Microsoft ftpd

220 Microsoft FTP Service
530 User cannot log in.
214-The following commands are recognized (* ==>'s unimplemented).
    ABOR 
    ACCT 
    ADAT *
    ALLO 
    APPE 
    AUTH 
    CCC 
    CDUP 
    CWD 
    DELE 
    ENC *
    EPRT 
    EPSV 
    FEAT 
    HELP 
    HOST 
    LANG 
    LIST 
    MDTM 
    MIC *
    MKD 
    MODE 
    NLST 
    NOOP 
    OPTS 
    PASS 
    PASV 
    PBSZ 
    PORT 
    PROT 
    PWD 
    QUIT 
    REIN 
    REST 
    RETR 
    RMD 
    RNFR 
    RNTO 
    SITE 
    SIZE 
    SMNT 
    STAT 
    STOR 
    STOU 
    STRU 
    SYST 
    TYPE 
    USER 
    XCUP 
    XCWD 
    XMKD 
    XPWD 
    XRMD 
214 HELP command successful.
211-Extended features supported:
 LANG EN*
 UTF8
 AUTH TLS;TLS-C;SSL;TLS-P;
 PBSZ
 PROT C;P;
 CCC
 HOST
 SIZE
 MDTM
 REST STREAM
211 END

Microsoft IIS httpd8.5

HTTP/1.1 200 OK
Content-Type: text/html
Last-Modified: Mon, 28 Mar 2022 12:41:28 GMT
Accept-Ranges: bytes
ETag: "31cf2e25a142d81:0"
Server: Microsoft-IIS/8.5
X-Powered-By: ASP.NET
Date: Fri, 07 Mar 2025 16:44:19 GMT
Content-Length: 701

Remote Desktop Protocol

Remote Desktop Protocol
\x03\x00\x00\x13\x0e\xd0\x00\x00\x124\x00\x02\x0f\x08\x00\x02\x00\x00\x00
Remote Desktop Protocol NTLM Info:
  OS: Windows 8.1/Windows Server 2012 R2
  OS Build: 6.3.9600
  Target Name: VMI34926
  NetBIOS Domain Name: VMI34926
  NetBIOS Computer Name: VMI34926
  DNS Domain Name: vmi34926
  FQDN: vmi34926

I encrypted your system using a vulnerability in your system.
If you want your information, you have to pay us.
The ransomware project I used on your system is a completely custom project. It cannot be broken. It cannot be
solved.
People who say they can help you often come to us and ask for help on your behalf.
In this case, you will have to pay more than you normally pay. If you contact us directly, the fee you will pay will
be lower.
You may not trust us. But we do our best to help you.
We can open your data within 48 hours and direct you to a company we have helped.
We want you to know that we have references all over the world.
We will open the encrypted data. This is our job. We get paid and help. We close your security gaps. We ensure
your security and give advice.
What you will buy from us is not just your data. It is also your security.
Our goal is to return the hacked systems to you.
However, we want to be paid for our services.
The most important thing we want from you. You have to be fast. React quickly when communicating and solve
the situation quickly. We do not want to waste time.
We can prove to you that we can open encrypted data.
You can send us any sample file with file extensions .png, jpg, avi, pdf that you dont care about. We will send
you the file back in working condition.
OTe ieee eee Le TeRe) ecm ee me om Can
You can send us your database files. After we run your database file, we can send you a screenshot of the table
you want.
Email address: informationcenterx3&gmail.com
You Will Send Us This Key: ZGiwyzapyM8dGqaPtdrcXVeQEAcMZmdX944shrDoGEencryptfile
am Windows Server 2012R2

