Report - download.tuxfamily.org/hatari/2.0.0/hatari-2.0.0

Report Overview

Submitted URL
download.tuxfamily.org/hatari/2.0.0/hatari-2.0.0_windows.zip
IP
212.85.158.13
ASN
#29075 Ielo-Liazo Services SAS
Submitted
2024-03-28 16:04:58
Access
public
Website Title
about:privatebrowsing
Final URL
about:privatebrowsing
Tags
urlquery detections
No alerts detected

Detections

urlquery
0
Network Intrusion Detection
0
Threat Detection Systems
1

Domain Summary

Domain / FQDN	Rank	Registered	First Seen	Last Seen	Sent	Received	IP
download.tuxfamily.org	419770	1999-09-29	2013-05-30	2024-03-24	514 B	2.8 MB	212.85.158.13

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

No alerts detected

Threat Detection Systems

Public InfoSec YARA rules

No alerts detected

OpenPhish

No alerts detected

PhishTank

No alerts detected

mnemonic secure dns

No alerts detected

Quad9 DNS

No alerts detected

ThreatFox

No alerts detected

Files detected

URL
download.tuxfamily.org/hatari/2.0.0/hatari-2.0.0_windows.zip
IP
212.85.158.13
ASN
#29075 Ielo-Liazo Services SAS

File type
Zip archive data, at least v1.0 to extract, compression method=store
Size
2.8 MB (2755293 bytes)
Hash
b7e283d7f87f5773dec4e024e8d301d4
fde0f0fedc07c1c27af4214e9f30f59593b7c48d
f1b43b21ea141398b3b19419999a58c3cf9129cccddbf4fade0362073806502a

Archive (41)

Filename

Md5

File type

zlib1.dll

1ff50ea988f3ae973d50e67b11900665

PE32 executable (DLL) (console) Intel 80386 (stripped to external PDB), for MS Windows, 10 sections

libpng16-16.dll

edd9263e07e113026debdba7ff6054aa

PE32 executable (DLL) (console) Intel 80386 (stripped to external PDB), for MS Windows, 10 sections

README-SDL.txt

fae21a9827f299a3d63e93f0f41c2a04

ASCII text, with CRLF line terminators

readme.txt

2c21195371ee4528fb08b6464fc3bf77

ASCII text

libtermcap-0.dll

f2068885a17940e7771987fe90b525f5

PE32 executable (DLL) (console) Intel 80386 (stripped to external PDB), for MS Windows, 10 sections

hatari.exe

8ab23cbce9d91c5793b3ab3d4e7161f2

PE32 executable (GUI) Intel 80386 (stripped to external PDB), for MS Windows, 8 sections

capsimg.dll

7a8ea7d971885e3c9e1e42879a5045c6

PE32 executable (DLL) (GUI) Intel 80386 (stripped to external PDB), for MS Windows, 5 sections

tos.img

4c151aad548f998ff5a6f3ae2acca0e4

data

libwinpthread-1.dll

d22a10233aef15932204fe270a91432f

PE32 executable (DLL) (console) Intel 80386 (stripped to external PDB), for MS Windows, 11 sections

SDL.dll

52615f276ddab8e3a1e90d14cb95ea9a

PE32 executable (DLL) (console) Intel 80386 (stripped to external PDB), for MS Windows, 11 sections

README-first.txt

ce2109ff0a8ab593dc8fcba254a5a3d5

ASCII text, with CRLF line terminators

gpl.txt

751419260aa954499f7abaabaa882bbe

ASCII text

libreadline6.dll

3b07a3d25b5c7eef96be58a13d272a37

PE32 executable (DLL) (console) Intel 80386 (stripped to external PDB), for MS Windows, 10 sections

libgcc_s_sjlj-1.dll

3cc1ea1d54f1b2781634b2b88cad709d

PE32 executable (DLL) (console) Intel 80386 (stripped to external PDB), for MS Windows, 9 sections

