Windows OS, Services & Apps: Network Connection Target Hosts
This post lists the internet communication targets of the Microsoft Windows operating system, including its various services and UWP apps. This post is a part of my application network connection monitoring series, a group of articles that explain how to analyze the network traffic of any Windows or macOS app.
The series consists of the following articles:
- Part 1: explanation of the methodology
- Part 2: list of MS Office & Teams communication targets
- Part 3 (this article): list of Windows, OS services & UWP apps communication targets
- Part 4: list of Citrix CVAD communication targets
- Part 5: list of Adobe Acrobat Reader, Photoshop, & Creative Cloud communication targets
TL;DR
The Microsoft Windows operating system talks to 291 hosts and 2,764 IPs on the internet. List of URLs & details below.
About This Data
What Is This List?
The table below lists the internet hosts the Microsoft Windows operating system, including its various services and UWP apps communicated with in a real environment. For each application, the table shows:
- Application name
- Application version(s)
- Process(es) of the application
- Number of distinct target IP addresses
- Names and ports of the target hosts
Where Does the Data Come From?
The data was collected in vast limits’ internal network by uberAgent, our endpoint monitoring and analytics product. The data spans a 30-day time range in early 2021.
The table contains metadata of actual network communications. It is accurate and complete insofar as I did not alter anything. I did, however, remove some internal systems and the results of manual web browsing (or similar). Some hostnames may be specific to our location (Germany).
List of Windows OS & UPW Apps Network Connection Target Hosts
| Application | App version(s) | Process(es) | #Target IPs | Targets |
|---|---|---|---|---|
| BDESVC | 14393.4169 14393.4225 17763.1697 17763.1757 18363.1316 18363.1379 19041.746 19041.804 19042.746 19042.789 19042.804 7601 9600 |
svchost.exe | 1 | enterpriseregistration.windows.net:443 |
| BitLocker Drive Encryption Service | 14393.4169 14393.4225 17763.1697 17763.1757 18363.1316 18363.1379 19041.746 19041.804 19042.746 19042.789 19042.804 7601 9600 |
svchost.exe | 2 | enterpriseregistration.windows.net:443 ocsp.digicert.com:80 status.rapidssl.com:80 |
| CDPUserSvc | 14393.4169 14393.4225 17763.1697 17763.1757 18363.1316 18363.1379 19041.746 19041.804 19042.746 19042.789 19042.804 7601 9600 |
svchost.exe | 4 | activity.windows.com:443 enterprise.activity.windows.com:443 |
| Connected Devices Platform Service | 14393.4169 14393.4225 17763.1697 17763.1757 18363.1316 18363.1379 19041.746 19041.804 19042.746 19042.789 19042.804 7601 9600 |
svchost.exe | 1 | aad.cs.dds.microsoft.com:443 continuum.dds.microsoft.com:443 cs.dds.microsoft.com:443 |
| Connected Devices Platform User Service | 14393.4169 14393.4225 17763.1697 17763.1757 18363.1316 18363.1379 19041.746 19041.804 19042.746 19042.789 19042.804 7601 9600 |
