MSRPC
Nmap discovered a MSRPC service running on the ports 135
and 593
of the nara.nara-security.com
(192.168.209.30
) host.
The running service is Microsoft Windows RPC
┌──(kali㉿kali)-[~/PEN-200/PG_PRACTICE/nara]
└─$ rpcclient $IP -N -U ''
rpcclient $>
Session established. The target MSRPC server allows anonymous access
rpcclient $> lsaquery
Domain Name: NARASEC
Domain Sid: S-1-5-21-914744703-3800712539-3320214069
rpcclient $> dsroledominfo
Machine Role = [5]
Directory Service is running.
Domain is in native mode.
rpcclient $> srvinfo
do_cmd: Could not initialise srvsvc. Error was NT_STATUS_ACCESS_DENIED
rpcclient $> netshareenum
do_cmd: Could not initialise srvsvc. Error was NT_STATUS_ACCESS_DENIED
rpcclient $> netshareenumall
do_cmd: Could not initialise srvsvc. Error was NT_STATUS_ACCESS_DENIED
rpcclient $> netsessenum
do_cmd: Could not initialise srvsvc. Error was NT_STATUS_ACCESS_DENIED
rpcclient $> netdiskenum
do_cmd: Could not initialise srvsvc. Error was NT_STATUS_ACCESS_DENIED
rpcclient $> netconnenum
do_cmd: Could not initialise srvsvc. Error was NT_STATUS_ACCESS_DENIED
rpcclient $> dsr_enumtrustdom
1 domains returned
nara-security.com (NARASEC)
rpcclient $> enumdrivers
do_cmd: Could not initialise spoolss. Error was NT_STATUS_ACCESS_DENIED
rpcclient $> enumprinters
do_cmd: Could not initialise spoolss. Error was NT_STATUS_ACCESS_DENIED
rpcclient $> lsaenumsid
result was NT_STATUS_ACCESS_DENIED
N/A
RPC Endpoints
┌──(kali㉿kali)-[~/PEN-200/PG_PRACTICE/nara]
└─$ impacket-rpcdump $IP 1 ⨯
Impacket v0.13.0.dev0 - Copyright Fortra, LLC and its affiliated companies
[*] Retrieving endpoint list from 192.168.209.30
Protocol: [MS-NRPC]: Netlogon Remote Protocol
Provider: netlogon.dll
UUID : 12345678-1234-ABCD-EF00-01234567CFFB v1.0
Bindings:
ncacn_ip_tcp:192.168.209.30[49693]
ncalrpc:[NETLOGON_LRPC]
ncacn_np:\\NARA[\pipe\9eefc856142540dd]
ncacn_http:192.168.209.30[49684]
ncalrpc:[NTDS_LPC]
ncalrpc:[OLE36834CD94A30BC3AFF0987BF4657]
ncacn_ip_tcp:192.168.209.30[49668]
ncacn_ip_tcp:192.168.209.30[49664]
ncalrpc:[MicrosoftLaps_LRPC_0fb2f016-fe45-4a08-a7f9-a467f5e5fa0b]
ncalrpc:[samss lpc]
ncalrpc:[SidKey Local End Point]
ncalrpc:[protected_storage]
ncalrpc:[lsasspirpc]
ncalrpc:[lsapolicylookup]
ncalrpc:[LSA_EAS_ENDPOINT]
ncalrpc:[lsacap]
ncalrpc:[LSARPC_ENDPOINT]
ncalrpc:[securityevent]
ncalrpc:[audit]
ncacn_np:\\NARA[\pipe\lsass]
Protocol: [MS-RAA]: Remote Authorization API Protocol
Provider: N/A
UUID : 0B1C2170-5732-4E0E-8CD3-D9B16F3B84D7 v0.0 RemoteAccessCheck
Bindings:
ncalrpc:[NETLOGON_LRPC]
ncacn_np:\\NARA[\pipe\9eefc856142540dd]
ncacn_http:192.168.209.30[49684]
ncalrpc:[NTDS_LPC]
ncalrpc:[OLE36834CD94A30BC3AFF0987BF4657]
ncacn_ip_tcp:192.168.209.30[49668]
ncacn_ip_tcp:192.168.209.30[49664]
ncalrpc:[MicrosoftLaps_LRPC_0fb2f016-fe45-4a08-a7f9-a467f5e5fa0b]
ncalrpc:[samss lpc]
ncalrpc:[SidKey Local End Point]
ncalrpc:[protected_storage]
ncalrpc:[lsasspirpc]
ncalrpc:[lsapolicylookup]
ncalrpc:[LSA_EAS_ENDPOINT]
ncalrpc:[lsacap]
ncalrpc:[LSARPC_ENDPOINT]
ncalrpc:[securityevent]
ncalrpc:[audit]
ncacn_np:\\NARA[\pipe\lsass]
ncalrpc:[NETLOGON_LRPC]
ncacn_np:\\NARA[\pipe\9eefc856142540dd]
ncacn_http:192.168.209.30[49684]
ncalrpc:[NTDS_LPC]
ncalrpc:[OLE36834CD94A30BC3AFF0987BF4657]
ncacn_ip_tcp:192.168.209.30[49668]
ncacn_ip_tcp:192.168.209.30[49664]
ncalrpc:[MicrosoftLaps_LRPC_0fb2f016-fe45-4a08-a7f9-a467f5e5fa0b]
ncalrpc:[samss lpc]
ncalrpc:[SidKey Local End Point]
ncalrpc:[protected_storage]
ncalrpc:[lsasspirpc]
ncalrpc:[lsapolicylookup]
ncalrpc:[LSA_EAS_ENDPOINT]
ncalrpc:[lsacap]
ncalrpc:[LSARPC_ENDPOINT]
ncalrpc:[securityevent]
ncalrpc:[audit]
ncacn_np:\\NARA[\pipe\lsass]
Protocol: [MS-LSAT]: Local Security Authority (Translation Methods) Remote
Provider: lsasrv.dll
UUID : 12345778-1234-ABCD-EF00-0123456789AB v0.0
Bindings:
ncacn_np:\\NARA[\pipe\9eefc856142540dd]
ncacn_http:192.168.209.30[49684]
ncalrpc:[NTDS_LPC]
ncalrpc:[OLE36834CD94A30BC3AFF0987BF4657]
ncacn_ip_tcp:192.168.209.30[49668]
ncacn_ip_tcp:192.168.209.30[49664]
ncalrpc:[MicrosoftLaps_LRPC_0fb2f016-fe45-4a08-a7f9-a467f5e5fa0b]
ncalrpc:[samss lpc]
ncalrpc:[SidKey Local End Point]
