Reply to thread

Message

<blockquote data-quote="shmu26" data-source="post: 866532" data-attributes="member: 37647">You inspired me to turn on the firewall logs and look at them. I don&#039;t have any recommended H_C firewall rules enabled at all. I have only one custom rule that I made, to block a certain program from calling home. And I have no third-party security or privacy software running on this VM. But I still see blocks of Windows processes. Here&#039;s some:Local Time:&nbsp; 2020/03/18 12:31:51ProcessId:&nbsp; 6752Application:&nbsp; C:\windows\systemapps\microsoft.windows.cortana_cw5n1h2txyewy\searchui.exeDirection:&nbsp; OutboundSourceAddress:&nbsp; 192.168.100.6SourcePort:&nbsp; 49691DestAddress:&nbsp; 13.107.4.254DestPort:&nbsp; 443Protocol:&nbsp; 6FilterRTID:&nbsp; 90752LayerName:&nbsp; %%14611LayerRTID:&nbsp; 48Local Time:&nbsp; 2020/03/18 12:31:51ProcessId:&nbsp; 3360Application:&nbsp; C:\program files\windowsapps\microsoft.windowsstore_12003.1001.1.0_x64__8wekyb3d8bbwe\winstore.app.exeDirection:&nbsp; OutboundSourceAddress:&nbsp; 192.168.100.6SourcePort:&nbsp; 49756DestAddress:&nbsp; 92.123.37.54DestPort:&nbsp; 443Protocol:&nbsp; 6FilterRTID:&nbsp; 90752LayerName:&nbsp; %%14611LayerRTID:&nbsp; 48Local Time:&nbsp; 2020/03/18 11:38:32ProcessId:&nbsp; 3408Application:&nbsp; C:\windows\system32\svchost.exeDirection:&nbsp; OutboundSourceAddress:&nbsp; 192.168.100.6SourcePort:&nbsp; 50121DestAddress:&nbsp; 93.184.220.29DestPort:&nbsp; 80Protocol:&nbsp; 6FilterRTID:&nbsp; 89222LayerName:&nbsp; %%14611LayerRTID:&nbsp; 48</blockquote>

[QUOTE="shmu26, post: 866532, member: 37647"] You inspired me to turn on the firewall logs and look at them. I don't have any recommended H_C firewall rules enabled at all. I have only one custom rule that I made, to block a certain program from calling home. And I have no third-party security or privacy software running on this VM. But I still see blocks of Windows processes. Here's some: Local Time: 2020/03/18 12:31:51 ProcessId: 6752 Application: C:\windows\systemapps\microsoft.windows.cortana_cw5n1h2txyewy\searchui.exe Direction: Outbound SourceAddress: 192.168.100.6 SourcePort: 49691 DestAddress: 13.107.4.254 DestPort: 443 Protocol: 6 FilterRTID: 90752 LayerName: %%14611 LayerRTID: 48 Local Time: 2020/03/18 12:31:51 ProcessId: 3360 Application: C:\program files\windowsapps\microsoft.windowsstore_12003.1001.1.0_x64__8wekyb3d8bbwe\winstore.app.exe Direction: Outbound SourceAddress: 192.168.100.6 SourcePort: 49756 DestAddress: 92.123.37.54 DestPort: 443 Protocol: 6 FilterRTID: 90752 LayerName: %%14611 LayerRTID: 48 Local Time: 2020/03/18 11:38:32 ProcessId: 3408 Application: C:\windows\system32\svchost.exe Direction: Outbound SourceAddress: 192.168.100.6 SourcePort: 50121 DestAddress: 93.184.220.29 DestPort: 80 Protocol: 6 FilterRTID: 89222 LayerName: %%14611 LayerRTID: 48 [/QUOTE]

Verification