svchost.exe | 15 | activity.windows.com:443 discover.aadrm.com:443 enterprise.activity.windows.com:443 substrate.office.com:443 |
| Cryptographic Services | 14393.4169 14393.4225 17763.1697 17763.1757 18363.1316 18363.1379 19041.746 19041.804 19042.746 19042.789 19042.804 7601 9600 |
svchost.exe | 340 | 11.tlu.dl.delivery.mp.microsoft.com:80 2.au.download.windowsupdate.com:80 2.tlu.dl.delivery.mp.microsoft.com:80 3.au.download.windowsupdate.com:80 au.download.windowsupdate.com:80 crl.apple.com:80 crl.comodoca.com:80 crl.globalsign.net:80 crl.identrust.com:80 crl.usertrust.com:80 crl.verisign.com:80 crl3.digicert.com:80 ctldl.windowsupdate.com:80 dl.delivery.mp.microsoft.com:80 download.windowsupdate.com:80 ocsp.comodoca.com:80 ocsp.digicert.com:80 ocsp.globalsign.com:80 ocsp2.globalsign.com:80 status.rapidssl.com:80 |
| Delivery Optimization | 14393.4169 14393.4225 17763.1697 17763.1757 18363.1316 18363.1379 19041.746 19041.804 19042.746 19042.789 19042.804 7601 9600 |
svchost.exe | 431 | 11.au.download.windowsupdate.com:80 11.tlu.dl.delivery.mp.microsoft.com:80 2.au.download.windowsupdate.com:80 2.tlu.dl.delivery.mp.microsoft.com:80 3.au.download.windowsupdate.com:80 3.tlu.dl.delivery.mp.microsoft.com:80 9.tlu.dl.delivery.mp.microsoft.com:80 array602.prod.do.dsp.mp.microsoft.com:443 array603.prod.do.dsp.mp.microsoft.com:443 array604.prod.do.dsp.mp.microsoft.com:443 array605.prod.do.dsp.mp.microsoft.com:443 array606.prod.do.dsp.mp.microsoft.com:443 array607.prod.do.dsp.mp.microsoft.com:443 array608.prod.do.dsp.mp.microsoft.com:443 array609.prod.do.dsp.mp.microsoft.com:443 array610.prod.do.dsp.mp.microsoft.com:443 array611.prod.do.dsp.mp.microsoft.com:443 array612.prod.do.dsp.mp.microsoft.com:443 array614.prod.do.dsp.mp.microsoft.com:443 array615.prod.do.dsp.mp.microsoft.com:443 array616.prod.do.dsp.mp.microsoft.com:443 array801.prod.do.dsp.mp.microsoft.com:443 array805.prod.do.dsp.mp.microsoft.com:443 array808.prod.do.dsp.mp.microsoft.com:443 array810.prod.do.dsp.mp.microsoft.com:443 array812.prod.do.dsp.mp.microsoft.com:443 array813.prod.do.dsp.mp.microsoft.com:443 au.download.windowsupdate.com:80 cp501.prod.do.dsp.mp.microsoft.com:443 cp601.prod.do.dsp.mp.microsoft.com:443 cp801.prod.do.dsp.mp.microsoft.com:443 ctldl.windowsupdate.com:80 disc601.prod.do.dsp.mp.microsoft.com:443 disc801.prod.do.dsp.mp.microsoft.com:443 dl.delivery.mp.microsoft.com:80 download.windowsupdate.com:80 emdl.ws.microsoft.com:80 geo.prod.do.dsp.mp.microsoft.com:443 geover.prod.do.dsp.mp.microsoft.com:443 kv501.prod.do.dsp.mp.microsoft.com:443 kv601.prod.do.dsp.mp.microsoft.com:443 kv801.prod.do.dsp.mp.microsoft.com:443 msedge.b.tlu.dl.delivery.mp.microsoft.com:80 msedge.f.dl.delivery.mp.microsoft.com:80 officecdn.microsoft.com.edgesuite.net:80 officecdn.microsoft.com:80 tlu.dl.delivery.mp.microsoft.com:80 |
| Device Setup Manager | 14393.4169 14393.4225 17763.1697 17763.1757 18363.1316 18363.1379 19041.746 19041.804 19042.746 19042.789 19042.804 7601 9600 |
svchost.exe | 26 | crl3.digicert.com:80 displaycatalog.mp.microsoft.com:443 dmd.metaservices.microsoft.com:80 go.microsoft.com:80 ocsp.digicert.com:80 |
