ALLOWED:
svchost.exe
wlcomm.exe (MSN)
MpCmdRun.exe (Windows Defender)
wmpnetwk.exe (WMP)
Why those files request XS?
YES/NO ??
SysWOW64\dllhost.exe
system32\wbem\WmiPrvSE.exe
system32\sppsvc.exe
system32\Werconcpl.dll
Windows Operating System / ICMP - Source Port (3) & (11) - Destination: Code (3) & Code (0)
XS?
YES/NO ?? SysWOW64\dllhost.exe
A process similar to svchost but for different types of process, such as COM objects, and .NET assemblies. It’s also used by IIS. If I remember, it’s a lot more obvious in Windows 8.
system32\wbem\WmiPrvSE.exe
This is part of WMI (Windows management Instrumentation) and plays a role in managing a lot of the underlying aspects of the OS.
system32\sppsvc.exe
Microsoft Software Protection Service. Used by the OS and MA applications for things like licensing updates.
system32\Werconcpl.dll
Used by the OS to find solutions when there have been problems, such as a system hang/crash.
Really, it’s your choice to block or not. Personally, I wouldn’t block any of them.
Windows Operating System / ICMP - Source Port (3) & (11) - Destination: Code (3) & Code (0)
These ICMP requests are useful for troubleshooting and are typically allowed.