diff --git a/Dandelion Sprout's Anti-Malware List.txt b/Dandelion Sprout's Anti-Malware List.txt
index 2e2fdc028..bfdcfe3f7 100644
--- a/Dandelion Sprout's Anti-Malware List.txt	
+++ b/Dandelion Sprout's Anti-Malware List.txt	
@@ -1335,6 +1335,16 @@ zombooru.com##a[href="http://www.hard55.com"]
 ! related domains owned by the same company and used for payment (the first is for 'tech support' scams, the second for their 'id protection')
 ||ustechsupport.com^$doc
 ||mycleanid.com^$doc
+! Vermilion Strike
+! https://www.virustotal.com/gui/file/294b8db1f2702b60fb2e42fdc50c2cee6a5046112da9a5703a548a4fa50477bc/relations
+||160.202.163.100^$all
+! https://www.virustotal.com/gui/ip-address/160.202.163.100/relations
+||microsoftkernel.com^$all
+||update.microsoftkernel.com^$all
+||hksupd.com^$all
+||amazon.hksupd.com^$all
+||microsofthk.com^$all
+||update.microsofthk.com^$all
 
 
 ! ——— Standard malware that I stumbled upon on my own ———