IOC Report
http://cdn.education.com/cdn-cgi/image/width=184/files/1137001_1138000/1137549/file_1137549.webp

loading gif

Files

File Path
Type
Category
Malicious
Chrome Cache Entry: 42
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 184x184, components 3
downloaded

Processes

Path
Cmdline
Malicious
C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2144 --field-trial-handle=2052,i,12142555347073644702,2905550365901237075,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe" "http://cdn.education.com/cdn-cgi/image/width=184/files/1137001_1138000/1137549/file_1137549.webp"

URLs

Name
IP
Malicious
http://cdn.education.com/cdn-cgi/image/width=184/files/1137001_1138000/1137549/file_1137549.webp
https://cdn.education.com/cdn-cgi/image/width=184/files/1137001_1138000/1137549/file_1137549.webp

Domains

Name
IP
Malicious
edge.ds-c7110-microsoft.global.dns.qwilted-cds.cqloud.com
217.20.57.34
www.google.com
142.250.186.132
cdn.education.com
unknown

IPs

IP
Domain
Country
Malicious
239.255.255.250
unknown
Reserved
192.168.2.7
unknown
unknown
142.250.186.132
www.google.com
United States

DOM / HTML

URL
Malicious
https://cdn.education.com/cdn-cgi/image/width=184/files/1137001_1138000/1137549/file_1137549.webp