Report - raw.githubusercontent.com/nanopool/genoil-ethereum/master/releases/ethminer-0.9.41-genoil-1.1.7.zip

Report Overview

Visitedpublic

2025-03-03 01:17:24

Detections

urlquery

Network Intrusion Detection

Threat Detection Systems

Host Summary

Host	Rank	Registered	First Seen	Last Seen	Sent	Received	IP	Fingerprints
raw.githubusercontent.com	35802	2014-02-06	2014-03-01	2025-02-26	567 B	955 kB	185.199.110.133

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

No alerts detected

Threat Detection Systems

Public InfoSec YARA rules

No alerts detected

OpenPhish

No alerts detected

PhishTank

No alerts detected

Quad9 DNS

No alerts detected

ThreatFox

No alerts detected

File detected

URL

raw.githubusercontent.com/nanopool/genoil-ethereum/master/releases/ethminer-0.9.41-genoil-1.1.7.zip

IP / ASN

185.199.110.133

#54113 FASTLY

File Overview

File TypeZip archive data, at least v2.0 to extract, compression method=deflate

Size954 kB (954095 bytes)

MD525987f872d8675bfbce35f9386c279c3

SHA1c3561cf4f0e1119e5eb65f4cd45652456131679d

SHA25650b47f44f7061bf59925c42a616f4b12642e5fac938f36d4febb8d06da0c1d16

Archive (5)

Modified	Filename	Size	MD5	File type
2016-05-08 17:57	cudart64_80.dll	364 kB	8cdb262ef153797024b0ee62fa0951bc	PE32+ executable (DLL) (GUI) x86-64, for MS Windows, 6 sections
2016-06-23 21:01	ethminer.exe	1.8 MB	35948939b5f050fcf7943c75b9a241c9	PE32+ executable (console) x86-64, for MS Windows, 9 sections
2016-05-30 15:25	libcurl.dll	278 kB	514df457d8a2a2f8ee6aa31e254b3a43	PE32+ executable (DLL) (console) x86-64, for MS Windows, 6 sections
2016-05-30 15:25	libmicrohttpd-dll.dll	94 kB	07bee07e0bc94731f84cc754138fa940	PE32+ executable (DLL) (GUI) x86-64, for MS Windows, 6 sections
2016-05-30 15:25	OpenCL.dll	22 kB	d143c8d82d8b0ccc0b9cda536596d808	PE32+ executable (DLL) (console) x86-64, for MS Windows, 6 sections

Detections

Analyzer	Verdict	Alert
VirusTotal	malicious	VirusTotal - Scan result 48/67
ClamAV	malicious	Win.Trojan.Agent-6237165-0

JavaScript (0)

HTTP Transactions (1)

URL IP Response Size

GET raw.githubusercontent.com/nanopool/genoil-ethereum/master/releases/ethminer-0.9.41-genoil-1.1.7.zip

185.199.110.133

200 OK

954 kB

URL

raw.githubusercontent.com/nanopool/genoil-ethereum/master/releases/ethminer-0.9.41-genoil-1.1.7.zip

IP / ASN

185.199.110.133

#54113 FASTLY

Requested byN/A

Resource Info

File typeZip archive data, at least v2.0 to extract, compression method=deflate

First Seen2025-03-03

Last Seen2025-03-03

Times Seen1

Size954 kB (954095 bytes)

MD525987f872d8675bfbce35f9386c279c3

SHA1c3561cf4f0e1119e5eb65f4cd45652456131679d

SHA25650b47f44f7061bf59925c42a616f4b12642e5fac938f36d4febb8d06da0c1d16

Certificate Info

IssuerDigiCert Inc

Subject*.github.io

Fingerprint97:D8:C5:70:0F:12:24:6C:88:BC:FA:06:7E:8C:A7:4D:A8:62:67:28

ValidityFri, 15 Mar 2024 00:00:00 GMT - Fri, 14 Mar 2025 23:59:59 GMT

Detections

Analyzer	Verdict	Alert
VirusTotal	malicious	VirusTotal - Scan result 48/67
ClamAV	malicious	Win.Trojan.Agent-6237165-0

HTTP Headers

GET /nanopool/genoil-ethereum/master/releases/ethminer-0.9.41-genoil-1.1.7.zip HTTP/1.1
Host: raw.githubusercontent.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
cache-control: max-age=300
content-security-policy: default-src 'none'; style-src 'unsafe-inline'; sandbox
content-type: application/zip
etag: W/"a92605cc0602e7310952178354222e58f2ad1e98ac6d0c294dcbb8e7055ec622"
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
x-frame-options: deny
x-xss-protection: 1; mode=block
x-github-request-id: FABF:3D5104:11F07E5:14A66E3:67C50307
accept-ranges: bytes
date: Mon, 03 Mar 2025 01:16:55 GMT
via: 1.1 varnish
x-served-by: cache-hel1410026-HEL
x-cache: MISS
x-cache-hits: 0
x-timer: S1740964615.244718,VS0,VE326
vary: Authorization,Accept-Encoding,Origin
access-control-allow-origin: *
cross-origin-resource-policy: cross-origin
x-fastly-request-id: b244676c99cacdd33c4c0b471d92fdbfdb8c6e27
expires: Mon, 03 Mar 2025 01:21:55 GMT
source-age: 0
content-length: 954095
X-Firefox-Spdy: h2