Report - cdn.gilcdn.com/ContentMediaGenericFiles/c37047a539bc93a5f02a0baf1e2dbab0-Full.zip?w=1&h=1&Expires=1711689358&Policy=eyJTdGF0ZW1lbnQiOlt7IlJlc291cmNlIjoiaHR0cHM6Ly9jZG4uZ2lsY2RuLmNvbS9Db250ZW50TWVkaWFHZW5lcmljRmlsZXMvYzM3MDQ3YTUzOWJjOTNhNWYwMmEwYmFmMWUyZGJhYjAtRnVsbC56aXA~dz0xJmg9MSIsIkNvbmRpdGlvbiI6eyJEYXRlTGVzc1RoYW4iOnsiQVdTOkVwb2NoVGltZSI6MTcxMTY4OTM1OH19fV19&Signature=TxcA56XaNPfE8y1N6bOdymm3n6Z6koNBp5Q4CrVqEfFtLoad4BkTuYdUTw5ks~1-4ByVH0Os4uXZaKhDrNwhTkQ3ZhaL956YLuEbOWvBWWpiJqHPJeNwsJJvuEBVRANqLgQIjkBQO1SjVawVuC89pqVG0w8y4EtpsdbJXnINI1L7DLKEtj2zMsRKf0O4LQ1FaitnNvPHz5smx56TIfO8iqd0sXLqN7Nsf72f06OLPm5rznXi8u35n4qcnEVvtL202tBj2bq70qWMYlyZ3H7F~VP3bvOwX67tN-gkOw~FqciWwaXXy8qHC8nJIEGrgy5FYu-aRfK~48xjd4wzsgqFZA_

Report Overview

Submitted URL
cdn.gilcdn.com/ContentMediaGenericFiles/c37047a539bc93a5f02a0baf1e2dbab0-Full.zip?w=1&h=1&Expires=1711689358&Policy=eyJTdGF0ZW1lbnQiOlt7IlJlc291cmNlIjoiaHR0cHM6Ly9jZG4uZ2lsY2RuLmNvbS9Db250ZW50TWVkaWFHZW5lcmljRmlsZXMvYzM3MDQ3YTUzOWJjOTNhNWYwMmEwYmFmMWUyZGJhYjAtRnVsbC56aXA~dz0xJmg9MSIsIkNvbmRpdGlvbiI6eyJEYXRlTGVzc1RoYW4iOnsiQVdTOkVwb2NoVGltZSI6MTcxMTY4OTM1OH19fV19&Signature=TxcA56XaNPfE8y1N6bOdymm3n6Z6koNBp5Q4CrVqEfFtLoad4BkTuYdUTw5ks~1-4ByVH0Os4uXZaKhDrNwhTkQ3ZhaL956YLuEbOWvBWWpiJqHPJeNwsJJvuEBVRANqLgQIjkBQO1SjVawVuC89pqVG0w8y4EtpsdbJXnINI1L7DLKEtj2zMsRKf0O4LQ1FaitnNvPHz5smx56TIfO8iqd0sXLqN7Nsf72f06OLPm5rznXi8u35n4qcnEVvtL202tBj2bq70qWMYlyZ3H7F~VP3bvOwX67tN-gkOw~FqciWwaXXy8qHC8nJIEGrgy5FYu-aRfK~48xjd4wzsgqFZA__&Key-Pair-Id=K1FFKFZRWAZSB
IP
54.230.111.31
ASN
#16509 AMAZON-02
Submitted
2024-03-29 05:13:13
Access
public
Website Title
about:privatebrowsing
Final URL
about:privatebrowsing
Tags
urlquery detections
No alerts detected

Detections

urlquery
0
Network Intrusion Detection
0
Threat Detection Systems
1

Domain Summary

Domain / FQDN	Rank	Registered	First Seen	Last Seen	Sent	Received	IP
ocsp.r2m03.amazontrust.com	unknown	2007-05-11	2023-02-21	2024-03-28	676 B	1.8 kB	143.204.53.97
cdn.gilcdn.com	unknown	2023-12-13	2023-12-15	2024-03-28	1.2 kB	15 MB	54.230.111.31

