-421e-82bb-67a6a129c496
  version: v0.0
  ncalrpc: LRPC-cb46c04a2a960cd81a
  ncalrpc: OLE172E70B2B04E9C66D8DC6AF3E043

0fc77b1a-95d8-4a2e-a0c0-cff54237462b
  version: v0.0
  ncalrpc: LRPC-cb46c04a2a960cd81a
  ncalrpc: OLE172E70B2B04E9C66D8DC6AF3E043

8ec21e98-b5ce-4916-a3d6-449fa428a007
  version: v0.0
  ncalrpc: LRPC-cb46c04a2a960cd81a
  ncalrpc: OLE172E70B2B04E9C66D8DC6AF3E043

7d814569-35b3-4850-bb32-83035fcebf6e
  version: v1.0
  annotation: IAS RPC server
  provider: ias.dll
  ncalrpc: LRPC-47c8ba3a69e5fae980
  ncalrpc: OLEC24EA2CEA29D14672A2967A75BA2

3357951c-a1d1-47db-a278-ab945d063d03
  version: v1.0
  provider: LBService.dll
  ncacn_ip_tcp: 152.53.44.220:49939

958f92d8-da20-467a-bbe3-65e7e9b4edcf
  version: v1.0
  annotation: TsProxyMgmt
  protocol: [MS-TSGU]: Terminal Services Gateway Server Management Interface
  ncalrpc: AAGMgmt
  ncacn_ip_http: 152.53.44.220:3388

44e265dd-7daf-42cd-8560-3cdb6e7a2729
  version: v1.768
  annotation: TsProxy
  protocol: [MS-TSGU]: Terminal Services Gateway Server Protocol
  ncalrpc: AAGMgmt
  ncacn_ip_http: 152.53.44.220:3388

897e2e5f-93f3-4376-9c9c-fd2277495c27
  version: v1.0
  annotation: Frs2 Service
  protocol: [MS-FRS2]: Distributed File System Replication Protocol
  provider: dfsrmig.exe
  ncacn_ip_tcp: 152.53.44.220:50035
  ncalrpc: OLE5FF576915BCE180D87D609E9AC8B

54b4c689-969a-476f-8dc2-990885e9f562
  version: v0.0
  ncalrpc: LRPC-d302cabf0868e59340

a111f1c5-5923-47c0-9a68-d0bafb577901
  version: v1.0
  annotation: NetSetup API
  ncalrpc: LRPC-a17d78a50d524c1a5d

a4b8d482-80ce-40d6-934d-b22a01a44fe7
  version: v1.0
  annotation: LicenseManager
  ncalrpc: LicenseServiceEndpoint

bf4dc912-e52f-4904-8ebe-9317c1bdd497
  version: v1.0
  ncalrpc: OLEEEB8D5AE8C00C55DAAD61465FD0E
  ncalrpc: LRPC-7a22c543765fa8526a

8c7daf44-b6dc-11d1-9a4c-0020af6e7c57
  version: v1.0
  annotation: Group Policy RPC Interface
  provider: appmgmts.dll
  ncalrpc: LRPC-ae1bdd359c6a0981b1

c100beac-d33a-4a4b-bf23-bbef4663d017
  version: v1.0
  annotation: wcncsvc.transport
  provider: wcncsvc.dll
  ncalrpc: wcncsvc.transport

c100beab-d33a-4a4b-bf23-bbef4663d017
  version: v1.0
  annotation: wcncsvc.wcnprpc
  provider: wcncsvc.dll
  ncalrpc: wcncsvc.transport
  ncalrpc: wcncsvc.wcnprpc

0767a036-0d22-48aa-ba69-b619480f38cb
  version: v1.0
  annotation: PcaSvc
  provider: pcasvc.dll
  ncalrpc: LRPC-15f5fa66c836191bff

0497b57d-2e66-424f-a0c6-157cd5d41700
  version: v1.0
  annotation: AppInfo
  ncalrpc: LRPC-ffe74a51c373c19873

201ef99a-7fa0-444c-9399-19ba84f12a1a
  version: v1.0
  annotation: AppInfo
  provider: appinfo.dll
  ncalrpc: LRPC-ffe74a51c373c19873

5f54ce7d-5b79-4175-8584-cb65313a0e98
  version: v1.0
  annotation: AppInfo
  provider: appinfo.dll
  ncalrpc: LRPC-ffe74a51c373c19873

fd7a0523-dc70-43dd-9b2e-9c5ed48225b1
  version: v1.0
  annotation: AppInfo
  provider: appinfo.dll
  ncalrpc: LRPC-ffe74a51c373c19873

58e604e8-9adb-4d2e-a464-3b0683fb1480
  version: v1.0
  annotation: AppInfo
  provider: appinfo.dll
  ncalrpc: LRPC-ffe74a51c373c19873

be7f785e-0e3a-4ab7-91de-7e46e443be29
  version: v0.0
  ncalrpc: LRPC-d302cabf0868e59340

389 / tcp

1499092900 | 2025-03-14T13:22:36.579005

LDAP:
  SupportedExtension:
    1.2.840.113556.1.4.1781
    1.2.840.113556.1.4.2212
    1.3.6.1.4.1.1466.101.119.1
    1.3.6.1.4.1.1466.20037
    1.3.6.1.4.1.4203.1.11.3
  SupportedSASLMechanisms:
    DIGEST-MD5
    EXTERNAL
    GSS-SPNEGO
    GSSAPI
  SupportedLDAPVersion:
    2
    3
  SupportedLDAPPolicies:
    InitRecvTimeout
    MaxBatchReturnMessages
    MaxConnIdleTime
    MaxConnections
    MaxDatagramRecv
    MaxDirSyncDuration
    MaxNotificationPerConn
    MaxPageSize
    MaxPercentDirSyncRequests
    MaxPoolThreads
    MaxQueryDuration
    MaxReceiveBuffer
    MaxResultSetSize
    MaxResultSetsPerConn
    MaxTempTableSize
    MaxValRange
    MaxValRangeTransitive
    MinResultSets
    SystemMemoryLimitPercent
    ThreadMemoryLimit
  SupportedControl:
    1.2.840.113556.1.4.1338
    1.2.840.113556.1.4.1339
    1.2.840.113556.1.4.1340
    1.2.840.113556.1.4.1341
    1.2.840.113556.1.4.1413
    1.2.840.113556.1.4.1504
    1.2.840.113556.1.4.1852
    1.2.840.113556.1.4.1907
    1.2.840.113556.1.4.1948
    1.2.840.113556.1.4.1974
    1.2.840.113556.1.4.2026
    1.2.840.113556.1.4.2064
    1.2.840.113556.1.4.2065
    1.2.840.113556.1.4.2066
    1.2.840.113556.1.4.2090
    1.2.840.113556.1.4.2204
    1.2.840.113556.1.4.2205
    1.2.840.113556.1.4.2206
    1.2.840.113556.1.4.2211
    1.2.840.113556.1.4.2239
    1.2.840.113556.1.4.2255
    1.2.840.113556.1.4.2256
    1.2.840.113556.1.4.2309
    1.2.840.113556.1.4.2330
    1.2.840.113556.1.4.2354
    1.2.840.113556.1.4.319
    1.2.840.113556.1.4.417
    1.2.840.113556.1.4.473
    1.2.840.113556.1.4.474
    1.2.840.113556.1.4.521
    1.2.840.113556.1.4.528
    1.2.840.113556.1.4.529
    1.2.840.113556.1.4.619
    1.2.840.113556.1.4.801
    1.2.840.113556.1.4.802
    1.2.840.113556.1.4.805
    1.2.840.113556.1.4.841
    1.2.840.113556.1.4.970
    2.16.840.1.113730.3.4.10
    2.16.840.1.113730.3.4.9
  SupportedCapabilities:
    1.2.840.113556.1.4.1670
    1.2.840.113556.1.4.1791
    1.2.840.113556.1.4.1935
    1.2.840.113556.1.4.2080
    1.2.840.113556.1.4.2237
    1.2.840.113556.1.4.800
  SubschemaSubentry: CN=Aggregate,CN=Schema,CN=Configuration,DC=ksw-legal,DC=de
  ServerName: CN=SERVER,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=ksw-legal,DC=de
  SchemaNamingContext: CN=Schema,CN=Configuration,DC=ksw-legal,DC=de
  RootDomainNamingContext: DC=ksw-legal,DC=de
  NamingContexts:
    CN=Configuration,DC=ksw-legal,DC=de
    CN=Schema,CN=Configuration,DC=ksw-legal,DC=de
    DC=DomainDnsZones,DC=ksw-legal,DC=de
    DC=ForestDnsZones,DC=ksw-legal,DC=de
    DC=ksw-legal,DC=de
  LdapServiceName: ksw-legal.de:server$@KSW-LEGAL.DE
  IsSynchronized: TRUE
  IsGlobalCatalogReady: TRUE
  HighestCommittedUSN: 92696349
  ForestFunctionality: 7
  DsServiceName: CN=NTDS Settings,CN=SERVER,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=ksw-legal,DC=de
  DomainFunctionality: 7
  DnsHostName: server.ksw-legal.de
  DefaultNamingContext: DC=ksw-legal,DC=de
  CurrentTime: 20250314132236.0Z
  ConfigurationNamingContext: CN=Configuration,DC=ksw-legal,DC=de

