Chrome – Utility: Network Service Copying data to 52.85.43.0/24

A SIEM Alert noticed lots of traffic transferring from a computer to IP’s in this range 52.85.43.0/24 ( amazon cloudfront) 

Tracing down the app on the computer using Netstat showed this was Chrome.exe

Tracing down the task manager inside of Chrome showed it was this process

Utility: Network Service Looks to be one of the process’ the chrome browser sends and receives network traffic through , But I can’t tell you exactly what , but it is needed ! 

1 Star2 Stars3 Stars4 Stars5 Stars (No Ratings Yet)
Loading...