Report - download.17van.com/plugin/LAVFilters.zip

Report Overview

Visited public
2024-06-22 16:48:23
Tags
URL
download.17van.com/plugin/LAVFilters.zip
Finishing URL
about:privatebrowsing
IP / ASN
183.60.150.17
#4134 Chinanet
Title
about:privatebrowsing

Detections

urlquery

Network Intrusion Detection

Threat Detection Systems

Domain Summary

Domain / FQDN	Rank	Registered	First Seen	Last Seen	Sent	Received	IP
r10.o.lencr.org	unknown	2020-06-29	2024-06-06 21:45:11	2024-06-21 18:12:54	1.3 kB	3.6 kB	23.36.77.32
download.17van.com	unknown	2018-11-06	2022-07-19 18:58:31	2024-04-17 13:14:44	494 B	7.1 MB	110.40.32.156

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

No alerts detected

Threat Detection Systems

Public InfoSec YARA rules

No alerts detected

OpenPhish

No alerts detected

PhishTank

No alerts detected

mnemonic secure dns

No alerts detected

Quad9 DNS

No alerts detected

ThreatFox

No alerts detected

Files detected

URL
download.17van.com/plugin/LAVFilters.zip
IP
110.40.32.156
ASN
#38283 CHINANET SiChuan Telecom Internet Data Center

File type
Zip archive data, at least v2.0 to extract, compression method=deflate
Size
7.1 MB (7149081 bytes)
Hash
e94f01f5ef57361c18c4da140a9eed2e
9394813a5bc08d000fba58fbe1158db9faeb32ae
46c79dce05fdad28ee2472257e7e67e18a0650a4439e74ca594d1e0a7117eeec

Archive (12)

Filename

Md5

File type

IntelQuickSyncDecoder.dll

1c06efc963ebc2c99169d777fc5d853f

PE32 executable (DLL) (GUI) Intel 80386, for MS Windows, 6 sections

LAVAudio.ax

9150d2133ce2a4127a2ecc4a2b3d2409

PE32 executable (DLL) (GUI) Intel 80386, for MS Windows, 6 sections

LAVFilters.Dependencies.manifest

933a8abca9941128a80b6401b5a04b9e

XML 1.0 document, ASCII text, with CRLF line terminators

LAVSplitter.ax

e6c19b478cb5bd10adddd398786af50c

PE32 executable (DLL) (GUI) Intel 80386, for MS Windows, 7 sections

LAVVideo.ax

3ab5b08e59edec18719fa48276146a0b

PE32 executable (DLL) (GUI) Intel 80386, for MS Windows, 6 sections

avcodec-lav-57.dll

9b6a5980eda24582d2d090125041bf0d

PE32 executable (DLL) (console) Intel 80386 (stripped to external PDB), for MS Windows, 11 sections

avfilter-lav-6.dll

1c7702cfba600a7a2f4bd750b7a9c2ab

PE32 executable (DLL) (console) Intel 80386 (stripped to external PDB), for MS Windows, 11 sections

avformat-lav-57.dll

2fc564a7e9ab902693566ae45b66b1e8

PE32 executable (DLL) (console) Intel 80386 (stripped to external PDB), for MS Windows, 10 sections

avresample-lav-3.dll

8b07cb0b546d82f0fc79536370da5831

PE32 executable (DLL) (console) Intel 80386 (stripped to external PDB), for MS Windows, 11 sections

avutil-lav-55.dll

ee28be2a8d0f4296071348caa174455a

PE32 executable (DLL) (console) Intel 80386 (stripped to external PDB), for MS Windows, 10 sections

libbluray.dll

8d7328f8077186ad3b25ea9d4837ed82

PE32 executable (DLL) (GUI) Intel 80386, for MS Windows, 6 sections

swscale-lav-4.dll

3f90dba9578de935c0e517dd2b0a0678

PE32 executable (DLL) (console) Intel 80386 (stripped to external PDB), for MS Windows, 11 sections

JavaScript (0)

HTTP Transactions (5)

