Report - the.earth.li/~sgtatham/putty/latest/w32/putty-0.78-installer.msi

Report Overview

Visited public
2023-08-11 09:21:54
Tags
Submit Tags
URL
the.earth.li/~sgtatham/putty/latest/w32/putty-0.78-installer.msi
Finishing URL
about:privatebrowsing
IP / ASN
93.93.131.124
#44684 Mythic Beasts Ltd
Title
about:privatebrowsing

Detections

urlquery

Network Intrusion Detection

Threat Detection Systems

Domain Summary

Domain / FQDN	Rank	Registered	First Seen	Last Seen	Sent	Received	IP
the.earth.li	249742	unknown	2012-10-27 15:46:20	2023-08-11 03:09:10	1.0 kB	3.4 MB	93.93.131.124

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

No alerts detected

Threat Detection Systems

Public InfoSec YARA rules

No alerts detected

OpenPhish

No alerts detected

PhishTank

No alerts detected

mnemonic secure dns

No alerts detected

Quad9 DNS

No alerts detected

ThreatFox

No alerts detected

JavaScript (0)

HTTP Transactions (2)

URL IP Response Size

GET the.earth.li/~sgtatham/putty/latest/w32/putty-0.78-installer.msi

93.93.131.124

302 Found

317 B

URL User Request GET HTTP/1.1
the.earth.li/~sgtatham/putty/latest/w32/putty-0.78-installer.msi
IP
93.93.131.124:443
ASN
#44684 Mythic Beasts Ltd

Certificate
IssuerLet's Encrypt
Subjectthe.earth.li
FingerprintC3:66:BB:20:07:0F:D8:91:8E:54:72:2D:EC:41:8B:62:EE:7E:EA:1F
ValidityTue, 11 Jul 2023 00:15:22 GMT - Mon, 09 Oct 2023 00:15:21 GMT

File type
HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Size
317 B (317 bytes)
Hash
fd7ab95aaa4e15b4dc948701048b5f5b
efd128f49ad283b1e72a7cea25e213ddf4868540
fd9da52f6b319e4b11ffa2fcf6a25a3f34a34a37c4de5fdb5cf44d907881d61c

HTTP Headers

GET /~sgtatham/putty/latest/w32/putty-0.78-installer.msi HTTP/1.1
Host: the.earth.li
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 302 Found
Date: Fri, 11 Aug 2023 09:21:36 GMT
Server: Apache
Location: https://the.earth.li/~sgtatham/putty/0.78/w32/putty-0.78-installer.msi
Content-Length: 317
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive
Content-Type: text/html; charset=iso-8859-1

GET the.earth.li/~sgtatham/putty/0.78/w32/putty-0.78-installer.msi

93.93.131.124

200 OK

3.4 MB

URL User Request GET HTTP/1.1
the.earth.li/~sgtatham/putty/0.78/w32/putty-0.78-installer.msi
IP
93.93.131.124:443
ASN
#44684 Mythic Beasts Ltd

Certificate
IssuerLet's Encrypt
Subjectthe.earth.li
FingerprintC3:66:BB:20:07:0F:D8:91:8E:54:72:2D:EC:41:8B:62:EE:7E:EA:1F
ValidityTue, 11 Jul 2023 00:15:22 GMT - Mon, 09 Oct 2023 00:15:21 GMT

File type
Composite Document File V2 Document, Little Endian, Os: Windows, Version 5.0, MSI Installer, Code page: 1252, Title: Installation Database, Subject: PuTTY release 0.78 installer, Author: Simon Tatham, Keywords: Installer, Comments: This installer database contains the logic and data required to install PuTTY release 0.78., Template: Intel;1033, Revision Number: {4B1BF3E3-B721-46CB-8D68-7F0176411DA7}, Create Time/Date: Fri Oct 28 18:24:48 2022, Last Saved Time/Date: Fri Oct 28 18:24:48 2022, Number of Pages: 100, Number of Words: 2, Number of Characters: 0, Name of Creating Application: Windows Installer XML Toolset (), Security: 2\012- OLE 2 Compound Document, v3.62, SecID 0x19b7, 52 FAT sectors, Mini FAT start sector 0x19b5, 2 Mini FAT sectors too big for FILE_BYTES_MAX = 1 MiB : Microsoft Windows Installer Package\012- data
Size
3.4 MB (3404288 bytes)
Hash
59a26bf3d1fa891279f5cdbec7638331
b1af6d15c1f8330997c79e03bfaa0cb9559358f3
8b1ee5fcd40ac4122a62e405981dc6dfb26fb7bdbe23217de0aa4b9659c492d5

Detections

Analyzer	Verdict	Alert
VirusTotal	suspicious	VirusTotal - Scan result 2/61

HTTP Headers

GET /~sgtatham/putty/0.78/w32/putty-0.78-installer.msi HTTP/1.1
Host: the.earth.li
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Date: Fri, 11 Aug 2023 09:21:36 GMT
Server: Apache
Last-Modified: Fri, 28 Oct 2022 17:30:02 GMT
ETag: "33f200-5ec1b9b96cf18"
Accept-Ranges: bytes
Content-Length: 3404288
Keep-Alive: timeout=5, max=99
Connection: Keep-Alive
Content-Type: application/x-msi

Report Overview

Domain Summary

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Threat Detection Systems

Public InfoSec YARA rules

OpenPhish

PhishTank

mnemonic secure dns

Quad9 DNS

ThreatFox

JavaScript (0)

HTTP Transactions (2)

URL User Request GET HTTP/1.1

IP

ASN

Certificate

File type

Size

Hash

HTTP Headers

URL User Request GET HTTP/1.1

IP

ASN

Certificate

File type

Size

Hash

Detections

HTTP Headers