Report - the.earth.li/~sgtatham/putty/latest/w32/putty-0.78-installer.msi

Report Overview

Visitedpublic

2023-08-11 09:21:54

Detections

urlquery

Network Intrusion Detection

Threat Detection Systems

Host Summary

Host	Rank	Registered	First Seen	Last Seen	Sent	Received	IP	Fingerprints
the.earth.li	249742	unknown	2012-10-27 15:46:20	2023-08-11 03:09:10	1.0 kB	3.4 MB	93.93.131.124

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

No alerts detected

Threat Detection Systems

Public InfoSec YARA rules

No alerts detected

OpenPhish

No alerts detected

PhishTank

No alerts detected

mnemonic secure dns

No alerts detected

Quad9 DNS

No alerts detected

ThreatFox

No alerts detected

File detected

URL

the.earth.li/~sgtatham/putty/0.78/w32/putty-0.78-installer.msi

IP / ASN

93.93.131.124

#44684 Mythic Beasts Ltd

File Overview

File TypeComposite Document File V2 Document, Little Endian, Os: Windows, Version 5.0, MSI Installer, Code page: 1252, Title: Installation Database, Subject: PuTTY release 0.78 installer, Author: Simon Tatham, Keywords: Installer, Comments: This installer database contains the logic and data required to install PuTTY release 0.78., Template: Intel;1033, Revision Number: {4B1BF3E3-B721-46CB-8D68-7F0176411DA7}, Create Time/Date: Fri Oct 28 18:24:48 2022, Last Saved Time/Date: Fri Oct 28 18:24:48 2022, Number of Pages: 100, Number of Words: 2, Number of Characters: 0, Name of Creating Application: Windows Installer XML Toolset (), Security: 2\012- OLE 2 Compound Document, v3.62, SecID 0x19b7, 52 FAT sectors, Mini FAT start sector 0x19b5, 2 Mini FAT sectors too big for FILE_BYTES_MAX = 1 MiB : Microsoft Windows Installer Package\012- data

Size3.4 MB (3404288 bytes)

MD559a26bf3d1fa891279f5cdbec7638331

SHA1b1af6d15c1f8330997c79e03bfaa0cb9559358f3

SHA2568b1ee5fcd40ac4122a62e405981dc6dfb26fb7bdbe23217de0aa4b9659c492d5

Detections

Analyzer	Verdict	Alert
VirusTotal	suspicious	VirusTotal - Scan result 2/61

JavaScript (0)

HTTP Transactions (2)

URL IP Response Size

GET the.earth.li/~sgtatham/putty/latest/w32/putty-0.78-installer.msi

93.93.131.124

302 Found

317 B

URL

the.earth.li/~sgtatham/putty/latest/w32/putty-0.78-installer.msi

IP / ASN

93.93.131.124

#44684 Mythic Beasts Ltd

Requested byN/A

Resource Info

File typeHTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text

First Seen2023-08-11

Last Seen2023-08-11

Times Seen1

Size317 B (317 bytes)

MD5fd7ab95aaa4e15b4dc948701048b5f5b

SHA1efd128f49ad283b1e72a7cea25e213ddf4868540

SHA256fd9da52f6b319e4b11ffa2fcf6a25a3f34a34a37c4de5fdb5cf44d907881d61c

Certificate Info

IssuerLet's Encrypt

Subjectthe.earth.li

FingerprintC3:66:BB:20:07:0F:D8:91:8E:54:72:2D:EC:41:8B:62:EE:7E:EA:1F

ValidityTue, 11 Jul 2023 00:15:22 GMT - Mon, 09 Oct 2023 00:15:21 GMT

HTTP Headers

GET /~sgtatham/putty/latest/w32/putty-0.78-installer.msi HTTP/1.1
Host: the.earth.li
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 302 Found
Date: Fri, 11 Aug 2023 09:21:36 GMT
Server: Apache
Location: https://the.earth.li/~sgtatham/putty/0.78/w32/putty-0.78-installer.msi
Content-Length: 317
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive
Content-Type: text/html; charset=iso-8859-1

GET the.earth.li/~sgtatham/putty/0.78/w32/putty-0.78-installer.msi

93.93.131.124

200 OK

3.4 MB

URL

the.earth.li/~sgtatham/putty/0.78/w32/putty-0.78-installer.msi

IP / ASN

93.93.131.124

#44684 Mythic Beasts Ltd

Requested byN/A

Resource Info

File typeComposite Document File V2 Document, Little Endian, Os: Windows, Version 5.0, MSI Installer, Code page: 1252, Title: Installation Database, Subject: PuTTY release 0.78 installer, Author: Simon Tatham, Keywords: Installer, Comments: This installer database contains the logic and data required to install PuTTY release 0.78., Template: Intel;1033, Revision Number: {4B1BF3E3-B721-46CB-8D68-7F0176411DA7}, Create Time/Date: Fri Oct 28 18:24:48 2022, Last Saved Time/Date: Fri Oct 28 18:24:48 2022, Number of Pages: 100, Number of Words: 2, Number of Characters: 0, Name of Creating Application: Windows Installer XML Toolset (), Security: 2\012- OLE 2 Compound Document, v3.62, SecID 0x19b7, 52 FAT sectors, Mini FAT start sector 0x19b5, 2 Mini FAT sectors too big for FILE_BYTES_MAX = 1 MiB : Microsoft Windows Installer Package\012- data

First Seen2023-07-12

Last Seen2023-08-17

Times Seen3

Size3.4 MB (3404288 bytes)

MD559a26bf3d1fa891279f5cdbec7638331

SHA1b1af6d15c1f8330997c79e03bfaa0cb9559358f3

SHA2568b1ee5fcd40ac4122a62e405981dc6dfb26fb7bdbe23217de0aa4b9659c492d5

Certificate Info

IssuerLet's Encrypt

Subjectthe.earth.li

FingerprintC3:66:BB:20:07:0F:D8:91:8E:54:72:2D:EC:41:8B:62:EE:7E:EA:1F

ValidityTue, 11 Jul 2023 00:15:22 GMT - Mon, 09 Oct 2023 00:15:21 GMT

Detections

Analyzer	Verdict	Alert
VirusTotal	suspicious	VirusTotal - Scan result 2/61

HTTP Headers

GET /~sgtatham/putty/0.78/w32/putty-0.78-installer.msi HTTP/1.1
Host: the.earth.li
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Date: Fri, 11 Aug 2023 09:21:36 GMT
Server: Apache
Last-Modified: Fri, 28 Oct 2022 17:30:02 GMT
ETag: "33f200-5ec1b9b96cf18"
Accept-Ranges: bytes
Content-Length: 3404288
Keep-Alive: timeout=5, max=99
Connection: Keep-Alive
Content-Type: application/x-msi