I noticed a weird address in the Local Address column in the Network tab of Process Hacker in lots of program that work with internet connection (like chrome, firefox, dropbox, thunderbird etc..).
The address in question is this one: hhbekxxw5d9e.pflexads.com.
Most of these preocesses have the same adrress also in the Remote Address column. Some of these send and receive data over the network.
I've tried scanning with Malwarebytes and Microsoft Security Essential, both with no results. I'm on Windows 7.
My hosts
file is picked from https://github.com/StevenBlack/hosts so luckly those requests are blocked, I'm no expert in these things and wondered what is producing this and if it's anything that should not be neglected.
Any suggestions?
UPDATE
It uses small traffic, but it stacks up from time to time: starts with few bytes and then it goes for some KB. Fact that worried me most is that this address is in also 1password process and Teamviewer too.
I'm no netowrk expert, but I've tried with Wireshark to filter the recordings with Tcp.port
filters on what is listed on the Process Hacker network tab. Unfortunately the output of the filter is blank, wich is kinda odd to me since I can actively see reported in the network tab of Process Hacker that data is going for those processes through those ports. Am I blatantly missing something?