	URL	IP	Response	Size
	r10.o.lencr.org/	23.36.77.32		504 B
URL r10.o.lencr.org/ IP 23.36.77.32:0 ASN #20940 Akamai International B.V. File type data Size 504 B (504 bytes) Hash 6d997a3e4c838d12e34de2dd2d4208c3 386abb53e2df86f291b6a86765d9a6feb88ba30b 32e00abd54407308b80a14e2916a119d95d90b1e7842f8cf0e87df306287869c HTTP Headers `POST / HTTP/1.1 Host: r10.o.lencr.org User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Content-Type: application/ocsp-request Content-Length: 85 Connection: keep-alive Pragma: no-cache Cache-Control: no-cache` `HTTP/1.1 200 OK Server: nginx Content-Type: application/ocsp-response Content-Length: 504 ETag: "32E00ABD54407308B80A14E2916A119D95D90B1E7842F8CF0E87DF306287869C" Last-Modified: Thu, 20 Jun 2024 13:53:00 UTC Cache-Control: public, no-transform, must-revalidate, max-age=4677 Expires: Sat, 22 Jun 2024 18:05:51 GMT Date: Sat, 22 Jun 2024 16:47:54 GMT Connection: keep-alive`

	r10.o.lencr.org/	23.36.77.32		504 B
URL r10.o.lencr.org/ IP 23.36.77.32:0 ASN #20940 Akamai International B.V. File type data Size 504 B (504 bytes) Hash 31c219b3ac9b4615f1a78cd882995e6c 1bb1aedb59500ceabd4f44ae9b7317c544084afd 6e8de7454df9b981f3c2bd8746558f3eb5c48599c66fc0f5301169c0ed42c8fe HTTP Headers `POST / HTTP/1.1 Host: r10.o.lencr.org User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Content-Type: application/ocsp-request Content-Length: 85 Connection: keep-alive Pragma: no-cache Cache-Control: no-cache` `HTTP/1.1 200 OK Server: nginx Content-Type: application/ocsp-response Content-Length: 504 ETag: "6E8DE7454DF9B981F3C2BD8746558F3EB5C48599C66FC0F5301169C0ED42C8FE" Last-Modified: Sat, 22 Jun 2024 11:47:00 UTC Cache-Control: public, no-transform, must-revalidate, max-age=18711 Expires: Sat, 22 Jun 2024 21:59:45 GMT Date: Sat, 22 Jun 2024 16:47:54 GMT Connection: keep-alive`

	r10.o.lencr.org/	23.36.77.32		504 B
URL r10.o.lencr.org/ IP 23.36.77.32:0 ASN #20940 Akamai International B.V. File type data Size 504 B (504 bytes) Hash f0269d61bdfd971c035a90020cb9f629 06631fd5df5a9bd3b9673361601cc37a34e64f69 47b785dc0588f89f6a0bd23143e340c2fa04f194c59853f63e8b937964655373 HTTP Headers `POST / HTTP/1.1 Host: r10.o.lencr.org User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Content-Type: application/ocsp-request Content-Length: 85 Connection: keep-alive Pragma: no-cache Cache-Control: no-cache` `HTTP/1.1 200 OK Server: nginx Content-Type: application/ocsp-response Content-Length: 504 ETag: "47B785DC0588F89F6A0BD23143E340C2FA04F194C59853F63E8B937964655373" Last-Modified: Sat, 22 Jun 2024 04:21:00 UTC Cache-Control: public, no-transform, must-revalidate, max-age=13488 Expires: Sat, 22 Jun 2024 20:32:42 GMT Date: Sat, 22 Jun 2024 16:47:54 GMT Connection: keep-alive`

