Report Overview
Submitted URL
r4---sn-vgqsrnek.gvt1.com/edgedl/widevine-cdm/4.10.1440.18-linux-x64.zip?mh=_R&pl=27&shardbypass=sd&redirect_counter=1&cm2rm=sn-qxosk76&req_id=64b9fbb43ef51251&cms_redirect=yes&cmsv=e&mip=107.178.194.137&mm=34&mn=sn-vgqsrnek&ms=ltu&mt=1713866853&mv=u&mvi=4&rmhost=r1---sn-vgqsrnek.gvt1.com&smhost=r3---sn-vgqsknzl.gvt1.com
IP
173.194.191.41
ASN
#15169 GOOGLE
Submitted
2024-04-23 10:28:00
Access
public
Website Title
about:privatebrowsing
Final URL
about:privatebrowsing
Tags
urlquery detections
No alerts detected
Detections
urlquery
0
Network Intrusion Detection
0
Threat Detection Systems
1
Domain Summary
Domain / FQDN | Rank | Registered | First Seen | Last Seen | Sent | Received | IP |
---|---|---|---|---|---|---|---|
r1---sn-a5meknzk.gvt1.com | 626572 | 2008-03-03 | 2023-05-24 | 2023-11-08 | 800 B | 3.5 MB | 74.125.157.70 |
r4---sn-vgqsrnek.gvt1.com | 434689 | 2008-03-03 | 2017-08-18 | 2024-03-27 | 776 B | 672 B | 173.194.191.41 |
Related reports
Network Intrusion Detection Systems
Suricata /w Emerging Threats Pro
Threat Detection Systems
Public InfoSec YARA rules
No alerts detected
Files detected
URL
r1---sn-a5meknzk.gvt1.com/edgedl/widevine-cdm/4.10.1440.18-linux-x64.zip?mh=_R&pl=0&shardbypass=sd&cm2rm=sn-qxosk76&req_id=64b9fbb43ef51251&cmsv=e&redirect_counter=2&rm=sn-vgqee67z&cms_redirect=yes&ipbypass=yes&mip=91.90.42.154&mm=34&mn=sn-a5meknzk&ms=ltu&mt=1713866853&mv=D&mvi=1&rmhost=r2---sn-a5meknzk.gvt1.com&smhost=r2---sn-a5m7lnl6.gvt1.com
IP
74.125.157.70
ASN
#15169 GOOGLE
File type
Zip archive data, at least v2.0 to extract, compression method=deflate
Size
3.5 MB (3540154 bytes)
Hash
fc6cf66cdff7c57d367b317505f086d1
01209f5f8f4d104917b6439f6107efbb38ccabd2
Archive (3)
Filename | Md5 | File type | |||
---|---|---|---|---|---|
libwidevinecdm.so | 995a6544b32b7d06ac6159aad878a8a0
| ELF 64-bit LSB shared object, x86-64, version 1 (SYSV) | |||
manifest.json | 6d2ec667fecb9a64f987287cf34f31ff | JSON text data | |||
LICENSE.txt | 49ddb419d96dceb9069018535fb2e2fc | ASCII text |
Detections
Analyzer | Verdict | Alert |
---|---|---|
YARAhub by abuse.ch | malware | meth_get_eip |
JavaScript (0)
HTTP Transactions (2)
URL | IP | Response | Size | |
---|---|---|---|---|
r4---sn-vgqsrnek.gvt1.com/edgedl/widevine-cdm/4.10.1440.18-linux-x64.zip?mh=_R&pl=27&shardbypass=sd&redirect_counter=1&cm2rm=sn-qxosk76&req_id=64b9fbb43ef51251&cms_redirect=yes&cmsv=e&mip=107.178.194.137&mm=34&mn=sn-vgqsrnek&ms=ltu&mt=1713866853&mv=u&mvi=4&rmhost=r1---sn-vgqsrnek.gvt1.com&smhost=r3---sn-vgqsknzl.gvt1.com | 173.194.191.41 | 302 Found | 0 B | |
HTTP Headers
| ||||
r1---sn-a5meknzk.gvt1.com/edgedl/widevine-cdm/4.10.1440.18-linux-x64.zip?mh=_R&pl=0&shardbypass=sd&cm2rm=sn-qxosk76&req_id=64b9fbb43ef51251&cmsv=e&redirect_counter=2&rm=sn-vgqee67z&cms_redirect=yes&ipbypass=yes&mip=91.90.42.154&mm=34&mn=sn-a5meknzk&ms=ltu&mt=1713866853&mv=D&mvi=1&rmhost=r2---sn-a5meknzk.gvt1.com&smhost=r2---sn-a5m7lnl6.gvt1.com | 74.125.157.70 | 200 OK | 3.5 MB | |
HTTP Headers
| ||||