| Country | China |
| City | Shanghai |
| Organization | Hangzhou Silk Road Information Technologies Co.,Ltd. |
| ISP | CHINANET-BACKBONE |
| ASN | AS4134 |
Microsoft RPC Endpoint Mapper
d95afe70-a6d5-4259-822e-2c84da1ddb0d
version: v1.0
protocol: [MS-RSP]: Remote Shutdown Protocol
provider: wininit.exe
ncacn_ip_tcp: 211.155.226.53:49152
ncalrpc: WindowsShutdown
ncacn_np: \\WIN-TU5UK2DLK6J\PIPE\InitShutdown
ncalrpc: WMsgKRpc0462E60
76f226c3-ec14-4325-8a99-6a46348418af
version: v1.0
provider: winlogon.exe
ncalrpc: WindowsShutdown
ncacn_np: \\WIN-TU5UK2DLK6J\PIPE\InitShutdown
ncalrpc: WMsgKRpc0462E60
ncalrpc: WMsgKRpc0AAA8F2
ncalrpc: WMsgKRpc0CCCFFC83
c9ac6db5-82b7-4e55-ae8a-e464ed7b4277
version: v1.0
annotation: Impl friendly name
provider: sysntfy.dll
ncalrpc: LRPC-ee6af6c123aa58c1f7
ncacn_np: \\WIN-TU5UK2DLK6J\PIPE\srvsvc
ncacn_ip_tcp: 211.155.226.53:49154
ncacn_np: \\WIN-TU5UK2DLK6J\PIPE\atsvc
ncalrpc: senssvc
ncalrpc: OLECCB251CCDDD34239AB5865E4FD5E
ncalrpc: IUserProfile2
ncalrpc: senssvc
ncalrpc: OLECCB251CCDDD34239AB5865E4FD5E
ncalrpc: IUserProfile2
ncalrpc: IUserProfile2
ncalrpc: IUserProfile2
3c4728c5-f0ab-448b-bda1-6ce01eb0a6d5
version: v1.0
annotation: DHCP Client LRPC Endpoint
provider: dhcpcsvc.dll
ncalrpc: dhcpcsvc
ncalrpc: dhcpcsvc6
ncacn_ip_tcp: 211.155.226.53:49153
ncacn_np: \\WIN-TU5UK2DLK6J\pipe\eventlog
ncalrpc: eventlog
3c4728c5-f0ab-448b-bda1-6ce01eb0a6d6
version: v1.0
annotation: DHCPv6 Client LRPC Endpoint
provider: dhcpcsvc6.dll
ncalrpc: dhcpcsvc6
ncacn_ip_tcp: 211.155.226.53:49153
ncacn_np: \\WIN-TU5UK2DLK6J\pipe\eventlog
ncalrpc: eventlog
30adc50c-5cbc-46ce-9a0e-91914789e23c
version: v1.0
annotation: NRP server endpoint
provider: nrpsrv.dll
ncacn_ip_tcp: 211.155.226.53:49153
ncacn_np: \\WIN-TU5UK2DLK6J\pipe\eventlog
ncalrpc: eventlog
f6beaff7-1e19-4fbb-9f8f-b89e2018337c
version: v1.0
annotation: Event log TCPIP
protocol: [MS-EVEN6]: EventLog Remoting Protocol
provider: wevtsvc.dll
ncacn_ip_tcp: 211.155.226.53:49153
ncacn_np: \\WIN-TU5UK2DLK6J\pipe\eventlog
ncalrpc: eventlog
30b044a5-a225-43f0-b3a4-e060df91f9c1
version: v1.0
provider: certprop.dll
ncacn_np: \\WIN-TU5UK2DLK6J\PIPE\srvsvc
ncacn_ip_tcp: 211.155.226.53:49154
ncacn_np: \\WIN-TU5UK2DLK6J\PIPE\atsvc
ncalrpc: senssvc
ncalrpc: OLECCB251CCDDD34239AB5865E4FD5E
ncalrpc: IUserProfile2
98716d03-89ac-44c7-bb8c-285824e51c4a
version: v1.0
annotation: XactSrv service
provider: srvsvc.dll
ncacn_ip_tcp: 211.155.226.53:49154
