Report - download.tuxfamily.org/hatari/2.0.0/hatari-2.0.0

Report Overview

Submitted URL
download.tuxfamily.org/hatari/2.0.0/hatari-2.0.0_windows64.zip
IP
212.85.158.13
ASN
#29075 Ielo-Liazo Services SAS
Submitted
2024-03-28 16:04:39
Access
public
Website Title
about:privatebrowsing
Final URL
about:privatebrowsing
Tags
urlquery detections
No alerts detected

Detections

urlquery
0
Network Intrusion Detection
0
Threat Detection Systems
1

Domain Summary

Domain / FQDN	Rank	Registered	First Seen	Last Seen	Sent	Received	IP
download.tuxfamily.org	419770	1999-09-29	2013-05-30	2024-03-23	516 B	3.7 MB	212.85.158.13

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

No alerts detected

Threat Detection Systems

Public InfoSec YARA rules

No alerts detected

OpenPhish

No alerts detected

PhishTank

No alerts detected

mnemonic secure dns

No alerts detected

Quad9 DNS

No alerts detected

ThreatFox

No alerts detected

Files detected

URL
download.tuxfamily.org/hatari/2.0.0/hatari-2.0.0_windows64.zip
IP
212.85.158.13
ASN
#29075 Ielo-Liazo Services SAS

File type
Zip archive data, at least v1.0 to extract, compression method=store
Size
3.7 MB (3698982 bytes)
Hash
211aff6f456cb015a528af00d0a00007
45aba6fb730055ca4b2c9cc379b7f74d818a568b
f8a88f9fe3b26608278a12004302128d81f4f8bf33679739ee107b011ee737db

Archive (42)

Filename

Md5

File type

zlib1.dll

c1a6bc4aedc376dbf08f61ee2afda665

PE32+ executable (DLL) (console) x86-64 (stripped to external PDB), for MS Windows, 12 sections

libpng16-16.dll

2c4fc15daf3898f5f626c658ff449305

PE32+ executable (DLL) (console) x86-64 (stripped to external PDB), for MS Windows, 12 sections

.README-first.txt.un~

23395eba3db695590af2ea083427d345

data

README-SDL.txt

fae21a9827f299a3d63e93f0f41c2a04

ASCII text, with CRLF line terminators

readme.txt

2c21195371ee4528fb08b6464fc3bf77

ASCII text

libtermcap-0.dll

d9c5138e36bf559d946b84cd276afc3d

PE32+ executable (DLL) (console) x86-64 (stripped to external PDB), for MS Windows, 12 sections

hatari.exe

b7cb4562126d398e0ab2705d0f8ec2e4

PE32+ executable (GUI) x86-64 (stripped to external PDB), for MS Windows, 10 sections

capsimg.dll

3b9eee7feb4c60e4ddcb1f996ccad7f4

PE32+ executable (DLL) (GUI) x86-64 (stripped to external PDB), for MS Windows, 6 sections

tos.img

4c151aad548f998ff5a6f3ae2acca0e4

data

libwinpthread-1.dll

52a562e21a9208fb6dc8927e420c0e9b

PE32+ executable (DLL) (console) x86-64 (stripped to external PDB), for MS Windows, 13 sections

SDL.dll

1169e0f34bf45cdea01bd2f05000e273

PE32+ executable (DLL) (console) x86-64 (stripped to external PDB), for MS Windows, 13 sections

README-first.txt

ce2109ff0a8ab593dc8fcba254a5a3d5

ASCII text, with CRLF line terminators

gpl.txt

751419260aa954499f7abaabaa882bbe

ASCII text

libreadline6.dll

42990387e411762fe53bc52e48bc9d99

PE32+ executable (DLL) (console) x86-64 (stripped to external PDB), for MS Windows, 12 sections

