Report Overview
Submitted URL
r1---sn-qxoednee.gvt1.com/edgedl/widevine-cdm/4.10.2710.0-win-x86.zip?mh=jM&pl=27&shardbypass=sd&redirect_counter=1&rm=sn-qxosd7l&req_id=6ee84c5ee2d02892&cms_redirect=yes&cmsv=e&ipbypass=yes&mip=35.187.132.167&mm=28&mn=sn-qxoednee&ms=nvh&mt=1713899898&mv=u&mvi=1&rmhost=r5---sn-qxoednee.gvt1.com&smhost=r1---sn-qxoedn7k.gvt1.com
IP
74.125.9.6
ASN
#15169 GOOGLE
Submitted
2024-04-23 19:23:30
Access
public
Website Title
about:privatebrowsing
Final URL
about:privatebrowsing
Tags
urlquery detections
No alerts detected
Detections
urlquery
0
Network Intrusion Detection
0
Threat Detection Systems
1
Domain Summary
Domain / FQDN | Rank | Registered | First Seen | Last Seen | Sent | Received | IP |
---|---|---|---|---|---|---|---|
r1---sn-qxoednee.gvt1.com | unknown | 2008-03-03 | 2022-06-03 | 2024-04-18 | 782 B | 14 MB | 74.125.9.6 |
Related reports
Network Intrusion Detection Systems
Suricata /w Emerging Threats Pro
Threat Detection Systems
Public InfoSec YARA rules
No alerts detected
Files detected
URL
r1---sn-qxoednee.gvt1.com/edgedl/widevine-cdm/4.10.2710.0-win-x86.zip?mh=jM&pl=27&shardbypass=sd&redirect_counter=1&rm=sn-qxosd7l&req_id=6ee84c5ee2d02892&cms_redirect=yes&cmsv=e&ipbypass=yes&mip=35.187.132.167&mm=28&mn=sn-qxoednee&ms=nvh&mt=1713899898&mv=u&mvi=1&rmhost=r5---sn-qxoednee.gvt1.com&smhost=r1---sn-qxoedn7k.gvt1.com
IP
74.125.9.6
ASN
#15169 GOOGLE
File type
Zip archive data, at least v2.0 to extract, compression method=deflate
Size
14 MB (14250607 bytes)
Hash
4290a1abe603786662d2f713972173c6
32d9d4177368b865647d368cd35e88f79df47e19
Archive (5)
Filename | Md5 | File type | |||
---|---|---|---|---|---|
widevinecdm.dll | 4bf760b972b1d1d70344bf489e5e75c5
| PE32 executable (DLL) (console) Intel 80386, for MS Windows, 9 sections | |||
widevinecdm.dll.sig | 4046ca380d1ae117506296170d3a7f77 | data | |||
manifest.json | c539f451380bf75180768d67cda2bfa2 | JSON text data | |||
LICENSE.txt | 49ddb419d96dceb9069018535fb2e2fc | ASCII text | |||
widevinecdm.dll.lib | 0ec02e9616d1e2cd6982b270b4f7524a | current ar archive |
Detections
Analyzer | Verdict | Alert |
---|---|---|
YARAhub by abuse.ch | malware | meth_get_eip |
JavaScript (0)
HTTP Transactions (1)
URL | IP | Response | Size | |
---|---|---|---|---|
r1---sn-qxoednee.gvt1.com/edgedl/widevine-cdm/4.10.2710.0-win-x86.zip?mh=jM&pl=27&shardbypass=sd&redirect_counter=1&rm=sn-qxosd7l&req_id=6ee84c5ee2d02892&cms_redirect=yes&cmsv=e&ipbypass=yes&mip=35.187.132.167&mm=28&mn=sn-qxoednee&ms=nvh&mt=1713899898&mv=u&mvi=1&rmhost=r5---sn-qxoednee.gvt1.com&smhost=r1---sn-qxoedn7k.gvt1.com | 74.125.9.6 | 200 OK | 14 MB | |
HTTP Headers
| ||||