ncacn_np: \\WIN-TU5UK2DLK6J\PIPE\atsvc
ncalrpc: senssvc
ncalrpc: OLECCB251CCDDD34239AB5865E4FD5E
ncalrpc: IUserProfile2
552d076a-cb29-4e44-8b6a-d15e59e2c0af
version: v1.0
annotation: IP Transition Configuration endpoint
provider: iphlpsvc.dll
ncacn_ip_tcp: 211.155.226.53:49154
ncacn_np: \\WIN-TU5UK2DLK6J\PIPE\atsvc
ncalrpc: senssvc
ncalrpc: OLECCB251CCDDD34239AB5865E4FD5E
ncalrpc: IUserProfile2
a398e520-d59a-4bdd-aa7a-3c1e0303a511
version: v1.0
annotation: IKE/Authip API
provider: IKEEXT.DLL
ncacn_ip_tcp: 211.155.226.53:49154
ncacn_np: \\WIN-TU5UK2DLK6J\PIPE\atsvc
ncalrpc: senssvc
ncalrpc: OLECCB251CCDDD34239AB5865E4FD5E
ncalrpc: IUserProfile2
86d35949-83c9-4044-b424-db363231fd0c
version: v1.0
protocol: [MS-TSCH]: Task Scheduler Service Remoting Protocol
provider: schedsvc.dll
ncacn_ip_tcp: 211.155.226.53:49154
ncacn_np: \\WIN-TU5UK2DLK6J\PIPE\atsvc
ncalrpc: senssvc
ncalrpc: OLECCB251CCDDD34239AB5865E4FD5E
ncalrpc: IUserProfile2
378e52b0-c0a9-11cf-822d-00aa0051e40f
version: v1.0
protocol: [MS-TSCH]: Task Scheduler Service Remoting Protocol
provider: taskcomp.dll
ncacn_np: \\WIN-TU5UK2DLK6J\PIPE\atsvc
ncalrpc: senssvc
ncalrpc: OLECCB251CCDDD34239AB5865E4FD5E
ncalrpc: IUserProfile2
1ff70682-0a51-30e8-076d-740be8cee98b
version: v1.0
protocol: [MS-TSCH]: Task Scheduler Service Remoting Protocol
provider: taskcomp.dll
ncacn_np: \\WIN-TU5UK2DLK6J\PIPE\atsvc
ncalrpc: senssvc
ncalrpc: OLECCB251CCDDD34239AB5865E4FD5E
ncalrpc: IUserProfile2
0a74ef1c-41a4-4e06-83ae-dc74fb1cdd53
version: v1.0
provider: schedsvc.dll
ncalrpc: senssvc
ncalrpc: OLECCB251CCDDD34239AB5865E4FD5E
ncalrpc: IUserProfile2
2eb08e3e-639f-4fba-97b1-14f878961076
version: v1.0
provider: gpsvc.dll
ncalrpc: IUserProfile2
3473dd4d-2e88-4006-9cba-22570909dd10
version: v5.256
annotation: WinHttp Auto-Proxy Service
ncacn_np: \\WIN-TU5UK2DLK6J\PIPE\W32TIME_ALT
ncalrpc: W32TIME_ALT
ncalrpc: LRPC-c3663dbd8209a6c9b7
ncalrpc: OLEDB0AE0B4A067462D95663F065092
7ea70bcf-48af-4f6a-8968-6a440754d5fa
version: v1.0
annotation: NSI server endpoint
provider: nsisvc.dll
ncalrpc: LRPC-c3663dbd8209a6c9b7
ncalrpc: OLEDB0AE0B4A067462D95663F065092
2fb92682-6599-42dc-ae13-bd2ca89bd11c
version: v1.0
annotation: Fw APIs
provider: MPSSVC.dll
ncalrpc: LRPC-039787a9c20d7b1bbd
7f9d11bf-7fb9-436b-a812-b2d50c5d4c03
version: v1.0
annotation: Fw APIs
provider: MPSSVC.dll
ncalrpc: LRPC-039787a9c20d7b1bbd
dd490425-5325-4565-b774-7e27d6c09c24
version: v1.0
