GET revolutionsoft.net/Office_2024_ES_standard_64Bits.exe
200 OK 11 kB URL User Request GET revolutionsoft.net/Office_2024_ES_standard_64Bits.exe
IP
ASN #60458 Xtudio Networks S.L.U.
Certificate IssuerLet's Encrypt
Subjectrevolutionsoft.net
Fingerprint65:15:67:39:25:93:2D:62:10:A7:C6:59:98:08:62:87:35:75:D7:5B
ValiditySun, 23 Mar 2025 03:09:37 GMT - Sat, 21 Jun 2025 03:09:36 GMT
File type HTML document, ASCII text, with very long lines (3814)
Hash 45a1c0f12ae2472ff8d2cf8443379f97
6fa5e386ebf2c314bdbac7bb8ace1b5cf9d37d73
94a5eb9d9be06c05bbe357d3201ceb995a2ba92e388831641dc5e2728a820fb9
GET /Office_2024_ES_standard_64Bits.exe HTTP/1.1
Host: revolutionsoft.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: openresty/1.27.1.1
date: Fri, 04 Apr 2025 16:14:51 GMT
content-length: 11137
content-type: text/html
cache-control: private, no-cache, no-store, must-revalidate, max-age=0
cf-edge-cache: no-cache
X-Firefox-Spdy: h2
GET revolutionsoft.net/z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=10131309&pdata=https%253A%252F%252Frevolutionsoft.net%252FOffice_2024_ES_standard_64Bits.exe&id=7fa3b767c460b54a2be4d49030b349c7&ts=1743783291
302 Found 2.9 MB URL User Request GET revolutionsoft.net/z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=10131309&pdata=https%253A%252F%252Frevolutionsoft.net%252FOffice_2024_ES_standard_64Bits.exe&id=7fa3b767c460b54a2be4d49030b349c7&ts=1743783291
IP
ASN #60458 Xtudio Networks S.L.U.
Certificate IssuerLet's Encrypt
Subjectrevolutionsoft.net
Fingerprint65:15:67:39:25:93:2D:62:10:A7:C6:59:98:08:62:87:35:75:D7:5B
ValiditySun, 23 Mar 2025 03:09:37 GMT - Sat, 21 Jun 2025 03:09:36 GMT
Size 2.9 MB (2941216 bytes)
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=10131309&pdata=https%253A%252F%252Frevolutionsoft.net%252FOffice_2024_ES_standard_64Bits.exe&id=7fa3b767c460b54a2be4d49030b349c7&ts=1743783291 HTTP/1.1
Host: revolutionsoft.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://revolutionsoft.net/Office_2024_ES_standard_64Bits.exe
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 302 Found
server: openresty/1.27.1.1
date: Fri, 04 Apr 2025 16:14:53 GMT
content-length: 0
location: https://revolutionsoft.net/Office_2024_ES_standard_64Bits.exe
set-cookie: wssplashchk=b116084da37529208e636c51960c3ab9326f3f39.1743786893.1; Path=/; Domain=revolutionsoft.net; Max-Age=3600; HttpOnly; SameSite=Lax
X-Firefox-Spdy: h2
GET revolutionsoft.net/Office_2024_ES_standard_64Bits.exe
200 OK 2.9 MB URL User Request GET revolutionsoft.net/Office_2024_ES_standard_64Bits.exe
IP
ASN #60458 Xtudio Networks S.L.U.
Certificate IssuerLet's Encrypt
Subjectrevolutionsoft.net
Fingerprint65:15:67:39:25:93:2D:62:10:A7:C6:59:98:08:62:87:35:75:D7:5B
ValiditySun, 23 Mar 2025 03:09:37 GMT - Sat, 21 Jun 2025 03:09:36 GMT
File type PE32 executable (GUI) Intel 80386, for MS Windows, 6 sections
Size 2.9 MB (2941216 bytes)
Hash 76e9b97d820c0f81b07cd85517e3a39c
585026e92cea893c902439a2f2df5890370c2c1d
19bde0e2a3c4809100fd101780e1b667a029bc001955ba01e0486cc72e61fd1d
Analyzer Verdict Alert YARAhub by abuse.ch malware Detects an SFX archive with automatic script execution
VirusTotal suspicious
GET /Office_2024_ES_standard_64Bits.exe HTTP/1.1
Host: revolutionsoft.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://revolutionsoft.net/Office_2024_ES_standard_64Bits.exe
DNT: 1
Connection: keep-alive
Cookie: wssplashchk=b116084da37529208e636c51960c3ab9326f3f39.1743786893.1
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Fri, 04 Apr 2025 16:14:53 GMT
content-type: application/x-msdownload
content-length: 2941216
cache-control: public, max-age=2592000
expires: Sun, 04 May 2025 16:14:53 GMT
last-modified: Thu, 17 Oct 2024 20:24:32 GMT
accept-ranges: bytes
server: LiteSpeed
access-control-allow-origin: none
alt-svc: h3=":443"; ma=2592000, h3-29=":443"; ma=2592000, h3-Q050=":443"; ma=2592000, h3-Q046=":443"; ma=2592000, h3-Q043=":443"; ma=2592000, quic=":443"; ma=2592000; v="43,46"
x-turbo-charged-by: LiteSpeed
X-Firefox-Spdy: h2
GET revolutionsoft.net/Office_2024_ES_standard_64Bits.exe
200 OK 2.9 MB URL User Request GET revolutionsoft.net/Office_2024_ES_standard_64Bits.exe
IP
ASN #60458 Xtudio Networks S.L.U.
Certificate IssuerLet's Encrypt
Subjectrevolutionsoft.net
Fingerprint65:15:67:39:25:93:2D:62:10:A7:C6:59:98:08:62:87:35:75:D7:5B
ValiditySun, 23 Mar 2025 03:09:37 GMT - Sat, 21 Jun 2025 03:09:36 GMT
File type PE32 executable (GUI) Intel 80386, for MS Windows, 6 sections
Size 2.9 MB (2941216 bytes)
Hash 76e9b97d820c0f81b07cd85517e3a39c
585026e92cea893c902439a2f2df5890370c2c1d
19bde0e2a3c4809100fd101780e1b667a029bc001955ba01e0486cc72e61fd1d
Analyzer Verdict Alert YARAhub by abuse.ch malware Detects an SFX archive with automatic script execution
VirusTotal suspicious
GET /Office_2024_ES_standard_64Bits.exe HTTP/1.1
Host: revolutionsoft.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Cookie: wssplashchk=b116084da37529208e636c51960c3ab9326f3f39.1743786893.1
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Fri, 04 Apr 2025 16:14:54 GMT
content-type: application/x-msdownload
content-length: 2941216
cache-control: public, max-age=2592000
expires: Sun, 04 May 2025 16:14:54 GMT
last-modified: Thu, 17 Oct 2024 20:24:32 GMT
accept-ranges: bytes
server: LiteSpeed
access-control-allow-origin: none
alt-svc: h3=":443"; ma=2592000, h3-29=":443"; ma=2592000, h3-Q050=":443"; ma=2592000, h3-Q046=":443"; ma=2592000, h3-Q043=":443"; ma=2592000, quic=":443"; ma=2592000; v="43,46"
x-turbo-charged-by: LiteSpeed
X-Firefox-Spdy: h2
193.84.177.212