IOC Report
https://ds5l29de4j.virtualbotz.com/dyvacwws/Ridgelineintl/YWJ1c2VAcmlkZ2VsaW5laW50bC5jb20=

loading gif

Processes

Path
Cmdline
Malicious
C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2096 --field-trial-handle=2044,i,17354197381780509115,3202688687647469358,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe" "https://ds5l29de4j.virtualbotz.com/dyvacwws/Ridgelineintl/YWJ1c2VAcmlkZ2VsaW5laW50bC5jb20="

Domains

Name
IP
Malicious
bg.microsoft.map.fastly.net
199.232.214.172
ds5l29de4j.virtualbotz.com
192.185.148.151
www.google.com
142.251.35.228
fp2e7a.wpc.phicdn.net
192.229.211.108

IPs

IP
Domain
Country
Malicious
239.255.255.250
unknown
Reserved
192.185.148.151
ds5l29de4j.virtualbotz.com
United States
142.251.35.228
www.google.com
United States
192.168.2.6
unknown
unknown