Investigations

Filter by confidence:

Observed svchost.exe outbound connections to unknown external IPs — WORKSTATION-01

ResolvedSupported
Target: svchost.exe:4821@WORKSTATION-01Last Updated: 5/15/2026

Observations

  • •svchost.exe [network_connection] → 160.79.104.10
  • •svchost.exe [network_connection] → 160.79.104.10
  • •svchost.exe [network_connection] → 160.79.104.10
  • +18 more
⚠3 attribution limitation(s)