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

No alerts detected

Threat Detection Systems

Public InfoSec YARA rules

No alerts detected

OpenPhish

No alerts detected

PhishTank

No alerts detected

mnemonic secure dns

No alerts detected

Quad9 DNS

No alerts detected

ThreatFox

No alerts detected

Files detected

URL
cdn.gilcdn.com/ContentMediaGenericFiles/c37047a539bc93a5f02a0baf1e2dbab0-Full.zip?w=1&h=1&Expires=1711689358&Policy=eyJTdGF0ZW1lbnQiOlt7IlJlc291cmNlIjoiaHR0cHM6Ly9jZG4uZ2lsY2RuLmNvbS9Db250ZW50TWVkaWFHZW5lcmljRmlsZXMvYzM3MDQ3YTUzOWJjOTNhNWYwMmEwYmFmMWUyZGJhYjAtRnVsbC56aXA~dz0xJmg9MSIsIkNvbmRpdGlvbiI6eyJEYXRlTGVzc1RoYW4iOnsiQVdTOkVwb2NoVGltZSI6MTcxMTY4OTM1OH19fV19&Signature=TxcA56XaNPfE8y1N6bOdymm3n6Z6koNBp5Q4CrVqEfFtLoad4BkTuYdUTw5ks~1-4ByVH0Os4uXZaKhDrNwhTkQ3ZhaL956YLuEbOWvBWWpiJqHPJeNwsJJvuEBVRANqLgQIjkBQO1SjVawVuC89pqVG0w8y4EtpsdbJXnINI1L7DLKEtj2zMsRKf0O4LQ1FaitnNvPHz5smx56TIfO8iqd0sXLqN7Nsf72f06OLPm5rznXi8u35n4qcnEVvtL202tBj2bq70qWMYlyZ3H7F~VP3bvOwX67tN-gkOw~FqciWwaXXy8qHC8nJIEGrgy5FYu-aRfK~48xjd4wzsgqFZA__&Key-Pair-Id=K1FFKFZRWAZSB
IP
54.230.111.31
ASN
#16509 AMAZON-02

File type
Zip archive data, at least v2.0 to extract, compression method=deflate
Size
15 MB (14830299 bytes)
Hash
c37047a539bc93a5f02a0baf1e2dbab0
3d6a4f7fcfec30e0e7b95bd00d720233e90a34d6
49d16704200266649f83069c130464421f6b77e563f52158e356a294e35ddd20

Archive (2)

Filename

Md5

File type

j.reg

100ae2e6b804503207b90b7b6e1073bb

Windows Registry little-endian text (Win2K or above)

k.reg

702fe80d0bec3dc5aca9c7fc1e35ae84

Windows Registry little-endian text (Win2K or above)

Detections

Analyzer	Verdict	Alert
YARAhub by abuse.ch	malware	Detect files disabling or modifying Windows Defender, Windows Firewall, or Microsoft Smartscreen

JavaScript (0)

HTTP Transactions (3)

	URL	IP	Response	Size
	ocsp.r2m03.amazontrust.com/	143.204.53.97		471 B
URL ocsp.r2m03.amazontrust.com/ IP 143.204.53.97:0 ASN #16509 AMAZON-02 File type data Size 471 B (471 bytes) Hash 2246818d26b556c4a53115d84831a53b ee65f09923e55ad75a1e0588cfbc7f9210c8de32 d1615d3cb45574f15552a747fd7d47868e924169a2ec6f5105d7dc6e8b80b1dc HTTP Headers `POST / HTTP/1.1 Host: ocsp.r2m03.amazontrust.com User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Content-Type: application/ocsp-request Content-Length: 83 Connection: keep-alive Pragma: no-cache Cache-Control: no-cache` `HTTP/1.1 200 OK Content-Type: application/ocsp-response Content-Length: 471 Connection: keep-alive Cache-Control: max-age=7200 Date: Fri, 29 Mar 2024 05:11:22 GMT Server: ECAcc (amb/6AB2) X-Cache: Miss from cloudfront Via: 1.1 b9f0050ca4d212d7c855e005be54b1ac.cloudfront.net (CloudFront) X-Amz-Cf-Pop: OSL50-C1 X-Amz-Cf-Id: jACyK9zeUCj-oU_oXb_25RtW-5tMODMipWXD201OBcGGK3HzNN7f_g==`

	ocsp.r2m03.amazontrust.com/	143.204.53.97		471 B
URL ocsp.r2m03.amazontrust.com/ IP 143.204.53.97:0 ASN #16509 AMAZON-02 File type data Size 471 B (471 bytes) Hash 2246818d26b556c4a53115d84831a53b ee65f09923e55ad75a1e0588cfbc7f9210c8de32 d1615d3cb45574f15552a747fd7d47868e924169a2ec6f5105d7dc6e8b80b1dc HTTP Headers `POST / HTTP/1.1 Host: ocsp.r2m03.amazontrust.com User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Content-Type: application/ocsp-request Content-Length: 83 Connection: keep-alive Pragma: no-cache Cache-Control: no-cache` `HTTP/1.1 200 OK Content-Type: application/ocsp-response Content-Length: 471 Connection: keep-alive Accept-Ranges: bytes Cache-Control: max-age=7200 Date: Fri, 29 Mar 2024 05:11:23 GMT Last-Modified: Fri, 29 Mar 2024 04:16:18 GMT Server: ECAcc (ska/F6A0) X-Cache: Miss from cloudfront Via: 1.1 410f51195842d9b592b15d6588c36654.cloudfront.net (CloudFront) X-Amz-Cf-Pop: OSL50-C1 X-Amz-Cf-Id: n4ZhkxIG5ghkIjpQmBK9uvDWXFhdNEh9WPCKur6b6DC-Mc3OeB-72g== Age: 3305`