389 / udp

-1957052212 | 2025-03-04T21:21:06.736891

0\x84\x00\x00\x0b\x96\x02\x01\x07d\x84\x00\x00\x0b\x8d\x04\x000\x84\x00\x00\x0b\x850\x84\x00\x00\x00\x1e\x04\x13domainFunctionality1\x84\x00\x00\x00\x03\x04\x0170\x84\x00\x00\x00\x1e\x04\x13forestFunctionality1\x84\x00\x00\x00\x03\x04\x0170\x84\x00\x00\x00(\x04\x1ddomainControllerFunctionality1\x84\x00\x00\x00\x03\x04\x0170\x84\x00\x00\x003\x04\x17rootDomainNamingContext1\x84\x00\x00\x00\x14\x04\x12DC=ksw-legal,DC=de0\x84\x00\x00\x00:\x04\x0fldapServiceName1\x84\x00\x00\x00#\x04!ksw-legal.de:server$@KSW-LEGAL.DE0\x84\x00\x00\x00"\x04\x14isGlobalCatalogReady1\x84\x00\x00\x00\x06\x04\x04TRUE0\x84\x00\x00\x00I\x04\x17supportedSASLMechanisms1\x84\x00\x00\x00*\x04\x06GSSAPI\x04\nGSS-SPNEGO\x04\x08EXTERNAL\x04\nDIGEST-MD50\x84\x00\x00\x00"\x04\x14supportedLDAPVersion1\x84\x00\x00\x00\x06\x04\x013\x04\x0120\x84\x00\x00\x01\x9a\x04\x15supportedLDAPPolicies1\x84\x00\x00\x01}\x04\x0eMaxPoolThreads\x04\x19MaxPercentDirSyncRequests\x04\x0fMaxDatagramRecv\x04\x10MaxReceiveBuffer\x04\x0fInitRecvTimeout\x04\x0eMaxConnections\x04\x0fMaxConnIdleTime\x04\x0bMaxPageSize\x04\x16MaxBatchReturnMessages\x04\x10MaxQueryDuration\x04\x12MaxDirSyncDuration\x04\x10MaxTempTableSize\x04\x10MaxResultSetSize\x04\rMinResultSets\x04\x14MaxResultSetsPerConn\x04\x16MaxNotificationPerConn\x04\x0bMaxValRange\x04\x15MaxValRangeTransitive\x04\x11ThreadMemoryLimit\x04\x18SystemMemoryLimitPercent0\x84\x00\x00\x03\xf4\x04\x10supportedControl1\x84\x00\x00\x03\xdc\x04\x161.2.840.113556.1.4.319\x04\x161.2.840.113556.1.4.801\x04\x161.2.840.113556.1.4.473\x04\x161.2.840.113556.1.4.528\x04\x161.2.840.113556.1.4.417\x04\x161.2.840.113556.1.4.619\x04\x161.2.840.113556.1.4.841\x04\x161.2.840.113556.1.4.529\x04\x161.2.840.113556.1.4.805\x04\x161.2.840.113556.1.4.521\x04\x161.2.840.113556.1.4.970\x04\x171.2.840.113556.1.4.1338\x04\x161.2.840.113556.1.4.474\x04\x171.2.840.113556.1.4.1339\x04\x171.2.840.113556.1.4.1340\x04\x171.2.840.113556.1.4.1413\x04\x172.16.840.1.113730.3.4.9\x04\x182.16.840.1.113730.3.4.10\x04\x171.2.840.113556.1.4.1504\x04\x171.2.840.113556.1.4.1852\x04\x161.2.840.113556.1.4.802\x04\x171.2.840.113556.1.4.1907\x04\x171.2.840.113556.1.4.1948\x04\x171.2.840.113556.1.4.1974\x04\x171.2.840.113556.@\x06\x00\x00\xben\xc7g\xe8\xbcQ\n\xea\x05\x00\x00\xea\x05\x00\x00\x01\x00\x00 V\x00d\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x11\x00\x08\x00\x03\x00\x00\x00\x01\x00\x00\x06\xa06\x9f\xdeq&\xcd\x8a\xa0\x12$n\x96\x16L\xf8\xa06\x9f\xdeq&\x08\x00E($n\x96\x16L\xf8\xa06\x9f\xdeq&\x08\x00E(\x05\xdc\xd4; \xb9p\x11\xc7\x85\x985,\xdc\xcfZ\xf4\x021.4.1341\x04\x171.2.840.113556.1.4.2026\x04\x171.2.840.113556.1.4.2064\x04\x171.2.840.113556.1.4.2065\x04\x171.2.840.113556.1.4.2066\x04\x171.2.840.113556.1.4.2090\x04\x171.2.840.113556.1.4.2205\x04\x171.2.840.113556.1.4.2204\x04\x171.2.840.113556.1.4.2206\x04\x171.2.840.113556.1.4.2211\x04\x171.2.840.113556.1.4.2239\x04\x171.2.840.113556.1.4.2255\x04\x171.2.840.113556.1.4.2256\x04\x171.2.840.113556.1.4.2309\x04\x171.2.840.113556.1.4.2330\x04\x171.2.840.113556.1.4.23540\x84\x00\x00\x00\xb2\x04\x15supportedCapabilities1\x84\x00\x00\x00\x95\x04\x161.2.840.113556.1.4.800\x04\x171.2.840.113556.1.4.1670\x04\x171.2.840.113556.1.4.1791\x04\x171.2.840.113556.1.4.1935\x04\x171.2.840.113556.1.4.2080\x04\x171.2.840.113556.1.4.22370\x84\x00\x00\x00U\x04\x11subschemaSubentry1\x84\x00\x00\x00<\x04:CN=Aggregate,CN=Schema,CN=Configuration,DC=ksw-legal,DC=de0\x84\x00\x00\x00p\x04\nserverName1\x84\x00\x00\x00^\x04\\CN=SERVER,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=ksw-legal,DC=de0\x84\x00\x00\x00J\x04\x13schemaNamingContext1\x84\x00\x00\x00/\x04-CN=Schema,CN=Configuration,DC=ksw-legal,DC=de0\x84\x00\x00\x00\xca\x04\x0enamingContexts1\x84\x00\x00\x00\xb4\x04\x12DC=ksw-legal,DC=de\x04#CN=Configuration,DC=ksw-legal,DC=de\x04-CN=Schema,CN=Configuration,DC=ksw-legal,DC=de\x04$DC=DomainDnsZones,DC=ksw-legal,DC=de\x04$DC=ForestDnsZones,DC=ksw-legal,DC=de0\x84\x00\x00\x00\x1c\x04\x0eisSynchronized1\x84\x00\x00\x00\x06\x04\x04TRUE0\x84\x00\x00\x00%\x04\x13highestCommittedUSN1\x84\x00\x00\x00\n\x04\x08871270230\x84\x00\x00\x00\x84\x04\rdsServiceName1\x84\x00\x00\x00o\x04mCN=NTDS Settings,CN=SERVER,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=ksw-legal,DC=de0\x84\x00\x00\x00(\x04\x0bdnsHostName1\x84\x00\x00\x00\x15\x04\x13server.ksw-legal.de0\x84\x00\x00\x000\x04\x14defaultNamingContext1\x84\x00\x00\x00\x14\x04\x12DC=ksw-legal,DC=de0\x84\x00\x00\x00&\x04\x0bcurrentTime1\x84\x00\x00

443 / tcp

703707298 | 2025-03-22T01:41:04.372936

Hashes

hash

-1173018417

http.dom_hash

-1389411298

http.html_hash

703707298

http.server_hash

608434861

http.title_hash

-1871926727

IIS Windows Server

HTTP/1.1 200 OK
Content-Type: text/html
Last-Modified: Thu, 25 Apr 2024 20:23:49 GMT
Accept-Ranges: bytes
ETag: "cbc53c7b4e97da1:0"
Server: Microsoft-IIS/10.0
X-Powered-By: ASP.NET
Date: Sat, 22 Mar 2025 01:41:04 GMT
Content-Length: 703

SSL Certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            12:59:3f:c3:44:ff:d9:9a:46:99:88:2d:01:59:f6:2e
        Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=server.ksw-legal.de
        Validity
            Not Before: Apr 26 12:01:15 2024 GMT
            Not After : Apr 26 12:21:15 2025 GMT
        Subject: CN=server.ksw-legal.de
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                Public-Key: (2048 bit)
                Modulus:
                    00:d4:b7:20:cc:a9:eb:59:b8:a1:12:a8:23:41:28:
                    81:c1:01:88:c3:e2:86:cc:5c:6f:2f:6c:78:88:eb:
                    2d:1a:f8:22:72:29:4a:5a:bd:3d:47:82:97:34:5f:
                    20:8f:39:98:17:55:9a:0d:bd:b0:97:dd:5b:e7:c8:
                    a2:6d:ed:37:b9:61:80:0e:2d:03:be:1a:1a:3f:c6:
                    fc:57:cb:66:a3:d6:ac:bd:54:2b:fa:97:42:c9:f2:
                    a3:90:22:04:d5:d1:f9:6d:48:19:7d:1d:ad:db:64:
                    b7:a3:96:3b:8e:04:b5:36:d4:78:88:97:9e:fd:2c:
                    0f:52:ec:0a:f8:4f:ae:21:fd:6c:fe:ce:68:18:22:
                    74:9f:74:05:84:42:b6:20:1c:c1:0c:76:96:a5:84:
                    ae:e2:31:b7:5d:05:9c:e7:82:b9:3c:0e:78:d6:70:
                    df:22:89:27:75:0b:ff:a3:b3:d1:95:07:20:b3:a4:
                    9f:2b:b3:f4:f9:88:5f:6a:93:14:c9:98:6c:fe:61:
                    4e:31:51:ad:a0:f2:04:85:1e:22:73:43:2a:91:51:
                    39:cf:78:ea:a2:72:0b:74:0c:e6:43:05:5a:db:95:
                    95:5b:cf:db:ef:bf:58:2f:5a:9b:52:e9:df:1f:bb:
                    2d:12:dc:57:b2:1b:a3:a6:fb:57:18:bb:67:38:ac:
                    00:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Key Usage: critical
                Digital Signature, Key Encipherment
            X509v3 Extended Key Usage: 
                TLS Web Client Authentication, TLS Web Server Authentication
            X509v3 Subject Alternative Name: 
                DNS:server.ksw-legal.de
            X509v3 Subject Key Identifier: 
                7B:5A:68:B9:CC:E0:AC:7B:F0:B0:9D:BF:55:72:08:D8:85:22:E2:8C
    Signature Algorithm: sha256WithRSAEncryption
    Signature Value:
        7b:d0:7a:8d:93:78:0c:96:2a:b3:a9:37:2a:63:b7:58:c4:94:
        5a:2b:4e:f5:da:3a:92:a7:33:e1:32:0d:6a:a3:95:8c:0d:35:
        73:f9:ef:43:a0:93:31:c1:af:2f:10:7a:a5:ae:36:2f:35:f7:
        d0:b1:ed:b0:21:8c:97:19:51:7d:33:c8:86:f6:4a:43:81:9b:
        1e:f7:25:be:06:bd:de:e8:92:9d:2c:01:f1:97:31:fe:82:09:
        9b:cc:55:5e:50:36:b8:d0:92:95:f6:56:34:3a:3a:bb:99:d0:
        5d:eb:db:c5:3d:ad:8a:d3:e3:5d:c2:4f:94:2c:f9:1e:80:ea:
        c5:8c:f0:f4:6b:32:9d:e5:d8:8f:29:66:f5:0a:49:70:03:b0:
        c8:9a:5c:a6:53:41:63:be:8f:6a:ec:35:32:5c:5e:7b:ba:07:
        f4:ab:6b:40:48:c9:dd:4f:24:b7:bb:db:38:d5:f6:ae:c1:f1:
        37:09:17:9f:a6:0e:fa:86:1e:6c:e5:d4:aa:08:d0:10:39:2b:
        a4:0e:63:d1:4b:48:3f:4d:1d:1a:c7:8e:36:39:fd:4c:55:62:
        01:f1:e5:86:ab:b1:60:3f:77:ad:82:7e:4d:5e:ac:8c:4a:b6:
        59:2c:97:cc:20:85:b3:b3:ab:ee:44:cc:e3:8e:e3:0e:6d:5f:
        98:8f:4b:2b

445 / tcp

1166352837 | 2025-03-15T18:20:17.196658

SMB Status:
  Authentication: enabled
  SMB Version: 1
  OS: Windows Server 2019 Standard 17763
  Software: Windows Server 2019 Standard 6.3
  Capabilities: dfs, extended-security, infolevel-passthru, large-files, large-readx, large-writex, level2-oplocks, lock-and-read, lwio, nt-find, nt-smb, nt-status, rpc-remote-api, unicode

593 / tcp

-348257795 | 2025-03-07T17:04:50.739131

ncacn_http/1.0

Microsoft RPC Endpoint Mapper over HTTP

d95afe70-a6d5-4259-822e-2c84da1ddb0d
  version: v1.0
  protocol: [MS-RSP]: Remote Shutdown Protocol
  provider: wininit.exe
  ncacn_ip_tcp: 152.53.44.220:49664
  ncalrpc: WindowsShutdown
  ncacn_np: \\SERVER\PIPE\InitShutdown
  ncalrpc: WMsgKRpc098AB0