README-DLL.txt

be04a71bf483f554acb4e3187a7ed62e

ASCII text

authors.txt

39dab4e08ffb7c80889e6b2ed8a34129

Unicode text, UTF-8 text

todo.txt

8edda7aefdda3fa65f99d6c8be45d262

ASCII text

memory-usage.txt

6d2695c0a5d6773dd9df893f39840860

ASCII text

keymap-sample.txt

00ed9e493b4a85cd1f318e710e8c6105

ASCII text

manual.html

e82bc7346b5f8065b6913a0575d5696b

HTML document, ASCII text

emutos.txt

ac2c6bf515e9bbdeffba49e38d574233

Unicode text, UTF-8 text

compatibility.html

430183cf28165193772131e495d08c42

HTML document, ASCII text

main.png

8719ffdb12004d96d870b6961737020e

PNG image data, 500 x 304, 4-bit colormap, interlaced

monitor.png

fb4e3155c60014e3bdb231bf9e4a994b

PNG image data, 340 x 304, 2-bit colormap, non-interlaced

callgraph.png

1b3536ff2274f1aab39a27dea98e92fb

PNG image data, 953 x 589, 4-bit colormap, non-interlaced

memory.png

7ab85bf965fd0f3ea4988eebd71c8b68

PNG image data, 398 x 349, 2-bit colormap, non-interlaced

floppydisks.png

bfc187d19c233fa6eab2c0ea62b8221d

PNG image data, 640 x 320, 4-bit colormap, non-interlaced

harddisks.png

74355dae4d2499872661b69ef67d8513

PNG image data, 640 x 304, 4-bit colormap, non-interlaced

system.png

cddc52b97e3917e6082eef3710ab298c

PNG image data, 500 x 288, 4-bit colormap, interlaced

devices.png

24551bc43de73e1c43125dc0591b5591

PNG image data, 520 x 383, 2-bit colormap, non-interlaced

callgraph.svg

0a8a9296f3e7c9d99ba4c3c15d06f607

SVG Scalable Vector Graphics image

tos.png

acf08aeed217929606e6539531ff3911

PNG image data, 519 x 367, 2-bit colormap, non-interlaced

cpu.png

76a648466ddbaca3c6c0d0b84d8d8b7e

PNG image data, 460 x 368, 4-bit colormap, non-interlaced

newfloppy.png

01c031f3a818f21ae69c40a1749a63b6

PNG image data, 290 x 224, 2-bit colormap, non-interlaced

sound.png

068d486b5e18980926a54069cb3a0dd1

PNG image data, 400 x 400, 8-bit/color RGB, non-interlaced

keyboard.png

3e50e0c9ba6a68041d619853d77fceb5

PNG image data, 460 x 384, 8-bit/color RGB, interlaced

screen.png

2e1a3a32f04c67ae907f3a49fcdd2dba

PNG image data, 520 x 320, 2-bit colormap, non-interlaced

fileselector.png

e8ac19a727e2abc2b7a5c0155893f3cd

PNG image data, 640 x 400, 4-bit colormap, non-interlaced

joystick.png

915a9543959f28916ca5a176ffaf5990

PNG image data, 320 x 288, 2-bit colormap, interlaced

kcachegrind.png

ea2b037a6a456d8fc7aa5dd7a04b6c39

PNG image data, 887 x 442, 8-bit colormap, non-interlaced

release-notes.txt

483a0b4b3a60c5ac85a7fa332216b77e

ASCII text

Detections

Analyzer	Verdict	Alert
YARAhub by abuse.ch	malware	meth_get_eip

JavaScript (0)

HTTP Transactions (1)