ncalrpc:[protected_storage]
ncalrpc:[lsasspirpc]
ncalrpc:[lsapolicylookup]
ncalrpc:[LSA_EAS_ENDPOINT]
ncalrpc:[lsacap]
ncalrpc:[LSARPC_ENDPOINT]
ncalrpc:[securityevent]
ncalrpc:[audit]
ncacn_np:\\NARA[\pipe\lsass]
Protocol: [MS-DRSR]: Directory Replication Service (DRS) Remote Protocol
Provider: ntdsai.dll
UUID : E3514235-4B06-11D1-AB04-00C04FC2DCD2 v4.0 MS NT Directory DRS Interface
Bindings:
ncacn_np:\\NARA[\pipe\9eefc856142540dd]
ncacn_http:192.168.209.30[49684]
ncalrpc:[NTDS_LPC]
ncalrpc:[OLE36834CD94A30BC3AFF0987BF4657]
ncacn_ip_tcp:192.168.209.30[49668]
ncacn_ip_tcp:192.168.209.30[49664]
ncalrpc:[MicrosoftLaps_LRPC_0fb2f016-fe45-4a08-a7f9-a467f5e5fa0b]
ncalrpc:[samss lpc]
ncalrpc:[SidKey Local End Point]
ncalrpc:[protected_storage]
ncalrpc:[lsasspirpc]
ncalrpc:[lsapolicylookup]
ncalrpc:[LSA_EAS_ENDPOINT]
ncalrpc:[lsacap]
ncalrpc:[LSARPC_ENDPOINT]
ncalrpc:[securityevent]
ncalrpc:[audit]
ncacn_np:\\NARA[\pipe\lsass]
Protocol: N/A
Provider: sysntfy.dll
UUID : C9AC6DB5-82B7-4E55-AE8A-E464ED7B4277 v1.0 Impl friendly name
Bindings:
ncalrpc:[OLE36834CD94A30BC3AFF0987BF4657]
ncacn_ip_tcp:192.168.209.30[49668]
ncacn_ip_tcp:192.168.209.30[49664]
ncalrpc:[MicrosoftLaps_LRPC_0fb2f016-fe45-4a08-a7f9-a467f5e5fa0b]
ncalrpc:[samss lpc]
ncalrpc:[SidKey Local End Point]
ncalrpc:[protected_storage]
ncalrpc:[lsasspirpc]
ncalrpc:[lsapolicylookup]
ncalrpc:[LSA_EAS_ENDPOINT]
ncalrpc:[lsacap]
ncalrpc:[LSARPC_ENDPOINT]
ncalrpc:[securityevent]
ncalrpc:[audit]
ncacn_np:\\NARA[\pipe\lsass]
ncalrpc:[LRPC-632a8089801071f4b2]
ncalrpc:[actkernel]
ncalrpc:[umpo]
ncalrpc:[IUserProfile2]
ncalrpc:[senssvc]
ncalrpc:[IUserProfile2]
ncalrpc:[senssvc]
ncalrpc:[IUserProfile2]
ncalrpc:[senssvc]
ncalrpc:[IUserProfile2]
ncalrpc:[senssvc]
ncalrpc:[OLE1BA6CDE8282CC7936B58CD61B590]
Protocol: N/A
Provider: N/A
UUID : 51A227AE-825B-41F2-B4A9-1AC9557A1018 v1.0 Ngc Pop Key Service
Bindings:
ncacn_ip_tcp:192.168.209.30[49668]
ncacn_ip_tcp:192.168.209.30[49664]
ncalrpc:[MicrosoftLaps_LRPC_0fb2f016-fe45-4a08-a7f9-a467f5e5fa0b]
ncalrpc:[samss lpc]
ncalrpc:[SidKey Local End Point]
ncalrpc:[protected_storage]
ncalrpc:[lsasspirpc]
ncalrpc:[lsapolicylookup]
ncalrpc:[LSA_EAS_ENDPOINT]
ncalrpc:[lsacap]
ncalrpc:[LSARPC_ENDPOINT]
ncalrpc:[securityevent]
ncalrpc:[audit]
ncacn_np:\\NARA[\pipe\lsass]
Protocol: N/A
Provider: N/A
UUID : 8FB74744-B2FF-4C00-BE0D-9EF9A191FE1B v1.0 Ngc Pop Key Service
Bindings:
ncacn_ip_tcp:192.168.209.30[49668]
ncacn_ip_tcp:192.168.209.30[49664]
ncalrpc:[MicrosoftLaps_LRPC_0fb2f016-fe45-4a08-a7f9-a467f5e5fa0b]
ncalrpc:[samss lpc]
ncalrpc:[SidKey Local End Point]
ncalrpc:[protected_storage]
ncalrpc:[lsasspirpc]
ncalrpc:[lsapolicylookup]
ncalrpc:[LSA_EAS_ENDPOINT]
ncalrpc:[lsacap]
ncalrpc:[LSARPC_ENDPOINT]
ncalrpc:[securityevent]
ncalrpc:[audit]
ncacn_np:\\NARA[\pipe\lsass]
Protocol: N/A
Provider: N/A
UUID : B25A52BF-E5DD-4F4A-AEA6-8CA7272A0E86 v2.0 KeyIso
Bindings:
ncacn_ip_tcp:192.168.209.30[49668]
ncacn_ip_tcp:192.168.209.30[49664]
ncalrpc:[MicrosoftLaps_LRPC_0fb2f016-fe45-4a08-a7f9-a467f5e5fa0b]
ncalrpc:[samss lpc]
ncalrpc:[SidKey Local End Point]
ncalrpc:[protected_storage]
ncalrpc:[lsasspirpc]
ncalrpc:[lsapolicylookup]
ncalrpc:[LSA_EAS_ENDPOINT]
ncalrpc:[lsacap]
ncalrpc:[LSARPC_ENDPOINT]
ncalrpc:[securityevent]
ncalrpc:[audit]
ncacn_np:\\NARA[\pipe\lsass]
Protocol: [MS-SAMR]: Security Account Manager (SAM) Remote Protocol
Provider: samsrv.dll
UUID : 12345778-1234-ABCD-EF00-0123456789AC v1.0
Bindings:
ncacn_ip_tcp:192.168.209.30[49664]
ncalrpc:[MicrosoftLaps_LRPC_0fb2f016-fe45-4a08-a7f9-a467f5e5fa0b]
ncalrpc:[samss lpc]
ncalrpc:[SidKey Local End Point]
ncalrpc:[protected_storage]
ncalrpc:[lsasspirpc]
ncalrpc:[lsapolicylookup]
ncalrpc:[LSA_EAS_ENDPOINT]
ncalrpc:[lsacap]
ncalrpc:[LSARPC_ENDPOINT]
ncalrpc:[securityevent]
ncalrpc:[audit]
ncacn_np:\\NARA[\pipe\lsass]
Protocol: [MS-RSP]: Remote Shutdown Protocol
Provider: wininit.exe
UUID : D95AFE70-A6D5-4259-822E-2C84DA1DDB0D v1.0
Bindings:
ncacn_ip_tcp:192.168.209.30[49665]
ncalrpc:[WindowsShutdown]
ncacn_np:\\NARA[\PIPE\InitShutdown]
ncalrpc:[WMsgKRpc0CE360]
Protocol: N/A
Provider: winlogon.exe
