I believe that port is the one used by the TCP store, for rendezvous. It’s not the first time I hear this, but I never understood if the store outlives the RPC agent on purpose or if it’s due to some sort of leak…