Is it normal for System.exe to have a large number of connections to Multicast IPs on my PC?

Question

On my PC, System.exe has a very large number of connections to multicast IPs 224.0.0.252 and 239.255.255.250. Is this normal behavior?

Answer 1

The IP addresses 224.0.0.252 and 239.255.255.250 are multicast addresses that are used for various purposes, such as Link-Local Multicast Name Resolution (LLMNR) and Simple Service Discovery Protocol (SSDP).

It is normal for some applications to use these multicast addresses to communicate with other devices on the network. However, if you notice a large number of connections to these addresses from the System.exe process, it could indicate a problem with your system or a potential security issue

To investigate further, you can use the Resource Monitor tool in Windows to view the network activity of the System.exe process. You can also use a network monitoring tool such as Wireshark to capture and analyze the network traffic.

Also try these:

• Scan your computer for malware using latest defined antivirus program.
• Update your Windows system to the latest version.
• Check your firewall settings to make sure that they are blocking unsolicited connections from the web.
• Uninstall any recently installed third party software that might be causing the problem.