UUID : 76F226C3-EC14-4325-8A99-6A46348418AF v1.0
Bindings:
ncalrpc:[WindowsShutdown]
ncacn_np:\\NARA[\PIPE\InitShutdown]
ncalrpc:[WMsgKRpc0CE360]
ncalrpc:[WMsgKRpc0CFFC1]
Protocol: N/A
Provider: N/A
UUID : FC48CD89-98D6-4628-9839-86F7A3E4161A v1.0
Bindings:
ncalrpc:[dabrpc]
ncalrpc:[csebpub]
ncalrpc:[LRPC-f9d4250842a5998722]
ncalrpc:[LRPC-f87a7bdd9e69f06e55]
ncalrpc:[LRPC-d9caaaa3d07522f5d3]
ncalrpc:[LRPC-1b0dedb345bdc8d815]
ncalrpc:[OLED6D942F7B7FAA8F0B1BAA993F468]
ncalrpc:[LRPC-fda6358ffb6cd4bc0b]
ncacn_np:\\NARA[\pipe\LSM_API_service]
ncalrpc:[LSMApi]
ncalrpc:[LRPC-632a8089801071f4b2]
ncalrpc:[actkernel]
ncalrpc:[umpo]
Protocol: N/A
Provider: N/A
UUID : D09BDEB5-6171-4A34-BFE2-06FA82652568 v1.0
Bindings:
ncalrpc:[csebpub]
ncalrpc:[LRPC-f9d4250842a5998722]
ncalrpc:[LRPC-f87a7bdd9e69f06e55]
ncalrpc:[LRPC-d9caaaa3d07522f5d3]
ncalrpc:[LRPC-1b0dedb345bdc8d815]
ncalrpc:[OLED6D942F7B7FAA8F0B1BAA993F468]
ncalrpc:[LRPC-fda6358ffb6cd4bc0b]
ncacn_np:\\NARA[\pipe\LSM_API_service]
ncalrpc:[LSMApi]
ncalrpc:[LRPC-632a8089801071f4b2]
ncalrpc:[actkernel]
ncalrpc:[umpo]
ncalrpc:[LRPC-f87a7bdd9e69f06e55]
ncalrpc:[LRPC-d9caaaa3d07522f5d3]
ncalrpc:[LRPC-1b0dedb345bdc8d815]
ncalrpc:[OLED6D942F7B7FAA8F0B1BAA993F468]
ncalrpc:[LRPC-fda6358ffb6cd4bc0b]
ncacn_np:\\NARA[\pipe\LSM_API_service]
ncalrpc:[LSMApi]
ncalrpc:[LRPC-632a8089801071f4b2]
ncalrpc:[actkernel]
ncalrpc:[umpo]
ncalrpc:[LRPC-d9caaaa3d07522f5d3]
ncalrpc:[LRPC-1b0dedb345bdc8d815]
ncalrpc:[OLED6D942F7B7FAA8F0B1BAA993F468]
ncalrpc:[LRPC-fda6358ffb6cd4bc0b]
ncacn_np:\\NARA[\pipe\LSM_API_service]
ncalrpc:[LSMApi]
ncalrpc:[LRPC-632a8089801071f4b2]
ncalrpc:[actkernel]
ncalrpc:[umpo]
ncalrpc:[LRPC-a4b915c396710dfa58]
ncalrpc:[LRPC-f82465ce3b4609c9ba]
Protocol: N/A
Provider: N/A
UUID : 697DCDA9-3BA9-4EB2-9247-E11F1901B0D2 v1.0
Bindings:
ncalrpc:[LRPC-f9d4250842a5998722]
ncalrpc:[LRPC-f87a7bdd9e69f06e55]
ncalrpc:[LRPC-d9caaaa3d07522f5d3]
ncalrpc:[LRPC-1b0dedb345bdc8d815]
ncalrpc:[OLED6D942F7B7FAA8F0B1BAA993F468]
ncalrpc:[LRPC-fda6358ffb6cd4bc0b]
ncacn_np:\\NARA[\pipe\LSM_API_service]
ncalrpc:[LSMApi]
ncalrpc:[LRPC-632a8089801071f4b2]
ncalrpc:[actkernel]
ncalrpc:[umpo]
Protocol: N/A
Provider: N/A
UUID : 9B008953-F195-4BF9-BDE0-4471971E58ED v1.0
Bindings:
ncalrpc:[LRPC-f87a7bdd9e69f06e55]
ncalrpc:[LRPC-d9caaaa3d07522f5d3]
ncalrpc:[LRPC-1b0dedb345bdc8d815]
ncalrpc:[OLED6D942F7B7FAA8F0B1BAA993F468]
ncalrpc:[LRPC-fda6358ffb6cd4bc0b]
ncacn_np:\\NARA[\pipe\LSM_API_service]
ncalrpc:[LSMApi]
ncalrpc:[LRPC-632a8089801071f4b2]
ncalrpc:[actkernel]
ncalrpc:[umpo]
Protocol: N/A
Provider: N/A
UUID : 0D47017B-B33B-46AD-9E18-FE96456C5078 v1.0
Bindings:
ncalrpc:[umpo]
Protocol: N/A
Provider: N/A
UUID : 95406F0B-B239-4318-91BB-CEA3A46FF0DC v1.0
Bindings:
ncalrpc:[umpo]
Protocol: N/A
Provider: N/A
UUID : 4ED8ABCC-F1E2-438B-981F-BB0E8ABC010C v1.0
Bindings:
ncalrpc:[umpo]
Protocol: N/A
Provider: N/A
UUID : 0FF1F646-13BB-400A-AB50-9A78F2B7A85A v1.0
Bindings:
ncalrpc:[umpo]
Protocol: N/A
Provider: N/A
UUID : 6982A06E-5FE2-46B1-B39C-A2C545BFA069 v1.0
Bindings:
ncalrpc:[umpo]
Protocol: N/A
Provider: N/A
UUID : 082A3471-31B6-422A-B931-A54401960C62 v1.0
Bindings:
ncalrpc:[umpo]
Protocol: N/A
Provider: N/A
UUID : FAE436B0-B864-4A87-9EDA-298547CD82F2 v1.0
Bindings:
ncalrpc:[umpo]
Protocol: N/A
Provider: N/A
UUID : E53D94CA-7464-4839-B044-09A2FB8B3AE5 v1.0
Bindings:
ncalrpc:[umpo]
Protocol: N/A
Provider: N/A
UUID : 178D84BE-9291-4994-82C6-3F909ACA5A03 v1.0
Bindings:
ncalrpc:[umpo]
Protocol: N/A
Provider: N/A
UUID : 4DACE966-A243-4450-AE3F-9B7BCB5315B8 v2.0
Bindings:
ncalrpc:[umpo]
Protocol: N/A
Provider: N/A
UUID : 1832BCF6-CAB8-41D4-85D2-C9410764F75A v1.0
Bindings:
ncalrpc:[umpo]
Protocol: N/A
Provider: N/A
UUID : C521FACF-09A9-42C5-B155-72388595CBF0 v0.0
Bindings:
ncalrpc:[umpo]
Protocol: N/A
Provider: N/A
UUID : 2C7FD9CE-E706-4B40-B412-953107EF9BB0 v0.0
Bindings:
ncalrpc:[umpo]
Protocol: N/A
Provider: N/A
UUID : 88ABCBC3-34EA-76AE-8215-767520655A23 v0.0
Bindings:
ncalrpc:[LRPC-1b0dedb345bdc8d815]
ncalrpc:[OLED6D942F7B7FAA8F0B1BAA993F468]
ncalrpc:[LRPC-fda6358ffb6cd4bc0b]
ncacn_np:\\NARA[\pipe\LSM_API_service]
ncalrpc:[LSMApi]