| DsmSvc | 14393.4169 14393.4225 17763.1697 17763.1757 18363.1316 18363.1379 19041.746 19041.804 19042.746 19042.789 19042.804 7601 9600 |
svchost.exe | 2 | dmd.metaservices.microsoft.com:80 go.microsoft.com:80 |
| Group Policy Client | 14393.4169 14393.4225 17763.1697 17763.1757 18363.1316 18363.1379 19041.746 19041.804 19042.746 19042.789 19042.804 7601 9600 |
backgroundTaskHost.exe | 2 | login.live.com:443 |
| LocalBridge | 18.2006.1031.0 18.2008.1271.0 |
LocalBridge.exe | 5 | config.edge.skype.com:443 officehomeblobs.blob.core.windows.net:443 |
| Microsoft Account Sign-in Assistant | 14393.4169 14393.4225 17763.1697 17763.1757 18363.1316 18363.1379 19041.746 19041.804 19042.746 19042.789 19042.804 7601 9600 |
svchost.exe | 48 | crl3.digicert.com:80 ctldl.windowsupdate.com:80 login.live.com:443 login.microsoftonline.com:443 ocsp.digicert.com:80 status.geotrust.com:80 sv.symcb.com:80 www.tm.a.prd.aadg.akadns.net:443 |
| Microsoft Edge Update | 1.3.117.29 1.3.119.43 1.3.121.21 1.3.133.5 1.3.135.29 1.3.135.41 |
MicrosoftEdgeUpdate.exe | 24 | msedge.api.cdp.microsoft.com:443 msedge.b.tlu.dl.delivery.mp.microsoft.com:80 ocsp.digicert.com:80 self.events.data.microsoft.com:443 |
| Microsoft Intune Management Extension | 1.37.200.3 1.38.300.1 1.39.200.3 |
ClientHealthEval.exe Microsoft.Management.Services.IntuneWindowsAgent.exe |
3 | fef.amsub0302.manage.microsoft.com:443 manage.microsoft.com:443 r.manage.microsoft.com:443 |
| Microsoft OneDrive | 19.192.0926.0012 20.114.0607.0002 20.169.0823.0006 20.169.0823.0008 20.201.1005.0009 21.002.0104.0005 |
FileCoAuth.exe OneDrive.exe OneDriveStandaloneUpdater.exe |
132 | am3pap004.storage.live.com:443 api.onedrive.com:443 arc.msn.com:443 config.teams.microsoft.com:443 ctldl.windowsupdate.com:80 g.live.com:443 login.live.com:443 login.microsoftonline.com:443 logincdn.msauth.net:443 mobile.pipe.aria.microsoft.com:443 ocsp.digicert.com:80 oneclient.sfx.ms:443 onedriveclucprodbn20007.blob.core.windows.net:443 onedriveclucprodbn20010.blob.core.windows.net:443 onedriveclucprodbn20036.blob.core.windows.net:443 onedriveclucproddm20012.blob.core.windows.net:443 onedriveclucproddm20013.blob.core.windows.net:443 onedriveclucproddm20030.blob.core.windows.net:443 par02p.wns.windows.com:443 skydrive.wns.windows.com:443 status.rapidssl.com:80 sv.symcb.com:80 v10.events.data.microsoft.com:443 www.microsoft.com:80 |
| Microsoft Update Health Tools | 2.70.0.0 | uhssvc.exe | 1 | payloadprod15.blob.core.windows.net:443 |
| Microsoft Windows Malicious Software Removal Tool | 5.85.17731.1 5.86.17836.1 |
MRT.exe | 7 | wdcp.microsoft.com:443 wdcpalt.microsoft.com:443 |
| Microsoft Windows OS | 14393.4169 14393.4225 17763.1697 17763.1757 18363.1316 18363.1379 19041.746 19041.804 19042.746 19042.789 19042.804 7601 9600 |
