IOC Report
http://f-log-extension.grammarly.io

loading gif

Files

File Path
Type
Category
Malicious
Chrome Cache Entry: 42
ASCII text
downloaded

Processes

Path
Cmdline
Malicious
C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2016 --field-trial-handle=1956,i,13024243500430534651,5569693173010471511,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe" "http://f-log-extension.grammarly.io"

URLs

Name
IP
Malicious
http://f-log-extension.grammarly.io
http://f-log-extension.grammarly.io/
3.214.105.83
https://f-log-extension.grammarly.io/

Domains

Name
IP
Malicious
f-log-extension.grammarly.io
3.214.105.83
www.google.com
142.250.217.164
fp2e7a.wpc.phicdn.net
192.229.211.108

IPs

IP
Domain
Country
Malicious
44.206.202.177
unknown
United States
142.250.217.164
www.google.com
United States
239.255.255.250
unknown
Reserved
3.214.105.83
f-log-extension.grammarly.io
United States
192.168.2.4
unknown
unknown

DOM / HTML

URL
Malicious
https://f-log-extension.grammarly.io/