Report Overview
- Visited public2025-01-31 12:26:29TagsSubmit Tags
- URL
github.com/genesismining/sgminer-gm/releases/download/5.5.5/sgminer-gm.zip
- Finishing URL
about:privatebrowsing
- IP / ASN
140.82.121.4#36459 GITHUB
Titleabout:privatebrowsing
Detections
urlquery
0
Network Intrusion Detection
0
Threat Detection Systems
9
Domain Summary
| Domain / FQDN | Rank | Registered | First Seen | Last Seen | Sent | Received | IP |
|---|---|---|---|---|---|---|---|
| github.com | 1423 | 2007-10-09 | 2016-07-13 | 2025-01-29 | 540 B | 4.3 kB | 140.82.121.3 |
| objects.githubusercontent.com | 134060 | 2014-02-06 | 2021-11-01 | 2025-01-29 | 968 B | 1.8 MB |  185.199.110.133 |
Related reports
Network Intrusion Detection Systems
Suricata /w Emerging Threats Pro
No alerts detected
Threat Detection Systems
Public InfoSec YARA rules
No alerts detected
OpenPhish
No alerts detected
PhishTank
No alerts detected
Quad9 DNS
No alerts detected
ThreatFox
No alerts detected
Files detected
URL
objects.githubusercontent.com/github-production-release-asset-2e65be/67713046/d6330ac6-dda5-11e6-8878-88b328000715?X-Amz-Algorithm=AWS4-HMAC-SHA256&X-Amz-Credential=releaseassetproduction%2F20250131%2Fus-east-1%2Fs3%2Faws4_request&X-Amz-Date=20250131T122558Z&X-Amz-Expires=300&X-Amz-Signature=be6c91bf8930e0fa6d6b1e2cc0cce8b1a13fcaa082186fed55e0cfa061ea6dfd&X-Amz-SignedHeaders=host&response-content-disposition=attachment%3B%20filename%3Dsgminer-gm.zip&response-content-type=application%2Foctet-stream
IP
185.199.110.133ASN
#54113 FASTLY
File type
Zip archive data, at least v2.0 to extract, compression method=store
Size
1.8 MB (1786974 bytes)
Hash
f7b5a5cfd57dda9d7eccf7810b35e724
8726219d439ad18d8baf88017f55dffb2c1da927
Archive (84)
| Filename | Md5 | File type | |||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|
| aes_helper.cl | 7d677cedad9db43b9f72ebc20cc0721a | C source, ASCII text | |||||||||
| alexkarnew.cl | 7fb4e52870aa213d9bac36c58e0df582 | C source, ASCII text | |||||||||
| alexkarold.cl | 83eab51a83b338628db8362766750b86 | C source, ASCII text | |||||||||
| animecoin.cl | 5fdaeb0b4955d7a243810b3ba38e2082 | C source, ASCII text | |||||||||
| arebyp.cl | 3509aa04938891344bdc5b5b97dbdb4e | C source, ASCII text | |||||||||
| bitblock.cl | 2caf4f73447a9ebdc57977f9e6fcd354 | C source, ASCII text | |||||||||
| bitblockold.cl | 519340ab7e08d2594d3da32526b9869f | C source, ASCII text | |||||||||
| blake.cl | 92b3782d8851968998a3d6a8d56d8602 | ASCII text | |||||||||
| blake256.cl | e82680d0e2090de330c61f50b0a4aea4 | ASCII text | |||||||||
| blake256r14.cl | fba58cd47b3ab0fdf8dbd72f4f9522b5 | ASCII text, with very long lines (1815) | |||||||||
| blake256r8.cl | da8c01d806af9083ecd16a406cec7a51 | ASCII text, with very long lines (1815) | |||||||||
| bmw.cl | 6ce86ae6c03082229a283e7fe88ba4f7 | ASCII text | |||||||||
| bmw256.cl | 46866ed2b3917d96a287d8550747e844 | C source, ASCII text | |||||||||
| bufius.cl | 79738081528da3f9dc508b975fd8c239 | C source, ASCII text | |||||||||
| ckolivas.cl | 53c661e8135b9ea2d65e46b4975773f5 | C source, ASCII text | |||||||||
| credits.cl | edbb7adccc62002dd50e7f169f9e3d49 | ASCII text | |||||||||
| cryptonight.cl | 674eff64be11e5a6c7040a49d93b6835 | C source, ASCII text | |||||||||
| cubehash.cl | 9cba51fefce557bc7f1d6fe9f4201a3f | ASCII text | |||||||||
| cubehash256.cl | 1ee06bacff1591790505b7c68346688e | ASCII text | |||||||||
| darkcoin-mod.cl | 69e00bba82c9d65462b2a851e87f0048 | C source, ASCII text | |||||||||
| darkcoin.cl | e6f6a608fbec852378ffcab881624484 | C source, ASCII text | |||||||||
