[WINWORD.exe making outbound connections to Microsoft Azure web server(?)]

2 minutes ago, David H. Lipman said:

False Positive declaration and that since been corrected, IP = 13.89.179.8

Please reference:  One Drive - Azure showing compromised

Thank you! Appreciate the quick response.

[WINWORD.exe making outbound connections to Microsoft Azure web server(?)]

This just started happening today for about half an hour at intervals of 5 minutes from 4:31-4:59PM EST. This has never happened before.

Current Windows installation is close to a year old and was a clean install.

The one "Malware" event detail was me attempting to resolve the IP in my browser.

Custom scan of C: with Windows Defender, and a Malwarebytes scan both came up clean.

Attaching the FRST scan files as per the FAQ on what to do, and also the detection history/scan logs from Malwarebytes.

 

FRST.txt Addition.txt malwarebytes_detection_history.txt malwarebytes_report.txt