Chrome – Utility: Network Service Copying data to 52.85.43.0/24

Written by paris on May 7, 2020. Posted in Research

A SIEM Alert noticed lots of traffic transferring from a computer to IP’s in this range 52.85.43.0/24 ( amazon cloudfront)

Tracing down the app on the computer using Netstat showed this was Chrome.exe

Tracing down the task manager inside of Chrome showed it was this process

Utility: Network Service Looks to be one of the process’ the chrome browser sends and receives network traffic through , But I can’t tell you exactly what , but it is needed !

Rating: 0.0/10 (0 votes cast)

Rating: 0 (from 0 votes)

Tags: 52.85.43.0/24, CHrome, Utility: Network Service

Trackback from your site.

Categories

Latest Comments

Jeff Bryant I had to toggle the Windows (MDM) option from Block back to Allow in the default enrollment restrictions and then I got past this error.
InTune MDM – Something went wrong – invalid_client failed to authenticate user · May 21, 2020
Neipol Nice post. But I had to do more changes. Here you can see more causes for this error:
InTune MDM – Something went wrong – invalid_client failed to authenticate user · May 13, 2020
juro55555555 https://kb.vmware.com/s/article/1007969
Vmware disk size appearing as 0MB in Client settings · May 13, 2020
MStark Can't get it to work.
Worksite/iManage How to relate one document to another · April 23, 2020
mattyfatshunter In my case, I found that the firewall was scanning the metadata.zip file and happily breaking the process. Your troubleshooting helped me get to the bottom of it.
VMware Update Manager Error on Scan/Stage or Remediate · April 13, 2020

Comments Rating

Links