| diamond.cl | 4f4451aff3c5c0082757777039d653f5 | C source, ASCII text | |||||||||
| echo.cl | 3e83c449402863660caba165b9b519e2 | C source, ASCII text | |||||||||
| equihash-param.h | 26e0b94d18bf76fe132cae230dee8f59 | C source, ASCII text | |||||||||
| equihash.cl | ec51f6080658483e2d60293349c7eb47 | C source, ASCII text | |||||||||
| ethash-genoil.cl | 086243f02307a29165aaaaa3b7d86ff1 | C source, ASCII text, with CRLF line terminators | |||||||||
| ethash.cl | 0df3b8b711708f87079086b1aa517358 | C source, ASCII text, with CRLF line terminators | |||||||||
| fresh.cl | c2c545ce106a130cb550e2717d44d9d7 | C source, ASCII text | |||||||||
| fugue.cl | 333ed14f0c25e6749745d35427bc40a8 | ASCII text | |||||||||
| fuguecoin.cl | 32d120a6894edc883843810d05a83be0 | C source, ASCII text | |||||||||
| groestl.cl | 1e636520e0fca76f9fcd5180ed1275b1 | ASCII text | |||||||||
| groestl256.cl | 843891bd117147741806cbcf58326cc9
| ASCII text | |||||||||
| groestlcoin-v1.cl | 4caa9638350768fa509843123d679c25 | C source, ASCII text | |||||||||
| groestlcoin.cl | 4f4451aff3c5c0082757777039d653f5 | C source, ASCII text | |||||||||
| hamsi.cl | ce93a79f22526de3cb472101261ed1d0 | C source, ASCII text | |||||||||
| hamsi_helper.cl | 1d5500e7f601bd39ac0b966e736cd523 | ASCII text | |||||||||
| hamsi_helper_big.cl | 2cec43789ff5627584b98db0c264eed5 | ASCII text | |||||||||
| inkcoin.cl | 8dc05cee30010e4fd94f894699c9a87b | C source, ASCII text | |||||||||
| jh.cl | e92e27bd8c30e63d131f5a88d4e1aae0 | ASCII text | |||||||||
| keccak.cl | 6da449e3945d94ebe1eecee7fcbd45da | C source, ASCII text | |||||||||
| keccak1600.cl | b5e2648f25eee5d9d7b304fc895a3427 | ASCII text | |||||||||
| luffa.cl | 2530f893d406c39a03a4032e7be38777 | C source, ASCII text | |||||||||
| lyra2.cl | 7b31d6e07a0d4efc49e7a5275a0bd60e | ASCII text | |||||||||
| lyra2re.cl | b2872ecf66a11cfbb68fb64b750a54bc | C source, ASCII text | |||||||||
| lyra2rev2.cl | d66ceff55482973bdb20c1a3105a76de | C source, ASCII text | |||||||||
| lyra2v2.cl | 06af836015700bcfad3245bdd86c5679 | ASCII text | |||||||||
| marucoin-mod.cl | d03d6a64265a2ebc18ceb0c102713639 | C source, ASCII text | |||||||||
| marucoin-modold.cl | 02ba7ff401b01eef80967d47a92e78fa | C source, ASCII text | |||||||||
| marucoin.cl | cd4afa03ccd6d1234ec208c7f2c1f28e | C source, ASCII text | |||||||||
| maxcoin.cl | 700deb9c2f49dd74d25d81a36a340782 | ASCII text | |||||||||
| myriadcoin-groestl.cl | 54d854ef8f31f196b3e974540f9eae83 | C source, ASCII text | |||||||||
| neoscrypt.cl | 76952a599c5f41189e7c6a8930859aa6 | C source, ASCII text | |||||||||
| panama.cl | 275642e91c06bba8ca980c9102d7c28b | ASCII text | |||||||||
| pluck.cl | da7685f61576a2c6f7cab25897c65370 | ASCII text | |||||||||
| psw.cl | 0de6ab75f7a45de9df6a46d403c961d1 | C source, ASCII text | |||||||||
| quarkcoin.cl | 18c59fca160216c749f0a58c5c84aa5c | C source, ASCII text | |||||||||
| qubitcoin.cl | 953fde8619fcfb69263e21fceeea1191 | C source, ASCII text | |||||||||
| shabal.cl | cda95319a3862b6c33c2d1e13204ca74 | ASCII text | |||||||||
| shavite.cl | 4cf845e20ae6a3afc448d16ab9d230b0 | C source, ASCII text | |||||||||
| sifcoin.cl | 9e8d9ff772bcad883aa25279a67697aa | C source, ASCII text | |||||||||
| simd.cl | 637a50e73d88268d1d4155dc56c57f9e | ASCII text, with very long lines (1208) | |||||||||
| skein.cl | 341e04eed385828398c8f0376cdab314 | ASCII text | |||||||||
| skein256.cl | 518f3bc0da90a7aa00352f9e2d9b395b | ASCII text | |||||||||
