Breaking News: Grepper is joining You.com. Read the official announcement!

Volatility Analyze the memory file and find the IP address of the local machine.

CyberChef answered on June 5, 2023 Popularity 1/10 Helpfulness 1/10

answer Volatility Analyze the memory file and find the IP address of the local machine.

Volatility Analyze the memory file and find the IP address of the local machine.

Comment

┌──(kali㉿kali)-[~/Desktop/mem check]
└─$ ./vol.py -f mem_2.vmem --profile=WinXPSP2x86 connscan
Volatility Foundation Volatility Framework 2.6
Offset(P)  Local Address             Remote Address            Pid
---------- ------------------------- ------------------------- ---
0x00eda590 172.16.176.143:1058       65.54.81.209:80           2044
0x01079e70 172.16.176.143:1082       209.234.234.16:80         2044
0x0107c888 172.16.176.143:1059       4.23.40.126:80            2044
0x0108fcd8 172.16.176.143:1072       65.55.15.124:80           2044
0x010fa448 172.16.176.143:1065       65.55.253.21:80           2044
0x02214988 172.16.176.143:1092       65.54.81.14:80            2044
0x026c68a8 172.16.176.143:1074       65.55.15.243:80           2044
0x02ae4bb0 172.16.176.143:1073       65.55.15.123:80           2044
0x048b25f0 172.16.176.143:1085       65.55.149.119:80          2044
0x04a045f8 172.16.176.143:1057       65.54.81.49:80            2044
0x04a04e70 172.16.176.143:1095       69.43.160.145:80          2044
0x04a4a4a0 172.16.176.143:1084       12.120.180.24:80          2044
0x04be2558 172.16.176.143:1079       65.54.81.22:80            2044
0x05536e70 172.16.176.143:1090       65.54.81.14:80            2044
0x05802340 172.16.176.143:1062       65.55.18.18:80            2044
0x05c9e200 172.16.176.143:1067       65.54.81.14:80            2044
0x05deea30 172.16.176.143:1068       65.54.81.14:80            2044
0x06015ab0 172.16.176.143:1053       207.46.170.10:80          2044
0x0605f208 172.16.176.143:1086       202.89.231.60:80          2044
0x06125538 172.16.176.143:1083       65.54.81.79:80            2044
0x0623a438 172.16.176.143:1066       96.6.41.210:80            2044
0x06450720 172.16.176.143:1077       65.55.149.121:80          2044
0x064509f0 172.16.176.143:1063       64.4.18.73:80             2044
0x06497a68 172.16.176.143:1075       65.55.15.124:80           2044
0x067bd218 172.16.176.143:1070       65.54.81.209:80           2044
0x07c17be0 172.16.176.143:1060       65.55.239.161:80          2044
                                                                                                         

172.16.176.143 is the internal IP in this case.. since there is an open coonection from this IP.

Popularity 1/10 Helpfulness 1/10 Language whatever

Source: Grepper

Tags: file find ip-address local memory volatility whatever

Link to this answer
Share Copy Link

Contributed on Jun 05 2023

CyberChef

0 Answers Avg Quality 2/10

Volatility Analyze the memory file and find the IP address of the local machine.

Contents

More Related Answers

Volatility Analyze the memory file and find the IP address of the local machine.

Grepper

Documentation

Social

Legal

Contact

Oops, You will need to install Grepper and log-in to perform this action.