76f226c3-ec14-4325-8a99-6a46348418af
  version: v1.0
  provider: winlogon.exe
  ncalrpc: WindowsShutdown
  ncacn_np: \\SERVER\PIPE\InitShutdown
  ncalrpc: WMsgKRpc098AB0
  ncalrpc: WMsgKRpc09BE31

fc48cd89-98d6-4628-9839-86f7a3e4161a
  version: v1.0
  ncalrpc: dabrpc
  ncalrpc: csebpub
  ncalrpc: LRPC-7816366880da1b4ec5
  ncalrpc: LRPC-e6b1dfa02f49da601f
  ncalrpc: LRPC-1bdd863e60227f9014
  ncalrpc: LRPC-39aa6cc313c34f85ba
  ncalrpc: LRPC-d083f8ef218898ce87
  ncalrpc: OLE5E9A4F7A7FD953ADA09C25E7AC5B
  ncalrpc: LRPC-1a5fcba168673d6065
  ncalrpc: actkernel
  ncalrpc: umpo

d09bdeb5-6171-4a34-bfe2-06fa82652568
  version: v1.0
  ncalrpc: csebpub
  ncalrpc: LRPC-7816366880da1b4ec5
  ncalrpc: LRPC-e6b1dfa02f49da601f
  ncalrpc: LRPC-1bdd863e60227f9014
  ncalrpc: LRPC-39aa6cc313c34f85ba
  ncalrpc: LRPC-d083f8ef218898ce87
  ncalrpc: OLE5E9A4F7A7FD953ADA09C25E7AC5B
  ncalrpc: LRPC-1a5fcba168673d6065
  ncalrpc: actkernel
  ncalrpc: umpo
  ncalrpc: LRPC-e6b1dfa02f49da601f
  ncalrpc: LRPC-1bdd863e60227f9014
  ncalrpc: LRPC-39aa6cc313c34f85ba
  ncalrpc: LRPC-d083f8ef218898ce87
  ncalrpc: OLE5E9A4F7A7FD953ADA09C25E7AC5B
  ncalrpc: LRPC-1a5fcba168673d6065
  ncalrpc: actkernel
  ncalrpc: umpo
  ncalrpc: LRPC-1bdd863e60227f9014
  ncalrpc: LRPC-39aa6cc313c34f85ba
  ncalrpc: LRPC-d083f8ef218898ce87
  ncalrpc: OLE5E9A4F7A7FD953ADA09C25E7AC5B
  ncalrpc: LRPC-1a5fcba168673d6065
  ncalrpc: actkernel
  ncalrpc: umpo
  ncalrpc: LRPC-639dd2a9ce51bbcafa
  ncalrpc: LRPC-e43fbefbe9371e4604
  ncalrpc: LRPC-5a5c79b6371cc758eb

697dcda9-3ba9-4eb2-9247-e11f1901b0d2
  version: v1.0
  ncalrpc: LRPC-7816366880da1b4ec5
  ncalrpc: LRPC-e6b1dfa02f49da601f
  ncalrpc: LRPC-1bdd863e60227f9014
  ncalrpc: LRPC-39aa6cc313c34f85ba
  ncalrpc: LRPC-d083f8ef218898ce87
  ncalrpc: OLE5E9A4F7A7FD953ADA09C25E7AC5B
  ncalrpc: LRPC-1a5fcba168673d6065
  ncalrpc: actkernel
  ncalrpc: umpo

9b008953-f195-4bf9-bde0-4471971e58ed
  version: v1.0
  ncalrpc: LRPC-e6b1dfa02f49da601f
  ncalrpc: LRPC-1bdd863e60227f9014
  ncalrpc: LRPC-39aa6cc313c34f85ba
  ncalrpc: LRPC-d083f8ef218898ce87
  ncalrpc: OLE5E9A4F7A7FD953ADA09C25E7AC5B
  ncalrpc: LRPC-1a5fcba168673d6065
  ncalrpc: actkernel
  ncalrpc: umpo

dd59071b-3215-4c59-8481-972edadc0f6a
  version: v1.0
  ncalrpc: umpo

0d47017b-b33b-46ad-9e18-fe96456c5078
  version: v1.0
  ncalrpc: umpo

95406f0b-b239-4318-91bb-cea3a46ff0dc
  version: v1.0
  ncalrpc: umpo

4ed8abcc-f1e2-438b-981f-bb0e8abc010c
  version: v1.0
  ncalrpc: umpo

0ff1f646-13bb-400a-ab50-9a78f2b7a85a
  version: v1.0
  ncalrpc: umpo

6982a06e-5fe2-46b1-b39c-a2c545bfa069
  version: v1.0
  ncalrpc: umpo

082a3471-31b6-422a-b931-a54401960c62
  version: v1.0
  ncalrpc: umpo

fae436b0-b864-4a87-9eda-298547cd82f2
  version: v1.0
  ncalrpc: umpo

e53d94ca-7464-4839-b044-09a2fb8b3ae5
  version: v1.0
  ncalrpc: umpo

178d84be-9291-4994-82c6-3f909aca5a03
  version: v1.0
  ncalrpc: umpo

4dace966-a243-4450-ae3f-9b7bcb5315b8
  version: v2.0
  ncalrpc: umpo

1832bcf6-cab8-41d4-85d2-c9410764f75a
  version: v1.0
  ncalrpc: umpo

c521facf-09a9-42c5-b155-72388595cbf0
  version: v0.0
  ncalrpc: umpo

2c7fd9ce-e706-4b40-b412-953107ef9bb0
  version: v0.0
  ncalrpc: umpo

88abcbc3-34ea-76ae-8215-767520655a23
  version: v0.0
  ncalrpc: LRPC-39aa6cc313c34f85ba
  ncalrpc: LRPC-d083f8ef218898ce87
  ncalrpc: OLE5E9A4F7A7FD953ADA09C25E7AC5B
  ncalrpc: LRPC-1a5fcba168673d6065
  ncalrpc: actkernel
  ncalrpc: umpo

76c217bc-c8b4-4201-a745-373ad9032b1a
  version: v1.0
  ncalrpc: LRPC-39aa6cc313c34f85ba
  ncalrpc: LRPC-d083f8ef218898ce87
  ncalrpc: OLE5E9A4F7A7FD953ADA09C25E7AC5B
  ncalrpc: LRPC-1a5fcba168673d6065
  ncalrpc: actkernel
  ncalrpc: umpo

55e6b932-1979-45d6-90c5-7f6270724112
  version: v1.0
  ncalrpc: LRPC-39aa6cc313c34f85ba
  ncalrpc: LRPC-d083f8ef218898ce87
  ncalrpc: OLE5E9A4F7A7FD953ADA09C25E7AC5B
  ncalrpc: LRPC-1a5fcba168673d6065
  ncalrpc: actkernel
  ncalrpc: umpo

857fb1be-084f-4fb5-b59c-4b2c4be5f0cf
  version: v1.0
  ncalrpc: LRPC-d083f8ef218898ce87
  ncalrpc: OLE5E9A4F7A7FD953ADA09C25E7AC5B
  ncalrpc: LRPC-1a5fcba168673d6065
  ncalrpc: actkernel
  ncalrpc: umpo

b8cadbaf-e84b-46b9-84f2-6f71c03f9e55
  version: v1.0
  ncalrpc: LRPC-d083f8ef218898ce87
  ncalrpc: OLE5E9A4F7A7FD953ADA09C25E7AC5B
  ncalrpc: LRPC-1a5fcba168673d6065
  ncalrpc: actkernel
  ncalrpc: umpo

20c40295-8dba-48e6-aebf-3e78ef3bb144
  version: v1.0
  ncalrpc: LRPC-d083f8ef218898ce87
  ncalrpc: OLE5E9A4F7A7FD953ADA09C25E7AC5B
  ncalrpc: LRPC-1a5fcba168673d6065
  ncalrpc: actkernel
  ncalrpc: umpo

2513bcbe-6cd4-4348-855e-7efb3c336dd3
  version: v1.0
  ncalrpc: LRPC-d083f8ef218898ce87
  ncalrpc: OLE5E9A4F7A7FD953ADA09C25E7AC5B
  ncalrpc: LRPC-1a5fcba168673d6065
  ncalrpc: actkernel
  ncalrpc: umpo

0d3e2735-cea0-4ecc-a9e2-41a2d81aed4e
  version: v1.0
  ncalrpc: LRPC-1a5fcba168673d6065
  ncalrpc: actkernel
  ncalrpc: umpo

c605f9fb-f0a3-4e2a-a073-73560f8d9e3e
  version: v1.0
  ncalrpc: LRPC-1a5fcba168673d6065
  ncalrpc: actkernel
  ncalrpc: umpo

1b37ca91-76b1-4f5e-a3c7-2abfc61f2bb0
  version: v1.0
  ncalrpc: LRPC-1a5fcba168673d6065
  ncalrpc: actkernel
  ncalrpc: umpo

8bfc3be1-6def-4e2d-af74-7c47cd0ade4a
  version: v1.0
  ncalrpc: LRPC-1a5fcba168673d6065
  ncalrpc: actkernel
  ncalrpc: umpo

2d98a740-581d-41b9-aa0d-a88b9d5ce938
  version: v1.0
  ncalrpc: LRPC-1a5fcba168673d6065
  ncalrpc: actkernel
  ncalrpc: umpo

0361ae94-0316-4c6c-8ad8-c594375800e2
  version: v1.0
  ncalrpc: umpo

5824833b-3c1a-4ad2-bdfd-c31d19e23ed2
  version: v1.0
  ncalrpc: umpo

bdaa0970-413b-4a3e-9e5d-f6dc9d7e0760
  version: v1.0
  ncalrpc: umpo

3b338d89-6cfa-44b8-847e-531531bc9992
  version: v1.0
  ncalrpc: umpo

8782d3b9-ebbd-4644-a3d8-e8725381919b
  version: v1.0
  ncalrpc: umpo

085b0334-e454-4d91-9b8c-4134f9e793f3
  version: v1.0
  ncalrpc: umpo

4bec6bb8-b5c2-4b6f-b2c1-5da5cf92d0d9
  version: v1.0
  ncalrpc: umpo

c9ac6db5-82b7-4e55-ae8a-e464ed7b4277
  version: v1.0
  annotation: Impl friendly name
  provider: sysntfy.dll
  ncalrpc: LRPC-74f9fd8cdb0c67a29d
  ncalrpc: LRPC-01dd6dd0b4d0359e70
  ncalrpc: IUserProfile2
  ncalrpc: LRPC-8b41cd1a2340bb0342
  ncalrpc: senssvc
  ncalrpc: LRPC-1b8ae147fd5f8bf63a
  ncalrpc: LRPC-6147e5e9d50dca62f1
  ncacn_ip_tcp: 152.53.44.220:49672
  ncalrpc: MicrosoftLaps_LRPC_0fb2f016-fe45-4a08-a7f9-a467f5e5fa0b
  ncalrpc: samss lpc
  ncalrpc: SidKey Local End Point
  ncalrpc: protected_storage
  ncalrpc: lsasspirpc
  ncalrpc: lsapolicylookup
  ncalrpc: LSA_EAS_ENDPOINT
  ncalrpc: lsacap
  ncalrpc: LSARPC_ENDPOINT
  ncalrpc: securityevent
  ncalrpc: audit
  ncacn_np: \\SERVER\pipe\lsass
  ncalrpc: LRPC-d6db4cbfb0cd71793b