URL IP Response Size

	URL	IP	Response	Size
	download.tuxfamily.org/hatari/2.0.0/hatari-2.0.0_windows.zip	212.85.158.13	200 OK	2.8 MB
URL User Request GET HTTP/1.1 download.tuxfamily.org/hatari/2.0.0/hatari-2.0.0_windows.zip IP 212.85.158.13:443 ASN #29075 Ielo-Liazo Services SAS Certificate IssuerLet's Encrypt Subjectabsinthe.tuxfamily.org FingerprintCF:84:54:F6:CF:1A:7E:3A:50:8C:0C:CB:C4:CE:D1:F0:00:39:0E:9A ValidityMon, 19 Feb 2024 04:14:00 GMT - Sun, 19 May 2024 04:13:59 GMT File type Zip archive data, at least v1.0 to extract, compression method=store Size 2.8 MB (2755293 bytes) Hash b7e283d7f87f5773dec4e024e8d301d4 fde0f0fedc07c1c27af4214e9f30f59593b7c48d f1b43b21ea141398b3b19419999a58c3cf9129cccddbf4fade0362073806502a HTTP Headers `GET /hatari/2.0.0/hatari-2.0.0_windows.zip HTTP/1.1 Host: download.tuxfamily.org User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,/;q=0.8 Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br DNT: 1 Upgrade-Insecure-Requests: 1 Connection: keep-alive Sec-Fetch-Dest: document Sec-Fetch-Mode: navigate Sec-Fetch-Site: cross-site Pragma: no-cache Cache-Control: no-cache` `HTTP/1.1 200 OK Strict-Transport-Security: max-age=15768000 Content-Type: application/zip Accept-Ranges: bytes ETag: "3449595738" Last-Modified: Thu, 03 Nov 2016 21:33:26 GMT Content-Length: 2755293 Date: Thu, 28 Mar 2024 16:04:22 GMT Server: lighttpd/1.4.35`

download.tuxfamily.org/hatari/2.0.0/hatari-2.0.0_windows.zip

212.85.158.13

200 OK

2.8 MB

URL User Request GET HTTP/1.1
download.tuxfamily.org/hatari/2.0.0/hatari-2.0.0_windows.zip
IP
212.85.158.13:443
ASN
#29075 Ielo-Liazo Services SAS

Certificate
IssuerLet's Encrypt
Subjectabsinthe.tuxfamily.org
FingerprintCF:84:54:F6:CF:1A:7E:3A:50:8C:0C:CB:C4:CE:D1:F0:00:39:0E:9A
ValidityMon, 19 Feb 2024 04:14:00 GMT - Sun, 19 May 2024 04:13:59 GMT

File type
Zip archive data, at least v1.0 to extract, compression method=store
Size
2.8 MB (2755293 bytes)
Hash
b7e283d7f87f5773dec4e024e8d301d4
fde0f0fedc07c1c27af4214e9f30f59593b7c48d
f1b43b21ea141398b3b19419999a58c3cf9129cccddbf4fade0362073806502a

HTTP Headers

GET /hatari/2.0.0/hatari-2.0.0_windows.zip HTTP/1.1
Host: download.tuxfamily.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Strict-Transport-Security: max-age=15768000
Content-Type: application/zip
Accept-Ranges: bytes
ETag: "3449595738"
Last-Modified: Thu, 03 Nov 2016 21:33:26 GMT
Content-Length: 2755293
Date: Thu, 28 Mar 2024 16:04:22 GMT
Server: lighttpd/1.4.35

Report Overview

Submitted URL

IP

ASN

Submitted

Access

Website Title

Final URL

Tags

urlquery detections

Detections

urlquery

Network Intrusion Detection

Threat Detection Systems

Domain Summary

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Threat Detection Systems

Public InfoSec YARA rules

OpenPhish

PhishTank

mnemonic secure dns

Quad9 DNS

ThreatFox

Files detected

URL

IP

ASN

File type

Size

Hash

Archive (41)

Detections

JavaScript (0)

HTTP Transactions (1)

URL User Request GET HTTP/1.1

IP

ASN

Certificate

File type

Size

Hash

HTTP Headers