Report Overview
Submitted URL
r5---sn-qxoedn7k.gvt1.com/edgedl/widevine-cdm/4.10.1582.2-win-x64.zip?cms_redirect=yes&mh=-w&mip=35.243.23.172&mm=28&mn=sn-qxoedn7k&ms=nvh&mt=1713836258&mv=u&mvi=5&pl=27&shardbypass=sd
IP
74.125.159.202
ASN
#15169 GOOGLE
Submitted
2024-04-23 02:04:01
Access
public
Website Title
about:privatebrowsing
Final URL
about:privatebrowsing
Tags
urlquery detections
No alerts detected
Detections
urlquery
0
Network Intrusion Detection
0
Threat Detection Systems
1
Domain Summary
Domain / FQDN | Rank | Registered | First Seen | Last Seen | Sent | Received | IP |
---|---|---|---|---|---|---|---|
r5---sn-qxoedn7k.gvt1.com | 661363 | 2008-03-03 | 2018-12-06 | 2024-04-18 | 638 B | 627 B | 74.125.159.202 |
r2---sn-capm-vnae.gvt1.com | unknown | 2008-03-03 | 2015-07-23 | 2024-04-18 | 755 B | 5.1 MB | 91.90.45.173 |
Related reports
Network Intrusion Detection Systems
Suricata /w Emerging Threats Pro
Threat Detection Systems
Public InfoSec YARA rules
No alerts detected
Files detected
URL
r2---sn-capm-vnae.gvt1.com/edgedl/widevine-cdm/4.10.1582.2-win-x64.zip?mh=-w&pl=21&shardbypass=sd&redirect_counter=1&rm=sn-qxos676&req_id=cf4264b96b3b09b1&cms_redirect=yes&ipbypass=yes&mip=91.90.42.154&mm=28&mn=sn-capm-vnae&ms=nvh&mt=1713836258&mv=u&mvi=2&pcm2cms=yes&rmhost=r1---sn-capm-vnae.gvt1.com
IP
91.90.45.173
ASN
#50304 Blix Solutions AS
File type
Zip archive data, at least v2.0 to extract, compression method=deflate
Size
5.1 MB (5097580 bytes)
Hash
96698f7eafa0d19026177d2d1594b283
c6456d18c6e7adaa34c3f3be3744c7dd025871bf
Archive (5)
Filename | Md5 | File type | |||
---|---|---|---|---|---|
widevinecdm.dll | e2ece2e61f18b9278f27032c1a5578ea
| PE32+ executable (DLL) (console) x86-64, for MS Windows, 9 sections | |||
widevinecdm.dll.sig | e33e82c5ee8733eb0b5ed12b1d6efcbe | data | |||
manifest.json | 69236425227c0bd3e5c21034285822e8 | JSON text data | |||
LICENSE.txt | 49ddb419d96dceb9069018535fb2e2fc | ASCII text | |||
widevinecdm.dll.lib | 7b98bf0cac6eb205d354fcfa7473d2b9 | current ar archive |
Detections
Analyzer | Verdict | Alert |
---|---|---|
YARAhub by abuse.ch | malware | meth_get_eip |
JavaScript (0)
HTTP Transactions (2)
URL | IP | Response | Size | |
---|---|---|---|---|
r5---sn-qxoedn7k.gvt1.com/edgedl/widevine-cdm/4.10.1582.2-win-x64.zip?cms_redirect=yes&mh=-w&mip=35.243.23.172&mm=28&mn=sn-qxoedn7k&ms=nvh&mt=1713836258&mv=u&mvi=5&pl=27&shardbypass=sd | 74.125.159.202 | 302 Found | 0 B | |
HTTP Headers
| ||||
r2---sn-capm-vnae.gvt1.com/edgedl/widevine-cdm/4.10.1582.2-win-x64.zip?mh=-w&pl=21&shardbypass=sd&redirect_counter=1&rm=sn-qxos676&req_id=cf4264b96b3b09b1&cms_redirect=yes&ipbypass=yes&mip=91.90.42.154&mm=28&mn=sn-capm-vnae&ms=nvh&mt=1713836258&mv=u&mvi=2&pcm2cms=yes&rmhost=r1---sn-capm-vnae.gvt1.com | 91.90.45.173 | 200 OK | 5.1 MB | |
HTTP Headers
| ||||