30adc50c-5cbc-46ce-9a0e-91914789e23c
  version: v1.0
  annotation: NRP server endpoint
  provider: nrpsrv.dll
  ncalrpc: LRPC-5c313d20002de9e8e2

7ea70bcf-48af-4f6a-8968-6a440754d5fa
  version: v1.0
  annotation: NSI server endpoint
  provider: nsisvc.dll
  ncalrpc: LRPC-5243c306088e704683

e40f7b57-7a25-4cd3-a135-7f7d3df9d16b
  version: v1.0
  annotation: Network Connection Broker server endpoint
  ncalrpc: LRPC-574463d873ecd66e6d
  ncalrpc: OLE81D4D28B340719FDE541DA490F52
  ncalrpc: LRPC-120a39be2771017c2e
  ncalrpc: LRPC-639dd2a9ce51bbcafa

880fd55e-43b9-11e0-b1a8-cf4edfd72085
  version: v1.0
  annotation: KAPI Service endpoint
  ncalrpc: LRPC-574463d873ecd66e6d
  ncalrpc: OLE81D4D28B340719FDE541DA490F52
  ncalrpc: LRPC-120a39be2771017c2e
  ncalrpc: LRPC-639dd2a9ce51bbcafa

5222821f-d5e2-4885-84f1-5f6185a0ec41
  version: v1.0
  annotation: Network Connection Broker server endpoint for NCB Reset module
  ncalrpc: LRPC-120a39be2771017c2e
  ncalrpc: LRPC-639dd2a9ce51bbcafa

a500d4c6-0dd1-4543-bc0c-d5f93486eaf8
  version: v1.0
  ncalrpc: LRPC-2d397817767ba9376e
  ncalrpc: LRPC-e43fbefbe9371e4604

12e65dd8-887f-41ef-91bf-8d816c42c2e7
  version: v1.0
  annotation: Secure Desktop LRPC interface
  provider: winlogon.exe
  ncalrpc: WMsgKRpc09BE31

3c4728c5-f0ab-448b-bda1-6ce01eb0a6d5
  version: v1.0
  annotation: DHCP Client LRPC Endpoint
  provider: dhcpcsvc.dll
  ncalrpc: dhcpcsvc
  ncalrpc: dhcpcsvc6

3c4728c5-f0ab-448b-bda1-6ce01eb0a6d6
  version: v1.0
  annotation: DHCPv6 Client LRPC Endpoint
  provider: dhcpcsvc6.dll
  ncalrpc: dhcpcsvc
  ncalrpc: dhcpcsvc6

f6beaff7-1e19-4fbb-9f8f-b89e2018337c
  version: v1.0
  annotation: Event log TCPIP
  protocol: [MS-EVEN6]: EventLog Remoting Protocol
  provider: wevtsvc.dll
  ncacn_ip_tcp: 152.53.44.220:49665
  ncacn_np: \\SERVER\pipe\eventlog
  ncalrpc: eventlog

89759fce-5a25-4086-8967-de12f39a60b5
  version: v1.0
  provider: tssdjet.dll
  ncacn_ip_tcp: 152.53.44.220:49666
  ncalrpc: LcRpc
  ncalrpc: OLECE408929394C4FDF41A85096817D

9b3195fe-d603-43d1-a0d5-9072d7cde122
  version: v1.0
  provider: tssdjet.dll
  ncacn_ip_tcp: 152.53.44.220:49666
  ncalrpc: LcRpc
  ncalrpc: OLECE408929394C4FDF41A85096817D

30b044a5-a225-43f0-b3a4-e060df91f9c1
  version: v1.0
  provider: certprop.dll
  ncalrpc: LRPC-aa729c8fd9c03da48b

8833d1d0-965f-4216-b3e9-fbe58cad3100
  version: v1.0
  provider: SCardSvr.dll
  ncalrpc: LRPC-617809c7c6b508c0cd
  ncalrpc: LRPC-5a5c79b6371cc758eb

c6b5235a-e413-481d-9ac8-31681b1faaf5
  version: v1.256
  ncalrpc: LRPC-617809c7c6b508c0cd
  ncalrpc: LRPC-5a5c79b6371cc758eb

2eb08e3e-639f-4fba-97b1-14f878961076
  version: v1.0
  annotation: Group Policy RPC Interface
  provider: gpsvc.dll
  ncalrpc: LRPC-e4bd869193274d35fc

3a9ef155-691d-4449-8d05-09ad57031823
  version: v1.0
  ncacn_ip_tcp: 152.53.44.220:49667
  ncalrpc: LRPC-2e7a9932d5d54967c1
  ncalrpc: ubpmtaskhostchannel
  ncacn_np: \\SERVER\PIPE\atsvc
  ncalrpc: LRPC-5bf19364ae5cf782fb

86d35949-83c9-4044-b424-db363231fd0c
  version: v1.0
  protocol: [MS-TSCH]: Task Scheduler Service Remoting Protocol
  provider: schedsvc.dll
  ncacn_ip_tcp: 152.53.44.220:49667
  ncalrpc: LRPC-2e7a9932d5d54967c1
  ncalrpc: ubpmtaskhostchannel
  ncacn_np: \\SERVER\PIPE\atsvc
  ncalrpc: LRPC-5bf19364ae5cf782fb

33d84484-3626-47ee-8c6f-e7e98b113be1
  version: v2.0
  ncalrpc: LRPC-2e7a9932d5d54967c1
  ncalrpc: ubpmtaskhostchannel
  ncacn_np: \\SERVER\PIPE\atsvc
  ncalrpc: LRPC-5bf19364ae5cf782fb

378e52b0-c0a9-11cf-822d-00aa0051e40f
  version: v1.0
  protocol: [MS-TSCH]: Task Scheduler Service Remoting Protocol
  provider: taskcomp.dll
  ncacn_np: \\SERVER\PIPE\atsvc
  ncalrpc: LRPC-5bf19364ae5cf782fb

1ff70682-0a51-30e8-076d-740be8cee98b
  version: v1.0
  protocol: [MS-TSCH]: Task Scheduler Service Remoting Protocol
  provider: taskcomp.dll
  ncacn_np: \\SERVER\PIPE\atsvc
  ncalrpc: LRPC-5bf19364ae5cf782fb

0a74ef1c-41a4-4e06-83ae-dc74fb1cdd53
  version: v1.0
  provider: schedsvc.dll
  ncalrpc: LRPC-5bf19364ae5cf782fb

2fb92682-6599-42dc-ae13-bd2ca89bd11c
  version: v1.0
  annotation: Fw APIs
  provider: MPSSVC.dll
  ncalrpc: LRPC-cd6987dbf1679277f2
  ncalrpc: LRPC-1dfffefedfe704f47d
  ncalrpc: LRPC-bc00e507843cc0d90d
  ncalrpc: LRPC-0934247d0afcd59921

f47433c3-3e9d-4157-aad4-83aa1f5c2d4c
  version: v1.0
  annotation: Fw APIs
  ncalrpc: LRPC-1dfffefedfe704f47d
  ncalrpc: LRPC-bc00e507843cc0d90d
  ncalrpc: LRPC-0934247d0afcd59921

7f9d11bf-7fb9-436b-a812-b2d50c5d4c03
  version: v1.0
  annotation: Fw APIs
  provider: MPSSVC.dll
  ncalrpc: LRPC-bc00e507843cc0d90d
  ncalrpc: LRPC-0934247d0afcd59921

dd490425-5325-4565-b774-7e27d6c09c24
  version: v1.0
  annotation: Base Firewall Engine API
  provider: BFE.DLL
  ncalrpc: LRPC-0934247d0afcd59921

3473dd4d-2e88-4006-9cba-22570909dd10
  version: v5.256
  annotation: WinHttp Auto-Proxy Service
  ncalrpc: 3c549e9e-f273-4f15-b0d4-ce6240e5f229
  ncalrpc: LRPC-d3c241aa0429e1db87

c2d1b5dd-fa81-4460-9dd6-e7658b85454b
  version: v1.0
  ncalrpc: LRPC-71b7c1042e57436b82
  ncalrpc: OLE275E205898D56E8B6243D4A0D80D

f44e62af-dab1-44c2-8013-049a9de417d6
  version: v1.0
  ncalrpc: LRPC-71b7c1042e57436b82
  ncalrpc: OLE275E205898D56E8B6243D4A0D80D

7aeb6705-3ae6-471a-882d-f39c109edc12
  version: v1.0
  ncalrpc: LRPC-71b7c1042e57436b82
  ncalrpc: OLE275E205898D56E8B6243D4A0D80D

e7f76134-9ef5-4949-a2d6-3368cc0988f3
  version: v1.0
  ncalrpc: LRPC-71b7c1042e57436b82
  ncalrpc: OLE275E205898D56E8B6243D4A0D80D

b37f900a-eae4-4304-a2ab-12bb668c0188
  version: v1.0
  ncalrpc: LRPC-71b7c1042e57436b82
  ncalrpc: OLE275E205898D56E8B6243D4A0D80D

abfb6ca3-0c5e-4734-9285-0aee72fe8d1c
  version: v1.0
  ncalrpc: LRPC-71b7c1042e57436b82
  ncalrpc: OLE275E205898D56E8B6243D4A0D80D

c49a5a70-8a7f-4e70-ba16-1e8f1f193ef1
  version: v1.0
  annotation: Adh APIs
  ncalrpc: OLEB3B7AB010EB09B49AA2404BBA754
  ncalrpc: TeredoControl
  ncalrpc: TeredoDiagnostics
  ncalrpc: LRPC-ae1abc3ea07c406991

c36be077-e14b-4fe9-8abc-e856ef4f048b
  version: v1.0
  annotation: Proxy Manager client server endpoint
  ncalrpc: TeredoControl
  ncalrpc: TeredoDiagnostics
  ncalrpc: LRPC-ae1abc3ea07c406991

2e6035b2-e8f1-41a7-a044-656b439c4c34
  version: v1.0
  annotation: Proxy Manager provider server endpoint
  ncalrpc: TeredoControl
  ncalrpc: TeredoDiagnostics
  ncalrpc: LRPC-ae1abc3ea07c406991

552d076a-cb29-4e44-8b6a-d15e59e2c0af
  version: v1.0
  annotation: IP Transition Configuration endpoint
  provider: iphlpsvc.dll
  ncalrpc: LRPC-ae1abc3ea07c406991

266f33b4-c7c1-4bd1-8f52-ddb8f2214eb0
  version: v1.0
  annotation: Wlan Service LowPriv
  ncalrpc: LRPC-71af7a2541e1d4ea9c
  ncalrpc: LRPC-1b8ae147fd5f8bf63a

266f33b4-c7c1-4bd1-8f52-ddb8f2214ea9
  version: v1.0
  annotation: Wlan Service
  provider: wlansvc.dll
  ncalrpc: LRPC-71af7a2541e1d4ea9c
  ncalrpc: LRPC-1b8ae147fd5f8bf63a

25952c5d-7976-4aa1-a3cb-c35f7ae79d1b
  version: v1.256
  annotation: Wireless Diagnostics
  ncalrpc: LRPC-1b8ae147fd5f8bf63a