	r10.o.lencr.org/	23.36.77.32		504 B
URL r10.o.lencr.org/ IP 23.36.77.32:0 ASN #20940 Akamai International B.V. File type data Size 504 B (504 bytes) Hash 6720792332fb717894b4e5221fdc3d86 f79b1d3611fb53cea950acb15000473ae7174149 67dd6ffe107c77c5f8bea4a3d6771b6026efc51bd4a9b26c66c8791c1ef48965 HTTP Headers `POST / HTTP/1.1 Host: r10.o.lencr.org User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Content-Type: application/ocsp-request Content-Length: 85 Connection: keep-alive Pragma: no-cache Cache-Control: no-cache` `HTTP/1.1 200 OK Server: nginx Content-Type: application/ocsp-response Content-Length: 504 ETag: "67DD6FFE107C77C5F8BEA4A3D6771B6026EFC51BD4A9B26C66C8791C1EF48965" Last-Modified: Thu, 20 Jun 2024 17:32:00 UTC Cache-Control: public, no-transform, must-revalidate, max-age=3021 Expires: Sat, 22 Jun 2024 17:38:17 GMT Date: Sat, 22 Jun 2024 16:47:56 GMT Connection: keep-alive`

	download.17van.com/plugin/LAVFilters.zip	110.40.32.156	200 OK	7.1 MB
URL User Request GET HTTP/2 download.17van.com/plugin/LAVFilters.zip IP 110.40.32.156:443 ASN #38283 CHINANET SiChuan Telecom Internet Data Center Certificate IssuerSectigo Limited Subject.17van.com Fingerprint14:CD:CC:18:56:91:41:5F:E7:8A:35:02:35:41:85:DF:9C:5B:F4:F0 ValidityThu, 21 Dec 2023 00:00:00 GMT - Fri, 20 Dec 2024 23:59:59 GMT File type Zip archive data, at least v2.0 to extract, compression method=deflate Size 7.1 MB (7149081 bytes) Hash e94f01f5ef57361c18c4da140a9eed2e 9394813a5bc08d000fba58fbe1158db9faeb32ae 46c79dce05fdad28ee2472257e7e67e18a0650a4439e74ca594d1e0a7117eeec HTTP Headers `GET /plugin/LAVFilters.zip HTTP/1.1 Host: download.17van.com User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,/;q=0.8 Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br DNT: 1 Upgrade-Insecure-Requests: 1 Connection: keep-alive Sec-Fetch-Dest: document Sec-Fetch-Mode: navigate Sec-Fetch-Site: cross-site Pragma: no-cache Cache-Control: no-cache` HTTP/2 200 OK server: openresty date: Sat, 22 Jun 2024 16:47:55 GMT content-type: application/zip content-length: 7149081 accept-ranges: bytes access-control-allow-origin: access-control-expose-headers: X-Log, X-Reqid access-control-max-age: 2592000 age: 555740 cache-control: public, max-age=31536000 content-disposition: inline; filename="LAVFilters.zip"; filename*=utf-8''LAVFilters.zip content-md5: 6U8B9e9XNhwYxNoUCp7tLg== content-transfer-encoding: binary etag: "lv4Nzgwu--ohBxXXxw65dt3JBkTN" last-modified: Fri, 05 May 2023 05:45:29 GMT x-log: X-Log x-m-log: QNM:cdn-cache-dls-sccd1-cd-8;QNM3:10 x-m-reqid: t7CHeqQC6 x-qiniu-zone: 2 x-qnm-cache: Hit x-reqid: VIwAAABUeYIMaNkX x-svr: IO X-Firefox-Spdy: h2

Report Overview

Domain Summary

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Threat Detection Systems

Public InfoSec YARA rules

OpenPhish

PhishTank

mnemonic secure dns

Quad9 DNS

ThreatFox

Files detected

URL

IP

ASN

File type

Size

Hash

Archive (12)

JavaScript (0)

HTTP Transactions (5)

URL

IP

ASN

File type

Size

Hash

HTTP Headers

URL

IP

ASN

File type

Size

Hash

HTTP Headers

URL

IP

ASN

File type

Size

Hash

HTTP Headers

URL

IP

ASN

File type

Size

Hash

HTTP Headers

URL User Request GET HTTP/2

IP

ASN

Certificate

File type

Size

Hash

HTTP Headers