A technician is investigating a report of unusual behavior and slow performance on a company-owned laptop. The technician runs a command and reviews the following information.

Proto Local Address Foreign Address State

TCP 0.0.0.0:445 Listening RpcSs

TCP 0.0.0.0:80 Listening httpd.exe

TCP 0.0.0.0:443 192 .168.1.20:1301 Established httpd .exe

TCP 0.0.0.0:90328 172.55.80.22.9090 Established notepad .exe

Based on the above information, which of the following types of malware should the technician report?

A. Spyware

B. Rootkit

C. RAT

D. Logic bomb