Getting alert for office online server from siem security.

Md. Mahfuzur Rahman 346

We are getting this unusual alert from for office online server can anyone explain what is this?

“c:\windows\system32\inetsrv\w3wp.exe -ap "FarmStateManager" -v "v4.0" -l "webengine4.dll" -a .\pipe\iisipm48af5fd7-b31e-445b-aa7d-2a5d7830c3e0 -h "C:\inetpub\temp\apppools\FarmStateManager\FarmStateManager.config" -w "" -m 0 -t 20 -ta 0”

Emi Zhang-MSFT 30,046 Reputation points Microsoft External Staff

2022-11-15T08:57:59.03+00:00

Some malware camouflages itself as w3wp.exe, particularly when located in the C:\Windows or C:\Windows\System32 folder. Therefore, you should check the w3wp.exe process on your PC to see if it is a threat.

Share via

Getting alert for office online server from siem security.

Your answer