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            22:d8:5e:df:f8:b8:ee:a3:41:71:a9:ed:ee:5a:3d:07
        Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=vmi34926
        Validity
            Not Before: Feb 17 08:30:15 2025 GMT
            Not After : Aug 19 08:30:15 2025 GMT
        Subject: CN=vmi34926
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                Public-Key: (2048 bit)
                Modulus:
                    00:92:61:7a:3e:30:0b:05:d7:53:bb:75:c3:a0:f2:
                    b2:47:21:23:b0:51:6f:c5:7d:17:0d:a3:23:a8:ac:
                    43:61:dc:4f:90:94:aa:7f:14:44:43:86:f8:2a:88:
                    c4:a7:f3:c5:37:99:fd:06:87:f0:60:16:41:d3:15:
                    9e:ab:44:6f:49:1a:77:1a:74:cf:51:f2:d3:e3:d2:
                    6d:4b:fd:6e:15:df:47:26:e4:3f:cd:7e:f2:a4:de:
                    53:b1:87:84:ba:dc:c4:f0:e8:42:d6:72:80:54:1b:
                    94:7a:a6:4f:5a:7c:fa:42:63:bf:5f:20:7c:17:f2:
                    4a:91:3f:c8:41:96:30:a2:aa:27:48:af:71:0d:3c:
                    4b:84:f4:f0:5d:7c:f0:c0:74:19:62:68:15:82:92:
                    91:60:82:db:7d:7d:b7:88:76:04:98:45:3d:87:d3:
                    fa:de:f6:bb:71:76:8f:12:ef:a1:87:74:5e:ed:b5:
                    7a:46:e1:57:f8:b5:df:40:1f:dc:12:74:ab:c6:c7:
                    71:c1:9a:7d:60:84:3b:c5:13:a2:89:af:44:17:72:
                    68:b1:7d:b4:c3:93:2d:1b:a9:fc:01:51:71:3d:6f:
                    f2:51:97:ac:01:13:de:c3:4a:dd:88:51:16:f7:9c:
                    d8:e2:88:79:52:82:96:a2:27:a9:c6:35:7b:30:bc:
                    4e:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Extended Key Usage: 
                TLS Web Server Authentication
            X509v3 Key Usage: 
                Key Encipherment, Data Encipherment
    Signature Algorithm: sha256WithRSAEncryption
    Signature Value:
        4f:15:b4:62:e1:55:14:6f:6a:e0:84:e8:b0:89:ff:39:98:8a:
        c3:6c:59:dc:1a:60:5a:93:a6:d6:9f:41:86:3b:60:a1:15:ad:
        91:c3:4e:76:b5:7a:31:71:5c:78:95:b2:30:5e:89:4d:f7:46:
        dd:81:91:dd:76:5f:d0:32:8e:6b:37:68:68:e5:71:95:7d:ac:
        d9:f3:eb:3e:1b:17:64:79:37:e6:9d:7a:4c:8a:af:9c:50:8c:
        a4:51:2f:9a:1e:c1:04:fe:18:99:69:e5:77:8c:3b:86:8f:23:
        dc:69:1a:39:9f:a6:b1:19:95:61:d2:08:7f:36:b6:3b:a5:e1:
        9c:07:b0:fc:09:72:b2:3a:4b:5f:c9:68:65:9a:b9:83:7c:a3:
        9c:d3:3b:fb:48:a3:bd:3a:11:cb:3c:59:7b:53:bd:64:23:2a:
        d8:8b:a3:df:61:8d:4e:dc:45:fd:de:15:10:8d:7d:f1:55:7c:
        26:68:ea:7f:d2:61:a1:38:dc:f5:bb:da:49:27:fa:26:8b:56:
        db:fb:7f:aa:dd:2c:00:a2:4a:05:86:ff:82:e5:28:9e:e0:ac:
        39:e3:6b:c0:5a:ee:7b:d8:c3:f7:99:85:e6:0c:de:43:4a:e9:
        73:2f:bc:b8:29:1a:9c:60:33:64:40:d8:f7:f9:c3:57:df:73:
        b3:16:c2:f2

PostgreSQL9.6.0 or later

PostgreSQL
fe_sendauth: no password supplied