AppHostRegistrationVerifier.exe BitLockerDeviceEncryption.exe CompatTelRunner.exe DeviceCensus.exe DeviceEnroller.exe EngHost.exe InstallAgentUserBroker.exe LogonUI.exe MoUsoCoreWorker.exe RuntimeBroker.exe SIHClient.exe SettingSyncHost.exe SpeechModelDownload.exe SpeechRuntime.exe UpdateNotificationMgr.exe WaaSMedicAgent.exe WerFault.exe backgroundTaskHost.exe browser_broker.exe cleanmgr.exe cmd.exe dmclient.exe dxgiadaptercache.exe explorer.exe lsass.exe omadmclient.exe powershell_ise.exe rundll32.exe signtool.exe slui.exe smartscreen.exe svchost.exe taskhostw.exe usocoreworker.exe wermgr.exe wuauclt.exe |
895 | 11.au.download.windowsupdate.com:80 11.tlu.dl.delivery.mp.microsoft.com:80 2.au.download.windowsupdate.com:80 2.tlu.dl.delivery.mp.microsoft.com:80 3.au.download.windowsupdate.com:80 3.tlu.dl.delivery.mp.microsoft.com:80 7.au.download.windowsupdate.com:80 9.au.download.windowsupdate.com:80 9.tlu.dl.delivery.mp.microsoft.com:80 adl.windows.com:80 array507.prod.do.dsp.mp.microsoft.com:443 array508.prod.do.dsp.mp.microsoft.com:443 array509.prod.do.dsp.mp.microsoft.com:443 array601.prod.do.dsp.mp.microsoft.com:443 array607.prod.do.dsp.mp.microsoft.com:443 array614.prod.do.dsp.mp.microsoft.com:443 array809.prod.do.dsp.mp.microsoft.com:443 array810.prod.do.dsp.mp.microsoft.com:443 array812.prod.do.dsp.mp.microsoft.com:443 au.download.windowsupdate.com:80 bg2.v4.a.dl.ws.microsoft.com:80 bg2.v4.emdl.ws.microsoft.com:80 bg4.ds.a.dl.ws.microsoft.com:80 bg4.ds.emdl.ws.microsoft.com:80 bg5.v4.a.dl.ws.microsoft.com:80 bg5.v4.emdl.ws.microsoft.com:80 browser.events.data.msn.com:443 browser.pipe.aria.microsoft.com:443 ccs.play.king.com:443 cdn.onenote.net:443 checkappexec.microsoft.com:443 client.wns.windows.com:443 clients2.google.com:443 collections.mp.microsoft.com:443 cp501.prod.do.dsp.mp.microsoft.com:443 cp601.prod.do.dsp.mp.microsoft.com:443 cp801.prod.do.dsp.mp.microsoft.com:443 crl.comodoca.com:80 crl.identrust.com:80 crl3.digicert.com:80 crl4.digicert.com:80 cs.dds.microsoft.com:443 ctldl.windowsupdate.com:80 d23iz4esrwkib6.cloudfront.net:80 db3pap001.settings.live.net:443 db3pap001.storage.live.com:443 disc501.prod.do.dsp.mp.microsoft.com:443 disc601.prod.do.dsp.mp.microsoft.com:443 disc801.prod.do.dsp.mp.microsoft.com:443 discover.aadrm.com:443 displaycatalog.mp.microsoft.com:443 dl.delivery.mp.microsoft.com:80 dmd.metaservices.microsoft.com:80 download.windowsupdate.com:80 emdl.ws.microsoft.com:80 enrollment.manage.microsoft.com:443 enterpriseregistration.windows.net:443 fe2.update.microsoft.com:443 fe2.ws.microsoft.com:443 fe2cr.update.microsoft.com:443 fe3.delivery.mp.microsoft.com:443 fe3cr.delivery.mp.microsoft.com:443 fef.amsub0302.manage.microsoft.com:443 fs.microsoft.com:443 g.live.com:443 geo.prod.do.dsp.mp.microsoft.com:443 geover.prod.do.dsp.mp.microsoft.com:443 go.microsoft.com:443 go.microsoft.com:80 has.spserv.microsoft.com:443 iecvlist.microsoft.com:443 inference.location.live.net:443 kv501.prod.do.dsp.mp.microsoft.com:443 kv601.prod.do.dsp.mp.microsoft.com:443 kv801.prod.do.dsp.mp.microsoft.com:443 licensing.mp.microsoft.com:443 login.live.com:443 login.live.com:80 login.microsoftonline.com:443 login.microsoftonline.us:443 login.partner.microsoftonline.cn:443 login.windows-ppe.net:443 login.windows.net:443 manage.devcenter.microsoft.com:443 