Volatility 3 Framework 2.27.0

Offset	Proto	LocalAddr	LocalPort	ForeignAddr	ForeignPort	State	PID	Owner	Created

0x1c6dcd0	TCPv4	172.16.7.15	57160	172.16.4.10	8080	CLOSED	-	-	N/A
0x1253eec0	UDPv4	127.0.0.1	62982	*	0		4600	OUTLOOK.EXE	2018-09-04 21:53:14.000000 UTC
0x19c38700	UDPv6	::1	60792	*	0		1548	svchost.exe	2018-08-30 15:36:54.000000 UTC
0x3914a480	TCPv4	172.16.7.15	445	172.16.6.11	59352	ESTABLISHED	-	-	N/A
0x3914aca0	UDPv4	0.0.0.0	53028	*	0		1104	svchost.exe	2018-09-06 19:45:03.000000 UTC
0x429ed270	TCPv4	172.16.7.15	57161	172.16.4.10	8080	CLOSED	-	-	-
0x56321280	UDPv4	172.16.7.15	60793	*	0		1548	svchost.exe	2018-08-30 15:36:54.000000 UTC
0x7e339680	TCPv4	172.16.7.15	54367	172.16.4.10	8080	CLOSE_WAIT	-	-	N/A
0x957bf110	UDPv4	0.0.0.0	5353	*	0		4844	chrome.exe	2018-09-04 21:53:51.000000 UTC
0xa1b3d560	TCPv4	172.16.7.15	53233	172.16.4.10	8080	CLOSE_WAIT	-	-	N/A
0xa87d7010	UDPv4	0.0.0.0	50760	*	0		1104	svchost.exe	2018-09-06 19:51:42.000000 UTC
0xae130230	TCPv4	172.16.7.15	3262	172.16.5.50	56012	ESTABLISHED	-	-	N/A
0xaea1ab80	UDPv4	127.0.0.1	60794	*	0		1548	svchost.exe	2018-08-30 15:36:54.000000 UTC
0xb65cc010	TCPv4	172.16.7.15	57141	172.16.4.6	443	ESTABLISHED	-	-	N/A
0xbb08e990	UDPv4	0.0.0.0	123	*	0		360	svchost.exe	2018-08-30 05:14:56.000000 UTC
0xbb08ec30	UDPv4	0.0.0.0	123	*	0		360	svchost.exe	2018-08-30 05:14:56.000000 UTC
0xbb08ec30	UDPv6	::	123	*	0		360	svchost.exe	2018-08-30 05:14:56.000000 UTC
0xbb15dbe0	TCPv4	0.0.0.0	3389	0.0.0.0	0	LISTENING	1104	svchost.exe	-
0xbb173010	TCPv4	0.0.0.0	3262	0.0.0.0	0	LISTENING	3548	subject_srv.ex	-
0xbb173010	TCPv6	::	3262	::	0	LISTENING	3548	subject_srv.ex	-
0xbb207d00	TCPv4	0.0.0.0	49181	0.0.0.0	0	LISTENING	652	services.exe	-
0xbb20c270	TCPv4	0.0.0.0	49181	0.0.0.0	0	LISTENING	652	services.exe	-
0xbb20c270	TCPv6	::	49181	::	0	LISTENING	652	services.exe	-
0xbb2a3ee0	TCPv4	0.0.0.0	49182	0.0.0.0	0	LISTENING	2972	svchost.exe	-
0xbb2de010	TCPv4	0.0.0.0	49182	0.0.0.0	0	LISTENING	2972	svchost.exe	-
0xbb2de010	TCPv6	::	49182	::	0	LISTENING	2972	svchost.exe	-
0xbb3270d0	UDPv4	0.0.0.0	0	*	0		2972	svchost.exe	2018-08-30 05:14:58.000000 UTC
0xbb327ec0	UDPv4	0.0.0.0	0	*	0		2972	svchost.exe	2018-08-30 05:14:58.000000 UTC
0xbb327ec0	UDPv6	::	0	*	0		2972	svchost.exe	2018-08-30 05:14:58.000000 UTC
0xbb37e2c0	UDPv4	0.0.0.0	0	*	0		360	svchost.exe	2018-08-30 05:14:55.000000 UTC
0xbb37e2c0	UDPv6	::	0	*	0		360	svchost.exe	2018-08-30 05:14:55.000000 UTC
0xbb468480	TCPv4	172.16.7.15	55697	172.16.4.10	8080	CLOSE_WAIT	-	-	N/A
0xbb4d8de0	TCPv4	0.0.0.0	49179	0.0.0.0	0	LISTENING	664	lsass.exe	-
0xbb4d8de0	TCPv6	::	49179	::	0	LISTENING	664	lsass.exe	-
0xbb4e5c50	TCPv4	0.0.0.0	49179	0.0.0.0	0	LISTENING	664	lsass.exe	-
0xbb5eb7f0	UDPv6	::1	1900	*	0		1548	svchost.exe	2018-08-30 15:36:54.000000 UTC
