fshdll32 trying to send to Microsoft on port 25

Bulbous
Bulbous W/ Alumni Posts: 6 Security Scout

One of my Windows 10 PCs has been trying to send on port 25 to a variety of addresses registered to Microsoft every 10 minutes. I finally caught the process in the act and it turns out to be fshdll32. Does anyone know why this process is sending email to Microsoft?

Comments

  • MonikaL
    MonikaL W/ Alumni Posts: 206 W/ Former Staff

    Hi Bulbous,

     

    The Policy Manager uses SMTP Protocol for alert sending, and that could be the reason you found outgoing traffic on port 25, and this traffic is managed by the Policy Manager.

     

    The fshdll32.exe ia a host process for 32 bit components, and is basically to minimize created processes. Port 25 is the default SMTP non-encrypted port and so it cannot be changed.

     

    Regards,

    Monika

  • Bulbous
    Bulbous W/ Alumni Posts: 6 Security Scout

    Outbound Port 25 is not permitted on our network (and often in general). If we cannot change this port, can we at least get a list of destination IPs so it can be selectively allowed?

  • JamesC
    JamesC W/ Partner, W/ Staff, W/ Moderator Posts: 498 Moderator

    Hi bulbous

     

    No, we do not have static destination IP addresses, as we use dynamic IP.

This discussion has been closed.