CODEWITHSUNDEEP
asp.net.netiisappinsights
user1890098
user1890098

Reputation: 495

Strange .jsp file being created in one of dll folders in a legacy ASP.NET application

We have an very old ASP.NET web application deployed in IIS. It's written in VB.NET and has ApplicationInsight reference. We have been informed of a strange file being created in one of the folders and the file being deleted on its own as well.

The name of the file is

yjxnzgi4.jsp

and its created in the following folder,

C:\PathToMyApplicationFolder\AppData\Local\Microsoft\ApplicationInsights\VeryLongGUIDlikecharacters\yjxnzgi4.jsp

The application is very old but it has no feature like file upload.

The infrastructure team have given stats that the file was created and deleted by w3wp.exe.Both of those happened pretty much on the same time.

Is there a security issue in this application? Does IIS create files like these usually?

Upvotes: 0

Views: 34

Answers (1)

meiquan
meiquan

Reputation: 107

As far as I know, IIS itself does not create .jsp files. JSP files are usually related to Java applications, running on Apache Tomcat, not IIS, so your application has security issues.

You can review IIS logs, Windows event logs, and any Application Insights telemetry for unusual activity, especially around the time the file was created.

Upvotes: 0

Related Questions