	cdn.gilcdn.com/ContentMediaGenericFiles/c37047a539bc93a5f02a0baf1e2dbab0-Full.zip?w=1&h=1&Expires=1711689358&Policy=eyJTdGF0ZW1lbnQiOlt7IlJlc291cmNlIjoiaHR0cHM6Ly9jZG4uZ2lsY2RuLmNvbS9Db250ZW50TWVkaWFHZW5lcmljRmlsZXMvYzM3MDQ3YTUzOWJjOTNhNWYwMmEwYmFmMWUyZGJhYjAtRnVsbC56aXA~dz0xJmg9MSIsIkNvbmRpdGlvbiI6eyJEYXRlTGVzc1RoYW4iOnsiQVdTOkVwb2NoVGltZSI6MTcxMTY4OTM1OH19fV19&Signature=TxcA56XaNPfE8y1N6bOdymm3n6Z6koNBp5Q4CrVqEfFtLoad4BkTuYdUTw5ks~1-4ByVH0Os4uXZaKhDrNwhTkQ3ZhaL956YLuEbOWvBWWpiJqHPJeNwsJJvuEBVRANqLgQIjkBQO1SjVawVuC89pqVG0w8y4EtpsdbJXnINI1L7DLKEtj2zMsRKf0O4LQ1FaitnNvPHz5smx56TIfO8iqd0sXLqN7Nsf72f06OLPm5rznXi8u35n4qcnEVvtL202tBj2bq70qWMYlyZ3H7F~VP3bvOwX67tN-gkOw~FqciWwaXXy8qHC8nJIEGrgy5FYu-aRfK~48xjd4wzsgqFZA__&Key-Pair-Id=K1FFKFZRWAZSB	54.230.111.31	200 OK	15 MB
URL User Request GET HTTP/2 cdn.gilcdn.com/ContentMediaGenericFiles/c37047a539bc93a5f02a0baf1e2dbab0-Full.zip?w=1&h=1&Expires=1711689358&Policy=eyJTdGF0ZW1lbnQiOlt7IlJlc291cmNlIjoiaHR0cHM6Ly9jZG4uZ2lsY2RuLmNvbS9Db250ZW50TWVkaWFHZW5lcmljRmlsZXMvYzM3MDQ3YTUzOWJjOTNhNWYwMmEwYmFmMWUyZGJhYjAtRnVsbC56aXA~dz0xJmg9MSIsIkNvbmRpdGlvbiI6eyJEYXRlTGVzc1RoYW4iOnsiQVdTOkVwb2NoVGltZSI6MTcxMTY4OTM1OH19fV19&Signature=TxcA56XaNPfE8y1N6bOdymm3n6Z6koNBp5Q4CrVqEfFtLoad4BkTuYdUTw5ks~1-4ByVH0Os4uXZaKhDrNwhTkQ3ZhaL956YLuEbOWvBWWpiJqHPJeNwsJJvuEBVRANqLgQIjkBQO1SjVawVuC89pqVG0w8y4EtpsdbJXnINI1L7DLKEtj2zMsRKf0O4LQ1FaitnNvPHz5smx56TIfO8iqd0sXLqN7Nsf72f06OLPm5rznXi8u35n4qcnEVvtL202tBj2bq70qWMYlyZ3H7F~VP3bvOwX67tN-gkOw~FqciWwaXXy8qHC8nJIEGrgy5FYu-aRfK~48xjd4wzsgqFZA__&Key-Pair-Id=K1FFKFZRWAZSB IP 54.230.111.31:443 ASN #16509 AMAZON-02 Certificate IssuerAmazon Subject.gilcdn.com FingerprintB6:3B:AA:24:2D:F6:F2:2D:66:81:B5:0E:46:3F:D8:31:FD:D4:75:49 ValidityThu, 14 Dec 2023 00:00:00 GMT - Sat, 11 Jan 2025 23:59:59 GMT File type Zip archive data, at least v2.0 to extract, compression method=deflate Size 15 MB (14830299 bytes) Hash c37047a539bc93a5f02a0baf1e2dbab0 3d6a4f7fcfec30e0e7b95bd00d720233e90a34d6 49d16704200266649f83069c130464421f6b77e563f52158e356a294e35ddd20 HTTP Headers GET /ContentMediaGenericFiles/c37047a539bc93a5f02a0baf1e2dbab0-Full.zip?w=1&h=1&Expires=1711689358&Policy=eyJTdGF0ZW1lbnQiOlt7IlJlc291cmNlIjoiaHR0cHM6Ly9jZG4uZ2lsY2RuLmNvbS9Db250ZW50TWVkaWFHZW5lcmljRmlsZXMvYzM3MDQ3YTUzOWJjOTNhNWYwMmEwYmFmMWUyZGJhYjAtRnVsbC56aXA~dz0xJmg9MSIsIkNvbmRpdGlvbiI6eyJEYXRlTGVzc1RoYW4iOnsiQVdTOkVwb2NoVGltZSI6MTcxMTY4OTM1OH19fV19&Signature=TxcA56XaNPfE8y1N6bOdymm3n6Z6koNBp5Q4CrVqEfFtLoad4BkTuYdUTw5ks~1-4ByVH0Os4uXZaKhDrNwhTkQ3ZhaL956YLuEbOWvBWWpiJqHPJeNwsJJvuEBVRANqLgQIjkBQO1SjVawVuC89pqVG0w8y4EtpsdbJXnINI1L7DLKEtj2zMsRKf0O4LQ1FaitnNvPHz5smx56TIfO8iqd0sXLqN7Nsf72f06OLPm5rznXi8u35n4qcnEVvtL202tBj2bq70qWMYlyZ3H7F~VP3bvOwX67tN-gkOw~FqciWwaXXy8qHC8nJIEGrgy5FYu-aRfK~48xjd4wzsgqFZA__&Key-Pair-Id=K1FFKFZRWAZSB HTTP/1.1 Host: cdn.gilcdn.com User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,/*;q=0.8 Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br DNT: 1 Upgrade-Insecure-Requests: 1 Connection: keep-alive Sec-Fetch-Dest: document Sec-Fetch-Mode: navigate Sec-Fetch-Site: cross-site Pragma: no-cache Cache-Control: no-cache HTTP/2 200 OK content-type: application/x-zip-compressed content-length: 14830299 date: Fri, 29 Mar 2024 05:11:24 GMT last-modified: Fri, 29 Mar 2024 05:10:59 GMT etag: "c37047a539bc93a5f02a0baf1e2dbab0" x-amz-storage-class: INTELLIGENT_TIERING x-amz-server-side-encryption: AES256 cache-control: public,max-age=31536000,immutable content-disposition: attachment; filename=IM%20A%20MATERIAL%20GIRL%20FIONA%20QUEEN.zip x-amz-meta-json: eyJ1cGxvYWRlZEJ5IjoyNjY4NTA5Nywid2lkdGgiOjEsImhlaWdodCI6MSwiY3JlYXRlZEF0IjoxNzExNjg5MDU4Nzc1LCJjb250ZW50VmVyc2lvbiI6MX0= x-amz-version-id: ngW.ogjad3kCmhA9WAtWAoOY0WoZEeRs accept-ranges: bytes server: AmazonS3 x-cache: Miss from cloudfront via: 1.1 b2b04ca80b95df6bc86478a1bf96b7cc.cloudfront.net (CloudFront) x-amz-cf-pop: OSL50-P1 alt-svc: h3=":443"; ma=86400 x-amz-cf-id: sR15kc-Ob8AmCEsW0QExwSRKScRIdv8v5J3mCjks3cu1VR6PFW2tjA== vary: Origin X-Firefox-Spdy: h2

Report Overview

Submitted URL

IP

ASN

Submitted

Access

Website Title

Final URL

Tags

urlquery detections

Detections

urlquery

Network Intrusion Detection

Threat Detection Systems

Domain Summary

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Threat Detection Systems

Public InfoSec YARA rules

OpenPhish

PhishTank

mnemonic secure dns

Quad9 DNS

ThreatFox

Files detected

URL

IP

ASN

File type

Size

Hash

Archive (2)

Detections

JavaScript (0)

HTTP Transactions (3)

URL

IP

ASN

File type

Size

Hash

HTTP Headers

URL

IP

ASN

File type

Size

Hash

HTTP Headers

URL User Request GET HTTP/2

IP

ASN

Certificate

File type

Size

Hash

HTTP Headers