0d3c7f20-1c8d-4654-a1b3-51563b298bda
  version: v1.0
  annotation: UserMgrCli
  ncalrpc: LRPC-2423b3b0aacae2ae09
  ncalrpc: OLE916230BA3390D9980E40CE1951F0

b18fbab6-56f8-4702-84e0-41053293a869
  version: v1.0
  annotation: UserMgrCli
  ncalrpc: LRPC-2423b3b0aacae2ae09
  ncalrpc: OLE916230BA3390D9980E40CE1951F0

7f1343fe-50a9-4927-a778-0c5859517bac
  version: v1.0
  annotation: DfsDs service
  ncacn_np: \\SERVER\PIPE\wkssvc
  ncalrpc: LRPC-89b0c31870a49a86ee

eb081a0d-10ee-478a-a1dd-50995283e7a8
  version: v3.0
  annotation: Witness Client Test Interface
  ncalrpc: LRPC-89b0c31870a49a86ee

f2c9b409-c1c9-4100-8639-d8ab1486694a
  version: v1.0
  annotation: Witness Client Upcall Server
  ncalrpc: LRPC-89b0c31870a49a86ee

29770a8f-829b-4158-90a2-78cd488501f7
  version: v1.0
  ncacn_ip_tcp: 152.53.44.220:49671
  ncacn_np: \\SERVER\pipe\SessEnvPublicRpc
  ncalrpc: SessEnvPrivateRpc
  ncalrpc: OLEB39AF46655C67FF649517EF8A716
  ncalrpc: LRPC-6147e5e9d50dca62f1

04eeb297-cbf4-466b-8a2a-bfd6a2f10bba
  version: v1.0
  annotation: EFSK RPC Interface
  provider: efssvc.dll
  ncacn_np: \\SERVER\pipe\efsrpc
  ncalrpc: LRPC-092018aa0151f6b7b0

df1941c5-fe89-4e79-bf10-463657acf44d
  version: v1.0
  annotation: EFS RPC Interface
  provider: efssvc.dll
  ncacn_np: \\SERVER\pipe\efsrpc
  ncalrpc: LRPC-092018aa0151f6b7b0

51a227ae-825b-41f2-b4a9-1ac9557a1018
  version: v1.0
  annotation: Ngc Pop Key Service
  ncacn_ip_tcp: 152.53.44.220:49689
  ncalrpc: NETLOGON_LRPC
  ncalrpc: OLE41120E2A11BC2D2B2E70A7258AC9
  ncacn_np: \\SERVER\pipe\992809545dd86fbe
  ncacn_ip_http: 152.53.44.220:49684
  ncalrpc: NTDS_LPC
  ncacn_ip_tcp: 152.53.44.220:49683
  ncacn_ip_tcp: 152.53.44.220:49672
  ncalrpc: MicrosoftLaps_LRPC_0fb2f016-fe45-4a08-a7f9-a467f5e5fa0b
  ncalrpc: samss lpc
  ncalrpc: SidKey Local End Point
  ncalrpc: protected_storage
  ncalrpc: lsasspirpc
  ncalrpc: lsapolicylookup
  ncalrpc: LSA_EAS_ENDPOINT
  ncalrpc: lsacap
  ncalrpc: LSARPC_ENDPOINT
  ncalrpc: securityevent
  ncalrpc: audit
  ncacn_np: \\SERVER\pipe\lsass

8fb74744-b2ff-4c00-be0d-9ef9a191fe1b
  version: v1.0
  annotation: Ngc Pop Key Service
  ncacn_ip_tcp: 152.53.44.220:49689
  ncalrpc: NETLOGON_LRPC
  ncalrpc: OLE41120E2A11BC2D2B2E70A7258AC9
  ncacn_np: \\SERVER\pipe\992809545dd86fbe
  ncacn_ip_http: 152.53.44.220:49684
  ncalrpc: NTDS_LPC
  ncacn_ip_tcp: 152.53.44.220:49683
  ncacn_ip_tcp: 152.53.44.220:49672
  ncalrpc: MicrosoftLaps_LRPC_0fb2f016-fe45-4a08-a7f9-a467f5e5fa0b
  ncalrpc: samss lpc
  ncalrpc: SidKey Local End Point
  ncalrpc: protected_storage
  ncalrpc: lsasspirpc
  ncalrpc: lsapolicylookup
  ncalrpc: LSA_EAS_ENDPOINT
  ncalrpc: lsacap
  ncalrpc: LSARPC_ENDPOINT
  ncalrpc: securityevent
  ncalrpc: audit
  ncacn_np: \\SERVER\pipe\lsass

b25a52bf-e5dd-4f4a-aea6-8ca7272a0e86
  version: v2.0
  annotation: KeyIso
  ncacn_ip_tcp: 152.53.44.220:49689
  ncalrpc: NETLOGON_LRPC
  ncalrpc: OLE41120E2A11BC2D2B2E70A7258AC9
  ncacn_np: \\SERVER\pipe\992809545dd86fbe
  ncacn_ip_http: 152.53.44.220:49684
  ncalrpc: NTDS_LPC
  ncacn_ip_tcp: 152.53.44.220:49683
  ncacn_ip_tcp: 152.53.44.220:49672
  ncalrpc: MicrosoftLaps_LRPC_0fb2f016-fe45-4a08-a7f9-a467f5e5fa0b
  ncalrpc: samss lpc
  ncalrpc: SidKey Local End Point
  ncalrpc: protected_storage
  ncalrpc: lsasspirpc
  ncalrpc: lsapolicylookup
  ncalrpc: LSA_EAS_ENDPOINT
  ncalrpc: lsacap
  ncalrpc: LSARPC_ENDPOINT
  ncalrpc: securityevent
  ncalrpc: audit
  ncacn_np: \\SERVER\pipe\lsass

12345678-1234-abcd-ef00-01234567cffb
  version: v1.0
  protocol: [MS-NRPC]: Netlogon Remote Protocol
  provider: netlogon.dll
  ncacn_ip_tcp: 152.53.44.220:49689
  ncalrpc: NETLOGON_LRPC
  ncalrpc: OLE41120E2A11BC2D2B2E70A7258AC9
  ncacn_np: \\SERVER\pipe\992809545dd86fbe
  ncacn_ip_http: 152.53.44.220:49684
  ncalrpc: NTDS_LPC
  ncacn_ip_tcp: 152.53.44.220:49683
  ncacn_ip_tcp: 152.53.44.220:49672
  ncalrpc: MicrosoftLaps_LRPC_0fb2f016-fe45-4a08-a7f9-a467f5e5fa0b
  ncalrpc: samss lpc
  ncalrpc: SidKey Local End Point
  ncalrpc: protected_storage
  ncalrpc: lsasspirpc
  ncalrpc: lsapolicylookup
  ncalrpc: LSA_EAS_ENDPOINT
  ncalrpc: lsacap
  ncalrpc: LSARPC_ENDPOINT
  ncalrpc: securityevent
  ncalrpc: audit
  ncacn_np: \\SERVER\pipe\lsass

0b1c2170-5732-4e0e-8cd3-d9b16f3b84d7
  version: v0.0
  annotation: RemoteAccessCheck
  protocol: [MS-RAA]: Remote Authorization API Protocol
  ncalrpc: NETLOGON_LRPC
  ncalrpc: OLE41120E2A11BC2D2B2E70A7258AC9
  ncacn_np: \\SERVER\pipe\992809545dd86fbe
  ncacn_ip_http: 152.53.44.220:49684
  ncalrpc: NTDS_LPC
  ncacn_ip_tcp: 152.53.44.220:49683
  ncacn_ip_tcp: 152.53.44.220:49672
  ncalrpc: MicrosoftLaps_LRPC_0fb2f016-fe45-4a08-a7f9-a467f5e5fa0b
  ncalrpc: samss lpc
  ncalrpc: SidKey Local End Point
  ncalrpc: protected_storage
  ncalrpc: lsasspirpc
  ncalrpc: lsapolicylookup
  ncalrpc: LSA_EAS_ENDPOINT
  ncalrpc: lsacap
  ncalrpc: LSARPC_ENDPOINT
  ncalrpc: securityevent
  ncalrpc: audit
  ncacn_np: \\SERVER\pipe\lsass
  ncalrpc: NETLOGON_LRPC
  ncalrpc: OLE41120E2A11BC2D2B2E70A7258AC9
  ncacn_np: \\SERVER\pipe\992809545dd86fbe
  ncacn_ip_http: 152.53.44.220:49684
  ncalrpc: NTDS_LPC
  ncacn_ip_tcp: 152.53.44.220:49683
  ncacn_ip_tcp: 152.53.44.220:49672
  ncalrpc: MicrosoftLaps_LRPC_0fb2f016-fe45-4a08-a7f9-a467f5e5fa0b
  ncalrpc: samss lpc
  ncalrpc: SidKey Local End Point
  ncalrpc: protected_storage
  ncalrpc: lsasspirpc
  ncalrpc: lsapolicylookup
  ncalrpc: LSA_EAS_ENDPOINT
  ncalrpc: lsacap
  ncalrpc: LSARPC_ENDPOINT
  ncalrpc: securityevent
  ncalrpc: audit
  ncacn_np: \\SERVER\pipe\lsass

12345778-1234-abcd-ef00-0123456789ab
  version: v0.0
  protocol: [MS-LSAT]: Local Security Authority (Translation Methods) Remote
  provider: lsasrv.dll
  ncalrpc: OLE41120E2A11BC2D2B2E70A7258AC9
  ncacn_np: \\SERVER\pipe\992809545dd86fbe
  ncacn_ip_http: 152.53.44.220:49684
  ncalrpc: NTDS_LPC
  ncacn_ip_tcp: 152.53.44.220:49683
  ncacn_ip_tcp: 152.53.44.220:49672
  ncalrpc: MicrosoftLaps_LRPC_0fb2f016-fe45-4a08-a7f9-a467f5e5fa0b
  ncalrpc: samss lpc
  ncalrpc: SidKey Local End Point
  ncalrpc: protected_storage
  ncalrpc: lsasspirpc
  ncalrpc: lsapolicylookup
  ncalrpc: LSA_EAS_ENDPOINT
  ncalrpc: lsacap
  ncalrpc: LSARPC_ENDPOINT
  ncalrpc: securityevent
  ncalrpc: audit
  ncacn_np: \\SERVER\pipe\lsass

e3514235-4b06-11d1-ab04-00c04fc2dcd2
  version: v4.0
  annotation: MS NT Directory DRS Interface
  protocol: [MS-DRSR]: Directory Replication Service (DRS) Remote Protocol
  provider: ntdsai.dll
  ncacn_np: \\SERVER\pipe\992809545dd86fbe
  ncacn_ip_http: 152.53.44.220:49684
  ncalrpc: NTDS_LPC
  ncacn_ip_tcp: 152.53.44.220:49683
  ncacn_ip_tcp: 152.53.44.220:49672
  ncalrpc: MicrosoftLaps_LRPC_0fb2f016-fe45-4a08-a7f9-a467f5e5fa0b
  ncalrpc: samss lpc
  ncalrpc: SidKey Local End Point
  ncalrpc: protected_storage
  ncalrpc: lsasspirpc
  ncalrpc: lsapolicylookup
  ncalrpc: LSA_EAS_ENDPOINT
  ncalrpc: lsacap
  ncalrpc: LSARPC_ENDPOINT
  ncalrpc: securityevent
  ncalrpc: audit
  ncacn_np: \\SERVER\pipe\lsass

