IOC Report
https://s-usc1a-nss-2067.firebaseio.com

loading gif

Files

File Path
Type
Category
Malicious
Chrome Cache Entry: 100
MS Windows icon resource - 2 icons, 16x16, 32 bits/pixel, 32x32, 32 bits/pixel
downloaded
Chrome Cache Entry: 101
Web Open Font Format (Version 2), TrueType, length 5164, version 1.0
downloaded
Chrome Cache Entry: 102
SVG Scalable Vector Graphics image
dropped
Chrome Cache Entry: 103
Web Open Font Format (Version 2), TrueType, length 8700, version 1.0
downloaded
Chrome Cache Entry: 104
Web Open Font Format (Version 2), TrueType, length 21552, version 1.0
downloaded
Chrome Cache Entry: 105
ASCII text, with very long lines (1822)
downloaded
Chrome Cache Entry: 107
Web Open Font Format (Version 2), TrueType, length 21716, version 1.0
downloaded
Chrome Cache Entry: 108
Web Open Font Format (Version 2), TrueType, length 52280, version 1.0
downloaded
Chrome Cache Entry: 109
ASCII text, with very long lines (3992), with no line terminators
downloaded
Chrome Cache Entry: 110
Web Open Font Format (Version 2), TrueType, length 15436, version 1.0
downloaded
Chrome Cache Entry: 111
MS Windows icon resource - 2 icons, 16x16, 32 bits/pixel, 32x32, 32 bits/pixel
dropped
Chrome Cache Entry: 112
PNG image data, 36 x 36, 8-bit gray+alpha, non-interlaced
downloaded
Chrome Cache Entry: 113
ASCII text, with very long lines (2362)
downloaded
Chrome Cache Entry: 115
PNG image data, 80 x 80, 8-bit colormap, non-interlaced
downloaded
Chrome Cache Entry: 116
ASCII text, with very long lines (4478)
downloaded
Chrome Cache Entry: 118
HTML document, ASCII text, with very long lines (54737)
downloaded
Chrome Cache Entry: 119
ASCII text, with no line terminators
downloaded
Chrome Cache Entry: 120
ASCII text, with very long lines (693)
downloaded
Chrome Cache Entry: 121
ASCII text, with very long lines (467)
downloaded
Chrome Cache Entry: 122
PNG image data, 200 x 200, 8-bit/color RGBA, non-interlaced
downloaded
Chrome Cache Entry: 123
Web Open Font Format (Version 2), TrueType, length 4924, version 1.0
downloaded
Chrome Cache Entry: 124
ASCII text, with very long lines (574)
downloaded
Chrome Cache Entry: 125
Web Open Font Format (Version 2), TrueType, length 15208, version 1.0
downloaded
Chrome Cache Entry: 127
Web Open Font Format (Version 2), TrueType, length 14796, version 1.0
downloaded
Chrome Cache Entry: 128
ASCII text, with very long lines (405)
downloaded
Chrome Cache Entry: 129
ASCII text, with very long lines (3383)
downloaded
Chrome Cache Entry: 130
Web Open Font Format (Version 2), TrueType, length 3744, version 1.0
downloaded
Chrome Cache Entry: 131
HTML document, Unicode text, UTF-8 text, with very long lines (1136)
dropped
Chrome Cache Entry: 132
ASCII text, with very long lines (1694)
downloaded
Chrome Cache Entry: 133
ASCII text, with no line terminators
dropped
Chrome Cache Entry: 134
PNG image data, 64 x 64, 8-bit/color RGBA, non-interlaced
dropped
Chrome Cache Entry: 135
ASCII text, with very long lines (777)
downloaded
Chrome Cache Entry: 136
MS Windows icon resource - 2 icons, 16x16, 32 bits/pixel, 32x32, 32 bits/pixel
downloaded
Chrome Cache Entry: 137
