Report - www.revcad.com/Sheet5/sheet500.zip

Report Overview

Submitted URL
www.revcad.com/Sheet5/sheet500.zip
IP
217.160.0.162
ASN
#8560 IONOS SE
Submitted
2024-05-05 14:24:50
Access
public
Website Title
about:privatebrowsing
Final URL
about:privatebrowsing
Tags
urlquery detections
No alerts detected

Detections

urlquery
0
Network Intrusion Detection
0
Threat Detection Systems
2

Domain Summary

Domain / FQDN	Rank	Registered	First Seen	Last Seen	Sent	Received	IP
www.revcad.com	unknown	2000-05-26	2016-04-20	2023-11-15	808 B	7.8 MB	217.160.0.162

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

No alerts detected

Threat Detection Systems

Public InfoSec YARA rules

No alerts detected

OpenPhish

No alerts detected

PhishTank

No alerts detected

mnemonic secure dns

No alerts detected

Quad9 DNS

No alerts detected

ThreatFox

No alerts detected

Files detected

URL
www.revcad.com/Sheet5/Sheet500.zip
IP
217.160.0.162
ASN
#8560 IONOS SE

File type
Zip archive data, at least v2.0 to extract, compression method=deflate
Size
7.8 MB (7758379 bytes)
Hash
a2aeea47e520133d0062c5f83af629d7
fbade2fdff2d733a1a31fe0c5005b0ce7fb929d9
84ec8149ddd2d681d0913a248dd561623c04d9fbcbaf683610b55d17e422742c

Archive (5)

Filename

Md5

File type

License.rtf

b55eb018e0e65103db13022679c42ea8

Rich Text Format data, version 1, ANSI, code page 1252, default middle east language ID 1025

pad_file.htm

ff32df8b8de928805059a9ddfa2b2738

HTML document, Unicode text, UTF-16, little-endian text, with very long lines (370), with CRLF line terminators

pad_file.xml

9ada841ee4e2176f7a4f25bb64b77449

XML 1.0 document, Unicode text, UTF-8 text, with very long lines (1334), with CRLF line terminators

README.rtf

ddaf1ad1310412d7d08bc1d4b9ed9164

Rich Text Format data, version 1, ANSI, code page 1252, default middle east language ID 1025

Sheet_Lightning_Pro_Demo_6_16.exe

500f1e175265b7451add1cb7a7dae342

PE32 executable (GUI) Intel 80386, for MS Windows, 4 sections

Detections

Analyzer	Verdict	Alert
VirusTotal	suspicious	VirusTotal - Scan result 1/61

JavaScript (0)

HTTP Transactions (2)

URL IP Response Size

www.revcad.com/Sheet5/sheet500.zip

217.160.0.162

301 Moved Permanently

249 B

URL User Request GET HTTP/1.1
www.revcad.com/Sheet5/sheet500.zip
IP
217.160.0.162:80
ASN
#8560 IONOS SE

File type
HTML document, ASCII text
Size
249 B (249 bytes)
Hash
9bf5005e5933ee58cec3ccad65f539fd
084c3f242a61bfc7b4fcdaf49eea582cd24d6f20
4d8b1e314441cbb8599c03b59e1446b06ef762517d805b9f0ab3c8f936dc3d16

HTTP Headers

GET /Sheet5/sheet500.zip HTTP/1.1
Host: www.revcad.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 301 Moved Permanently
Content-Type: text/html; charset=iso-8859-1
Content-Length: 249
Connection: keep-alive
Keep-Alive: timeout=15
Date: Sun, 05 May 2024 14:24:24 GMT
Server: Apache
Location: http://www.revcad.com/Sheet5/Sheet500.zip

www.revcad.com/Sheet5/Sheet500.zip

217.160.0.162

7.8 MB

URL User Request GET
www.revcad.com/Sheet5/Sheet500.zip
IP
217.160.0.162:0
ASN
#8560 IONOS SE

File type
Zip archive data, at least v2.0 to extract, compression method=deflate
Size
7.8 MB (7758379 bytes)
Hash
a2aeea47e520133d0062c5f83af629d7
fbade2fdff2d733a1a31fe0c5005b0ce7fb929d9
84ec8149ddd2d681d0913a248dd561623c04d9fbcbaf683610b55d17e422742c

Detections

Analyzer	Verdict	Alert
VirusTotal	suspicious	VirusTotal - Scan result 1/61

HTTP Headers

GET /Sheet5/Sheet500.zip HTTP/1.1
Host: www.revcad.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Content-Type: application/zip
Content-Length: 7758379
Connection: keep-alive
Keep-Alive: timeout=15
Date: Sun, 05 May 2024 14:24:24 GMT
Server: Apache
Last-Modified: Thu, 08 Dec 2011 13:34:48 GMT
ETag: "76622b-4b394bb7b2a93"
Accept-Ranges: bytes

Report Overview

Submitted URL

IP

ASN

Submitted

Access

Website Title

Final URL

Tags

urlquery detections

Detections

urlquery

Network Intrusion Detection

Threat Detection Systems

Domain Summary

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Threat Detection Systems

Public InfoSec YARA rules

OpenPhish

PhishTank

mnemonic secure dns

Quad9 DNS

ThreatFox

Files detected

URL

IP

ASN

File type

Size

Hash

Archive (5)

Detections

JavaScript (0)

HTTP Transactions (2)

URL User Request GET HTTP/1.1

IP

ASN

File type

Size

Hash

HTTP Headers

URL User Request GET

IP

ASN

File type

Size

Hash

Detections

HTTP Headers