Report - feas.fsu.edu/docs/FEAS_Users

Report Overview

Visited public
2024-11-13 10:21:59
Tags
Submit Tags
URL
feas.fsu.edu/docs/FEAS_Users_Manual.doc?06103403
Finishing URL
about:privatebrowsing
IP / ASN
146.201.111.95
#2553 FSU-AS
Title
about:privatebrowsing

Detections

urlquery

Network Intrusion Detection

Threat Detection Systems

Domain Summary

Domain / FQDN	Rank	Registered	First Seen	Last Seen	Sent	Received	IP
feas.fsu.edu	unknown	1987-11-24	2017-09-21	2022-10-20	502 B	3.4 MB	146.201.111.95

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

No alerts detected

Threat Detection Systems

Public InfoSec YARA rules

Scan Date	Severity	Indicator	Alert
2024-11-13	medium	feas.fsu.edu/docs/FEAS_Users_Manual.doc?06103403	Related to CVE-2023-36884. Hunts for any zip-like archive (eg. office documents) that have an embedded .rtf file, based on the '.rtf' extension of the file.

OpenPhish

No alerts detected

PhishTank

No alerts detected

Mnemonic Secure DNS

No alerts detected

Quad9 DNS

No alerts detected

ThreatFox

No alerts detected

Files detected

URL
feas.fsu.edu/docs/FEAS_Users_Manual.doc?06103403
IP
146.201.111.95
ASN
#2553 FSU-AS

File type
Composite Document File V2 Document, Little Endian, Os: Windows, Version 6.2, Code page: 1252, Author: David Yancey, Template: Normal.dotm, Last Saved By: Yancey, David P, Revision Number: 11, Name of Creating Application: Microsoft Office Word, Total Editing Time: 04:02:00, Last Printed: Mon Nov 26 19:54:00 2012, Create Time/Date: Thu Aug 15 21:42:00 2019, Last Saved Time/Date: Fri Apr 24 15:24:00 2020, Number of Pages: 70, Number of Words: 14349, Number of Characters: 81794, Security: 0
Size
3.4 MB (3393447 bytes)
Hash
378434bdb13891211ad0ec50c4873819
7055ce3c8138bb04c2721c661a1de6b58d155343
85245e475e0cbbe1e1d0d603a2b677c494fb770c12db6cd3cd4f7f1f4c537f8c

Detections

Analyzer	Verdict	Alert
YARAhub by abuse.ch	malware	Related to CVE-2023-36884. Hunts for any zip-like archive (eg. office documents) that have an embedded .rtf file, based on the '.rtf' extension of the file.

JavaScript (0)

HTTP Transactions (1)

URL IP Response Size

GET feas.fsu.edu/docs/FEAS_Users_Manual.doc?06103403

146.201.111.95

200 OK

3.4 MB

URL User Request GET HTTP/1.1
feas.fsu.edu/docs/FEAS_Users_Manual.doc?06103403
IP
146.201.111.95:443
ASN
#2553 FSU-AS

Certificate
IssuerSectigo Limited
Subject*.fsu.edu
FingerprintE2:66:15:FE:20:95:BC:75:3D:8B:27:70:00:A2:68:77:9B:3C:AB:A0
ValidityFri, 05 Apr 2024 00:00:00 GMT - Mon, 05 May 2025 23:59:59 GMT

File type
Composite Document File V2 Document, Little Endian, Os: Windows, Version 6.2, Code page: 1252, Author: David Yancey, Template: Normal.dotm, Last Saved By: Yancey, David P, Revision Number: 11, Name of Creating Application: Microsoft Office Word, Total Editing Time: 04:02:00, Last Printed: Mon Nov 26 19:54:00 2012, Create Time/Date: Thu Aug 15 21:42:00 2019, Last Saved Time/Date: Fri Apr 24 15:24:00 2020, Number of Pages: 70, Number of Words: 14349, Number of Characters: 81794, Security: 0
Size
3.4 MB (3393447 bytes)
Hash
378434bdb13891211ad0ec50c4873819
7055ce3c8138bb04c2721c661a1de6b58d155343
85245e475e0cbbe1e1d0d603a2b677c494fb770c12db6cd3cd4f7f1f4c537f8c

Detections

Analyzer	Verdict	Alert
YARAhub by abuse.ch	malware	Related to CVE-2023-36884. Hunts for any zip-like archive (eg. office documents) that have an embedded .rtf file, based on the '.rtf' extension of the file.

HTTP Headers

GET /docs/FEAS_Users_Manual.doc?06103403 HTTP/1.1
Host: feas.fsu.edu
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Content-Type: application/msword
Last-Modified: Mon, 03 May 2021 12:08:29 GMT
Accept-Ranges: bytes
ETag: "e6533771540d71:0"
Date: Wed, 13 Nov 2024 10:21:34 GMT
Set-Cookie: BIGipServer~ITS-MSTS~netprod_migration_pool=2411593994.47873.0000; path=/; Httponly; Secure
TS016b442f=0165467db65880c2271681e0db43ad7d8f7efe0c0a84125863cec7dc198e54124cc1b22db6b513b6b765c96fab9eb0d68dd7728f9a; Path=/; Secure; HTTPOnly
Vary: Accept-Encoding
Content-Encoding: gzip
Transfer-Encoding: chunked

Report Overview

Domain Summary

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Threat Detection Systems

Public InfoSec YARA rules

OpenPhish

PhishTank

Mnemonic Secure DNS

Quad9 DNS

ThreatFox

Files detected

URL

IP

ASN

File type

Size

Hash

Detections

JavaScript (0)

HTTP Transactions (1)

URL User Request GET HTTP/1.1

IP

ASN

Certificate

File type

Size

Hash

Detections

HTTP Headers