0xbb601c40	TCPv4	0.0.0.0	47001	0.0.0.0	0	LISTENING	4	System	-
0xbb601c40	TCPv6	::	47001	::	0	LISTENING	4	System	-
0xbb667010	TCPv4	0.0.0.0	5985	0.0.0.0	0	LISTENING	4	System	-
0xbb667010	TCPv6	::	5985	::	0	LISTENING	4	System	-
0xbb702900	UDPv4	172.16.7.15	1900	*	0		1548	svchost.exe	2018-08-30 15:36:54.000000 UTC
0xbb776ee0	TCPv4	0.0.0.0	445	0.0.0.0	0	LISTENING	4	System	-
0xbb776ee0	TCPv6	::	445	::	0	LISTENING	4	System	-
0xbb84bec0	UDPv4	0.0.0.0	0	*	0		2244	mfefire.exe	2018-08-30 05:14:51.000000 UTC
0xbb84bec0	UDPv6	::	0	*	0		2244	mfefire.exe	2018-08-30 05:14:51.000000 UTC
0xbba70c50	TCPv4	0.0.0.0	8081	0.0.0.0	0	LISTENING	1700	macmnsvc.exe	-
0xbba70c50	TCPv6	::	8081	::	0	LISTENING	1700	macmnsvc.exe	-
0xbbad5610	TCPv4	0.0.0.0	8081	0.0.0.0	0	LISTENING	1700	macmnsvc.exe	-
0xbbaf8270	UDPv4	0.0.0.0	8082	*	0		1700	macmnsvc.exe	2018-08-30 05:14:47.000000 UTC
0xbbaf8270	UDPv6	::	8082	*	0		1700	macmnsvc.exe	2018-08-30 05:14:47.000000 UTC
0xbbdbb940	UDPv4	0.0.0.0	3702	*	0		1548	svchost.exe	2018-08-30 05:14:47.000000 UTC
0xbbdc7010	UDPv4	0.0.0.0	3702	*	0		1548	svchost.exe	2018-08-30 05:14:47.000000 UTC
0xbbdc7650	UDPv4	0.0.0.0	3702	*	0		1548	svchost.exe	2018-08-30 05:14:47.000000 UTC
0xbbdc7650	UDPv6	::	3702	*	0		1548	svchost.exe	2018-08-30 05:14:47.000000 UTC
0xbbdc9ec0	UDPv4	0.0.0.0	3702	*	0		1548	svchost.exe	2018-08-30 05:14:47.000000 UTC
0xbbdc9ec0	UDPv6	::	3702	*	0		1548	svchost.exe	2018-08-30 05:14:47.000000 UTC
0xbbdd2470	UDPv4	0.0.0.0	51952	*	0		1548	svchost.exe	2018-08-30 05:14:47.000000 UTC
0xbbdd2ec0	UDPv4	0.0.0.0	51953	*	0		1548	svchost.exe	2018-08-30 05:14:47.000000 UTC
0xbbdd2ec0	UDPv6	::	51953	*	0		1548	svchost.exe	2018-08-30 05:14:47.000000 UTC
0xbc0da340	UDPv4	0.0.0.0	64034	*	0		1104	svchost.exe	2018-09-06 19:51:56.000000 UTC
0xbc462be0	UDPv4	0.0.0.0	4500	*	0		448	svchost.exe	2018-08-30 05:14:47.000000 UTC
0xbc465690	UDPv4	0.0.0.0	500	*	0		448	svchost.exe	2018-08-30 05:14:47.000000 UTC
0xbc467460	UDPv4	0.0.0.0	500	*	0		448	svchost.exe	2018-08-30 05:14:47.000000 UTC
0xbc467460	UDPv6	::	500	*	0		448	svchost.exe	2018-08-30 05:14:47.000000 UTC
0xbc4699f0	UDPv4	0.0.0.0	4500	*	0		448	svchost.exe	2018-08-30 05:14:47.000000 UTC
0xbc4699f0	UDPv6	::	4500	*	0		448	svchost.exe	2018-08-30 05:14:47.000000 UTC
0xbc4d9010	UDPv4	0.0.0.0	0	*	0		360	svchost.exe	2018-08-30 05:14:55.000000 UTC
0xbc4f6c40	TCPv4	0.0.0.0	5357	0.0.0.0	0	LISTENING	4	System	-
0xbc4f6c40	TCPv6	::	5357	::	0	LISTENING	4	System	-
0xbc7e6c70	UDPv4	0.0.0.0	0	*	0		448	svchost.exe	2018-08-30 05:14:47.000000 UTC
0xbca94180	UDPv4	127.0.0.1	54497	*	0		1104	svchost.exe	2018-08-30 05:14:46.000000 UTC
0xbcabdec0	UDPv4	127.0.0.1	51003	*	0		664	lsass.exe	2018-08-30 05:14:46.000000 UTC
0xbcb1e6e0	UDPv4	0.0.0.0	0	*	0		664	lsass.exe	2018-08-30 05:14:46.000000 UTC
