Jump to content

Recommended Posts

Guest Poupi the frog
Posted

Hi,

 

 

I am unable to find why in some cases the antimalware (MsMpEng.exe) is doing dns queries (event 22 in sysmon). This does not appear to be consistent. I entered a url in Chrome and Firefox, Sysmon event log showed that these processes were reaching out (through dns queries) for the related IPs. MsMpEng.exe was out of the loop.

 

 

Why does MsMpEng.exe perform dns queries at times? Why is this inconsistent?

 

More...

  • Replies 0
  • Created
  • Last Reply

Popular Days

Join the conversation

You can post now and register later. If you have an account, sign in now to post with your account.

Guest
Reply to this topic...

×   Pasted as rich text.   Paste as plain text instead

  Only 75 emoji are allowed.

×   Your link has been automatically embedded.   Display as a link instead

×   Your previous content has been restored.   Clear editor

×   You cannot paste images directly. Upload or insert images from URL.


×
×
  • Create New...