ncalrpc:[LRPC-632a8089801071f4b2]
ncalrpc:[actkernel]
ncalrpc:[umpo]
Protocol: N/A
Provider: N/A
UUID : 76C217BC-C8B4-4201-A745-373AD9032B1A v1.0
Bindings:
ncalrpc:[LRPC-1b0dedb345bdc8d815]
ncalrpc:[OLED6D942F7B7FAA8F0B1BAA993F468]
ncalrpc:[LRPC-fda6358ffb6cd4bc0b]
ncacn_np:\\NARA[\pipe\LSM_API_service]
ncalrpc:[LSMApi]
ncalrpc:[LRPC-632a8089801071f4b2]
ncalrpc:[actkernel]
ncalrpc:[umpo]
Protocol: N/A
Provider: N/A
UUID : 55E6B932-1979-45D6-90C5-7F6270724112 v1.0
Bindings:
ncalrpc:[LRPC-1b0dedb345bdc8d815]
ncalrpc:[OLED6D942F7B7FAA8F0B1BAA993F468]
ncalrpc:[LRPC-fda6358ffb6cd4bc0b]
ncacn_np:\\NARA[\pipe\LSM_API_service]
ncalrpc:[LSMApi]
ncalrpc:[LRPC-632a8089801071f4b2]
ncalrpc:[actkernel]
ncalrpc:[umpo]
Protocol: N/A
Provider: N/A
UUID : 857FB1BE-084F-4FB5-B59C-4B2C4BE5F0CF v1.0
Bindings:
ncalrpc:[OLED6D942F7B7FAA8F0B1BAA993F468]
ncalrpc:[LRPC-fda6358ffb6cd4bc0b]
ncacn_np:\\NARA[\pipe\LSM_API_service]
ncalrpc:[LSMApi]
ncalrpc:[LRPC-632a8089801071f4b2]
ncalrpc:[actkernel]
ncalrpc:[umpo]
Protocol: N/A
Provider: N/A
UUID : 20C40295-8DBA-48E6-AEBF-3E78EF3BB144 v2.0
Bindings:
ncalrpc:[OLED6D942F7B7FAA8F0B1BAA993F468]
ncalrpc:[LRPC-fda6358ffb6cd4bc0b]
ncacn_np:\\NARA[\pipe\LSM_API_service]
ncalrpc:[LSMApi]
ncalrpc:[LRPC-632a8089801071f4b2]
ncalrpc:[actkernel]
ncalrpc:[umpo]
Protocol: N/A
Provider: N/A
UUID : 2513BCBE-6CD4-4348-855E-7EFB3C336DD3 v2.0
Bindings:
ncalrpc:[OLED6D942F7B7FAA8F0B1BAA993F468]
ncalrpc:[LRPC-fda6358ffb6cd4bc0b]
ncacn_np:\\NARA[\pipe\LSM_API_service]
ncalrpc:[LSMApi]
ncalrpc:[LRPC-632a8089801071f4b2]
ncalrpc:[actkernel]
ncalrpc:[umpo]
Protocol: N/A
Provider: N/A
UUID : 0D3E2735-CEA0-4ECC-A9E2-41A2D81AED4E v1.0
Bindings:
ncalrpc:[LRPC-fda6358ffb6cd4bc0b]
ncacn_np:\\NARA[\pipe\LSM_API_service]
ncalrpc:[LSMApi]
ncalrpc:[LRPC-632a8089801071f4b2]
ncalrpc:[actkernel]
ncalrpc:[umpo]
Protocol: N/A
Provider: N/A
UUID : C605F9FB-F0A3-4E2A-A073-73560F8D9E3E v1.0
Bindings:
ncalrpc:[LRPC-fda6358ffb6cd4bc0b]
ncacn_np:\\NARA[\pipe\LSM_API_service]
ncalrpc:[LSMApi]
ncalrpc:[LRPC-632a8089801071f4b2]
ncalrpc:[actkernel]
ncalrpc:[umpo]
Protocol: N/A
Provider: N/A
UUID : 1B37CA91-76B1-4F5E-A3C7-2ABFC61F2BB0 v1.0
Bindings:
ncalrpc:[LRPC-fda6358ffb6cd4bc0b]
ncacn_np:\\NARA[\pipe\LSM_API_service]
ncalrpc:[LSMApi]
ncalrpc:[LRPC-632a8089801071f4b2]
ncalrpc:[actkernel]
ncalrpc:[umpo]
Protocol: N/A
Provider: N/A
UUID : 8BFC3BE1-6DEF-4E2D-AF74-7C47CD0ADE4A v1.0
Bindings:
ncalrpc:[LRPC-fda6358ffb6cd4bc0b]
ncacn_np:\\NARA[\pipe\LSM_API_service]
ncalrpc:[LSMApi]
ncalrpc:[LRPC-632a8089801071f4b2]
ncalrpc:[actkernel]
ncalrpc:[umpo]
Protocol: N/A
Provider: N/A
UUID : 2D98A740-581D-41B9-AA0D-A88B9D5CE938 v1.0
Bindings:
ncalrpc:[LRPC-fda6358ffb6cd4bc0b]
ncacn_np:\\NARA[\pipe\LSM_API_service]
ncalrpc:[LSMApi]
ncalrpc:[LRPC-632a8089801071f4b2]
ncalrpc:[actkernel]
ncalrpc:[umpo]
Protocol: N/A
Provider: N/A
UUID : DD59071B-3215-4C59-8481-972EDADC0F6A v1.0
Bindings:
ncalrpc:[actkernel]
ncalrpc:[umpo]
Protocol: N/A
Provider: N/A
UUID : 0361AE94-0316-4C6C-8AD8-C594375800E2 v1.0
Bindings:
ncalrpc:[umpo]
Protocol: N/A
Provider: N/A
UUID : 5824833B-3C1A-4AD2-BDFD-C31D19E23ED2 v1.0
Bindings:
ncalrpc:[umpo]
Protocol: N/A
Provider: N/A
UUID : BDAA0970-413B-4A3E-9E5D-F6DC9D7E0760 v1.0
Bindings:
ncalrpc:[umpo]
Protocol: N/A
Provider: N/A
UUID : 3B338D89-6CFA-44B8-847E-531531BC9992 v1.0
Bindings:
ncalrpc:[umpo]
Protocol: N/A
Provider: N/A
UUID : 8782D3B9-EBBD-4644-A3D8-E8725381919B v1.0
Bindings:
ncalrpc:[umpo]
Protocol: N/A
Provider: N/A
UUID : 085B0334-E454-4D91-9B8C-4134F9E793F3 v1.0
Bindings:
ncalrpc:[umpo]
Protocol: N/A
Provider: N/A
UUID : 4BEC6BB8-B5C2-4B6F-B2C1-5DA5CF92D0D9 v1.0
Bindings:
ncalrpc:[umpo]
Protocol: N/A
Provider: N/A
UUID : A4B8D482-80CE-40D6-934D-B22A01A44FE7 v1.0 LicenseManager
Bindings:
ncalrpc:[LicenseServiceEndpoint]
Protocol: N/A
Provider: N/A
UUID : 3F787932-3452-4363-8651-6EA97BB373BB v1.0 NSP Rpc Interface
Bindings:
ncalrpc:[LRPC-4bd0d675707a72b06d]
ncalrpc:[OLE2AB56F542E1A412972355A003B73]
ncalrpc:[LRPC-1e7f358a6f06cfe2a9]
Protocol: N/A
Provider: nsisvc.dll
UUID : 7EA70BCF-48AF-4F6A-8968-6A440754D5FA v1.0 NSI server endpoint
