IOC Report
https://ysgcq.com/

loading gif

Processes

Path
Cmdline
Malicious
C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2272 --field-trial-handle=2220,i,10690707029537162099,6661174406840721767,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe" "https://ysgcq.com/"

URLs

Name
IP
Malicious
https://ysgcq.com/
https://ysgcq.com/
118.107.57.100

Domains

Name
IP
Malicious
www.google.com
192.178.50.68
ysgcq.com
118.107.57.100
fp2e7a.wpc.phicdn.net
192.229.211.108

IPs

IP
Domain
Country
Malicious
192.178.50.68
www.google.com
United States
239.255.255.250
unknown
Reserved
192.168.2.4
unknown
unknown
118.107.57.100
ysgcq.com
Singapore
127.0.0.1
unknown
unknown