12345778-1234-abcd-ef00-0123456789ac
  version: v1.0
  protocol: [MS-SAMR]: Security Account Manager (SAM) Remote Protocol
  provider: samsrv.dll
  ncacn_ip_tcp: 152.53.44.220:49683
  ncacn_ip_tcp: 152.53.44.220:49672
  ncalrpc: MicrosoftLaps_LRPC_0fb2f016-fe45-4a08-a7f9-a467f5e5fa0b
  ncalrpc: samss lpc
  ncalrpc: SidKey Local End Point
  ncalrpc: protected_storage
  ncalrpc: lsasspirpc
  ncalrpc: lsapolicylookup
  ncalrpc: LSA_EAS_ENDPOINT
  ncalrpc: lsacap
  ncalrpc: LSARPC_ENDPOINT
  ncalrpc: securityevent
  ncalrpc: audit
  ncacn_np: \\SERVER\pipe\lsass

1a0d010f-1c33-432c-b0f5-8cf4e8053099
  version: v1.0
  annotation: IdSegSrv service
  ncalrpc: LRPC-3f5a7f6d52c0e28832

98716d03-89ac-44c7-bb8c-285824e51c4a
  version: v1.0
  annotation: XactSrv service
  provider: srvsvc.dll
  ncalrpc: LRPC-3f5a7f6d52c0e28832

76f03f96-cdfd-44fc-a22c-64950a001209
  version: v1.0
  protocol: [MS-PAR]: Print System Asynchronous Remote Protocol
  provider: spoolsv.exe
  ncacn_ip_tcp: 152.53.44.220:49690
  ncalrpc: LRPC-0ef0911248d7332aef

4a452661-8290-4b36-8fbe-7f4093a94978
  version: v1.0
  provider: spoolsv.exe
  ncacn_ip_tcp: 152.53.44.220:49690
  ncalrpc: LRPC-0ef0911248d7332aef

ae33069b-a2a8-46ee-a235-ddfd339be281
  version: v1.0
  protocol: [MS-PAN]: Print System Asynchronous Notification Protocol
  provider: spoolsv.exe
  ncacn_ip_tcp: 152.53.44.220:49690
  ncalrpc: LRPC-0ef0911248d7332aef

0b6edbfa-4a24-4fc6-8a23-942b1eca65d1
  version: v1.0
  protocol: [MS-PAN]: Print System Asynchronous Notification Protocol
  provider: spoolsv.exe
  ncacn_ip_tcp: 152.53.44.220:49690
  ncalrpc: LRPC-0ef0911248d7332aef

12345678-1234-abcd-ef00-0123456789ab
  version: v1.0
  protocol: [MS-RPRN]: Print System Remote Protocol
  provider: spoolsv.exe
  ncacn_ip_tcp: 152.53.44.220:49690
  ncalrpc: LRPC-0ef0911248d7332aef

df4df73a-c52d-4e3a-8003-8437fdf8302a
  version: v0.0
  annotation: WM_WindowManagerRPC\Server
  ncalrpc: LRPC-b2042800bc310e4840

b58aa02e-2884-4e97-8176-4ee06d794184
  version: v1.0
  provider: sysmain.dll
  ncalrpc: LRPC-d2b378323fecd0699b

a398e520-d59a-4bdd-aa7a-3c1e0303a511
  version: v1.0
  annotation: IKE/Authip API
  provider: IKEEXT.DLL
  ncalrpc: LRPC-c859565288095f327d

3d267954-eeb7-11d1-b94e-00c04fa3080d
  version: v1.0
  provider: lserver.dll
  ncacn_ip_tcp: 152.53.44.220:49700
  ncacn_np: \\SERVER\pipe\HydraLsPipe
  ncalrpc: LRPC-a19b2e09f9b76d77a7

2f5f6521-cb55-1059-b446-00df0bce31db
  version: v1.0
  annotation: Unimodem LRPC Endpoint
  ncalrpc: unimdmsvc
  ncalrpc: tapsrvlpc
  ncacn_np: \\SERVER\pipe\tapsrv

650a7e26-eab8-5533-ce43-9c1dfce11511
  version: v1.0
  annotation: Vpn APIs
  ncalrpc: LRPC-c563251a971a82618b
  ncalrpc: VpnikeRpc
  ncalrpc: RasmanLrpc
  ncacn_np: \\SERVER\PIPE\ROUTER

98cd761e-e77d-41c8-a3c0-0fb756d90ec2
  version: v1.0
  ncalrpc: LRPC-41e776074b30d04fca

d22895ef-aff4-42c5-a5b2-b14466d34ab4
  version: v1.0
  ncalrpc: LRPC-41e776074b30d04fca

e38f5360-8572-473e-b696-1b46873beeab
  version: v1.0
  ncalrpc: LRPC-41e776074b30d04fca

95095ec8-32ea-4eb0-a3e2-041f97b36168
  version: v1.0
  ncalrpc: LRPC-41e776074b30d04fca

fd8be72b-a9cd-4b2c-a9ca-4ded242fbe4d
  version: v1.0
  ncalrpc: LRPC-41e776074b30d04fca

4c9dbf19-d39e-4bb9-90ee-8f7179b20283
  version: v1.0
  ncalrpc: LRPC-41e776074b30d04fca

ed96b012-c8ce-4f60-a682-35535b12ff75
  version: v2.0
  ncacn_ip_tcp: 152.53.44.220:5504
  ncalrpc: OLE8EA8C4504090B4DAE5F61D9FF382

367abb81-9844-35f1-ad32-98f038001003
  version: v2.0
  protocol: [MS-SCMR]: Service Control Manager Remote Protocol
  provider: services.exe
  ncacn_ip_tcp: 152.53.44.220:49750

32e36e84-4ba2-496c-ba85-fb450f325107
  version: v2.0
  ncalrpc: TSSessionDirectoryQueryApi
  ncacn_ip_tcp: 152.53.44.220:49751

c95fc993-f460-4763-a00d-bb3b9e5c7e2e
  version: v1.0
  ncacn_ip_tcp: 152.53.44.220:49751

aa177641-fc9b-41bd-80ff-f964a701596f
  version: v1.0
  provider: tssdis.exe
  ncacn_ip_tcp: 152.53.44.220:49751

c503f532-443a-4c69-8300-ccd1fbdb3839
  version: v2.0
  ncalrpc: LRPC-6372e489209bc2ce7f
  ncalrpc: OLEF4CE33E322248CEF8C94CF726F66

50abc2a4-574d-40b3-9d66-ee4fd5fba076
  version: v5.0
  protocol: [MS-DNSP]: Domain Name Service (DNS) Server Management
  provider: dns.exe
  ncacn_ip_tcp: 152.53.44.220:49806

906b0ce0-c70b-1067-b317-00dd010662da
  version: v1.0
  protocol: [MS-CMPO]: MSDTC Connection Manager:
  provider: msdtcprx.dll
  ncalrpc: LRPC-702776e6c5c6929f77
  ncalrpc: LRPC-702776e6c5c6929f77
  ncalrpc: LRPC-702776e6c5c6929f77
  ncalrpc: LRPC-e88da9389f41065746
  ncalrpc: OLE8A69855F952FD752176202E54D77

b1ef227e-dfa5-421e-82bb-67a6a129c496
  version: v0.0
  ncalrpc: LRPC-d709caf1dba32efccb
  ncalrpc: OLE7647EB91B74C8F34301B98C2D9EA

0fc77b1a-95d8-4a2e-a0c0-cff54237462b
  version: v0.0
  ncalrpc: LRPC-d709caf1dba32efccb
  ncalrpc: OLE7647EB91B74C8F34301B98C2D9EA

8ec21e98-b5ce-4916-a3d6-449fa428a007
  version: v0.0
  ncalrpc: LRPC-d709caf1dba32efccb
  ncalrpc: OLE7647EB91B74C8F34301B98C2D9EA

7d814569-35b3-4850-bb32-83035fcebf6e
  version: v1.0
  annotation: IAS RPC server
  provider: ias.dll
  ncalrpc: LRPC-e97e147bba6075def6
  ncalrpc: OLE77BDA56ADE3C9B49851A411FF414

3357951c-a1d1-47db-a278-ab945d063d03
  version: v1.0
  provider: LBService.dll
  ncacn_ip_tcp: 152.53.44.220:49932

958f92d8-da20-467a-bbe3-65e7e9b4edcf
  version: v1.0
  annotation: TsProxyMgmt
  protocol: [MS-TSGU]: Terminal Services Gateway Server Management Interface
  ncalrpc: AAGMgmt
  ncacn_ip_http: 152.53.44.220:3388

44e265dd-7daf-42cd-8560-3cdb6e7a2729
  version: v1.768
  annotation: TsProxy
  protocol: [MS-TSGU]: Terminal Services Gateway Server Protocol
  ncalrpc: AAGMgmt
  ncacn_ip_http: 152.53.44.220:3388

897e2e5f-93f3-4376-9c9c-fd2277495c27
  version: v1.0
  annotation: Frs2 Service
  protocol: [MS-FRS2]: Distributed File System Replication Protocol
  provider: dfsrmig.exe
  ncacn_ip_tcp: 152.53.44.220:50017
  ncalrpc: OLE9282D168FAB5CF7F3C69B04C1312

54b4c689-969a-476f-8dc2-990885e9f562
  version: v0.0
  ncalrpc: LRPC-4ec0d64630a17e94af

be7f785e-0e3a-4ab7-91de-7e46e443be29
  version: v0.0
  ncalrpc: LRPC-4ec0d64630a17e94af

0767a036-0d22-48aa-ba69-b619480f38cb
  version: v1.0
  annotation: PcaSvc
  provider: pcasvc.dll
  ncalrpc: LRPC-e80463830fb22264c1

a4b8d482-80ce-40d6-934d-b22a01a44fe7
  version: v1.0
  annotation: LicenseManager
  ncalrpc: LicenseServiceEndpoint

0497b57d-2e66-424f-a0c6-157cd5d41700
  version: v1.0
  annotation: AppInfo
  ncalrpc: LRPC-69ac55636e0d4f717e

201ef99a-7fa0-444c-9399-19ba84f12a1a
  version: v1.0
  annotation: AppInfo
  provider: appinfo.dll
  ncalrpc: LRPC-69ac55636e0d4f717e

5f54ce7d-5b79-4175-8584-cb65313a0e98
  version: v1.0
  annotation: AppInfo
  provider: appinfo.dll
  ncalrpc: LRPC-69ac55636e0d4f717e

fd7a0523-dc70-43dd-9b2e-9c5ed48225b1
  version: v1.0
  annotation: AppInfo
  provider: appinfo.dll
  ncalrpc: LRPC-69ac55636e0d4f717e

58e604e8-9adb-4d2e-a464-3b0683fb1480
  version: v1.0
  annotation: AppInfo
  provider: appinfo.dll
  ncalrpc: LRPC-69ac55636e0d4f717e

c100beac-d33a-4a4b-bf23-bbef4663d017
  version: v1.0
  annotation: wcncsvc.transport
  provider: wcncsvc.dll
  ncalrpc: wcncsvc.transport

c100beab-d33a-4a4b-bf23-bbef4663d017
  version: v1.0
  annotation: wcncsvc.wcnprpc
  provider: wcncsvc.dll
  ncalrpc: wcncsvc.transport
  ncalrpc: wcncsvc.wcnprpc