Bindings:
ncalrpc:[LRPC-1e7f358a6f06cfe2a9]
Protocol: N/A
Provider: N/A
UUID : 3473DD4D-2E88-4006-9CBA-22570909DD10 v5.1 WinHttp Auto-Proxy Service
Bindings:
ncalrpc:[1e19e450-f158-4379-bac7-c89ba934c091]
ncalrpc:[LRPC-596e5bcf4b9264b3a0]
ncacn_ip_tcp:192.168.209.30[49666]
ncacn_np:\\NARA[\pipe\eventlog]
ncalrpc:[eventlog]
ncalrpc:[dhcpcsvc6]
ncalrpc:[dhcpcsvc]
ncalrpc:[LRPC-0b7ab49049a80e7298]
ncalrpc:[LRPC-a4b915c396710dfa58]
Protocol: [MS-EVEN6]: EventLog Remoting Protocol
Provider: wevtsvc.dll
UUID : F6BEAFF7-1E19-4FBB-9F8F-B89E2018337C v1.0 Event log TCPIP
Bindings:
ncacn_ip_tcp:192.168.209.30[49666]
ncacn_np:\\NARA[\pipe\eventlog]
ncalrpc:[eventlog]
ncalrpc:[dhcpcsvc6]
ncalrpc:[dhcpcsvc]
ncalrpc:[LRPC-0b7ab49049a80e7298]
ncalrpc:[LRPC-a4b915c396710dfa58]
Protocol: N/A
Provider: dhcpcsvc6.dll
UUID : 3C4728C5-F0AB-448B-BDA1-6CE01EB0A6D6 v1.0 DHCPv6 Client LRPC Endpoint
Bindings:
ncalrpc:[dhcpcsvc6]
ncalrpc:[dhcpcsvc]
ncalrpc:[LRPC-0b7ab49049a80e7298]
ncalrpc:[LRPC-a4b915c396710dfa58]
Protocol: N/A
Provider: dhcpcsvc.dll
UUID : 3C4728C5-F0AB-448B-BDA1-6CE01EB0A6D5 v1.0 DHCP Client LRPC Endpoint
Bindings:
ncalrpc:[dhcpcsvc]
ncalrpc:[LRPC-0b7ab49049a80e7298]
ncalrpc:[LRPC-a4b915c396710dfa58]
Protocol: N/A
Provider: N/A
UUID : A500D4C6-0DD1-4543-BC0C-D5F93486EAF8 v1.0
Bindings:
ncalrpc:[LRPC-0b7ab49049a80e7298]
ncalrpc:[LRPC-a4b915c396710dfa58]
Protocol: N/A
Provider: N/A
UUID : BF4DC912-E52F-4904-8EBE-9317C1BDD497 v1.0
Bindings:
ncalrpc:[LRPC-90df48cdb1400c28db]
ncalrpc:[LRPC-7871d28b9dd8e2bd1e]
ncalrpc:[LRPC-6b3c1177a3345c9797]
ncalrpc:[TSUMRPD_PRINT_DRV_LPC_API]
ncalrpc:[OLEAD7A16DEF300593CDD227A48E848]
ncalrpc:[LRPC-f82465ce3b4609c9ba]
Protocol: N/A
Provider: pcasvc.dll
UUID : 0767A036-0D22-48AA-BA69-B619480F38CB v1.0 PcaSvc
Bindings:
ncalrpc:[LRPC-7871d28b9dd8e2bd1e]
ncalrpc:[LRPC-6b3c1177a3345c9797]
ncalrpc:[TSUMRPD_PRINT_DRV_LPC_API]
ncalrpc:[OLEAD7A16DEF300593CDD227A48E848]
ncalrpc:[LRPC-f82465ce3b4609c9ba]
Protocol: N/A
Provider: N/A
UUID : D249BD56-4CC0-4FD3-8CE6-6FE050D590CB v0.0
Bindings:
ncalrpc:[LRPC-7871d28b9dd8e2bd1e]
ncalrpc:[LRPC-6b3c1177a3345c9797]
ncalrpc:[TSUMRPD_PRINT_DRV_LPC_API]
ncalrpc:[OLEAD7A16DEF300593CDD227A48E848]
ncalrpc:[LRPC-f82465ce3b4609c9ba]
Protocol: N/A
Provider: N/A
UUID : D8140E00-5C46-4AE6-80AC-2F9A76DF224C v0.0
Bindings:
ncalrpc:[LRPC-7871d28b9dd8e2bd1e]
ncalrpc:[LRPC-6b3c1177a3345c9797]
ncalrpc:[TSUMRPD_PRINT_DRV_LPC_API]
ncalrpc:[OLEAD7A16DEF300593CDD227A48E848]
ncalrpc:[LRPC-f82465ce3b4609c9ba]
Protocol: N/A
Provider: sysmain.dll
UUID : B58AA02E-2884-4E97-8176-4EE06D794184 v1.0
Bindings:
ncalrpc:[LRPC-7871d28b9dd8e2bd1e]
ncalrpc:[LRPC-6b3c1177a3345c9797]
ncalrpc:[TSUMRPD_PRINT_DRV_LPC_API]
ncalrpc:[OLEAD7A16DEF300593CDD227A48E848]
ncalrpc:[LRPC-f82465ce3b4609c9ba]
Protocol: N/A
Provider: N/A
UUID : E40F7B57-7A25-4CD3-A135-7F7D3DF9D16B v1.0
Bindings:
ncalrpc:[LRPC-35f2e11519fd991d3e]
Protocol: N/A
Provider: N/A
UUID : 880FD55E-43B9-11E0-B1A8-CF4EDFD72085 v1.0 KAPI Service endpoint
Bindings:
ncalrpc:[LRPC-6b3c1177a3345c9797]
ncalrpc:[TSUMRPD_PRINT_DRV_LPC_API]
ncalrpc:[OLEAD7A16DEF300593CDD227A48E848]
ncalrpc:[LRPC-f82465ce3b4609c9ba]
Protocol: N/A
Provider: N/A
UUID : 5222821F-D5E2-4885-84F1-5F6185A0EC41 v1.0
Bindings:
ncalrpc:[LRPC-8a522fd14cf42dfa94]
Protocol: N/A
Provider: N/A
UUID : 7F1343FE-50A9-4927-A778-0C5859517BAC v1.0 DfsDs service
Bindings:
ncacn_np:\\NARA[\PIPE\wkssvc]
ncalrpc:[nlaapi]
ncalrpc:[nlaplg]
ncalrpc:[LRPC-168cf5d125cf6bc062]
ncalrpc:[DNSResolver]
Protocol: N/A
Provider: N/A
UUID : EB081A0D-10EE-478A-A1DD-50995283E7A8 v3.0 Witness Client Test Interface
Bindings:
ncalrpc:[nlaapi]
ncalrpc:[nlaplg]
ncalrpc:[LRPC-168cf5d125cf6bc062]
ncalrpc:[DNSResolver]
Protocol: N/A
Provider: N/A
UUID : F2C9B409-C1C9-4100-8639-D8AB1486694A v1.0 Witness Client Upcall Server
Bindings:
ncalrpc:[nlaapi]
ncalrpc:[nlaplg]
ncalrpc:[LRPC-168cf5d125cf6bc062]
ncalrpc:[DNSResolver]
Protocol: N/A
Provider: nrpsrv.dll
UUID : 30ADC50C-5CBC-46CE-9A0E-91914789E23C v1.0 NRP server endpoint
Bindings:
ncalrpc:[LRPC-168cf5d125cf6bc062]
ncalrpc:[DNSResolver]
Protocol: N/A
Provider: N/A
