Report Overview

  1. Submitted URL

    r3---sn-qxo7rn7k.gvt1.com/edgedl/widevine-cdm/4.10.2449.0-win-x64.zip?mh=7o&pl=27&shardbypass=sd&redirect_counter=1&rm=sn-qxosr7s&req_id=f127d3e9aa72fa2f&cms_redirect=yes&cmsv=e&ipbypass=yes&mip=34.98.143.75&mm=28&mn=sn-qxo7rn7k&ms=nvh&mt=1714872342&mv=u&mvi=3&rmhost=r1---sn-qxo7rn7k.gvt1.com

  2. IP

    74.125.161.8

    ASN

    #15169 GOOGLE

  3. Submitted

    2024-05-05 02:11:22

    Access

    public

  4. Website Title

    about:privatebrowsing

  5. Final URL

    about:privatebrowsing

  6. Tags

  7. urlquery detections

    No alerts detected

Detections

  1. urlquery

    0

  2. Network Intrusion Detection

    0

  3. Threat Detection Systems

    1

Domain Summary

Domain / FQDNRankRegisteredFirst SeenLast Seen
r3---sn-qxo7rn7k.gvt1.comunknown2008-03-032022-06-032024-04-18

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

No alerts detected

Threat Detection Systems

Public InfoSec YARA rules

No alerts detected


OpenPhish

No alerts detected


PhishTank

No alerts detected


mnemonic secure dns

No alerts detected


Quad9 DNS

No alerts detected


ThreatFox

No alerts detected


Files detected

  1. URL

    r3---sn-qxo7rn7k.gvt1.com/edgedl/widevine-cdm/4.10.2449.0-win-x64.zip?mh=7o&pl=27&shardbypass=sd&redirect_counter=1&rm=sn-qxosr7s&req_id=f127d3e9aa72fa2f&cms_redirect=yes&cmsv=e&ipbypass=yes&mip=34.98.143.75&mm=28&mn=sn-qxo7rn7k&ms=nvh&mt=1714872342&mv=u&mvi=3&rmhost=r1---sn-qxo7rn7k.gvt1.com

  2. IP

    74.125.161.8

  3. ASN

    #15169 GOOGLE

  1. File type

    Zip archive data, at least v2.0 to extract, compression method=deflate

    Size

    6.8 MB (6840150 bytes)

  2. Hash

    438c3af1332297479ee9ed271bb7bf39

    b3571e5e31d02b02e7d68806a254a4d290339af3

  1. Archive (5)

  2. FilenameMd5File type
    widevinecdm.dll
    54dc5ae0659fabc263d83487ae1c03e4
    PE32+ executable (DLL) (console) x86-64, for MS Windows, 10 sections
    widevinecdm.dll.sig
    dea1586a0ebca332d265dc5eda3c1c19
    data
    manifest.json
    6981f969f95b2a983547050ab1cb2a20
    JSON text data
    LICENSE.txt
    49ddb419d96dceb9069018535fb2e2fc
    ASCII text
    widevinecdm.dll.lib
    688bed3676d2104e7f17ae1cd2c59404
    current ar archive

    Detections

    AnalyzerVerdictAlert
    YARAhub by abuse.chmalware
    meth_get_eip

JavaScript (0)

HTTP Transactions (1)

URLIPResponseSize
r3---sn-qxo7rn7k.gvt1.com/edgedl/widevine-cdm/4.10.2449.0-win-x64.zip?mh=7o&pl=27&shardbypass=sd&redirect_counter=1&rm=sn-qxosr7s&req_id=f127d3e9aa72fa2f&cms_redirect=yes&cmsv=e&ipbypass=yes&mip=34.98.143.75&mm=28&mn=sn-qxo7rn7k&ms=nvh&mt=1714872342&mv=u&mvi=3&rmhost=r1---sn-qxo7rn7k.gvt1.com
74.125.161.8200 OK6.8 MB