annotation: Base Firewall Engine API
provider: BFE.DLL
ncalrpc: LRPC-039787a9c20d7b1bbd
4a452661-8290-4b36-8fbe-7f4093a94978
version: v1.0
annotation: Spooler function endpoint
provider: spoolsv.exe
ncalrpc: spoolss
ae33069b-a2a8-46ee-a235-ddfd339be281
version: v1.0
annotation: Spooler base remote object endpoint
protocol: [MS-PAN]: Print System Asynchronous Notification Protocol
provider: spoolsv.exe
ncalrpc: spoolss
0b6edbfa-4a24-4fc6-8a23-942b1eca65d1
version: v1.0
annotation: Spooler function endpoint
protocol: [MS-PAN]: Print System Asynchronous Notification Protocol
provider: spoolsv.exe
ncalrpc: spoolss
12345778-1234-abcd-ef00-0123456789ac
version: v1.0
protocol: [MS-SAMR]: Security Account Manager (SAM) Remote Protocol
provider: samsrv.dll
ncacn_ip_tcp: 211.155.226.53:49182
ncalrpc: samss lpc
ncalrpc: dsrole
ncacn_np: \\WIN-TU5UK2DLK6J\PIPE\protected_storage
ncalrpc: protected_storage
ncalrpc: lsasspirpc
ncalrpc: lsapolicylookup
ncalrpc: LSARPC_ENDPOINT
ncalrpc: securityevent
ncalrpc: audit
ncalrpc: LRPC-2d0cd95232777cd4b7
ncacn_np: \\WIN-TU5UK2DLK6J\pipe\lsass
367abb81-9844-35f1-ad32-98f038001003
version: v2.0
protocol: [MS-SCMR]: Service Control Manager Remote Protocol
provider: services.exe
ncacn_ip_tcp: 211.155.226.53:49187
12345678-1234-abcd-ef00-0123456789ab
version: v1.0
annotation: IPSec Policy agent endpoint
protocol: [MS-RPRN]: Print System Remote Protocol
provider: spoolsv.exe
ncalrpc: LRPC-8abeee80327d54c24b
ncacn_ip_tcp: 211.155.226.53:49188
6b5bdd1e-528c-422c-af8c-a4079be4fe48
version: v1.0
annotation: Remote Fw APIs
protocol: [MS-FASP]: Firewall and Advanced Security Protocol
provider: FwRemoteSvr.dll
ncacn_ip_tcp: 211.155.226.53:49188
76209fe5-9049-4336-ba84-632d907cb154
version: v1.0
annotation: Interprocess Logon Service
ncalrpc: ReportingServices$MSRS10_50.MSSQLSERVER
ncalrpc: OLE42DCE45C6A254755BCFA52CA6939
12e65dd8-887f-41ef-91bf-8d816c42c2e7
version: v1.0
annotation: Secure Desktop LRPC interface
provider: winlogon.exe
ncalrpc: WMsgKRpc0AAA8F2
ac109027-2eb9-4d3e-ab82-d2f8da000d5d
version: v1.0
ncalrpc: {8925C90C-6F3F-45AF-98C0-E81886914AA8}
ncalrpc: {533D49E0-1325-4f6a-B887-F038F5DE78BC}
ncalrpc: OLED77F26317A544CC18E7DEC07699B
24019106-a203-4642-b88d-82dae9158929
version: v1.0
provider: authui.dll
ncalrpc: LRPC-a20f927cd2d9d0d6f0
HTTP/1.1 403 Forbidden Server: HASP LM/16.00 Date: Sun, 09 Mar 2025 16:44:50 GMT Content-Type: text/html Content-Length: 137
