Report Overview
Submitted URL
cdn.spreadsheetconverter.com/download/ssc6Installer/ssc-setup-6_10_5544.msi
IP
143.204.42.7
ASN
#16509 AMAZON-02
Submitted
2024-05-07 12:36:05
Access
public
Website Title
about:privatebrowsing
Final URL
about:privatebrowsing
Tags
urlquery detections
No alerts detected
Detections
urlquery
0
Network Intrusion Detection
0
Threat Detection Systems
2
Domain Summary
Domain / FQDN | Rank | Registered | First Seen | Last Seen | Sent | Received | IP |
---|---|---|---|---|---|---|---|
cdn.spreadsheetconverter.com | unknown | 2005-08-16 | 2012-08-07 | 2024-02-05 | 445 B | 14 MB | 143.204.42.37 |
Related reports
Network Intrusion Detection Systems
Suricata /w Emerging Threats Pro
Threat Detection Systems
Public InfoSec YARA rules
Scan Date | Severity | Indicator | Alert |
---|---|---|---|
2024-05-07 | medium | cdn.spreadsheetconverter.com/download/ssc6Installer/ssc-setup-6_10_5544.msi | Related to CVE-2023-36884. Hunts for any zip-like archive (eg. office documents) that have an embedded .rtf file, based on the '.rtf' extension of the file. |
OpenPhish
No alerts detected
PhishTank
No alerts detected
mnemonic secure dns
No alerts detected
Quad9 DNS
No alerts detected
ThreatFox
No alerts detected
Files detected
URL
cdn.spreadsheetconverter.com/download/ssc6Installer/ssc-setup-6_10_5544.msi
IP
143.204.42.37
ASN
#16509 AMAZON-02
File type
Composite Document File V2 Document, Little Endian, Os: Windows, Version 6.1, MSI Installer, Create Time/Date: Mon Jun 21 07:00:00 1999, Name of Creating Application: Windows Installer, Security: 1, Code page: 1252, Template: Intel;0, Number of Pages: 200, Revision Number: {4EC9E153-EF2F-4B0B-817B-5829EB8C3CAB}, Title: SpreadsheetConverter 6.10.5544, Author: Framtidsforum I&M AB, Sweden, Last Saved Time/Date: Wed Mar 20 12:21:23 2013, Last Printed: Wed Mar 20 12:21:23 2013, Number of Words: 10
Size
14 MB (13787648 bytes)
Hash
df9155cad30e907b353ff38280263599
a0d032ce4ead4ace598db578be27861145a40944
Detections
Analyzer | Verdict | Alert |
---|---|---|
YARAhub by abuse.ch | malware | Related to CVE-2023-36884. Hunts for any zip-like archive (eg. office documents) that have an embedded .rtf file, based on the '.rtf' extension of the file. |
JavaScript (0)
HTTP Transactions (1)
URL | IP | Response | Size | |||||||
---|---|---|---|---|---|---|---|---|---|---|
cdn.spreadsheetconverter.com/download/ssc6Installer/ssc-setup-6_10_5544.msi | 143.204.42.37 | 200 OK | 14 MB | |||||||
Detections
HTTP Headers
| ||||||||||