Report - firebasestorage.googleapis.com/v0/b/hardy-city-377704.appspot.com/o/B3WPGiNEK2%2FSetup_Win_13-02-2023_16-33-16.zip?alt=media&token=ea9a5843-8216-4883-b45b-d0af1a1d80c8

Report Overview

Visited public
2023-12-06 08:04:06
Tags
URL
firebasestorage.googleapis.com/v0/b/hardy-city-377704.appspot.com/o/B3WPGiNEK2%2FSetup_Win_13-02-2023_16-33-16.zip?alt=media&token=ea9a5843-8216-4883-b45b-d0af1a1d80c8
Finishing URL
about:privatebrowsing
IP / ASN
142.250.74.10
#15169 GOOGLE
Title
about:privatebrowsing

Detections

urlquery

Network Intrusion Detection

Threat Detection Systems

Domain Summary

Domain / FQDN	Rank	Registered	First Seen	Last Seen	Sent	Received	IP
firebasestorage.googleapis.com	9937	2005-01-25	2017-01-30 03:42:50	2023-12-05 09:39:14	633 B	822 kB	142.250.74.42

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

No alerts detected

Threat Detection Systems

Public InfoSec YARA rules

No alerts detected

OpenPhish

No alerts detected

PhishTank

No alerts detected

mnemonic secure dns

No alerts detected

Quad9 DNS

No alerts detected

ThreatFox

No alerts detected

Files detected

URL
firebasestorage.googleapis.com/v0/b/hardy-city-377704.appspot.com/o/B3WPGiNEK2%2FSetup_Win_13-02-2023_16-33-16.zip?alt=media&token=ea9a5843-8216-4883-b45b-d0af1a1d80c8
IP
142.250.74.42
ASN
#15169 GOOGLE

File type
Zip archive data, at least v2.0 to extract, compression method=deflate\012- data
Size
821 kB (820729 bytes)
Hash
599872eb6e1076375f77f5a04ab167fb
c724f6b737562e1bf9dcd149e5ec13f9631ae5c9
3abf775b4cf70b7e0b86288320b3ce39483ea7b4b2073dc14204c2e229c9f6bf

Detections

Analyzer	Verdict	Alert
VirusTotal	malicious	VirusTotal - Scan result 33/61

JavaScript (0)

HTTP Transactions (1)

URL IP Response Size

firebasestorage.googleapis.com/v0/b/hardy-city-377704.appspot.com/o/B3WPGiNEK2%2FSetup_Win_13-02-2023_16-33-16.zip?alt=media&token=ea9a5843-8216-4883-b45b-d0af1a1d80c8

142.250.74.42

200 OK

821 kB

URL User Request GET HTTP/2
firebasestorage.googleapis.com/v0/b/hardy-city-377704.appspot.com/o/B3WPGiNEK2%2FSetup_Win_13-02-2023_16-33-16.zip?alt=media&token=ea9a5843-8216-4883-b45b-d0af1a1d80c8
IP
142.250.74.42:443
ASN
#15169 GOOGLE

Certificate
IssuerGoogle Trust Services LLC
Subjectupload.video.google.com
FingerprintCC:96:E0:52:E0:9B:EA:A9:A0:F8:88:9A:90:20:11:47:61:00:3C:42
ValidityMon, 23 Oct 2023 11:24:07 GMT - Mon, 15 Jan 2024 11:24:06 GMT

File type
Zip archive data, at least v2.0 to extract, compression method=deflate\012- data
Size
821 kB (820729 bytes)
Hash
599872eb6e1076375f77f5a04ab167fb
c724f6b737562e1bf9dcd149e5ec13f9631ae5c9
3abf775b4cf70b7e0b86288320b3ce39483ea7b4b2073dc14204c2e229c9f6bf

Detections

Analyzer	Verdict	Alert
VirusTotal	malicious	VirusTotal - Scan result 33/61

HTTP Headers

GET /v0/b/hardy-city-377704.appspot.com/o/B3WPGiNEK2%2FSetup_Win_13-02-2023_16-33-16.zip?alt=media&token=ea9a5843-8216-4883-b45b-d0af1a1d80c8 HTTP/1.1
Host: firebasestorage.googleapis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
x-guploader-uploadid: ABPtcPoEwzGtLl-rIw-xdINKFEfEaTk2vv0xqdxxEBqNmL3bRLISqVr1e0c5-gbYgUy2o5X9ZOxWyCwayw
expires: Wed, 06 Dec 2023 08:03:49 GMT
date: Wed, 06 Dec 2023 08:03:49 GMT
cache-control: private, max-age=0
last-modified: Mon, 13 Feb 2023 16:33:25 GMT
etag: "599872eb6e1076375f77f5a04ab167fb"
x-goog-generation: 1676306005424315
x-goog-metageneration: 2
x-goog-stored-content-encoding: identity
x-goog-stored-content-length: 820729
x-goog-meta-firebasestoragedownloadtokens: ea9a5843-8216-4883-b45b-d0af1a1d80c8
content-type: application/octet-stream
content-disposition: inline; filename*=utf-8''Setup_Win_13-02-2023_16-33-16.zip
x-goog-hash: crc32c=sh7C0g==, md5=WZhy624Qdjdfd/WgSrFn+w==
x-goog-storage-class: STANDARD
accept-ranges: bytes
content-length: 820729
server: UploadServer
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2

Report Overview

Domain Summary

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Threat Detection Systems

Public InfoSec YARA rules

OpenPhish

PhishTank

mnemonic secure dns

Quad9 DNS

ThreatFox

Files detected

URL

IP

ASN

File type

Size

Hash

Detections

JavaScript (0)

HTTP Transactions (1)

URL User Request GET HTTP/2

IP

ASN

Certificate

File type

Size

Hash

Detections

HTTP Headers