Report Overview
Submitted URL
r5---sn-qxoednee.gvt1.com/edgedl/widevine-cdm/4.10.2710.0-win-x86.zip?mh=jM&pl=27&shardbypass=sd&redirect_counter=1&rm=sn-qxoz77s&req_id=36580055c32cbd39&cms_redirect=yes&cmsv=e&ipbypass=yes&mip=107.178.194.7&mm=28&mn=sn-qxoednee&ms=nvh&mt=1713874507&mv=u&mvi=5&smhost=r1---sn-qxoedn7k.gvt1.com
IP
74.125.9.10
ASN
#15169 GOOGLE
Submitted
2024-04-23 12:32:33
Access
public
Website Title
about:privatebrowsing
Final URL
about:privatebrowsing
Tags
urlquery detections
No alerts detected
Detections
urlquery
0
Network Intrusion Detection
0
Threat Detection Systems
1
Domain Summary
Domain / FQDN | Rank | Registered | First Seen | Last Seen | Sent | Received | IP |
---|---|---|---|---|---|---|---|
r5---sn-qxoednee.gvt1.com | unknown | 2008-03-03 | 2022-06-03 | 2024-04-18 | 748 B | 14 MB | 74.125.9.10 |
Related reports
Network Intrusion Detection Systems
Suricata /w Emerging Threats Pro
Threat Detection Systems
Public InfoSec YARA rules
No alerts detected
Files detected
URL
r5---sn-qxoednee.gvt1.com/edgedl/widevine-cdm/4.10.2710.0-win-x86.zip?mh=jM&pl=27&shardbypass=sd&redirect_counter=1&rm=sn-qxoz77s&req_id=36580055c32cbd39&cms_redirect=yes&cmsv=e&ipbypass=yes&mip=107.178.194.7&mm=28&mn=sn-qxoednee&ms=nvh&mt=1713874507&mv=u&mvi=5&smhost=r1---sn-qxoedn7k.gvt1.com
IP
74.125.9.10
ASN
#15169 GOOGLE
File type
Zip archive data, at least v2.0 to extract, compression method=deflate
Size
14 MB (14250607 bytes)
Hash
4290a1abe603786662d2f713972173c6
32d9d4177368b865647d368cd35e88f79df47e19
Archive (5)
Filename | Md5 | File type | |||
---|---|---|---|---|---|
widevinecdm.dll | 4bf760b972b1d1d70344bf489e5e75c5
| PE32 executable (DLL) (console) Intel 80386, for MS Windows, 9 sections | |||
widevinecdm.dll.sig | 4046ca380d1ae117506296170d3a7f77 | data | |||
manifest.json | c539f451380bf75180768d67cda2bfa2 | JSON text data | |||
LICENSE.txt | 49ddb419d96dceb9069018535fb2e2fc | ASCII text | |||
widevinecdm.dll.lib | 0ec02e9616d1e2cd6982b270b4f7524a | current ar archive |
Detections
Analyzer | Verdict | Alert |
---|---|---|
YARAhub by abuse.ch | malware | meth_get_eip |
JavaScript (0)
HTTP Transactions (1)
URL | IP | Response | Size | |
---|---|---|---|---|
r5---sn-qxoednee.gvt1.com/edgedl/widevine-cdm/4.10.2710.0-win-x86.zip?mh=jM&pl=27&shardbypass=sd&redirect_counter=1&rm=sn-qxoz77s&req_id=36580055c32cbd39&cms_redirect=yes&cmsv=e&ipbypass=yes&mip=107.178.194.7&mm=28&mn=sn-qxoednee&ms=nvh&mt=1713874507&mv=u&mvi=5&smhost=r1---sn-qxoedn7k.gvt1.com | 74.125.9.10 | 200 OK | 14 MB | |
HTTP Headers
| ||||