UUID : 572E35B4-1344-4565-96A1-F5DF3BFA89BB v1.0 LiveIdSvcNotify RPC Interface
Bindings:
ncalrpc:[liveidsvcnotify]
Protocol: N/A
Provider: N/A
UUID : FAF2447B-B348-4FEB-8DBE-BEEE5B7F7778 v1.0 OnlineProviderCert RPC Interface
Bindings:
ncalrpc:[LRPC-fee2ad71e0c548d429]
Protocol: N/A
Provider: N/A
UUID : CC105610-DA03-467E-BC73-5B9E2937458D v1.0 LiveIdSvc RPC Interface
Bindings:
ncalrpc:[LRPC-fee2ad71e0c548d429]
Protocol: N/A
Provider: N/A
UUID : 0D3C7F20-1C8D-4654-A1B3-51563B298BDA v1.0 UserMgrCli
Bindings:
ncalrpc:[LRPC-84d8b731f9ba9586ac]
ncalrpc:[TeredoControl]
ncalrpc:[TeredoDiagnostics]
ncalrpc:[LRPC-942ec9c46684f5b305]
ncalrpc:[ubpmtaskhostchannel]
ncacn_np:\\NARA[\PIPE\atsvc]
ncacn_ip_tcp:192.168.209.30[49667]
ncacn_np:\\NARA[\pipe\SessEnvPublicRpc]
ncalrpc:[SessEnvPrivateRpc]
ncalrpc:[OLE1BA6CDE8282CC7936B58CD61B590]
ncalrpc:[senssvc]
ncalrpc:[IUserProfile2]
Protocol: N/A
Provider: N/A
UUID : B18FBAB6-56F8-4702-84E0-41053293A869 v1.0 UserMgrCli
Bindings:
ncalrpc:[LRPC-84d8b731f9ba9586ac]
ncalrpc:[TeredoControl]
ncalrpc:[TeredoDiagnostics]
ncalrpc:[LRPC-942ec9c46684f5b305]
ncalrpc:[ubpmtaskhostchannel]
ncacn_np:\\NARA[\PIPE\atsvc]
ncacn_ip_tcp:192.168.209.30[49667]
ncacn_np:\\NARA[\pipe\SessEnvPublicRpc]
ncalrpc:[SessEnvPrivateRpc]
ncalrpc:[OLE1BA6CDE8282CC7936B58CD61B590]
ncalrpc:[senssvc]
ncalrpc:[IUserProfile2]
Protocol: N/A
Provider: N/A
UUID : C49A5A70-8A7F-4E70-BA16-1E8F1F193EF1 v1.0 Adh APIs
Bindings:
ncalrpc:[TeredoControl]
ncalrpc:[TeredoDiagnostics]
ncalrpc:[LRPC-942ec9c46684f5b305]
ncalrpc:[ubpmtaskhostchannel]
ncacn_np:\\NARA[\PIPE\atsvc]
ncacn_ip_tcp:192.168.209.30[49667]
ncacn_np:\\NARA[\pipe\SessEnvPublicRpc]
ncalrpc:[SessEnvPrivateRpc]
ncalrpc:[OLE1BA6CDE8282CC7936B58CD61B590]
ncalrpc:[senssvc]
ncalrpc:[IUserProfile2]
Protocol: N/A
Provider: N/A
UUID : C36BE077-E14B-4FE9-8ABC-E856EF4F048B v1.0 Proxy Manager client server endpoint
Bindings:
ncalrpc:[TeredoControl]
ncalrpc:[TeredoDiagnostics]
ncalrpc:[LRPC-942ec9c46684f5b305]
ncalrpc:[ubpmtaskhostchannel]
ncacn_np:\\NARA[\PIPE\atsvc]
ncacn_ip_tcp:192.168.209.30[49667]
ncacn_np:\\NARA[\pipe\SessEnvPublicRpc]
ncalrpc:[SessEnvPrivateRpc]
ncalrpc:[OLE1BA6CDE8282CC7936B58CD61B590]
ncalrpc:[senssvc]
ncalrpc:[IUserProfile2]
Protocol: N/A
Provider: N/A
UUID : 2E6035B2-E8F1-41A7-A044-656B439C4C34 v1.0 Proxy Manager provider server endpoint
Bindings:
ncalrpc:[TeredoControl]
ncalrpc:[TeredoDiagnostics]
ncalrpc:[LRPC-942ec9c46684f5b305]
ncalrpc:[ubpmtaskhostchannel]
ncacn_np:\\NARA[\PIPE\atsvc]
ncacn_ip_tcp:192.168.209.30[49667]
ncacn_np:\\NARA[\pipe\SessEnvPublicRpc]
ncalrpc:[SessEnvPrivateRpc]
ncalrpc:[OLE1BA6CDE8282CC7936B58CD61B590]
ncalrpc:[senssvc]
ncalrpc:[IUserProfile2]
Protocol: N/A
Provider: iphlpsvc.dll
UUID : 552D076A-CB29-4E44-8B6A-D15E59E2C0AF v1.0 IP Transition Configuration endpoint
Bindings:
ncalrpc:[LRPC-942ec9c46684f5b305]
ncalrpc:[ubpmtaskhostchannel]
ncacn_np:\\NARA[\PIPE\atsvc]
ncacn_ip_tcp:192.168.209.30[49667]
ncacn_np:\\NARA[\pipe\SessEnvPublicRpc]
ncalrpc:[SessEnvPrivateRpc]
ncalrpc:[OLE1BA6CDE8282CC7936B58CD61B590]
ncalrpc:[senssvc]
ncalrpc:[IUserProfile2]
Protocol: N/A
Provider: N/A
UUID : 3A9EF155-691D-4449-8D05-09AD57031823 v1.0
Bindings:
ncalrpc:[LRPC-942ec9c46684f5b305]
ncalrpc:[ubpmtaskhostchannel]
ncacn_np:\\NARA[\PIPE\atsvc]
ncacn_ip_tcp:192.168.209.30[49667]
ncacn_np:\\NARA[\pipe\SessEnvPublicRpc]
ncalrpc:[SessEnvPrivateRpc]
ncalrpc:[OLE1BA6CDE8282CC7936B58CD61B590]
ncalrpc:[senssvc]
ncalrpc:[IUserProfile2]
Protocol: [MS-TSCH]: Task Scheduler Service Remoting Protocol
Provider: schedsvc.dll
UUID : 86D35949-83C9-4044-B424-DB363231FD0C v1.0
Bindings:
ncalrpc:[LRPC-942ec9c46684f5b305]
ncalrpc:[ubpmtaskhostchannel]
ncacn_np:\\NARA[\PIPE\atsvc]
ncacn_ip_tcp:192.168.209.30[49667]
ncacn_np:\\NARA[\pipe\SessEnvPublicRpc]
ncalrpc:[SessEnvPrivateRpc]
ncalrpc:[OLE1BA6CDE8282CC7936B58CD61B590]
ncalrpc:[IUserProfile2]
ncalrpc:[senssvc]
Protocol: [MS-FRS2]: Distributed File System Replication Protocol
Provider: dfsrmig.exe
UUID : 897E2E5F-93F3-4376-9C9C-FD2277495C27 v1.0 Frs2 Service
Bindings:
ncalrpc:[OLE156A28479154BA46FE177EED9AFC]
ncacn_ip_tcp:192.168.209.30[49738]
