plink.exe

PuTTY suite

Simon Tatham

This is a setup program which is used to install the application. This is installed with multiple programs including PuTTY release 0.67. The file has been seen being downloaded from the.earth.li and multiple other hosts.
Publisher:
Simon Tatham  (signed and verified)

Product:
PuTTY suite

Description:
Command-line SSH, Telnet, and Rlogin client

Version:
Release 0.67

MD5:
0287e8b45aa0da648018c2646589d914

SHA-1:
5f9cb7afd681e6c7cece2f3e15108e266e6d2860

SHA-256:
976c216119d5627afc9ad29fd4f72e38de3711d65419fda6482bc795e0ebf654

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
8/20/2018 11:53:03 PM UTC  (today)

File size:
342.9 KB (351,144 bytes)

Product version:
Release 0.67

Copyright:
Copyright © 1997-2016 Simon Tatham.

Original file name:
Plink

File type:
Executable application (Win32 EXE)

Language:
English

Common path:
C:\Program Files\putty\plink.exe

Digital Signature
Signed by:

Authority:
COMODO CA Limited

Valid from:
12/10/2015 1:00:00 AM

Valid to:
12/2/2018 12:59:59 AM

Subject:
CN=Simon Tatham, O=Simon Tatham, L=Cambridge, S=Cambridgeshire, C=GB

Issuer:
CN=COMODO SHA-256 Code Signing CA, O=COMODO CA Limited, L=Salford, S=Greater Manchester, C=GB

Serial number:
6CD282A2D9A2C158505B178D59518B7B

File PE Metadata
Compilation timestamp:
2/29/2016 9:03:39 PM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows Console

Linker version:
7.10

CTPH (ssdeep):
6144:wd8F74yQNfSfesWAhQyZbTSSJcx3TDO+xgxoTB14xWCJWoAf/JtUo0ZJu4uuD:wd8FkZ4WCQ9FlgxW14xLJ0mZlB

Entry address:
0x359EE

Entry point:
6A, 18, 68, E8, DE, 44, 00, E8, FA, 1B, 00, 00, BF, 94, 00, 00, 00, 8B, C7, E8, EA, FA, FF, FF, 89, 65, E8, 8B, F4, 89, 3E, 56, FF, 15, A4, D0, 43, 00, 8B, 4E, 10, 89, 0D, 58, 1E, 45, 00, 8B, 46, 04, A3, 64, 1E, 45, 00, 8B, 56, 08, 89, 15, 68, 1E, 45, 00, 8B, 76, 0C, 81, E6, FF, 7F, 00, 00, 89, 35, 5C, 1E, 45, 00, 83, F9, 02, 74, 0C, 81, CE, 00, 80, 00, 00, 89, 35, 5C, 1E, 45, 00, C1, E0, 08, 03, C2, A3, 60, 1E, 45, 00, 33, FF, 57, FF, 15, 64, D1, 43, 00, 66, 81, 38, 4D, 5A, 75, 1F, 8B, 48, 3C, 03, C8, 81...
 
[+]

Developed / compiled with:
Microsoft Visual C++ v7.0

Code size:
240 KB (245,760 bytes)

The file plink.exe has been discovered within the following programs.

PuTTY release 0.67  by Simon Tatham
www.chiark.greenend.org.uk/~sgtatham/putty
About 6% of users remove it
X2Go Client for Windows  by X2Go Project
www.x2go.org
About 6% of users remove it
 
Powered by Should I Remove It?

The file plink.exe has been seen being distributed by the following 2 URLs.

https://the.earth.li/~sgtatham/putty/0.67/.../plink.exe

Scan plink.exe - Powered by Reason Core Security