Web Open Font Format (Version 2), TrueType, length 14796, version 1.0
downloaded
Chrome Cache Entry: 138
Web Open Font Format (Version 2), TrueType, length 7060, version 1.0
downloaded
Chrome Cache Entry: 140
ASCII text, with very long lines (44533)
downloaded
Chrome Cache Entry: 146
ASCII text, with very long lines (2347)
downloaded
Chrome Cache Entry: 149
PNG image data, 200 x 200, 8-bit/color RGBA, non-interlaced
dropped
Chrome Cache Entry: 150
PNG image data, 36 x 36, 8-bit gray+alpha, non-interlaced
dropped
Chrome Cache Entry: 151
ASCII text, with very long lines (5945)
downloaded
Chrome Cache Entry: 155
Web Open Font Format (Version 2), TrueType, length 9832, version 1.0
downloaded
Chrome Cache Entry: 157
ASCII text, with no line terminators
downloaded
Chrome Cache Entry: 158
MS Windows icon resource - 2 icons, 16x16, 32 bits/pixel, 32x32, 32 bits/pixel
dropped
Chrome Cache Entry: 159
PNG image data, 96 x 96, 8-bit/color RGBA, non-interlaced
downloaded
Chrome Cache Entry: 160
HTML document, ASCII text, with very long lines (54737)
downloaded
Chrome Cache Entry: 166
ASCII text, with no line terminators
dropped
Chrome Cache Entry: 167
ASCII text, with very long lines (2343)
downloaded
Chrome Cache Entry: 170
SVG Scalable Vector Graphics image
downloaded
Chrome Cache Entry: 172
Web Open Font Format (Version 2), TrueType, length 15552, version 1.0
downloaded
Chrome Cache Entry: 174
PNG image data, 96 x 96, 8-bit/color RGBA, non-interlaced
dropped
Chrome Cache Entry: 175
Web Open Font Format (Version 2), TrueType, length 15344, version 1.0
downloaded
Chrome Cache Entry: 177
PNG image data, 72 x 72, 8-bit/color RGBA, non-interlaced
dropped
Chrome Cache Entry: 178
PNG image data, 72 x 72, 8-bit/color RGBA, non-interlaced
downloaded
Chrome Cache Entry: 180
ASCII text, with no line terminators
dropped
Chrome Cache Entry: 181
ASCII text, with no line terminators
dropped
Chrome Cache Entry: 182
ASCII text, with very long lines (2141)
downloaded
Chrome Cache Entry: 187
ASCII text, with very long lines (2347)
downloaded
Chrome Cache Entry: 190
ASCII text
downloaded
Chrome Cache Entry: 192
HTML document, Unicode text, UTF-8 text, with very long lines (54603)
downloaded
Chrome Cache Entry: 90
ASCII text, with very long lines (1192)
downloaded
Chrome Cache Entry: 91
PNG image data, 64 x 64, 8-bit/color RGBA, non-interlaced
downloaded
Chrome Cache Entry: 92
Web Open Font Format (Version 2), TrueType, length 7764, version 1.0
downloaded
Chrome Cache Entry: 93
ASCII text, with no line terminators
downloaded
Chrome Cache Entry: 94
ASCII text, with very long lines (4876), with no line terminators
downloaded
Chrome Cache Entry: 95
ASCII text, with very long lines (1203)
downloaded
Chrome Cache Entry: 96
Web Open Font Format (Version 2), TrueType, length 11772, version 1.0
downloaded
Chrome Cache Entry: 97
ASCII text, with very long lines (777)
downloaded
Chrome Cache Entry: 98
HTML document, ASCII text, with very long lines (687)
downloaded
Chrome Cache Entry: 99
PNG image data, 80 x 80, 8-bit colormap, non-interlaced
dropped
There are 60 hidden files, click here to show them.

