Report Overview

  1. Submitted URL

    r2---sn-ab5sznzk.gvt1.com/edgedl/release2/update2/acqegmowqfk2lzsyontujd3aigva_1.3.36.153/GoogleUpdateSetup.exe?cms_redirect=yes&mh=wD&mip=160.254.108.24&mm=28&mn=sn-ab5sznzk&ms=nvh&mt=1680164251&mv=u&mvi=2&pl=24&rmhost=r3---sn-ab5sznzk.gvt1.com&shardbypass=sd

  2. IP

    173.194.31.135

    ASN

    #15169 GOOGLE

  3. Submitted

    2023-03-31 10:10:54

    Access

    public

  4. Website Title

  5. Final URL

  6. Tags

  7. urlquery detections

    No alerts detected

Detections

  1. urlquery

    0

  2. Network Intrusion Detection

    6

  3. Threat Detection Systems

    0

Domain Summary

Domain / FQDNRankRegisteredFirst SeenLast Seen
r2---sn-capm-vnae.gvt1.comunknown2015-07-23T07:32:03Z2023-03-31T19:58:38Z
r3.o.lencr.org3442020-12-02T09:52:13Z2023-03-31T18:12:04Z
firefox.settings.services.mozilla.com8672020-06-04T22:08:41Z2023-03-31T18:14:44Z
contile.services.mozilla.com11142021-05-27T20:32:35Z2023-03-31T18:12:09Z
img-getpocket.cdn.mozilla.net16312018-06-22T01:36:00Z2023-03-31T07:51:33Z
cdn.sw.altova.comunknown2012-07-11T13:37:26Z2023-03-31T12:09:15Z
r2---sn-ab5sznzk.gvt1.comunknown2023-03-30T01:09:12Z2023-03-31T01:08:21Z
push.services.mozilla.com21402014-10-24T10:27:06Z2023-03-31T18:13:52Z
content-signature-2.cdn.mozilla.net11522020-11-03T13:26:46Z2023-03-31T18:18:04Z

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

SeveritySource IPDestination IPAlert
low 91.90.45.173Client IP
high 91.90.45.173Client IP
low 91.90.45.173Client IP
medium 54.230.111.14Client IP
high 54.230.111.14Client IP
low 54.230.111.14Client IP

Threat Detection Systems

OpenPhish

No alerts detected


PhishTank

No alerts detected


Fortinet's Web Filter

No alerts detected


mnemonic secure dns

No alerts detected


Quad9 DNS

No alerts detected


ThreatFox

No alerts detected


Files detected

  1. URL

    r2---sn-capm-vnae.gvt1.com/edgedl/release2/update2/acqegmowqfk2lzsyontujd3aigva_1.3.36.153/GoogleUpdateSetup.exe?mh=wD&pl=21&shardbypass=sd&redirect_counter=1&rm=sn-ab5ese7l&req_id=a13201a6dec67afc&cms_redirect=yes&cmsv=e&ipbypass=yes&mip=91.90.42.154&mm=28&mn=sn-capm-vnae&ms=nvh&mt=1680256583&mv=u&mvi=2&rmhost=r1---sn-capm-vnae.gvt1.com

  2. IP

    91.90.45.173

  3. ASN

    #50304 Blix Solutions AS

  1. File type

    PE32 executable (GUI) Intel 80386, for MS Windows\012- data

    Size

    1.4 MB (1426152 bytes)

  2. Hash

    aa7022acac1cba5c99956824fe856608

    8d26a20203a6e338040983aedfd01c1090e605fc

JavaScript (0)

HTTP Transactions (23)

URLIPResponseSize
r2---sn-ab5sznzk.gvt1.com/edgedl/release2/update2/acqegmowqfk2lzsyontujd3aigva_1.3.36.153/GoogleUpdateSetup.exe?cms_redirect=yes&mh=wD&mip=160.254.108.24&mm=28&mn=sn-ab5sznzk&ms=nvh&mt=1680164251&mv=u&mvi=2&pl=24&rmhost=r3---sn-ab5sznzk.gvt1.com&shardbypass=sd
173.194.31.135302 Found0 B
r2---sn-capm-vnae.gvt1.com/edgedl/release2/update2/acqegmowqfk2lzsyontujd3aigva_1.3.36.153/GoogleUpdateSetup.exe?mh=wD&pl=21&shardbypass=sd&redirect_counter=1&rm=sn-ab5ese7l&req_id=a13201a6dec67afc&cms_redirect=yes&cmsv=e&ipbypass=yes&mip=91.90.42.154&mm=28&mn=sn-capm-vnae&ms=nvh&mt=1680256583&mv=u&mvi=2&rmhost=r1---sn-capm-vnae.gvt1.com
91.90.45.173200 OK1.4 MB
r3.o.lencr.org/
23.36.77.32200 OK503 B
r3.o.lencr.org/
23.36.77.32200 OK503 B
r3.o.lencr.org/
23.36.77.32200 OK503 B
content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2023-04-30-16-53-14.chain
34.160.144.191200 OK5.3 kB
firefox.settings.services.mozilla.com/v1/
35.241.9.150200 OK939 B
contile.services.mozilla.com/v1/tiles
34.117.237.239200 OK12 B
firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
35.241.9.150200 OK329 B
r3.o.lencr.org/
23.36.77.32200 OK503 B
push.services.mozilla.com/
52.40.148.136101 Switching Protocols0 B
r3.o.lencr.org/
23.36.77.32200 OK503 B
r3.o.lencr.org/
23.36.77.32200 OK503 B
r3.o.lencr.org/
23.36.77.32200 OK503 B
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F2cbd721e-872e-4eec-8eb5-363663d0ab36.jpeg
34.120.237.76200 OK5.8 kB
r3.o.lencr.org/
23.36.77.32200 OK503 B
r3.o.lencr.org/
23.36.77.32200 OK503 B
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F68adff46-2278-4660-8b41-0719f5eb19f2.jpeg
34.120.237.76200 OK5.1 kB
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Ff94a70cc-7556-4fae-8603-14d3b253f74c.jpeg
34.120.237.76200 OK9.9 kB
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fccede828-1c24-4287-bb00-f793263370cf.jpeg
34.120.237.76200 OK6.4 kB
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F0794d5a0-7014-425b-9ea0-5dca44ddb4dd.jpeg
34.120.237.76200 OK8.7 kB
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F067b6c49-6e52-4dcc-af72-f7292299f912.jpeg
34.120.237.76200 OK14 kB
cdn.sw.altova.com/v2023sp1/en/XMLSpyProf2023sp1_x64.exe
54.230.111.14200 OK0 B