IOC Report
http://media.biblioottawalibrary.ca

loading gif

Files

File Path
Type
Category
Malicious
Chrome Cache Entry: 43
GIF image data, version 89a, 20 x 22
dropped
Chrome Cache Entry: 44
GIF image data, version 89a, 20 x 22
downloaded
Chrome Cache Entry: 45
GIF image data, version 89a, 20 x 22
downloaded
Chrome Cache Entry: 46
GIF image data, version 89a, 20 x 22
downloaded
Chrome Cache Entry: 47
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 580x580, components 3
downloaded
Chrome Cache Entry: 48
HTML document, ASCII text
downloaded
Chrome Cache Entry: 49
GIF image data, version 89a, 20 x 22
dropped
Chrome Cache Entry: 50
GIF image data, version 89a, 20 x 22
dropped
Chrome Cache Entry: 51
GIF image data, version 89a, 20 x 22
downloaded
Chrome Cache Entry: 52
GIF image data, version 89a, 20 x 22
downloaded
Chrome Cache Entry: 53
HTML document, ASCII text
downloaded
Chrome Cache Entry: 54
HTML document, ASCII text
downloaded
Chrome Cache Entry: 55
GIF image data, version 89a, 20 x 22
dropped
Chrome Cache Entry: 56
HTML document, ASCII text
downloaded
Chrome Cache Entry: 57
GIF image data, version 89a, 20 x 22
dropped
There are 6 hidden files, click here to show them.

Processes

Path
Cmdline
Malicious
C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2340 --field-trial-handle=2168,i,9105461441296045703,3705442169738760355,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe" "http://media.biblioottawalibrary.ca"

URLs

Name
IP
Malicious
http://media.biblioottawalibrary.ca
https://media.biblioottawalibrary.ca/icons/movie.gif
159.203.54.99
https://media.biblioottawalibrary.ca/icons/back.gif
159.203.54.99
https://media.biblioottawalibrary.ca/covers-bak-aug28-2015/0002923163154.jpg
http://media.biblioottawalibrary.ca/
159.203.54.99
https://media.biblioottawalibrary.ca/icons/folder.gif
159.203.54.99
https://media.biblioottawalibrary.ca/video/
https://media.biblioottawalibrary.ca/icons/image2.gif
159.203.54.99
https://media.biblioottawalibrary.ca/icons/blank.gif
159.203.54.99
https://media.biblioottawalibrary.ca/
https://media.biblioottawalibrary.ca/favicon.ico
159.203.54.99
https://media.biblioottawalibrary.ca/covers-bak-aug28-2015/
159.203.54.99
There are 1 hidden URLs, click here to show them.

Domains

Name
IP
Malicious
media.biblioottawalibrary.ca
159.203.54.99
www.google.com
142.250.181.100
fp2e7a.wpc.phicdn.net
192.229.221.95

IPs

IP
Domain
Country
Malicious
159.203.54.99
media.biblioottawalibrary.ca
United States
239.255.255.250
unknown
Reserved
192.168.2.6
unknown
unknown
142.250.181.100
www.google.com
United States

DOM / HTML

URL
Malicious
https://media.biblioottawalibrary.ca/
https://media.biblioottawalibrary.ca/video/
https://media.biblioottawalibrary.ca/covers-bak-aug28-2015/0002923163154.jpg