HTTP/1.1 200 OK Content-Type: text/html Last-Modified: Mon, 13 Dec 2021 05:31:32 GMT Accept-Ranges: bytes ETag: "df6f9afe2efd71:0" Server: Microsoft-IIS/7.5 X-Powered-By: ASP.NET Date: Tue, 01 Apr 2025 10:50:26 GMT Content-Length: 689
SSL Error: TLSV1_ALERT_INTERNAL_ERROR
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
16:90:1d:8e:fd:b0:dc:9f:4c:a1:96:99:2b:64:68:8e
Signature Algorithm: sha1WithRSAEncryption
Issuer: CN=WIN-TU5UK2DLK6J
Validity
Not Before: Nov 6 09:07:19 2024 GMT
Not After : May 8 09:07:19 2025 GMT
Subject: CN=WIN-TU5UK2DLK6J
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
Public-Key: (2048 bit)
Modulus:
00:d5:9f:cf:8d:3e:08:b4:23:a4:9e:a7:70:6d:bd:
6c:42:37:9e:96:6d:1f:10:1b:ff:33:fc:d3:86:2a:
3f:7d:ce:07:31:54:3f:cc:1f:d6:12:77:f1:c4:fe:
46:a5:e4:0d:29:77:7d:65:2a:a3:54:15:6c:18:5c:
a5:43:76:b9:ec:58:e8:23:23:89:f8:18:c3:09:5b:
73:76:6c:f0:26:c3:d8:c4:1d:c4:6b:27:9d:6a:85:
48:aa:6e:61:2e:93:ee:02:49:ec:b4:ca:a4:9d:d7:
13:23:6a:32:c3:de:1b:8e:2a:75:f0:3f:1f:a1:77:
e5:a9:ee:d9:77:57:28:8e:7b:30:00:69:cb:69:13:
8b:81:d4:6d:6e:09:b9:51:2c:8e:62:e8:c6:51:c0:
33:4c:44:d6:92:86:2a:b2:65:96:9f:b7:b2:62:3c:
66:19:16:20:c0:3e:81:10:eb:2b:b9:13:86:63:e0:
79:3c:73:b0:84:10:9b:88:f9:df:17:99:14:76:64:
6d:4d:4b:06:e0:40:aa:82:c8:01:af:99:6e:86:04:
8a:dc:69:d1:13:7c:62:f9:21:46:45:6a:a6:4d:0d:
05:b7:3c:fa:fe:c8:b7:33:8a:ae:5f:77:22:36:97:
27:26:f6:b5:46:65:fe:25:26:46:d3:ba:db:42:8b:
b5:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Extended Key Usage:
TLS Web Server Authentication
X509v3 Key Usage:
Key Encipherment, Data Encipherment
Signature Algorithm: sha1WithRSAEncryption
Signature Value:
26:33:7e:3a:48:f2:05:5b:54:12:4c:dd:42:24:ec:47:03:40:
50:a7:44:2d:ba:7b:d2:36:c1:53:11:6a:17:71:15:a7:d3:f5:
48:86:ee:a8:e7:df:50:c5:3c:e2:69:6a:d8:4e:31:5d:15:4f:
5a:f1:5f:06:a6:c9:4b:15:a5:32:3b:02:5c:bc:f8:10:11:d7:
6a:66:81:90:64:32:26:ed:30:f4:c7:df:18:54:bb:07:51:c7:
dc:da:c9:bc:69:cf:a9:0c:70:5e:a9:52:37:d5:1b:12:33:63:
0f:cd:b3:62:d8:cf:89:b8:71:df:eb:c6:5f:3c:d8:b7:b7:a2:
b9:a9:16:e1:6d:40:bf:8d:2a:3d:33:4a:70:44:6f:eb:bb:22:
c3:b7:50:96:f8:1c:95:5a:cb:53:a8:1d:7f:10:c3:3a:ec:2d:
cc:d5:26:ad:77:1a:69:99:e0:96:63:c2:54:71:b2:57:41:0b:
b5:61:3d:26:09:f1:9e:b1:4c:f2:22:f3:6f:24:fd:61:89:32:
14:51:c8:69:c8:72:e2:07:2a:27:aa:5d:25:c2:c1:a0:e2:4d:
88:7a:6a:5a:69:d9:2a:ec:9b:87:cb:10:1a:5b:94:b8:a2:32:
b6:39:83:3e:b8:66:e9:9f:8a:f0:9c:08:f2:e4:16:bc:96:47:
f3:b5:f7:72