README-DLL.txt

be04a71bf483f554acb4e3187a7ed62e

ASCII text

authors.txt

39dab4e08ffb7c80889e6b2ed8a34129

Unicode text, UTF-8 text

todo.txt

8edda7aefdda3fa65f99d6c8be45d262

ASCII text

memory-usage.txt

6d2695c0a5d6773dd9df893f39840860

ASCII text

keymap-sample.txt

00ed9e493b4a85cd1f318e710e8c6105

ASCII text

manual.html

e82bc7346b5f8065b6913a0575d5696b

HTML document, ASCII text

emutos.txt

ac2c6bf515e9bbdeffba49e38d574233

Unicode text, UTF-8 text

compatibility.html

430183cf28165193772131e495d08c42

HTML document, ASCII text

main.png

8719ffdb12004d96d870b6961737020e

PNG image data, 500 x 304, 4-bit colormap, interlaced

monitor.png

fb4e3155c60014e3bdb231bf9e4a994b

PNG image data, 340 x 304, 2-bit colormap, non-interlaced

callgraph.png

1b3536ff2274f1aab39a27dea98e92fb

PNG image data, 953 x 589, 4-bit colormap, non-interlaced

memory.png

7ab85bf965fd0f3ea4988eebd71c8b68

PNG image data, 398 x 349, 2-bit colormap, non-interlaced

floppydisks.png

bfc187d19c233fa6eab2c0ea62b8221d

PNG image data, 640 x 320, 4-bit colormap, non-interlaced

harddisks.png

74355dae4d2499872661b69ef67d8513

PNG image data, 640 x 304, 4-bit colormap, non-interlaced

system.png

cddc52b97e3917e6082eef3710ab298c

PNG image data, 500 x 288, 4-bit colormap, interlaced

devices.png

24551bc43de73e1c43125dc0591b5591

PNG image data, 520 x 383, 2-bit colormap, non-interlaced

callgraph.svg

0a8a9296f3e7c9d99ba4c3c15d06f607

SVG Scalable Vector Graphics image

tos.png

acf08aeed217929606e6539531ff3911

PNG image data, 519 x 367, 2-bit colormap, non-interlaced

cpu.png

76a648466ddbaca3c6c0d0b84d8d8b7e

PNG image data, 460 x 368, 4-bit colormap, non-interlaced

newfloppy.png

01c031f3a818f21ae69c40a1749a63b6

PNG image data, 290 x 224, 2-bit colormap, non-interlaced

sound.png

068d486b5e18980926a54069cb3a0dd1

PNG image data, 400 x 400, 8-bit/color RGB, non-interlaced

keyboard.png

3e50e0c9ba6a68041d619853d77fceb5

PNG image data, 460 x 384, 8-bit/color RGB, interlaced

screen.png

2e1a3a32f04c67ae907f3a49fcdd2dba

PNG image data, 520 x 320, 2-bit colormap, non-interlaced

fileselector.png

e8ac19a727e2abc2b7a5c0155893f3cd

PNG image data, 640 x 400, 4-bit colormap, non-interlaced

joystick.png

915a9543959f28916ca5a176ffaf5990

PNG image data, 320 x 288, 2-bit colormap, interlaced

kcachegrind.png

ea2b037a6a456d8fc7aa5dd7a04b6c39

PNG image data, 887 x 442, 8-bit colormap, non-interlaced

release-notes.txt

483a0b4b3a60c5ac85a7fa332216b77e

ASCII text

libgcc_s_seh-1.dll

9b756ffcf39e41642e0ddabf9701b51e

PE32+ executable (DLL) (console) x86-64 (stripped to external PDB), for MS Windows, 11 sections

Detections

Analyzer	Verdict	Alert
YARAhub by abuse.ch	malware	meth_get_eip

JavaScript (0)

HTTP Transactions (1)