Processes

Path
Cmdline
Malicious
C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2268 --field-trial-handle=2228,i,5058839901247768543,13284747976260484876,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe" "https://s-usc1a-nss-2067.firebaseio.com"
C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --mojo-platform-channel-handle=5936 --field-trial-handle=2228,i,5058839901247768543,13284747976260484876,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=video_capture.mojom.VideoCaptureService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=3124 --field-trial-handle=2228,i,5058839901247768543,13284747976260484876,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8

URLs

Name
IP
Malicious
https://s-usc1a-nss-2067.firebaseio.com
https://support.google.com/accounts?hl=en&visit_id=638556312307767159-3791852323&rd=2&p=account_iph#topic=3382296
https://stats.g.doubleclick.net/g/collect
unknown
https://feedback.googleusercontent.com/resources/annotator.css
unknown
https://www.google.com/generate_204
216.58.206.68
http://www.broofa.com
unknown
https://support.google.com/accounts?hl=en&visit_id=638556312307767159-3791852323&p=account_iph&rd=1
142.250.185.78
https://apis.google.com/js/client.js
unknown
https://feedback2-test.corp.googleusercontent.com/tools/feedback/%
unknown
https://support.google.com/chrome/answer/6130773?hl=en&co=GENIE.Platform%3DiOS
unknown
https://support.google.com
unknown
https://www.youtube.com/embed/
unknown
http://localhost.proxy.googlers.com/inapp/
unknown
https://www.google.com/accounts/TOS
unknown
https://policies.google.com/terms?hl=
unknown
https://stagingqual-feedback-pa-googleapis.sandbox.google.com
unknown
https://play.google.com/work/enroll?identifier=
unknown
https://policies.google.com/terms/service-specific
unknown
https://g.co/recover
unknown
https://moltron-pa.clients6.google.com
unknown
https://support.google.com/websearch/answer/4358949?hl=ko&ref_topic=3285072
unknown
https://ampcid.google.com/v1/publisher:getClientId
unknown
https://help.youtube.com/tools/feedback/
unknown
https://workspace.google.com/:session_prefix:marketplace/appfinder?usegapi=1
unknown
https://policies.google.com/technologies/cookies
unknown
https://policies.google.com/terms
unknown
https://support.google.com/chrome/answer/6130773?hl=en
https://support.google.com/accounts?hl=en-US&p=account_iph
142.250.185.78
https://asx-frontend-staging.corp.google.com/tools/feedback/
unknown
https://www.google.com
unknown
https://www.youtube.com/t/terms?chromeless=1&hl=
unknown
https://support.google.com/chrome/answer/6130773?hl=en&co=GENIE.Platform%3DAndroid
unknown
https://support.google.com/accounts/?hl=en&sjid=1472999391492806652-EU#topic=3382296
https://content-googleapis-test.sandbox.google.com
unknown
https://asx-frontend-autopush.corp.google.co.uk/tools/feedback/
unknown
https://stats.g.doubleclick.net/j/collect
unknown
https://myaccount.google.com/privacypolicy?hl=
unknown
https://www.google.com/tools/feedback
unknown
https://s-usc1a-nss-2067.firebaseio.com/
34.120.160.131
https://supporttagging-autopush.sandbox.google.com/embed/tagging/install
unknown
https://youtube.com/t/terms?gl=
unknown
https://sandbox.google.com/inapp/%
unknown
https://www.google.com/intl/
unknown
https://support.google.com/chrome/?p=betadesktop
unknown
https://apis.google.com/js/api.js
unknown
https://www.google.com/tools/feedback/
unknown
https://safety.google/security-privacy/
unknown
https://support.google.com/communities/answer/7424249
unknown
https://schema.org
unknown
https://support.google.com/chrome/answer/6130773?hl=en#hcfe-content
https://feedback2-test.corp.google.com/tools/feedback/%
unknown
https://cct.google/taggy/agent.js
unknown
https://www.google.com/favicon.ico
216.58.206.68
https://plus.google.com
unknown
https://asx-frontend-autopush.corp.google.de/tools/feedback/
unknown
https://support.google.com/communities/answer/7425194
unknown
https://play.google.com/log?format=json&hasfast=true
142.250.185.238
https://asx-help-frontend-autopush.corp.youtube.com/tools/feedback/
unknown
https://asx-frontend-autopush.corp.google.com/inapp/
unknown
https://feedback.googleusercontent.com/resources/render_frame2.html