636 / tcp

511896969 | 2025-03-11T23:37:31.170717

LDAP:
  SupportedExtension:
    1.2.840.113556.1.4.1781
    1.2.840.113556.1.4.2212
    1.3.6.1.4.1.1466.101.119.1
    1.3.6.1.4.1.1466.20037
    1.3.6.1.4.1.4203.1.11.3
  SupportedSASLMechanisms:
    DIGEST-MD5
    EXTERNAL
    GSS-SPNEGO
    GSSAPI
  SupportedLDAPVersion:
    2
    3
  SupportedLDAPPolicies:
    InitRecvTimeout
    MaxBatchReturnMessages
    MaxConnIdleTime
    MaxConnections
    MaxDatagramRecv
    MaxDirSyncDuration
    MaxNotificationPerConn
    MaxPageSize
    MaxPercentDirSyncRequests
    MaxPoolThreads
    MaxQueryDuration
    MaxReceiveBuffer
    MaxResultSetSize
    MaxResultSetsPerConn
    MaxTempTableSize
    MaxValRange
    MaxValRangeTransitive
    MinResultSets
    SystemMemoryLimitPercent
    ThreadMemoryLimit
  SupportedControl:
    1.2.840.113556.1.4.1338
    1.2.840.113556.1.4.1339
    1.2.840.113556.1.4.1340
    1.2.840.113556.1.4.1341
    1.2.840.113556.1.4.1413
    1.2.840.113556.1.4.1504
    1.2.840.113556.1.4.1852
    1.2.840.113556.1.4.1907
    1.2.840.113556.1.4.1948
    1.2.840.113556.1.4.1974
    1.2.840.113556.1.4.2026
    1.2.840.113556.1.4.2064
    1.2.840.113556.1.4.2065
    1.2.840.113556.1.4.2066
    1.2.840.113556.1.4.2090
    1.2.840.113556.1.4.2204
    1.2.840.113556.1.4.2205
    1.2.840.113556.1.4.2206
    1.2.840.113556.1.4.2211
    1.2.840.113556.1.4.2239
    1.2.840.113556.1.4.2255
    1.2.840.113556.1.4.2256
    1.2.840.113556.1.4.2309
    1.2.840.113556.1.4.2330
    1.2.840.113556.1.4.2354
    1.2.840.113556.1.4.319
    1.2.840.113556.1.4.417
    1.2.840.113556.1.4.473
    1.2.840.113556.1.4.474
    1.2.840.113556.1.4.521
    1.2.840.113556.1.4.528
    1.2.840.113556.1.4.529
    1.2.840.113556.1.4.619
    1.2.840.113556.1.4.801
    1.2.840.113556.1.4.802
    1.2.840.113556.1.4.805
    1.2.840.113556.1.4.841
    1.2.840.113556.1.4.970
    2.16.840.1.113730.3.4.10
    2.16.840.1.113730.3.4.9
  SupportedCapabilities:
    1.2.840.113556.1.4.1670
    1.2.840.113556.1.4.1791
    1.2.840.113556.1.4.1935
    1.2.840.113556.1.4.2080
    1.2.840.113556.1.4.2237
    1.2.840.113556.1.4.800
  SubschemaSubentry: CN=Aggregate,CN=Schema,CN=Configuration,DC=ksw-legal,DC=de
  ServerName: CN=SERVER,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=ksw-legal,DC=de
  SchemaNamingContext: CN=Schema,CN=Configuration,DC=ksw-legal,DC=de
  RootDomainNamingContext: DC=ksw-legal,DC=de
  NamingContexts:
    CN=Configuration,DC=ksw-legal,DC=de
    CN=Schema,CN=Configuration,DC=ksw-legal,DC=de
    DC=DomainDnsZones,DC=ksw-legal,DC=de
    DC=ForestDnsZones,DC=ksw-legal,DC=de
    DC=ksw-legal,DC=de
  LdapServiceName: ksw-legal.de:server$@KSW-LEGAL.DE
  IsSynchronized: TRUE
  IsGlobalCatalogReady: TRUE
  HighestCommittedUSN: 90625740
  ForestFunctionality: 7
  DsServiceName: CN=NTDS Settings,CN=SERVER,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=ksw-legal,DC=de
  DomainFunctionality: 7
  DnsHostName: server.ksw-legal.de
  DefaultNamingContext: DC=ksw-legal,DC=de
  CurrentTime: 20250311233722.0Z
  ConfigurationNamingContext: CN=Configuration,DC=ksw-legal,DC=de

SSL Certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1a:21:64:88:7f:5a:fc:b6:da:63:1b:b9:f7:99:e6:e0
        Signature Algorithm: sha384WithRSAEncryption
        Issuer: C=AT, O=ZeroSSL, CN=ZeroSSL RSA Domain Secure Site CA
        Validity
            Not Before: Jul 15 00:00:00 2024 GMT
            Not After : Oct 13 23:59:59 2024 GMT
        Subject: CN=server.ksw-legal.de
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                Public-Key: (2048 bit)
                Modulus:
                    00:93:75:d2:13:10:28:dc:ce:50:7f:b3:0c:70:46:
                    d6:dd:07:be:0b:b4:1b:fe:26:3f:ec:fa:bd:7a:43:
                    3c:31:32:3e:1a:c1:1a:16:3e:26:c0:22:b7:5c:35:
                    71:46:46:cc:32:05:1f:45:11:f2:99:9e:07:19:9b:
                    60:a4:30:df:11:5b:58:1a:12:d3:c3:ea:af:68:6b:
                    d4:2d:f6:94:0e:d5:f9:17:1f:c9:b8:9e:a2:57:46:
                    ba:f0:48:98:2a:cf:d5:2d:40:1b:01:0c:58:cb:72:
                    a5:af:39:d4:e6:21:f8:83:22:78:cb:ee:79:3f:8e:
                    f9:92:21:81:ae:f0:b2:76:ac:d5:2d:c1:9e:7a:b4:
                    9c:59:15:ab:37:04:e6:5e:36:f8:30:25:e8:72:5b:
                    b8:1a:9b:f2:22:88:eb:64:de:88:51:b4:9c:bc:da:
                    53:44:16:24:a0:47:41:83:7f:18:77:91:a2:e7:fd:
                    65:0e:0f:9d:7e:de:f6:26:c2:01:3e:be:d7:8e:4a:
                    1a:15:a9:50:2e:7d:cb:68:66:d6:bc:b5:dc:8d:df:
                    2d:8a:8c:c0:2f:9e:c6:74:c6:54:c5:15:ad:fa:6f:
                    48:f6:f7:db:7e:3e:ac:88:96:33:12:2c:1d:e4:25:
                    63:3d:c9:0f:3c:98:87:87:e5:5a:5c:7b:5e:e1:86:
                    4d:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Authority Key Identifier: 
                C8:D9:78:68:A2:D9:19:68:D5:3D:72:DE:5F:0A:3E:DC:B5:86:86:A6
            X509v3 Subject Key Identifier: 
                FD:E3:54:1E:13:58:0A:53:7E:C3:2D:54:61:4F:74:7C:3F:BF:9D:3E
            X509v3 Key Usage: critical
                Digital Signature, Key Encipherment
            X509v3 Basic Constraints: critical
                CA:FALSE
            X509v3 Extended Key Usage: 
                TLS Web Server Authentication, TLS Web Client Authentication
            X509v3 Certificate Policies: 
                Policy: 1.3.6.1.4.1.6449.1.2.2.78
                  CPS: https://sectigo.com/CPS
                Policy: 2.23.140.1.2.1
            Authority Information Access: 
                CA Issuers - URI:http://zerossl.crt.sectigo.com/ZeroSSLRSADomainSecureSiteCA.crt
                OCSP - URI:http://zerossl.ocsp.sectigo.com
            CT Precertificate SCTs: 
                Signed Certificate Timestamp:
                    Version   : v1 (0x0)
                    Log ID    : 76:FF:88:3F:0A:B6:FB:95:51:C2:61:CC:F5:87:BA:34:
                                B4:A4:CD:BB:29:DC:68:42:0A:9F:E6:67:4C:5A:3A:74
                    Timestamp : Jul 15 09:26:50.523 2024 GMT
                    Extensions: none
                    Signature : ecdsa-with-SHA256
                                30:45:02:21:00:BC:3F:F5:6B:CB:7F:73:94:95:1D:3C:
                                9E:7A:79:32:92:34:E2:BC:A8:38:31:01:30:D6:9B:37:
                                15:95:3B:28:2E:02:20:67:00:E9:8D:25:97:DF:57:47:
                                61:89:5F:A1:B4:DA:CF:1D:8C:1B:03:00:7B:DF:2F:07:
                                DC:2F:63:DE:B8:6A:76
                Signed Certificate Timestamp:
                    Version   : v1 (0x0)
                    Log ID    : 3F:17:4B:4F:D7:22:47:58:94:1D:65:1C:84:BE:0D:12:
                                ED:90:37:7F:1F:85:6A:EB:C1:BF:28:85:EC:F8:64:6E
                    Timestamp : Jul 15 09:26:50.458 2024 GMT
                    Extensions: none
                    Signature : ecdsa-with-SHA256
                                30:45:02:21:00:EA:82:19:9E:C8:06:09:83:5C:62:9F:
                                31:98:BC:DD:62:7F:5B:27:2E:C2:81:7A:3F:AF:20:04:
                                CC:F6:15:B1:70:02:20:05:AA:54:64:70:01:AF:BC:9E:
                                3C:E3:9F:A3:B0:15:FB:9E:B2:15:B8:00:0F:C8:4B:79:
                                29:2E:38:6B:7A:9F:9B
            X509v3 Subject Alternative Name: 
                DNS:server.ksw-legal.de
    Signature Algorithm: sha384WithRSAEncryption
    Signature Value:
        52:c0:f6:f9:49:b9:81:44:92:68:8a:57:43:80:c6:49:ce:95:
        a8:ba:6c:99:12:64:63:22:e8:96:8b:51:86:cc:fb:b1:c7:2e:
        03:a8:6d:8d:5f:b3:f2:2a:0a:a5:14:7e:cd:85:b3:84:69:73:
        ed:05:74:ca:08:c6:c9:3e:ca:58:97:59:4e:fd:12:e0:18:94:
        fd:84:6e:29:18:b8:72:88:1b:ae:88:72:84:37:39:9c:ef:9e:
        08:97:5f:48:63:44:31:cb:16:1d:b2:6d:c2:ca:48:aa:65:20:
        95:ca:56:88:1f:1d:ef:80:31:2f:67:9a:4f:54:de:40:67:51:
        af:fd:e1:10:d5:2c:30:78:82:81:00:04:ef:93:21:ef:72:9e:
        71:4f:c6:87:ea:6a:1a:5d:46:fb:97:1a:58:81:64:85:c8:d0:
        85:2b:0e:c3:7a:69:3b:ff:57:de:29:80:c0:ec:a7:2e:c6:e1:
        44:67:9f:2c:bf:6b:40:5f:5e:b0:9d:df:ac:42:99:bf:27:a6:
        ec:2e:43:ee:0b:ca:b2:92:6f:33:49:3c:fc:a2:07:54:30:6c:
        7e:5b:6e:0a:94:82:6e:2f:a0:fd:10:22:b5:8f:44:c2:eb:f5:
        d8:23:92:5c:8c:3e:55:c0:9c:5d:79:4f:e1:7a:3e:b2:7d:34:
        43:d1:2e:61:e5:3a:1f:ee:df:10:8d:0d:96:fd:fa:79:1d:ae:
        8c:68:59:30:8d:f1:4b:86:74:89:d3:64:25:cc:74:ed:1c:50:
        a4:5e:b5:4e:9e:c3:8f:f9:e0:5c:e5:49:f9:eb:d8:27:fa:1a:
        b1:1a:7f:ba:8f:42:92:a3:dd:be:ca:8d:df:a7:c9:c3:01:a7:
        a9:43:b6:cb:6f:9e:9b:f7:0e:2f:51:f7:ea:f5:df:5c:71:06:
        88:1d:7e:1c:b4:e2:c4:1b:a8:73:de:1b:00:98:e9:78:4d:01:
        56:ed:5c:eb:fa:73:92:ef:95:02:c5:61:10:cb:68:1f:65:91:
        86:c7:1f:ed:f4:e0:ca:d7:16:94:14:e8:54:a1:e4:93:ca:3b:
        b9:9a:7c:5b:e6:c6:d5:0d:5b:5d:80:49:9a:3c:bb:92:59:7e:
        fb:71:01:cd:08:2d:4f:b2:db:b2:8e:70:1f:30:5a:13:77:c5:
        09:ae:85:cc:38:4a:43:d7:97:68:5e:05:94:14:16:8e:01:d1:
        68:23:ed:16:d3:39:a3:f8:99:5d:4e:5e:c8:1a:2a:6c:54:e3:
        88:52:a0:75:32:14:1f:bf:c6:95:31:25:ef:59:f6:19:c7:22:
        d6:f5:c6:a0:f1:26:d8:a0:dd:87:f7:c5:36:20:e5:d6:a0:91:
        ce:28:31:a9:b7:42:a8:5b

