googleusercontent Alert RRS feed

  • Question

  • I received a medium alert this morning that seems to be unwarranted.

    From the alert process tree it looks like GoogleUdate.exe on many of our PCs is trying to update Chrome from lh3.googleusercontent.com (

    Following are the File details.

    SHA1: 968ee5dc9ba0b650cb2cfd52591b735ad19b2a5e

    SHA256: 87f4ec955efc8b0bddd2181b72c898ee5cb1371229dd1167958aa98e605735f4

    MD5: b981f64e0f02088d317fbf73e49e4265

    The signer is listed as Google Inc. with a Symantec Class 3 SHA256 Code Signing CA.

    What do you think?  We use Google apps for business.  To me, this appears that this contact should be whitelisted.

    Tuesday, November 21, 2017 11:13 PM

All replies