0xbcb1e6e0	UDPv6	::	0	*	0		664	lsass.exe	2018-08-30 05:14:46.000000 UTC
0xbcb1eec0	UDPv4	0.0.0.0	0	*	0		664	lsass.exe	2018-08-30 05:14:46.000000 UTC
0xbce9b640	UDPv4	0.0.0.0	0	*	0		1104	svchost.exe	2018-08-30 05:14:45.000000 UTC
0xbce9b640	UDPv6	::	0	*	0		1104	svchost.exe	2018-08-30 05:14:45.000000 UTC
0xbcedba10	TCPv4	0.0.0.0	49154	0.0.0.0	0	LISTENING	448	svchost.exe	-
0xbcf0d2b0	TCPv4	0.0.0.0	49154	0.0.0.0	0	LISTENING	448	svchost.exe	-
0xbcf0d2b0	TCPv6	::	49154	::	0	LISTENING	448	svchost.exe	-
0xbd209870	TCPv4	0.0.0.0	49152	0.0.0.0	0	LISTENING	548	wininit.exe	-
0xbd211c50	TCPv4	0.0.0.0	49152	0.0.0.0	0	LISTENING	548	wininit.exe	-
0xbd211c50	TCPv6	::	49152	::	0	LISTENING	548	wininit.exe	-
0xbd268ee0	TCPv4	0.0.0.0	49153	0.0.0.0	0	LISTENING	932	svchost.exe	-
0xbd268ee0	TCPv6	::	49153	::	0	LISTENING	932	svchost.exe	-
0xbd269350	TCPv4	0.0.0.0	49153	0.0.0.0	0	LISTENING	932	svchost.exe	-
0xbd28bc90	UDPv4	0.0.0.0	62378	*	0		1104	svchost.exe	2018-09-06 19:45:29.000000 UTC
0xbd2d3010	UDPv4	0.0.0.0	0	*	0		664	lsass.exe	2018-08-30 05:14:46.000000 UTC
0xbd2d3010	UDPv6	::	0	*	0		664	lsass.exe	2018-08-30 05:14:46.000000 UTC
0xbd2d4440	UDPv4	0.0.0.0	0	*	0		664	lsass.exe	2018-08-30 05:14:46.000000 UTC
0xbd2e3c20	UDPv4	127.0.0.1	64885	*	0		516	svchost.exe	2018-08-30 05:20:19.000000 UTC
0xbd583b30	TCPv4	127.0.0.1	49206	0.0.0.0	0	LISTENING	3744	ncpa_passive.e	-
0xbd5c8610	TCPv4	0.0.0.0	135	0.0.0.0	0	LISTENING	880	svchost.exe	-
0xbd5e9120	TCPv4	0.0.0.0	135	0.0.0.0	0	LISTENING	880	svchost.exe	-
0xbd5e9120	TCPv6	::	135	::	0	LISTENING	880	svchost.exe	-
0xbd8c48d0	TCPv4	172.16.7.15	56999	172.16.4.10	8080	CLOSE_WAIT	-	-	N/A
0xbd90d260	UDPv4	172.16.7.15	137	*	0		4	System	2018-08-30 05:14:45.000000 UTC
0xbd92d130	UDPv4	172.16.7.15	138	*	0		4	System	2018-08-30 05:14:45.000000 UTC
0xbd92e010	TCPv4	172.16.7.15	139	0.0.0.0	0	LISTENING	4	System	-
0xbdccb0d0	UDPv4	0.0.0.0	5355	*	0		1104	svchost.exe	2018-09-06 17:16:25.000000 UTC
0xbe2a6d60	UDPv4	0.0.0.0	0	*	0		2244	mfefire.exe	2018-08-30 05:14:51.000000 UTC
0xbe44e010	TCPv4	0.0.0.0	3389	0.0.0.0	0	LISTENING	1104	svchost.exe	-
0xbe44e010	TCPv6	::	3389	::	0	LISTENING	1104	svchost.exe	-
0xbe5c06e0	UDPv4	127.0.0.1	1900	*	0		1548	svchost.exe	2018-08-30 15:36:54.000000 UTC
0xbe60a980	TCPv4	172.16.7.15	57170	172.16.5.21	5985	ESTABLISHED	-	-	N/A
0xbe935cd0	TCPv4	172.16.7.15	57094	172.16.4.6	443	ESTABLISHED	-	-	N/A
0xbed60a80	UDPv4	0.0.0.0	58057	*	0		1104	svchost.exe	2018-09-06 19:50:09.000000 UTC
0xbef7b5a0	TCPv4	127.0.0.1	49207	127.0.0.1	49206	ESTABLISHED	-	-	N/A
0xbfa22a60	TCPv4	127.0.0.1	49206	127.0.0.1	49207	ESTABLISHED	-	-	N/A
0xbfa8d510	TCPv4	172.16.7.15	57168	172.16.5.21	5985	CLOSED	-	-	-
0xbfd64a20	UDPv4	0.0.0.0	0	*	0		448	svchost.exe	2018-08-30 05:14:47.000000 UTC
0xbfd64a20	UDPv6	::	0	*	0		448	svchost.exe	2018-08-30 05:14:47.000000 UTC
