locked
googleusercontent Alert RRS feed

  • Question

  • I received a medium alert this morning that seems to be unwarranted.

    From the alert process tree it looks like GoogleUdate.exe on many of our PCs is trying to update Chrome from lh3.googleusercontent.com (172.217.12.129).

    Following are the File details.

    SHA1: 968ee5dc9ba0b650cb2cfd52591b735ad19b2a5e

    SHA256: 87f4ec955efc8b0bddd2181b72c898ee5cb1371229dd1167958aa98e605735f4

    MD5: b981f64e0f02088d317fbf73e49e4265

    The signer is listed as Google Inc. with a Symantec Class 3 SHA256 Code Signing CA.

    What do you think?  We use Google apps for business.  To me, this appears that this contact should be whitelisted.

    Tuesday, November 21, 2017 11:13 PM

All replies