Report - github.com/ethereum-mining/ethminer/releases/download/v0.18.0/ethminer-0.18.0-cuda10.0-windows-amd64.zip

Report Overview

Visited public
2025-01-23 10:26:27
Tags
URL
github.com/ethereum-mining/ethminer/releases/download/v0.18.0/ethminer-0.18.0-cuda10.0-windows-amd64.zip
Finishing URL
about:privatebrowsing
IP / ASN
140.82.121.4
#36459 GITHUB
Title
about:privatebrowsing

Detections

urlquery

0

Network Intrusion Detection

0

Threat Detection Systems

4

Domain Summary

Domain / FQDN	Rank	Registered	First Seen	Last Seen	Sent	Received	IP
github.com	1423	2007-10-09	2016-07-13	2025-01-22	558 B	4.4 kB	140.82.121.4
objects.githubusercontent.com	134060	2014-02-06	2021-11-01	2025-01-22	984 B	1.7 MB	185.199.111.133
aus5.mozilla.org	2548	1998-01-24	2015-10-27	2025-01-22	512 B	1.2 kB	35.244.181.201

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

No alerts detected

Threat Detection Systems

Public InfoSec YARA rules

No alerts detected

OpenPhish

No alerts detected

PhishTank

No alerts detected

Quad9 DNS

No alerts detected

ThreatFox

No alerts detected

Files detected

URL
objects.githubusercontent.com/github-production-release-asset-2e65be/89067146/8cfae380-ad67-11e9-91c0-05eaf39fa731?X-Amz-Algorithm=AWS4-HMAC-SHA256&X-Amz-Credential=releaseassetproduction%2F20250123%2Fus-east-1%2Fs3%2Faws4_request&X-Amz-Date=20250123T102602Z&X-Amz-Expires=300&X-Amz-Signature=c8ca7ca3c3f41de663f67c452e9ada9b5e9a9f25212d6c5be183d3e9a2fb95c8&X-Amz-SignedHeaders=host&response-content-disposition=attachment%3B%20filename%3Dethminer-0.18.0-cuda10.0-windows-amd64.zip&response-content-type=application%2Foctet-stream
IP
185.199.111.133
ASN
#54113 FASTLY

File type
Zip archive data, at least v2.0 to extract, compression method=store
Size
1.7 MB (1738511 bytes)
Hash
29aceb5e89406f4d77e7d447107b0830
201e5dca0d8ab5aa0d19ad2bde8f65546f319e0a
9331ae5aed54ebbae83ab42b3deb7c01d3b2a9c397e33eade268c3901bcad00b

Archive (31)

Filename

Md5

File type

ethminer.exe

b4a2569d2a0a910b6a78cce8cb8e7ede

PE32+ executable (console) x86-64, for MS Windows, 8 sections

ethash_baffin_lws128.bin

8385554f2eba61f5499a71b691e56086

ELF 64-bit LSB executable, *unknown arch 0xffffaf5b* version 1 (SYSV)

ethash_baffin_lws128_exit.bin

57c4d571dc4800ddfb0fc9c1c8e042ac

ELF 64-bit LSB executable, *unknown arch 0xffffaf5b* version 1 (SYSV)

ethash_baffin_lws256.bin

19b8bd74391e42b082751ef36a27d983

ELF 64-bit LSB executable, *unknown arch 0xffffaf5b* version 1 (SYSV)

ethash_baffin_lws256_exit.bin

2464199f6d853a5bf4b364a73feecdc3

ELF 64-bit LSB executable, *unknown arch 0xffffaf5b* version 1 (SYSV)

ethash_baffin_lws64.bin

9580657c7741845f59dd1cfe689104f8

ELF 64-bit LSB executable, *unknown arch 0xffffaf5b* version 1 (SYSV)

ethash_baffin_lws64_exit.bin

bf012c5518378f08f5332035b385f467

ELF 64-bit LSB executable, *unknown arch 0xffffaf5b* version 1 (SYSV)

ethash_ellesmere_lws128.bin

2e3db4d0694410b59333307e50bee3e7

ELF 64-bit LSB executable, *unknown arch 0xffffaf5b* version 1 (SYSV)

ethash_ellesmere_lws128_exit.bin

eefc08674d3da10b8c3eb76b9344d0f7

ELF 64-bit LSB executable, *unknown arch 0xffffaf5b* version 1 (SYSV)

ethash_ellesmere_lws256.bin

b8126d5cf65262e299c5ecd1383b2ea4

ELF 64-bit LSB executable, *unknown arch 0xffffaf5b* version 1 (SYSV)

ethash_ellesmere_lws256_exit.bin

3e94c999a296170c7fbb406ad1f29567

ELF 64-bit LSB executable, *unknown arch 0xffffaf5b* version 1 (SYSV)

ethash_ellesmere_lws64.bin

1053742f39dec1d2cc74e693d0f34887

ELF 64-bit LSB executable, *unknown arch 0xffffaf5b* version 1 (SYSV)