manage.microsoft.com:443 maps.windows.com:443 mobile.pipe.aria.microsoft.com:443 msdl.microsoft.com:443 msedge.b.tlu.dl.delivery.mp.microsoft.com:80 msedge.f.dl.delivery.mp.microsoft.com:80 nav.smartscreen.microsoft.com:443 ocsp.comodoca.com:80 ocsp.digicert.cn:80 ocsp.digicert.com:80 ocsp.globalsign.com:80 ocsp.godaddy.com:80 ocsp.msocsp.com:80 ocsp.sectigo.com:80 ocsp2.globalsign.com:80 officecdn.microsoft.com.edgesuite.net:80 officecdn.microsoft.com:80 oneclient.sfx.ms:443 onegetcdn.azureedge.net:443 oneocsp.microsoft.com:80 outlook.office365.com:443 par02p.wns.windows.com:443 pool.ntp.org:123 portal.manage-dogfood.microsoft.com:443 portal.manage-ppe.microsoftonline.cn:443 portal.manage-selfhost.microsoft.com:443 portal.manage.microsoft.us:443 portal.manage.microsoftonline.cn:443 pti.store.microsoft.com:443 purchase.mp.microsoft.com:443 r.manage.microsoft.com:443 r1—sn-4g5e6nlk.gvt1.com:80 r1—sn-4g5e6nzz.gvt1.com:80 r1—sn-4g5ednle.gvt1.com:80 r2—sn-4g5e6nsz.gvt1.com:80 r2—sn-4g5edne7.gvt1.com:80 r2—sn-4g5ednsk.gvt1.com:80 r3—sn-4g5e6nez.gvt1.com:80 r3—sn-4g5e6nzs.gvt1.com:80 r3.o.lencr.org:80 r4—sn-4g5e6nsz.gvt1.com:80 r5—sn-4g5edns6.gvt1.com:80 redirector.gvt1.com:80 self.events.data.microsoft.com:443 settings-win.data.microsoft.com:443 settings.data.microsoft.com:443 share.microsoft.com:443 sls.update.microsoft.com:443 slscr.update.microsoft.com:443 smartscreen-prod.microsoft.com:443 statsfe2.update.microsoft.com:80 statsfe2.ws.microsoft.com:80 storage.googleapis.com:443 storage.googleapis.com:80 store-images.s-microsoft.com:80 storecatalogrevocation.storequality.microsoft.com:443 substrate.office.com:443 sv.symcd.com:80 telecommand.telemetry.microsoft.com:443 tile-service.weather.microsoft.com:80 timestamp.digicert.com:80 to-do.microsoft.com:443 tsfe.trafficshaping.dsp.mp.microsoft.com:443 updates.logitech.com:80 v10.events.data.microsoft.com:443 v10.vortex-win.data.microsoft.com:443 v20.events.data.microsoft.com:443 validation-v2.sls.microsoft.com:443 vsblobprodscussu5shard10.blob.core.windows.net:443 vsblobprodscussu5shard12.blob.core.windows.net:443 vsblobprodscussu5shard26.blob.core.windows.net:443 vsblobprodscussu5shard3.blob.core.windows.net:443 vsblobprodscussu5shard50.blob.core.windows.net:443 vsblobprodscussu5shard67.blob.core.windows.net:443 vsblobprodscussu5shard88.blob.core.windows.net:443 watson.telemetry.microsoft.com:443 whiteboard.microsoft.com:443 whiteboard.ms:443 windows.policies.live.net:443 www.microsoft.com:80 www.powershellgallery.com:443 www.telecommandsvc.microsoft.com:443 |
| Microsoft.549981C3F5F10 | 2.2007.24732.0 | Cortana.exe | 1 | settings-win.data.microsoft.com:443 |
| Microsoft.People | 10.1909.10841.0 10.1909.12456.0 |
backgroundTaskHost.exe | 4 | graph.microsoft.com:443 ocsp.digicert.com:80 |
| Microsoft.ServiceHub.Controller | 1.3.2175297764 2.7.1004420301 |
Microsoft.ServiceHub.Controller.exe | 3 | az667904.vo.msecnd.net:443 az700632.vo.msecnd.net:443 az779572.vo.msecnd.net:443 az861674.vo.msecnd.net:443 msedge.b.tlu.dl.delivery.mp.microsoft.com:443 vortex.data.microsoft.com:443 |