unknown
https://sandbox.google.com/tools/feedback/%
unknown
https://www.google.%/ads/ga-audiences
unknown
https://content-googleapis-staging.sandbox.google.com
unknown
https://localhost.corp.google.com/inapp/
unknown
https://support.google.com/accounts?hl=en&visit_id=638556312307767159-3791852323&rd=2&p=account_iph
142.250.185.78
https://support.google.com/apis/logjourney?hl=en&key=support-content&request_source=1&mendel_ids=10800112%2C1706538%2C1714250%2C10800561%2C10800621%2C10800672%2C10800695%2C10800700%2C10800707%2C10800738%2C10800761%2C10800763%2C10800848%2C10800880%2C10800922%2C10800950%2C10800957%2C10801032%2C10801042%2C10801150%2C10801288%2C10801345%2C10801539%2C10801601%2C10801704%2C10801736%2C10801757%2C10802104%2C10802277%2C10802281%2C10802381%2C10802419%2C10802571%2C10802616%2C10802624%2C10802781%2C10803188%2C10803213%2C10803447%2C10803680%2C10803751%2C10803805%2C97601634&authuser=0&v=1&helpcenter=chrome
142.250.185.78
https://support.google.com/chrome/?p=beta_forum_hc
unknown
https://lh3.googleusercontent.com/o9U8AvPuX9gkIYtYfNmH-_wBdTfOJ7jb0VwbLWWbERzml7oTPngODhKv2Br7A64=w64
142.250.186.97
https://support.google.com/apis/logjourney?hl=en&key=support-content&request_source=1&mendel_ids=10800112%2C1706538%2C1714250%2C10800303%2C10800561%2C10800672%2C10800695%2C10800700%2C10800707%2C10800738%2C10800761%2C10800763%2C10800848%2C10800880%2C10800922%2C10800950%2C10800957%2C10801032%2C10801042%2C10801150%2C10801288%2C10801345%2C10801510%2C10801539%2C10801601%2C10801704%2C10801736%2C10801757%2C10802104%2C10802277%2C10802281%2C10802381%2C10802419%2C10802571%2C10802616%2C10802781%2C10802794%2C10803018%2C10803152%2C10803188%2C10803213%2C10803233%2C10803447%2C10803751%2C10803805%2C97601634&authuser=0&v=1&helpcenter=accounts
142.250.185.78
https://policies.google.com/privacy
unknown
https://support.google.com/accounts/?hl=en&sjid=1472999391492806652-EU
142.250.185.78
https://asx-frontend-staging.corp.google.com/inapp/
unknown
https://fonts.google.com/license/googlerestricted
unknown
https://clients6.google.com
unknown
https://play.google/intl/
unknown
https://support.google.com/apis/prefinsert?v=0&helpcenter=chrome&hl=en&key=support-content&request_source=1&service_configuration=&mendel_ids=10800112,1706538,1714250,10800561,10800621,10800672,10800695,10800700,10800707,10800738,10800761,10800763,10800848,10800880,10800922,10800950,10800957,10801032,10801042,10801150,10801288,10801345,10801539,10801601,10801704,10801736,10801757,10802104,10802277,10802281,10802381,10802419,10802571,10802616,10802624,10802781,10803188,10803213,10803447,10803680,10803751,10803805,97601634
142.250.185.78
http://localhost.corp.google.com/inapp/
unknown
https://families.google.com/intl/
unknown
https://support.google.com/embed/tagging/install
unknown
https://policies.google.com/technologies/location-data
unknown
https://play.google.com
unknown
https://support.google.com/inapp/%
unknown
https://asx-help-frontend-autopush.corp.youtube.com/inapp/
unknown
https://www.google.com/recaptcha/api.js?trustedtypes=true&onload=
unknown
https://support.google.com/chrome/answer/6130773?hl=en-US
142.250.185.78
https://lh3.googleusercontent.com/RtWifWfOSoQTgHNJl1Fj1r-5s-bR5LbEfaGjqkscOPF12zzhXyiN5jin2geuWpBFug
unknown
https://support.google.com/
unknown
https://support.google.com/accounts/?hl=en&p=account_iph
142.250.185.78
https://csp.withgoogle.com/csp/lcreport/
unknown
https://support.google.com/accounts?p=learningcenter_7
unknown
https://support.google.com/favicon.ico
142.250.185.78
https://scone-pa.clients6.google.com
unknown
https://support.google.com/inapp/
unknown
https://asx-frontend-autopush.corp.google.co.uk/inapp/
unknown
https://apis.google.com
unknown
https://asx-frontend-autopush.corp.google.com/tools/feedback/
unknown
https://asx-frontend-autopush.corp.youtube.com/tools/feedback/
unknown
https://domains.google.com/suggest/flow
unknown
https://support.google.com/accounts?p=new-si-ui
unknown
https://apis.google.com/js/rpc:shindig_random.js?onload=credentialservice.postMessage
unknown
https://support.google.com/chrome/answer/6130773
unknown
There are 90 hidden URLs, click here to show them.

