1567633029 | 2024-12-20T17:56:32.546626
135 /
tcp
Microsoft RPC Endpoint Mapper
3c4728c5-f0ab-448b-bda1-6ce01eb0a6d5
version: v1.0
annotation: DHCP Client LRPC Endpoint
provider: dhcpcsvc.dll
ncalrpc: dhcpcsvc
0a74ef1c-41a4-4e06-83ae-dc74fb1cdd53
version: v1.0
provider: schedsvc.dll
ncacn_np: \\DVPTWJAOCUZITRL\PIPE\atsvc
ncalrpc: OLEB42A9956D3EE4AC8AA82BF541DD9
ncalrpc: wzcsvc
378e52b0-c0a9-11cf-822d-00aa0051e40f
version: v1.0
protocol: [MS-TSCH]: Task Scheduler Service Remoting Protocol
provider: taskcomp.dll
ncacn_np: \\DVPTWJAOCUZITRL\PIPE\atsvc
ncalrpc: OLEB42A9956D3EE4AC8AA82BF541DD9
ncalrpc: wzcsvc
1ff70682-0a51-30e8-076d-740be8cee98b
version: v1.0
protocol: [MS-TSCH]: Task Scheduler Service Remoting Protocol
provider: taskcomp.dll
ncacn_np: \\DVPTWJAOCUZITRL\PIPE\atsvc
ncalrpc: OLEB42A9956D3EE4AC8AA82BF541DD9
ncalrpc: wzcsvc
12345678-1234-abcd-ef00-0123456789ab
version: v1.0
annotation: IPSec Policy agent endpoint
protocol: [MS-RPRN]: Print System Remote Protocol
provider: spoolsv.exe
ncacn_ip_tcp: 220.188.51.160:1025
ncalrpc: dsrole
ncacn_np: \\DVPTWJAOCUZITRL\PIPE\protected_storage
ncalrpc: protected_storage
ncalrpc: securityevent
ncalrpc: audit
ncacn_np: \\DVPTWJAOCUZITRL\PIPE\lsass
12345778-1234-abcd-ef00-0123456789ac
version: v1.0
protocol: [MS-SAMR]: Security Account Manager (SAM) Remote Protocol
provider: samsrv.dll
ncacn_ip_tcp: 220.188.51.160:1025
ncalrpc: dsrole
ncacn_np: \\DVPTWJAOCUZITRL\PIPE\protected_storage
ncalrpc: protected_storage
ncalrpc: securityevent
ncalrpc: audit
ncacn_np: \\DVPTWJAOCUZITRL\PIPE\lsass
906b0ce0-c70b-1067-b317-00dd010662da
version: v1.0
protocol: [MS-CMPO]: MSDTC Connection Manager:
provider: msdtcprx.dll
ncalrpc: LRPC000005d8.00000001
ncalrpc: LRPC000005d8.00000001
ncalrpc: LRPC000005d8.00000001
ncalrpc: LRPC000005d8.00000001
ncalrpc: LRPC00000808.00000001
ncalrpc: OLE0694C6570C8B47438B918B14E952
2f5f6521-cb55-1059-b446-00df0bce31db
version: v1.0
annotation: Unimodem LRPC Endpoint
ncalrpc: unimdmsvc
ncalrpc: tapsrvlpc
ncacn_np: \\DVPTWJAOCUZITRL\pipe\tapsrv
3473dd4d-2e88-4006-9cba-22570909dd10
version: v5.256
annotation: WinHttp Auto-Proxy Service
ncacn_np: \\DVPTWJAOCUZITRL\PIPE\W32TIME_ALT
ncalrpc: W32TIME_ALT
-575327518 | 2024-12-05T03:01:10.071258
5000 /
tcp
HTTP/1.1 200 OK
Date: Thu, 05 Dec 2024 03:01:09 GMT
Content-Type: text/html;charset=UTF-8
Content-Length: 1720
Last-Modified: Thu, 14 Nov 2024 09:00:57 GMT
Connection: close
Server: Nginx
Expires: 0
Pragma: no-cache
Cache-Control: no-cache
X-LANG: 1
X-Timezone: 0800
X-Timestamp: 1733367669
X-Arch: x86
X-Sysbit: x64
X-Enterprise: 0
X-Support-i18n: 0
X-Support-wifi: 0
X-Default-IP: 0
ETag: "6735bc49-6b8"
Accept-Ranges: bytes
-1000012517 | 2024-12-05T12:31:57.070471
9981 /
tcp
HTTP/1.1 200 OK
Date: Thu, 05 Dec 2024 12:31:56 GMT
Content-Length: 44
Content-Type: text/plain; charset=utf-8