| Microsoft.Windows.ContentDeliveryManager | 10.0.18362.449 10.0.19041.423 |
BackgroundTransferHost.exe backgroundTaskHost.exe |
33 | arc.msn.com:443 crl3.digicert.com:80 img-prod-cms-rt-microsoft-com.akamaized.net:443 mucp.api.account.microsoft.com:443 ocsp.digicert.com:80 ris.api.iris.microsoft.com:443 sv.symcb.com:80 |
| Microsoft.Windows.Cortana | 1.13.0.18362 | SearchUI.exe backgroundTaskHost.exe |
12 | b-ring.msedge.net:443 eafddirect.msedge.net:443 fp-vp-nocache.azureedge.net:443 fp.msedge.net:443 l-ring.msedge.net:443 msedge.b.tlu.dl.delivery.mp.microsoft.com:443 ocsp.digicert.com:80 r.bing.com:443 www.bing.com:443 |
| Microsoft.Windows.Photos | 2020.20070.10002.0 2020.20110.11001.0 |
Microsoft.Photos.exe | 8 | api.onedrive.com:443 crl3.digicert.com:80 db3pap001.settings.live.net:443 db3pap001.storage.live.com:443 evoke-windowsservices-tas.msedge.net:443 ocsp.digicert.com:80 outlookmobile-office365-tas.msedge.net:443 settings-win.data.microsoft.com:443 settings.data.microsoft.com:443 storage.live.com:443 visualstudio-devdiv-c2s.msedge.net:443 |
| Microsoft.Windows.Search | 1.14.0.19041 | SearchApp.exe | 26 | ocsp.digicert.com:80 outlook.office365.com:443 r.bing.com:443 substrate.office.com:443 www.bing.com:443 |
| Microsoft.WindowsFeedbackHub | 1.2006.10051.0 | PilotshubApp.exe | 3 | ocsp.digicert.com:80 settings-win.data.microsoft.com:443 uif.microsoft.com:443 |
| Microsoft.WindowsStore | 12008.1001.1.0 12011.1001.1.0 |
WinStore.App.exe | 42 | assets.onestore.ms:443 cid-ef9da447e9880355.users.storage.live.com:443 cid-fd728fd8cdb9865d.users.storage.live.com:443 img-prod-cms-rt-microsoft-com.akamaized.net:443 livetileedge.dsx.mp.microsoft.com:443 maps.windows.com:443 ocsp.digicert.com:80 status.rapidssl.com:80 store-images.s-microsoft.com:443 store-images.s-microsoft.com:80 storeedgefd.dsx.mp.microsoft.com:443 www.microsoft.com:443 |
| Microsoft.XboxGamingOverlay | 5.420.11102.0 5.420.8043.0 |
BackgroundTransferHost.exe GameBar.exe |
22 | crl3.digicert.com:80 dlassets-ssl.xboxlive.com:443 ocsp.digicert.com:80 settings-win.data.microsoft.com:443 settings.data.microsoft.com:443 www.xboxab.com:443 |
| Microsoft.YourPhone | 1.20081.116.0 1.20082.141.0 1.20112.72.0 1.20122.119.0 1.21011.101.0 1.21011.127.0 |
YourPhone.exe backgroundTaskHost.exe |
2 | crl3.digicert.com:80 evoke-windowsservices-tas.msedge.net:443 ocsp.digicert.com:80 ocsp.omniroot.com:80 outlookmobile-office365-tas.msedge.net:443 visualstudio-devdiv-c2s.msedge.net:443 |
| Microsoft.ZuneMusic | 10.20122.11121.0 | Music.UI.exe | 2 | cloudcollection-ssl.xboxlive.com:443 musicimage.xboxlive.com:443 |
| Microsoft.ZuneVideo | 10.20032.16211.0 10.20112.10111.0 |
Video.UI.exe | 5 | crl3.digicert.com:80 ocsp.digicert.com:80 settings-ssl.xboxlive.com:443 |
| Network Location Awareness | 14393.4169 14393.4225 17763.1697 17763.1757 18363.1316 18363.1379 19041.746 19041.804 19042.746 19042.789 19042.804 7601 9600 |
svchost.exe | 1 | www.msftconnecttest.com:80 |
| Skype | 8.63 8.67 8.68 |