Protocol: N/A
Provider: N/A
UUID : 8EC21E98-B5CE-4916-A3D6-449FA428A007 v0.0
Bindings:
ncalrpc:[OLEFD34C096A3E2A81B8AB2C45E11C2]
ncalrpc:[LRPC-018256e793142164ff]
Protocol: N/A
Provider: N/A
UUID : 0FC77B1A-95D8-4A2E-A0C0-CFF54237462B v0.0
Bindings:
ncalrpc:[OLEFD34C096A3E2A81B8AB2C45E11C2]
ncalrpc:[LRPC-018256e793142164ff]
Protocol: N/A
Provider: N/A
UUID : B1EF227E-DFA5-421E-82BB-67A6A129C496 v0.0
Bindings:
ncalrpc:[OLEFD34C096A3E2A81B8AB2C45E11C2]
ncalrpc:[LRPC-018256e793142164ff]
Protocol: [MS-DNSP]: Domain Name Service (DNS) Server Management
Provider: dns.exe
UUID : 50ABC2A4-574D-40B3-9D66-EE4FD5FBA076 v5.0
Bindings:
ncacn_ip_tcp:192.168.209.30[49707]
Protocol: N/A
Provider: winlogon.exe
UUID : 12E65DD8-887F-41EF-91BF-8D816C42C2E7 v1.0 Secure Desktop LRPC interface
Bindings:
ncalrpc:[WMsgKRpc0CFFC1]
Protocol: N/A
Provider: N/A
UUID : 509BC7AE-77BE-4EE8-B07C-0D096BB44345 v1.0
Bindings:
ncalrpc:[OLED04CC017BFEECA032EC0A78CAF8E]
ncalrpc:[LRPC-5ebcacf8b54fb36a5d]
Protocol: [MS-ICPR]: ICertPassage Remote Protocol
Provider: certsrv.exe
UUID : 91AE6020-9E3C-11CF-8D7C-00AA00C091BE v0.0
Bindings:
ncalrpc:[OLE69CE070BA4C03D0103624BEE5E05]
ncacn_np:\\NARA[\pipe\cert]
ncacn_ip_tcp:192.168.209.30[49704]
Protocol: [MS-SCMR]: Service Control Manager Remote Protocol
Provider: services.exe
UUID : 367ABB81-9844-35F1-AD32-98F038001003 v2.0
Bindings:
ncacn_ip_tcp:192.168.209.30[49689]
Protocol: [MS-CMPO]: MSDTC Connection Manager:
Provider: msdtcprx.dll
UUID : 906B0CE0-C70B-1067-B317-00DD010662DA v1.0
Bindings:
ncalrpc:[LRPC-6714e8d8f9d2bdc761]
ncalrpc:[LRPC-6714e8d8f9d2bdc761]
ncalrpc:[LRPC-6714e8d8f9d2bdc761]
ncalrpc:[OLE1B02DE244AFE5C0C0FB4F2BF490A]
ncalrpc:[LRPC-b44dfd397bf1123318]
Protocol: N/A
Provider: N/A
UUID : 7DF1CEAE-DE4E-4E6F-AB14-49636E7C2052 v1.0
Bindings:
ncalrpc:[LRPC-67c30f9a96884e0214]
Protocol: N/A
Provider: N/A
UUID : D4051BDE-9CDD-4910-B393-4AA85EC3C482 v1.0
Bindings:
ncalrpc:[OLEAFF27D1B3FC5B27D55BFCE1A38CB]
ncalrpc:[LRPC-26aee364aecb5db2f1]
Protocol: N/A
Provider: N/A
UUID : 4C9DBF19-D39E-4BB9-90EE-8F7179B20283 v1.0
Bindings:
ncalrpc:[OLEAFF27D1B3FC5B27D55BFCE1A38CB]
ncalrpc:[LRPC-26aee364aecb5db2f1]
Protocol: N/A
Provider: N/A
UUID : FD8BE72B-A9CD-4B2C-A9CA-4DED242FBE4D v1.0
Bindings:
ncalrpc:[OLEAFF27D1B3FC5B27D55BFCE1A38CB]
ncalrpc:[LRPC-26aee364aecb5db2f1]
Protocol: N/A
Provider: N/A
UUID : 95095EC8-32EA-4EB0-A3E2-041F97B36168 v1.0
Bindings:
ncalrpc:[OLEAFF27D1B3FC5B27D55BFCE1A38CB]
ncalrpc:[LRPC-26aee364aecb5db2f1]
Protocol: N/A
Provider: N/A
UUID : E38F5360-8572-473E-B696-1B46873BEEAB v1.0
Bindings:
ncalrpc:[OLEAFF27D1B3FC5B27D55BFCE1A38CB]
ncalrpc:[LRPC-26aee364aecb5db2f1]
Protocol: N/A
Provider: N/A
UUID : D22895EF-AFF4-42C5-A5B2-B14466D34AB4 v1.0
Bindings:
ncalrpc:[OLEAFF27D1B3FC5B27D55BFCE1A38CB]
ncalrpc:[LRPC-26aee364aecb5db2f1]
Protocol: N/A
Provider: N/A
UUID : 98CD761E-E77D-41C8-A3C0-0FB756D90EC2 v1.0
Bindings:
ncalrpc:[OLEAFF27D1B3FC5B27D55BFCE1A38CB]
ncalrpc:[LRPC-26aee364aecb5db2f1]
Protocol: [MS-RPRN]: Print System Remote Protocol
Provider: spoolsv.exe
UUID : 12345678-1234-ABCD-EF00-0123456789AB v1.0
Bindings:
ncalrpc:[LRPC-f8b069ae483eb34203]
ncacn_ip_tcp:192.168.209.30[49686]
Protocol: [MS-PAN]: Print System Asynchronous Notification Protocol
Provider: spoolsv.exe
UUID : 0B6EDBFA-4A24-4FC6-8A23-942B1ECA65D1 v1.0
Bindings:
ncalrpc:[LRPC-f8b069ae483eb34203]
ncacn_ip_tcp:192.168.209.30[49686]
Protocol: [MS-PAN]: Print System Asynchronous Notification Protocol
Provider: spoolsv.exe
UUID : AE33069B-A2A8-46EE-A235-DDFD339BE281 v1.0
Bindings:
ncalrpc:[LRPC-f8b069ae483eb34203]
ncacn_ip_tcp:192.168.209.30[49686]
Protocol: N/A
Provider: spoolsv.exe
UUID : 4A452661-8290-4B36-8FBE-7F4093A94978 v1.0
Bindings:
ncalrpc:[LRPC-f8b069ae483eb34203]
ncacn_ip_tcp:192.168.209.30[49686]
Protocol: [MS-PAR]: Print System Asynchronous Remote Protocol
Provider: spoolsv.exe
UUID : 76F03F96-CDFD-44FC-A22C-64950A001209 v1.0
Bindings:
ncalrpc:[LRPC-f8b069ae483eb34203]
ncacn_ip_tcp:192.168.209.30[49686]
Protocol: N/A
Provider: srvsvc.dll
UUID : 98716D03-89AC-44C7-BB8C-285824E51C4A v1.0 XactSrv service
Bindings:
