Report Overview
Submitted URL
r2---sn-qxoednee.gvt1.com/edgedl/widevine-cdm/4.10.1582.2-win-ia32.zip?mh=hG&pl=27&shardbypass=sd&redirect_counter=1&rm=sn-qxosk7e&req_id=63326dd17178eaab&cms_redirect=yes&cmsv=e&ipbypass=yes&mip=34.98.143.225&mm=28&mn=sn-qxoednee&ms=nvh&mt=1713837364&mv=u&mvi=2&rmhost=r3---sn-qxoednee.gvt1.com
IP
74.125.9.7
ASN
#15169 GOOGLE
Submitted
2024-04-23 02:04:05
Access
public
Website Title
about:privatebrowsing
Final URL
about:privatebrowsing
Tags
urlquery detections
No alerts detected
Detections
urlquery
0
Network Intrusion Detection
0
Threat Detection Systems
1
Domain Summary
Domain / FQDN | Rank | Registered | First Seen | Last Seen | Sent | Received | IP |
---|---|---|---|---|---|---|---|
r2---sn-qxoednee.gvt1.com | unknown | 2008-03-03 | 2022-06-03 | 2024-04-18 | 749 B | 5.2 MB | 74.125.9.7 |
Related reports
Network Intrusion Detection Systems
Suricata /w Emerging Threats Pro
Threat Detection Systems
Public InfoSec YARA rules
No alerts detected
Files detected
URL
r2---sn-qxoednee.gvt1.com/edgedl/widevine-cdm/4.10.1582.2-win-ia32.zip?mh=hG&pl=27&shardbypass=sd&redirect_counter=1&rm=sn-qxosk7e&req_id=63326dd17178eaab&cms_redirect=yes&cmsv=e&ipbypass=yes&mip=34.98.143.225&mm=28&mn=sn-qxoednee&ms=nvh&mt=1713837364&mv=u&mvi=2&rmhost=r3---sn-qxoednee.gvt1.com
IP
74.125.9.7
ASN
#15169 GOOGLE
File type
Zip archive data, at least v2.0 to extract, compression method=deflate
Size
5.2 MB (5197739 bytes)
Hash
ca728e84cc4daebbed5bafb35e3df9df
c129d6b7d5028b1b1347c4457412d837a1fc8ad9
Archive (5)
Filename | Md5 | File type | |||
---|---|---|---|---|---|
widevinecdm.dll | 2c7a3b4c1883fae5d8a71cd43a5a20af
| PE32 executable (DLL) (console) Intel 80386, for MS Windows, 8 sections | |||
widevinecdm.dll.sig | 92c7eba077938ef66cc7bd90619919e2 | data | |||
manifest.json | b3d1c25ba27fc580d497ee7936fed44e | JSON text data | |||
LICENSE.txt | 49ddb419d96dceb9069018535fb2e2fc | ASCII text | |||
widevinecdm.dll.lib | cd73bf55e2cf0f1caa5f1a469d75d9dc | current ar archive |
Detections
Analyzer | Verdict | Alert |
---|---|---|
YARAhub by abuse.ch | malware | meth_get_eip |
JavaScript (0)
HTTP Transactions (1)
URL | IP | Response | Size | |
---|---|---|---|---|
r2---sn-qxoednee.gvt1.com/edgedl/widevine-cdm/4.10.1582.2-win-ia32.zip?mh=hG&pl=27&shardbypass=sd&redirect_counter=1&rm=sn-qxosk7e&req_id=63326dd17178eaab&cms_redirect=yes&cmsv=e&ipbypass=yes&mip=34.98.143.225&mm=28&mn=sn-qxoednee&ms=nvh&mt=1713837364&mv=u&mvi=2&rmhost=r3---sn-qxoednee.gvt1.com | 74.125.9.7 | 200 OK | 5.2 MB | |
HTTP Headers
| ||||