Strange Traffic - MS Edge to AWS Destination

Copper Contributor

My firewall logs show where MS Edge has tried to make TCP connections outbound to port 9573. The destination hosts are AWS IPs  (EC2s) e.g.  18.209.11[.]79 . I was able to narrow it down to process ID 4852 as seen in snips - that process ID points to the Network Service. I was either on Version 91.0.864.70, or earlier - I'm not sure if my Edge has upgraded since last week.

 

Can anyone say what might have caused this?

 

notlob_2-1626727252391.png

 

notlob_1-1626727181392.png

 

 

2 Replies
Are you sure it was created from the Microsoft Edge?
Have you checked any website?
Check installed extensions in the Microsoft Edge and this connection might be from extension.

@Reza_Ameri 

As the snips show, it does seem to have come from Edge - based on the process ID.

There are no installed extensions here since this is newly imaged VM - very stock.

I'm not sure what you mean by checking a website. Please expound.