URL IP Response Size

	URL	IP	Response	Size
	download.tuxfamily.org/hatari/2.0.0/hatari-2.0.0_windows64.zip	212.85.158.13	200 OK	3.7 MB
URL User Request GET HTTP/1.1 download.tuxfamily.org/hatari/2.0.0/hatari-2.0.0_windows64.zip IP 212.85.158.13:443 ASN #29075 Ielo-Liazo Services SAS Certificate IssuerLet's Encrypt Subjectabsinthe.tuxfamily.org FingerprintCF:84:54:F6:CF:1A:7E:3A:50:8C:0C:CB:C4:CE:D1:F0:00:39:0E:9A ValidityMon, 19 Feb 2024 04:14:00 GMT - Sun, 19 May 2024 04:13:59 GMT File type Zip archive data, at least v1.0 to extract, compression method=store Size 3.7 MB (3698982 bytes) Hash 211aff6f456cb015a528af00d0a00007 45aba6fb730055ca4b2c9cc379b7f74d818a568b f8a88f9fe3b26608278a12004302128d81f4f8bf33679739ee107b011ee737db HTTP Headers GET /hatari/2.0.0/hatari-2.0.0_windows64.zip HTTP/1.1 Host: download.tuxfamily.org User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,/;q=0.8 Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br DNT: 1 Upgrade-Insecure-Requests: 1 Connection: keep-alive Sec-Fetch-Dest: document Sec-Fetch-Mode: navigate Sec-Fetch-Site: cross-site Pragma: no-cache Cache-Control: no-cache `HTTP/1.1 200 OK Strict-Transport-Security: max-age=15768000 Content-Type: application/zip Accept-Ranges: bytes ETag: "1564329001" Last-Modified: Thu, 03 Nov 2016 21:33:33 GMT Content-Length: 3698982 Date: Thu, 28 Mar 2024 16:04:12 GMT Server: lighttpd/1.4.35`

download.tuxfamily.org/hatari/2.0.0/hatari-2.0.0_windows64.zip

212.85.158.13

200 OK

3.7 MB

URL User Request GET HTTP/1.1
download.tuxfamily.org/hatari/2.0.0/hatari-2.0.0_windows64.zip
IP
212.85.158.13:443
ASN
#29075 Ielo-Liazo Services SAS

Certificate
IssuerLet's Encrypt
Subjectabsinthe.tuxfamily.org
FingerprintCF:84:54:F6:CF:1A:7E:3A:50:8C:0C:CB:C4:CE:D1:F0:00:39:0E:9A
ValidityMon, 19 Feb 2024 04:14:00 GMT - Sun, 19 May 2024 04:13:59 GMT

File type
Zip archive data, at least v1.0 to extract, compression method=store
Size
3.7 MB (3698982 bytes)
Hash
211aff6f456cb015a528af00d0a00007
45aba6fb730055ca4b2c9cc379b7f74d818a568b
f8a88f9fe3b26608278a12004302128d81f4f8bf33679739ee107b011ee737db

HTTP Headers

GET /hatari/2.0.0/hatari-2.0.0_windows64.zip HTTP/1.1
Host: download.tuxfamily.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Strict-Transport-Security: max-age=15768000
Content-Type: application/zip
Accept-Ranges: bytes
ETag: "1564329001"
Last-Modified: Thu, 03 Nov 2016 21:33:33 GMT
Content-Length: 3698982
Date: Thu, 28 Mar 2024 16:04:12 GMT
Server: lighttpd/1.4.35

Report Overview

Submitted URL

IP

ASN

Submitted

Access

Website Title

Final URL

Tags

urlquery detections

Detections

urlquery

Network Intrusion Detection

Threat Detection Systems

Domain Summary

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Threat Detection Systems

Public InfoSec YARA rules

OpenPhish

PhishTank

mnemonic secure dns

Quad9 DNS

ThreatFox

Files detected

URL

IP

ASN

File type

Size

Hash

Archive (42)

Detections

JavaScript (0)

HTTP Transactions (1)

URL User Request GET HTTP/1.1

IP

ASN

Certificate

File type

Size

Hash

HTTP Headers