| the.earth.li/~sgtatham/putty/latest/x86/puttygen.exe |  93.93.131.124 | 302 Found | 307 B |
URL User Request GET HTTP/1.1the.earth.li/~sgtatham/putty/latest/x86/puttygen.exe IP93.93.131.124:443 ASN#44684 Mythic Beasts Ltd
CertificateIssuerLet's Encrypt Subjectthe.earth.li Fingerprint90:50:7F:B8:DC:74:DF:1E:69:8F:6E:75:3F:CA:22:3E:4E:35:AD:47 ValidityMon, 11 Mar 2024 01:15:24 GMT - Sun, 09 Jun 2024 01:15:23 GMT
File typeHTML document, ASCII text Hash4d076192509107a8dc7fc9a0f4fb1c3a 321732e263727da3b4bff2f583ecf163b4c223a0 f2f79358a8fde50ef163e07e9ad63f5e6b5167e81ce2e2d1cde76876640cf2b8
GET /~sgtatham/putty/latest/x86/puttygen.exe HTTP/1.1
Host: the.earth.li
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 302 Found
Date: Thu, 28 Mar 2024 08:08:13 GMT
Server: Apache
Location: https://the.earth.li/~sgtatham/putty/latest/w32/puttygen.exe
Content-Length: 307
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive
Content-Type: text/html; charset=iso-8859-1
|
| the.earth.li/~sgtatham/putty/latest/w32/puttygen.exe | 93.93.131.124 | 302 Found | 305 B |
URL User Request GET HTTP/1.1the.earth.li/~sgtatham/putty/latest/w32/puttygen.exe IP93.93.131.124:443 ASN#44684 Mythic Beasts Ltd
CertificateIssuerLet's Encrypt Subjectthe.earth.li Fingerprint90:50:7F:B8:DC:74:DF:1E:69:8F:6E:75:3F:CA:22:3E:4E:35:AD:47 ValidityMon, 11 Mar 2024 01:15:24 GMT - Sun, 09 Jun 2024 01:15:23 GMT
File typeHTML document, ASCII text Hashbe287c56c2ab8b9155751bc666997104 09860d3659af2b04adc049656e3d00535deb1446 3634ad6d4a557afe849a4d1b1f86c0b704856f9f33f60a0c4058bb0b84fe7e75
GET /~sgtatham/putty/latest/w32/puttygen.exe HTTP/1.1
Host: the.earth.li
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 302 Found
Date: Thu, 28 Mar 2024 08:08:13 GMT
Server: Apache
Location: https://the.earth.li/~sgtatham/putty/0.80/w32/puttygen.exe
Content-Length: 305
Keep-Alive: timeout=5, max=99
Connection: Keep-Alive
Content-Type: text/html; charset=iso-8859-1
|
| the.earth.li/~sgtatham/putty/0.80/w32/puttygen.exe | 93.93.131.124 | 200 OK | 882 kB |
URL User Request GET HTTP/1.1the.earth.li/~sgtatham/putty/0.80/w32/puttygen.exe IP93.93.131.124:443 ASN#44684 Mythic Beasts Ltd
CertificateIssuerLet's Encrypt Subjectthe.earth.li Fingerprint90:50:7F:B8:DC:74:DF:1E:69:8F:6E:75:3F:CA:22:3E:4E:35:AD:47 ValidityMon, 11 Mar 2024 01:15:24 GMT - Sun, 09 Jun 2024 01:15:23 GMT
File typePE32 executable (GUI) Intel 80386, for MS Windows, 8 sections Size882 kB (882456 bytes) Hash4149a76763520c2890a4c77149eca187 fee53c64ab46172785a16ab93911d07b0ce598a9 e201257cc705334ff47aabc5fed099cb4d07380d0ce602668a99f2f44070aa9d
| Analyzer | Verdict | Alert |
|---|
| YARAhub by abuse.ch | malware | files - file ~tmp01925d3f.exe | | VirusTotal | suspicious | |
GET /~sgtatham/putty/0.80/w32/puttygen.exe HTTP/1.1
Host: the.earth.li
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Thu, 28 Mar 2024 08:08:13 GMT
Server: Apache
Last-Modified: Sat, 16 Dec 2023 13:19:25 GMT
ETag: "d7718-60ca05da86bd2"
Accept-Ranges: bytes
Content-Length: 882456
Keep-Alive: timeout=5, max=98
Connection: Keep-Alive
Content-Type: application/x-msdos-program
|