From b3ffddcff020533a5b200bf1c17c932068fff0e7 Mon Sep 17 00:00:00 2001
From: Jan <jan.lange97@gmx.net>
Date: Mon, 7 Dec 2020 18:39:48 +0100
Subject: [PATCH] fixes wrong offset in 18363 x64

---
 volatility/framework/plugins/windows/netscan.py               | 2 +-
 .../framework/symbols/windows/netscan-win10-18363-x64.json    | 4 ++--
 2 files changed, 3 insertions(+), 3 deletions(-)

diff --git a/volatility/framework/plugins/windows/netscan.py b/volatility/framework/plugins/windows/netscan.py
index a1b20a8cc..74ba49b75 100644
--- a/volatility/framework/plugins/windows/netscan.py
+++ b/volatility/framework/plugins/windows/netscan.py
@@ -177,7 +177,7 @@ class NetScan(interfaces.plugins.PluginInterface, timeliner.TimeLinerInterface):
                 (10, 0, 17134): "netscan-win10-17134-x64",
                 (10, 0, 17763): "netscan-win10-17763-x64",
                 (10, 0, 18362): "netscan-win10-17763-x64",
-                (10, 0, 18363): "netscan-win10-17763-x64",
+                (10, 0, 18363): "netscan-win10-18363-x64",
                 (10, 0, 19041): "netscan-win10-19041-x64"
             }
 
diff --git a/volatility/framework/symbols/windows/netscan-win10-18363-x64.json b/volatility/framework/symbols/windows/netscan-win10-18363-x64.json
index 1eb3c754c..d3537ef48 100644
--- a/volatility/framework/symbols/windows/netscan-win10-18363-x64.json
+++ b/volatility/framework/symbols/windows/netscan-win10-18363-x64.json
@@ -72,7 +72,7 @@
                 }
             },
             "LocalAddr": {
-                "offset": 128,
+                "offset": 136,
                 "type":{
                     "kind": "pointer",
                     "subtype": {
@@ -93,7 +93,7 @@
                 }
             },
             "Port": {
-                "offset": 120,
+                "offset": 128,
                 "type": {
                     "kind": "base",
                     "name": "unsigned be short"