Domains

Name
IP
Malicious
s-usc1a-nss-2067.firebaseio.com
34.120.160.131
www3.l.google.com
172.217.18.14
play.google.com
142.250.185.238
edge.ds-c7110-microsoft.global.dns.qwilted-cds.cqloud.com
217.20.57.25
plus.l.google.com
172.217.18.14
photos-ugc.l.googleusercontent.com
142.250.186.97
www.google.com
216.58.206.68
support.google.com
142.250.185.78
googlehosted.l.googleusercontent.com
142.250.186.97
console.firebase.google.com
unknown
accounts.youtube.com
unknown
lh3.googleusercontent.com
unknown
lh4.ggpht.com
unknown
apis.google.com
unknown
There are 4 hidden domains, click here to show them.

IPs

IP
Domain
Country
Malicious
142.250.185.78
support.google.com
United States
142.250.74.206
unknown
United States
172.217.18.14
www3.l.google.com
United States
192.168.2.7
unknown
unknown
192.168.2.6
unknown
unknown
142.250.185.225
unknown
United States
34.120.160.131
s-usc1a-nss-2067.firebaseio.com
United States
142.250.185.164
unknown
United States
142.250.186.97
photos-ugc.l.googleusercontent.com
United States
172.217.18.110
unknown
United States
172.217.16.206
unknown
United States
142.250.185.238
play.google.com
United States
216.58.206.68
www.google.com
United States
239.255.255.250
unknown
Reserved
142.250.186.65
unknown
United States
There are 5 hidden IPs, click here to show them.

DOM / HTML

URL
Malicious
https://accounts.google.com/v3/signin/identifier?continue=https%3A%2F%2Fconsole.firebase.google.com%2Fproject%2Ffb-monitoring-prod%2Fdatabase%2Fs-usc1a-nss-2067%2Fdata%2F&followup=https%3A%2F%2Fconsole.firebase.google.com%2Fproject%2Ffb-monitoring-prod%2Fdatabase%2Fs-usc1a-nss-2067%2Fdata%2F&ifkv=AS5LTATtHyBpQk-Xfn2XVRDTWL_TrfmSxRBsbdS7tbVO_GcfyzKdd6ddqCzKtniLa1uh6t6Mom-_sw&osid=1&passive=1209600&flowName=GlifWebSignIn&flowEntry=ServiceLogin&dsh=S-33485615%3A1720034413923643&ddm=0
https://accounts.google.com/v3/signin/identifier?continue=https%3A%2F%2Fconsole.firebase.google.com%2Fproject%2Ffb-monitoring-prod%2Fdatabase%2Fs-usc1a-nss-2067%2Fdata%2F&followup=https%3A%2F%2Fconsole.firebase.google.com%2Fproject%2Ffb-monitoring-prod%2Fdatabase%2Fs-usc1a-nss-2067%2Fdata%2F&ifkv=AS5LTATtHyBpQk-Xfn2XVRDTWL_TrfmSxRBsbdS7tbVO_GcfyzKdd6ddqCzKtniLa1uh6t6Mom-_sw&osid=1&passive=1209600&flowName=GlifWebSignIn&flowEntry=ServiceLogin&dsh=S-33485615%3A1720034413923643&ddm=0
https://accounts.google.com/v3/signin/identifier?continue=https%3A%2F%2Fconsole.firebase.google.com%2Fproject%2Ffb-monitoring-prod%2Fdatabase%2Fs-usc1a-nss-2067%2Fdata%2F&followup=https%3A%2F%2Fconsole.firebase.google.com%2Fproject%2Ffb-monitoring-prod%2Fdatabase%2Fs-usc1a-nss-2067%2Fdata%2F&ifkv=AS5LTATtHyBpQk-Xfn2XVRDTWL_TrfmSxRBsbdS7tbVO_GcfyzKdd6ddqCzKtniLa1uh6t6Mom-_sw&osid=1&passive=1209600&flowName=GlifWebSignIn&flowEntry=ServiceLogin&dsh=S-33485615%3A1720034413923643&ddm=0
https://accounts.google.com/v3/signin/identifier?continue=https%3A%2F%2Fconsole.firebase.google.com%2Fproject%2Ffb-monitoring-prod%2Fdatabase%2Fs-usc1a-nss-2067%2Fdata%2F&followup=https%3A%2F%2Fconsole.firebase.google.com%2Fproject%2Ffb-monitoring-prod%2Fdatabase%2Fs-usc1a-nss-2067%2Fdata%2F&ifkv=AS5LTATtHyBpQk-Xfn2XVRDTWL_TrfmSxRBsbdS7tbVO_GcfyzKdd6ddqCzKtniLa1uh6t6Mom-_sw&osid=1&passive=1209600&flowName=GlifWebSignIn&flowEntry=ServiceLogin&dsh=S-33485615%3A1720034413923643&ddm=0
https://accounts.google.com/_/bscframe
https://accounts.youtube.com/accounts/CheckConnection?pmpo=https%3A%2F%2Faccounts.google.com&v=1307171460&timestamp=1720034419248
https://support.google.com/chrome/answer/6130773?hl=en
https://support.google.com/chrome/answer/6130773?hl=en
https://support.google.com/accounts?hl=en&visit_id=638556312307767159-3791852323&rd=2&p=account_iph#topic=3382296
https://support.google.com/chrome/answer/6130773?hl=en#hcfe-content
https://support.google.com/accounts/?hl=en&sjid=1472999391492806652-EU#topic=3382296
https://support.google.com/accounts/?hl=en&sjid=1472999391492806652-EU#topic=3382296
There are 2 hidden doms, click here to show them.