| talkcoin-mod.cl | 96767aab833c8f683786185f7aaf9646 | C source, ASCII text | |||||||||
| twecoin.cl | 8f0b0715ec495e76ac33c44328b1d178 | C source, ASCII text | |||||||||
| vanilla.cl | da8c01d806af9083ecd16a406cec7a51 | ASCII text, with very long lines (1815) | |||||||||
| whirlcoin.cl | e8d070fd6cdd5432374c081e4d235e09 | C source, ASCII text | |||||||||
| whirlpool.cl | c196e0ee9da358225a577f3d37262a15 | ASCII text | |||||||||
| whirlpoolx.cl | c31e3e4fb688acd5491ea0ca43bdd992 | C source, Non-ISO extended-ASCII text | |||||||||
| wolf-aes.cl | a9d5702bee67aaa97bb483a324b7b4eb | C source, ASCII text | |||||||||
| wolf-skein.cl | 9d8c5d2a9d0ac3f9b2617ed286a6ec98 | C source, ASCII text | |||||||||
| x14.cl | 7f8cd8a28cef9ed2b55acf1be501bd79 | C source, ASCII text | |||||||||
| x14old.cl | c66dd0493339d93ae47c23ecfc13d178 | C source, ASCII text | |||||||||
| yescrypt-multi.cl | d4cbdaf9886e818d0545d17be0b6d041 | C source, ASCII text | |||||||||
| yescrypt.cl | f7128b0892bccaace99fd2835f8d5206 | C source, ASCII text | |||||||||
| yescrypt_essential.cl | 11c62c50956c863d96872f3459aed853 | ASCII text | |||||||||
| zuikkis.cl | 6af6fafe9d506e065be3f68418169552 | C source, ASCII text | |||||||||
| pdcurses.dll | 8df023b6765b21cdf937a25d9d8f14e2 | PE32 executable (DLL) (GUI) Intel 80386, for MS Windows, 5 sections | |||||||||
| pthreadGC2.dll | 72c1ff7f3c7474850b11fc962ee1620c | PE32 executable (DLL) (console) Intel 80386, for MS Windows, 21 sections | |||||||||
| sgminer-eth.conf | e8bbdbef74d64d9db3e8a9407c2c155c
| JSON text data | |||||||||
| sgminer-xmr.conf | 42f17fc2fcdb00cd9e54cae9f0434ff1
| JSON text data | |||||||||
| sgminer-zcash.conf | 4b9a7a136d2526a4756e86962b07892f
| JSON text data | |||||||||
| sgminer.exe | 2c688b36fdb76a03e75436686f84bf80
| PE32 executable (console) Intel 80386, for MS Windows, 15 sections | |||||||||
| start.bat | 64954880d427e65ddc88f0bdd9722ef1 | DOS batch file, ASCII text, with CRLF line terminators |
Detections
| Analyzer | Verdict | Alert |
|---|---|---|
| Elastic Security YARA Rules | malware | Linux.Cryptominer.Ursu |
| Public Nextron YARA rules | malware | Detects mining pool protocol string in Executable |
| Public Nextron YARA rules | malware | Detects mining pool protocol string in Executable |
| Public Nextron YARA rules | malware | Detects mining pool protocol string in Executable |
| Public Nextron YARA rules | malware | Detects mining pool protocol string in Executable |
| Elastic Security YARA Rules | malware | MacOS.Cryptominer.Generic |
| VirusTotal | malicious | |
| ClamAV | malicious | Win.Trojan.Agent-6301630-0 |
JavaScript (0)
No Javascripts found
No Javascripts found
No Javascripts found
HTTP Transactions (2)
| URL | IP | Response | Size | ||||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
GET github.com/genesismining/sgminer-gm/releases/download/5.5.5/sgminer-gm.zip | 140.82.121.3 | 302 Found | 0 B | ||||||||||
HTTP Headers
| |||||||||||||
GET objects.githubusercontent.com/github-production-release-asset-2e65be/67713046/d6330ac6-dda5-11e6-8878-88b328000715?X-Amz-Algorithm=AWS4-HMAC-SHA256&X-Amz-Credential=releaseassetproduction%2F20250131%2Fus-east-1%2Fs3%2Faws4_request&X-Amz-Date=20250131T122558Z&X-Amz-Expires=300&X-Amz-Signature=be6c91bf8930e0fa6d6b1e2cc0cce8b1a13fcaa082186fed55e0cfa061ea6dfd&X-Amz-SignedHeaders=host&response-content-disposition=attachment%3B%20filename%3Dsgminer-gm.zip&response-content-type=application%2Foctet-stream | 185.199.110.133 | 200 OK | 1.8 MB | ||||||||||
Detections
HTTP Headers
| |||||||||||||