3268 / tcp

-763444185 | 2025-03-06T19:02:48.366426

LDAP:
  SupportedExtension:
    1.2.840.113556.1.4.1781
    1.2.840.113556.1.4.2212
    1.3.6.1.4.1.1466.101.119.1
    1.3.6.1.4.1.1466.20037
    1.3.6.1.4.1.4203.1.11.3
  SupportedSASLMechanisms:
    DIGEST-MD5
    EXTERNAL
    GSS-SPNEGO
    GSSAPI
  SupportedLDAPVersion:
    2
    3
  SupportedLDAPPolicies:
    InitRecvTimeout
    MaxBatchReturnMessages
    MaxConnIdleTime
    MaxConnections
    MaxDatagramRecv
    MaxDirSyncDuration
    MaxNotificationPerConn
    MaxPageSize
    MaxPercentDirSyncRequests
    MaxPoolThreads
    MaxQueryDuration
    MaxReceiveBuffer
    MaxResultSetSize
    MaxResultSetsPerConn
    MaxTempTableSize
    MaxValRange
    MaxValRangeTransitive
    MinResultSets
    SystemMemoryLimitPercent
    ThreadMemoryLimit
  SupportedControl:
    1.2.840.113556.1.4.1338
    1.2.840.113556.1.4.1339
    1.2.840.113556.1.4.1340
    1.2.840.113556.1.4.1341
    1.2.840.113556.1.4.1413
    1.2.840.113556.1.4.1504
    1.2.840.113556.1.4.1852
    1.2.840.113556.1.4.1907
    1.2.840.113556.1.4.1948
    1.2.840.113556.1.4.1974
    1.2.840.113556.1.4.2026
    1.2.840.113556.1.4.2064
    1.2.840.113556.1.4.2065
    1.2.840.113556.1.4.2066
    1.2.840.113556.1.4.2090
    1.2.840.113556.1.4.2204
    1.2.840.113556.1.4.2205
    1.2.840.113556.1.4.2206
    1.2.840.113556.1.4.2211
    1.2.840.113556.1.4.2239
    1.2.840.113556.1.4.2255
    1.2.840.113556.1.4.2256
    1.2.840.113556.1.4.2309
    1.2.840.113556.1.4.2330
    1.2.840.113556.1.4.2354
    1.2.840.113556.1.4.319
    1.2.840.113556.1.4.417
    1.2.840.113556.1.4.473
    1.2.840.113556.1.4.474
    1.2.840.113556.1.4.521
    1.2.840.113556.1.4.528
    1.2.840.113556.1.4.529
    1.2.840.113556.1.4.619
    1.2.840.113556.1.4.801
    1.2.840.113556.1.4.802
    1.2.840.113556.1.4.805
    1.2.840.113556.1.4.841
    1.2.840.113556.1.4.970
    2.16.840.1.113730.3.4.10
    2.16.840.1.113730.3.4.9
  SupportedCapabilities:
    1.2.840.113556.1.4.1670
    1.2.840.113556.1.4.1791
    1.2.840.113556.1.4.1935
    1.2.840.113556.1.4.2080
    1.2.840.113556.1.4.2237
    1.2.840.113556.1.4.800
  SubschemaSubentry: CN=Aggregate,CN=Schema,CN=Configuration,DC=ksw-legal,DC=de
  ServerName: CN=SERVER,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=ksw-legal,DC=de
  SchemaNamingContext: CN=Schema,CN=Configuration,DC=ksw-legal,DC=de
  RootDomainNamingContext: DC=ksw-legal,DC=de
  NamingContexts:
    CN=Configuration,DC=ksw-legal,DC=de
    CN=Schema,CN=Configuration,DC=ksw-legal,DC=de
    DC=DomainDnsZones,DC=ksw-legal,DC=de
    DC=ForestDnsZones,DC=ksw-legal,DC=de
    DC=ksw-legal,DC=de
  LdapServiceName: ksw-legal.de:server$@KSW-LEGAL.DE
  IsSynchronized: TRUE
  IsGlobalCatalogReady: TRUE
  HighestCommittedUSN: 87647868
  ForestFunctionality: 7
  DsServiceName: CN=NTDS Settings,CN=SERVER,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=ksw-legal,DC=de
  DomainFunctionality: 7
  DnsHostName: server.ksw-legal.de
  DefaultNamingContext: DC=ksw-legal,DC=de
  CurrentTime: 20250306190247.0Z
  ConfigurationNamingContext: CN=Configuration,DC=ksw-legal,DC=de

3391 / udp

449181623 | 2025-03-13T14:15:10.418579

\x16\xfe\xff\x00\x00\x00\x00\x00\x00\x00\x00\x00/\x03\x00\x00#\x00\x00\x00\x00\x00\x00\x00#\xfe\xff \x13\xfd\xbfY;\x99\x1bv\xd2D\x1c\xe4\xbcj`\x1c\xbd3\x88Or\x88J\xca\xbc{\xb4\xf5[\xf9 \x91

5357 / tcp

-1684583448 | 2025-03-15T11:32:14.839874

Hashes

hash

-434821866

http.dom_hash

1386055181

http.html_hash

-1684583448

http.server_hash

-761617706

http.title_hash

-1682908569

Service Unavailable

HTTP/1.1 503 Service Unavailable
Content-Type: text/html; charset=us-ascii
Server: Microsoft-HTTPAPI/2.0
Date: Sat, 15 Mar 2025 11:32:15 GMT
Connection: close
Content-Length: 326

152.53.44.220

Last Seen: 2025-03-22

Tags:

GeneralInformation

OpenPorts

53 / tcp

-553166942 | 2025-03-17T05:12:57.812387

80 / tcp

1489525118 | 2025-03-10T14:38:36.497084

Hashes

Microsoft HTTPAPI httpd2.0

88 / udp

1185853813 | 2025-03-04T00:22:45.179360

Windows 2003 Kerberos

123 / udp

-1607218538 | 2025-03-21T22:48:09.674458

135 / tcp

-515705500 | 2025-03-22T00:34:20.403810

Microsoft RPC Endpoint Mapper

389 / tcp

1499092900 | 2025-03-14T13:22:36.579005

389 / udp

-1957052212 | 2025-03-04T21:21:06.736891

443 / tcp

703707298 | 2025-03-22T01:41:04.372936

Hashes

Microsoft IIS httpd10.0

445 / tcp

1166352837 | 2025-03-15T18:20:17.196658

593 / tcp

-348257795 | 2025-03-07T17:04:50.739131

Microsoft RPC Endpoint Mapper over HTTP

636 / tcp

511896969 | 2025-03-11T23:37:31.170717

3268 / tcp

-763444185 | 2025-03-06T19:02:48.366426

3391 / udp

449181623 | 2025-03-13T14:15:10.418579

5357 / tcp

-1684583448 | 2025-03-15T11:32:14.839874

Hashes

Products

Pricing

Contact Us

152.53.44.220

Last Seen: 2025-03-22

Tags:

GeneralInformation

OpenPorts

53 / tcp -553166942 | 2025-03-17T05:12:57.812387

80 / tcp 1489525118 | 2025-03-10T14:38:36.497084

Hashes

Microsoft HTTPAPI httpd2.0

88 / udp 1185853813 | 2025-03-04T00:22:45.179360

Windows 2003 Kerberos

123 / udp -1607218538 | 2025-03-21T22:48:09.674458

135 / tcp -515705500 | 2025-03-22T00:34:20.403810

Microsoft RPC Endpoint Mapper

389 / tcp 1499092900 | 2025-03-14T13:22:36.579005

389 / udp -1957052212 | 2025-03-04T21:21:06.736891

443 / tcp 703707298 | 2025-03-22T01:41:04.372936

Hashes

Microsoft IIS httpd10.0

445 / tcp 1166352837 | 2025-03-15T18:20:17.196658

593 / tcp -348257795 | 2025-03-07T17:04:50.739131

Microsoft RPC Endpoint Mapper over HTTP

636 / tcp 511896969 | 2025-03-11T23:37:31.170717

3268 / tcp -763444185 | 2025-03-06T19:02:48.366426

3391 / udp 449181623 | 2025-03-13T14:15:10.418579

5357 / tcp -1684583448 | 2025-03-15T11:32:14.839874

Hashes

Products

Pricing

Contact Us

53 / tcp

-553166942 | 2025-03-17T05:12:57.812387

80 / tcp

1489525118 | 2025-03-10T14:38:36.497084

88 / udp

1185853813 | 2025-03-04T00:22:45.179360

123 / udp

-1607218538 | 2025-03-21T22:48:09.674458

135 / tcp

-515705500 | 2025-03-22T00:34:20.403810

389 / tcp

1499092900 | 2025-03-14T13:22:36.579005

389 / udp

-1957052212 | 2025-03-04T21:21:06.736891

443 / tcp

703707298 | 2025-03-22T01:41:04.372936

445 / tcp

1166352837 | 2025-03-15T18:20:17.196658

593 / tcp

-348257795 | 2025-03-07T17:04:50.739131

636 / tcp

511896969 | 2025-03-11T23:37:31.170717

3268 / tcp

-763444185 | 2025-03-06T19:02:48.366426

3391 / udp

449181623 | 2025-03-13T14:15:10.418579

5357 / tcp

-1684583448 | 2025-03-15T11:32:14.839874