ncalrpc:[LRPC-722ceef8621d2f5628]
Protocol: N/A
Provider: N/A
UUID : 1A0D010F-1C33-432C-B0F5-8CF4E8053099 v1.0 IdSegSrv service
Bindings:
ncalrpc:[LRPC-722ceef8621d2f5628]
Protocol: N/A
Provider: BFE.DLL
UUID : DD490425-5325-4565-B774-7E27D6C09C24 v1.0 Base Firewall Engine API
Bindings:
ncalrpc:[LRPC-f2b6e91cf906de0034]
Protocol: N/A
Provider: MPSSVC.dll
UUID : 7F9D11BF-7FB9-436B-A812-B2D50C5D4C03 v1.0 Fw APIs
Bindings:
ncalrpc:[LRPC-f2b6e91cf906de0034]
ncalrpc:[LRPC-3289a326a2d0af439f]
Protocol: N/A
Provider: N/A
UUID : F47433C3-3E9D-4157-AAD4-83AA1F5C2D4C v1.0 Fw APIs
Bindings:
ncalrpc:[LRPC-f2b6e91cf906de0034]
ncalrpc:[LRPC-3289a326a2d0af439f]
ncalrpc:[LRPC-df5e7c98f8ed3703d3]
Protocol: N/A
Provider: MPSSVC.dll
UUID : 2FB92682-6599-42DC-AE13-BD2CA89BD11C v1.0 Fw APIs
Bindings:
ncalrpc:[LRPC-f2b6e91cf906de0034]
ncalrpc:[LRPC-3289a326a2d0af439f]
ncalrpc:[LRPC-df5e7c98f8ed3703d3]
ncalrpc:[LRPC-e38a362651f42079b4]
Protocol: N/A
Provider: certprop.dll
UUID : 30B044A5-A225-43F0-B3A4-E060DF91F9C1 v1.0
Bindings:
ncalrpc:[LRPC-2cd948279a7f190821]
Protocol: N/A
Provider: N/A
UUID : 650A7E26-EAB8-5533-CE43-9C1DFCE11511 v1.0 Vpn APIs
Bindings:
ncalrpc:[LRPC-2cd948279a7f190821]
ncacn_np:\\NARA[\PIPE\ROUTER]
ncalrpc:[RasmanLrpc]
ncalrpc:[VpnikeRpc]
ncalrpc:[LRPC-73e24568c7d8c8a984]
Protocol: N/A
Provider: N/A
UUID : ABFB6CA3-0C5E-4734-9285-0AEE72FE8D1C v1.0
Bindings:
ncalrpc:[OLE4A5930A18F639860FB43ABA1461F]
ncalrpc:[LRPC-583681e50b2ba04f76]
Protocol: N/A
Provider: N/A
UUID : B37F900A-EAE4-4304-A2AB-12BB668C0188 v1.0
Bindings:
ncalrpc:[OLE4A5930A18F639860FB43ABA1461F]
ncalrpc:[LRPC-583681e50b2ba04f76]
Protocol: N/A
Provider: N/A
UUID : F44E62AF-DAB1-44C2-8013-049A9DE417D6 v1.0
Bindings:
ncalrpc:[OLE4A5930A18F639860FB43ABA1461F]
ncalrpc:[LRPC-583681e50b2ba04f76]
Protocol: N/A
Provider: N/A
UUID : C2D1B5DD-FA81-4460-9DD6-E7658B85454B v1.0
Bindings:
ncalrpc:[OLE4A5930A18F639860FB43ABA1461F]
ncalrpc:[LRPC-583681e50b2ba04f76]
Protocol: N/A
Provider: N/A
UUID : 13560FA9-8C09-4B56-A1FD-04D083B9B2A1 v1.0
Bindings:
ncalrpc:[OLE4A5930A18F639860FB43ABA1461F]
ncalrpc:[LRPC-583681e50b2ba04f76]
Protocol: N/A
Provider: gpsvc.dll
UUID : 2EB08E3E-639F-4FBA-97B1-14F878961076 v1.0 Group Policy RPC Interface
Bindings:
ncalrpc:[LRPC-9d7a78402b2def8f78]
Protocol: N/A
Provider: schedsvc.dll
UUID : 0A74EF1C-41A4-4E06-83AE-DC74FB1CDD53 v1.0
Bindings:
ncalrpc:[IUserProfile2]
ncalrpc:[senssvc]
ncalrpc:[OLE1BA6CDE8282CC7936B58CD61B590]
Protocol: N/A
Provider: N/A
UUID : 29770A8F-829B-4158-90A2-78CD488501F7 v1.0
Bindings:
ncalrpc:[IUserProfile2]
ncalrpc:[senssvc]
ncalrpc:[OLE1BA6CDE8282CC7936B58CD61B590]
ncalrpc:[SessEnvPrivateRpc]
ncacn_np:\\NARA[\pipe\SessEnvPublicRpc]
ncacn_ip_tcp:192.168.209.30[49667]
Protocol: [MS-TSCH]: Task Scheduler Service Remoting Protocol
Provider: taskcomp.dll
UUID : 1FF70682-0A51-30E8-076D-740BE8CEE98B v1.0
Bindings:
ncalrpc:[IUserProfile2]
ncalrpc:[senssvc]
ncalrpc:[OLE1BA6CDE8282CC7936B58CD61B590]
ncalrpc:[SessEnvPrivateRpc]
ncacn_np:\\NARA[\pipe\SessEnvPublicRpc]
ncacn_ip_tcp:192.168.209.30[49667]
ncacn_np:\\NARA[\PIPE\atsvc]
Protocol: [MS-TSCH]: Task Scheduler Service Remoting Protocol
Provider: taskcomp.dll
UUID : 378E52B0-C0A9-11CF-822D-00AA0051E40F v1.0
Bindings:
ncalrpc:[IUserProfile2]
ncalrpc:[senssvc]
ncalrpc:[OLE1BA6CDE8282CC7936B58CD61B590]
ncalrpc:[SessEnvPrivateRpc]
ncacn_np:\\NARA[\pipe\SessEnvPublicRpc]
ncacn_ip_tcp:192.168.209.30[49667]
ncacn_np:\\NARA[\PIPE\atsvc]
Protocol: N/A
Provider: N/A
UUID : 33D84484-3626-47EE-8C6F-E7E98B113BE1 v2.0
Bindings:
ncalrpc:[IUserProfile2]
ncalrpc:[senssvc]
ncalrpc:[OLE1BA6CDE8282CC7936B58CD61B590]
ncalrpc:[SessEnvPrivateRpc]
ncacn_np:\\NARA[\pipe\SessEnvPublicRpc]
ncacn_ip_tcp:192.168.209.30[49667]
ncacn_np:\\NARA[\PIPE\atsvc]
ncalrpc:[ubpmtaskhostchannel]
ncalrpc:[LRPC-942ec9c46684f5b305]
[*] Received 619 endpoints.
impacket-rpcdump discovered a total of 619 RPC endpoints. spoolsv.exe is running. certsrv.exe is running.
IOXIDResolver
┌──(kali㉿kali)-[~/PEN-200/PG_PRACTICE/nara]
└─$ IOXIDResolver -t $IP
[*] Retrieving network interface of 192.168.209.30
Address: Nara
Address: 192.168.209.30
N/A