IOC Report
https://sync.search.spotxchange.com

loading gif

Processes

Path
Cmdline
Malicious
C:\Users\user\AppData\Local\Chromium\Application\chrome.exe
"C:\Users\user\AppData\Local\Chromium\Application\chrome.exe" --start-maximized "about:blank"
C:\Users\user\AppData\Local\Chromium\Application\chrome.exe
"C:\Users\user\AppData\Local\Chromium\Application\chrome.exe" --no-sandbox --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-GB --service-sandbox-type=none --start-stack-profiler --mojo-platform-channel-handle=2116 --field-trial-handle=2004,i,16929989459866811795,18379837460261378980,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
C:\Users\user\AppData\Local\Chromium\Application\chrome.exe
"C:\Users\user\AppData\Local\Chromium\Application\chrome.exe" "https://sync.search.spotxchange.com"

URLs

Name
IP
Malicious
https://sync.search.spotxchange.com
https://clients2.googleusercontent.com/crx/blobs/AYA8Vyx2J_yUZTKcv47OjJ_lQNlaCYqeh8SOiGiawnXT0TvFvxRmwfkcv63jai6G-68PkdQz0qjWRURdD69KjIEk_1WMoGqX2-nmHyARS_kIQQQ8jggfB8g6y3OxQgNbZ3cAxlKa5c6rbuh5modTsW2qcgj5aN-TT3fn/EFAIDNBMNNNIBPCAJPCGLCLEFINDMKAJ_24_10_2_0.crx
142.250.185.193
https://chrome-devtools-frontend.appspot.com/serve_file/@386bc09e8f4f2e025eddae123f36f6263096ae49/third_party/vscode.web-custom-data/browsers.css-data.json
142.250.113.153
https://chrome.google.com/webstore/inlineinstall/detail/efaidnbmnnnibpcajpcglclefindmkaj
142.250.115.100

Domains

Name
IP
Malicious
chrome.cloudflare-dns.com
172.64.41.3
google.com
216.58.206.46
www.google.com
216.58.206.68
googlehosted.l.googleusercontent.com
142.250.185.193
clients2.googleusercontent.com
unknown
sync.search.spotxchange.com
unknown

IPs

IP
Domain
Country
Malicious
142.251.116.147
unknown
United States
192.168.2.17
unknown
unknown
142.250.113.94
unknown
United States
216.58.206.68
www.google.com
United States
142.250.115.100
unknown
United States
142.250.185.193
googlehosted.l.googleusercontent.com
United States
162.159.61.3
unknown
United States
142.250.115.113
unknown
United States
239.255.255.250
unknown
Reserved
142.250.113.153
unknown
United States
172.64.41.3
chrome.cloudflare-dns.com
United States
127.0.0.1
unknown
unknown
There are 2 hidden IPs, click here to show them.