Skype.exe | 135 | a-ring.msedge.net:443 a.config.skype.com:443 api.aps.skype.com:443 api.asm.skype.com:443 api3.cc.skype.com:443 avatar.skype.com:443 azeus1-client-s.gateway.messenger.live.com:443 b-ring.msedge.net:443 b.config.skype.com:443 browser.pipe.aria.microsoft.com:443 client-s.gateway.messenger.live.com:443 config.edge.skype.com:443 consumer.entitlement.skype.com:443 contacts.skype.com:443 download.visualstudio.microsoft.com:443 edge.skype.com:443 flighting.cc.skype.com:443 fp.config.skype.com:443 fpc.msedge.net:443 get.skype.com:443 go.trouter.skype.com:443 ic3.events.data.microsoft.com:443 k-ring.msedge.net:443 login.live.com:443 login.microsoftonline.com:443 mobile.pipe.aria.microsoft.com:443 ms-dotnettools.gallerycdn.vsassets.io:443 msgsearch.skype.com:443 options.skype.com:443 outlook.live.com:443 people.skype.com:443 pipe.skype.com:443 pnv.skype.com:443 prod.registrar.skype.com:443 s-ring.msedge.net:443 static-asm.secure.skypeassets.com:443 static.asm.skype.com:443 trouter-neu-a.trouter.skype.com:443 trouter-neu-b.trouter.skype.com:443 v10.events.data.microsoft.com:443 v20.events.data.microsoft.com:443 www.msftconnecttest.com:80 |
| SysInfoCap | 1.28.2197.0 | SysInfoCap.exe | 6 | ctldl.windowsupdate.com:80 ocsp.digicert.com:80 |
| Update Orchestrator Service | 14393.4169 14393.4225 17763.1697 17763.1757 18363.1316 18363.1379 19041.746 19041.804 19042.746 19042.789 19042.804 7601 9600 |
svchost.exe | 4 | settings-win.data.microsoft.com:443 settings.data.microsoft.com:443 |
| Windows Defender | 4.10.0209.0 4.18.2011.6 4.18.2101.4 4.18.2101.8 4.18.2101.9 |
MpCmdRun.exe MsMpEng.exe |
15 | definitionupdates.microsoft.com:443 go.microsoft.com:443 go.microsoft.com:80 wdcp.microsoft.com:443 wdcpalt.microsoft.com:443 www.microsoft.com:443 |
| Windows Insider Service | 14393.4169 14393.4225 17763.1697 17763.1757 18363.1316 18363.1379 19041.746 19041.804 19042.746 19042.789 19042.804 |
svchost.exe | 2 | settings-win.data.microsoft.com:443 settings.data.microsoft.com:443 |
| Windows Installer – Unicode | 5.0.14393.2430 5.0.19041.1 |
msiexec.exe | 2 | ocsp.digicert.com:80 payloadprod15.blob.core.windows.net:443 |
| Windows License Manager Service | 14393.4169 14393.4225 17763.1697 17763.1757 18363.1316 18363.1379 19041.746 19041.804 19042.746 19042.789 19042.804 7601 9600 |
svchost.exe | 21 | licensing.mp.microsoft.com:443 storecatalogrevocation.storequality.microsoft.com:443 substrate.office.com:443 |
| Windows Push Notifications System Service | 14393.4169 14393.4225 17763.1697 17763.1757 18363.1316 18363.1379 19041.746 19041.804 19042.746 19042.789 19042.804 |
svchost.exe | 2 | client.wns.windows.com:443 |
| Windows Push Notifications User Service | 14393.4169 14393.4225 17763.1697 17763.1757 18363.1316 18363.1379 19041.746 19041.804 19042.746 19042.789 19042.804 7601 9600 |
svchost.exe | 168 | assets.msn.com:443 cdn.content.prod.cms.msn.com:80 cdn.onenote.net:443 service.weather.microsoft.com:443 spclient.wg.spotify.com:443 tile-service.weather.microsoft.com:80 |
| Windows PushToInstall Service | 14393.4169 14393.4225 17763.1697 17763.1757 18363.1316 18363.1379 19041.746 19041.804 19042.746 19042.789 19042.804 |
svchost.exe | 2 | exchange-assets.azureedge.net:443 pti.store.microsoft.com:443 |
| Windows Time | 14393.4169 14393.4225 17763.1697 17763.1757 18363.1316 18363.1379 19041.746 19041.804 19042.746 19042.789 19042.804 7601 9600 |
svchost.exe | 1 | time.windows.com:123 |
| Windows Update | 14393.4169 14393.4225 17763.1697 17763.1757 18363.1316 18363.1379 19041.746 19041.804 19042.746 19042.789 19042.804 7601 9600 |
svchost.exe | 173 | 11.au.download.windowsupdate.com:80 11.tlu.dl.delivery.mp.microsoft.com:80 2.au.download.windowsupdate.com:80 3.au.download.windowsupdate.com:80 au.download.windowsupdate.com:80 ctldl.windowsupdate.com:80 dl.delivery.mp.microsoft.com:80 download.windowsupdate.com:80 fe2.update.microsoft.com:443 fe2cr.update.microsoft.com:443 fe3.delivery.mp.microsoft.com:443 fe3cr.delivery.mp.microsoft.com:443 officecdn.microsoft.com.edgesuite.net:80 settings-win.data.microsoft.com:443 sls.update.microsoft.com:443 slscr.update.microsoft.com:443 substrate.office.com:443 tsfe.trafficshaping.dsp.mp.microsoft.com:443 |
| Windows Update Medic Service | 14393.4169 14393.4225 17763.1697 17763.1757 18363.1316 18363.1379 19041.746 19041.804 19042.746 19042.789 19042.804 7601 9600 |
svchost.exe | 2 | settings-win.data.microsoft.com:443 settings.data.microsoft.com:443 |
| WpnUserService | 14393.4169 14393.4225 17763.1697 17763.1757 18363.1316 18363.1379 19041.746 19041.804 19042.746 19042.789 19042.804 7601 9600 |
svchost.exe | 10 | assets.msn.com:443 cdn.content.prod.cms.msn.com:80 service.weather.microsoft.com:443 tile-service.weather.microsoft.com:80 |
| Xbox Live Auth Manager | 14393.4169 14393.4225 17763.1697 17763.1757 18363.1316 18363.1379 19041.746 19041.804 19042.746 19042.789 19042.804 |
svchost.exe | 14 | device.auth.xboxlive.com:443 title.auth.xboxlive.com:443 title.mgt.xboxlive.com:443 user.auth.xboxlive.com:443 xsts.auth.xboxlive.com:443 |
| microsoft.microsoftskydrive | 19.23.11.0 | WWAHost.exe | 37 | browser.pipe.aria.microsoft.com:443 ocsp.digicert.com:80 |
| microsoft.windowscommunicationsapps | 16005.13426.20368.0 16005.13426.20566.0 |
HxTsr.exe | 52 | evoke-windowsservices-tas.msedge.net:443 ocsp.digicert.com:80 ocsp.globalsign.com:80 oneocsp.microsoft.com:80 outlook.office.com:443 outlook.office365.com:443 outlookmobile-office365-tas.msedge.net:443 settings-win.data.microsoft.com:443 settings.data.microsoft.com:443 www.microsoft.com:80 |
| windows.immersivecontrolpanel | 10.0.2.1000 | SystemSettings.exe | 15 | cxcs.microsoft.net:443 ocsp.digicert.com:80 onecs-live.azureedge.net:443 r.bing.com:443 www.bing.com:443 |
3 Comments
Which of the hosts are necessary to keep the OS functioning and which can be blocked?
Dear Helge, thanks for all your excellent work and insights.
Do you have findings on what data is actually sent, like user activity monitoring etc. and how it is used/analysed by M$ and others?
Have you or others asked M$ to comment?
Thank you!
And? Conclusion? What does it mean?
As I see, all of these hosts owned by Microsoft.