ethash_ellesmere_lws64_exit.bin

492cc2c9a49b90300f32c8857f16c767

ELF 64-bit LSB executable, *unknown arch 0xffffaf5b* version 1 (SYSV)

ethash_gfx900_lws128.bin

2c62b7965741328aa896fde563a1b760

ELF 64-bit LSB executable, *unknown arch 0xffffaf5b* version 1 (SYSV)

ethash_gfx900_lws128_exit.bin

9a03a9542abefd53f2a4683d3ae9668a

ELF 64-bit LSB executable, *unknown arch 0xffffaf5b* version 1 (SYSV)

ethash_gfx900_lws256.bin

2420123e0225c2887530477b1b9757b1

ELF 64-bit LSB executable, *unknown arch 0xffffaf5b* version 1 (SYSV)

ethash_gfx900_lws256_exit.bin

b5fb7cd0ced35d575e9365f6703f9cae

ELF 64-bit LSB executable, *unknown arch 0xffffaf5b* version 1 (SYSV)

ethash_gfx900_lws64.bin

dd8e4328e44cd1f6b1a0e3eae6910340

ELF 64-bit LSB executable, *unknown arch 0xffffaf5b* version 1 (SYSV)

ethash_gfx900_lws64_exit.bin

da1c6bd65a6876508725b9f99cc70e7b

ELF 64-bit LSB executable, *unknown arch 0xffffaf5b* version 1 (SYSV)

ethash_gfx901_lws128.bin

f689fa1e39d7de86aaeb4658531c3d9e

ELF 64-bit LSB executable, *unknown arch 0xffffaf5b* version 1 (SYSV)

ethash_gfx901_lws128_exit.bin

fc4fa212bed946f8bd14b2ed9a1ae3ae

ELF 64-bit LSB executable, *unknown arch 0xffffaf5b* version 1 (SYSV)

ethash_gfx901_lws256.bin

84945e1076bb6990621dd75ae97621cd

ELF 64-bit LSB executable, *unknown arch 0xffffaf5b* version 1 (SYSV)

ethash_gfx901_lws256_exit.bin

83a7c829ae02c9f081d357be3e053a1f

ELF 64-bit LSB executable, *unknown arch 0xffffaf5b* version 1 (SYSV)

ethash_gfx901_lws64.bin

b708f02cefe6c26cdc8968440eaeda7f

ELF 64-bit LSB executable, *unknown arch 0xffffaf5b* version 1 (SYSV)

ethash_gfx901_lws64_exit.bin

7f1240c9fc2b43598b907da3b2d3f04e

ELF 64-bit LSB executable, *unknown arch 0xffffaf5b* version 1 (SYSV)

ethash_tonga_lws128.bin

f7bdd44c9910663673b4e0d2dccbac46

ELF 64-bit LSB executable, *unknown arch 0xffffaf5b* version 1 (SYSV)

ethash_tonga_lws128_exit.bin

ceddcd85cf1c697eee3196293aeb6272

ELF 64-bit LSB executable, *unknown arch 0xffffaf5b* version 1 (SYSV)

ethash_tonga_lws256.bin

7b31398804dbd8eab87e61a8eefd7c18

ELF 64-bit LSB executable, *unknown arch 0xffffaf5b* version 1 (SYSV)

ethash_tonga_lws256_exit.bin

01d1f1d0d8ee1a3e09b0d845077a248f

ELF 64-bit LSB executable, *unknown arch 0xffffaf5b* version 1 (SYSV)

ethash_tonga_lws64.bin

93dbccfaead0447bd55789eeff768bda

ELF 64-bit LSB executable, *unknown arch 0xffffaf5b* version 1 (SYSV)

ethash_tonga_lws64_exit.bin

e36e658c5ca3d5500bcc9744fa262141

ELF 64-bit LSB executable, *unknown arch 0xffffaf5b* version 1 (SYSV)

Detections

Analyzer	Verdict	Alert
Elastic Security YARA Rules	malware	MacOS.Cryptominer.Generic
VirusTotal	malicious	VirusTotal - Scan result 47/68
ClamAV	malicious	Win.Trojan.Miner-9935601-0

JavaScript (0)

HTTP Transactions (3)

URL IP Response Size

github.com/ethereum-mining/ethminer/releases/download/v0.18.0/ethminer-0.18.0-cuda10.0-windows-amd64.zip

140.82.121.4

302 Found

0 B

URL
github.com/ethereum-mining/ethminer/releases/download/v0.18.0/ethminer-0.18.0-cuda10.0-windows-amd64.zip
IP
140.82.121.4:0
ASN
#36459 GITHUB

File type

Size
0 B (0 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

HTTP Headers

GET /ethereum-mining/ethminer/releases/download/v0.18.0/ethminer-0.18.0-cuda10.0-windows-amd64.zip HTTP/1.1
Host: github.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 302 Found
server: GitHub.com
date: Thu, 23 Jan 2025 10:26:02 GMT
content-type: text/html; charset=utf-8
vary: X-PJAX, X-PJAX-Container, Turbo-Visit, Turbo-Frame, Accept-Encoding, Accept, X-Requested-With
location: https://objects.githubusercontent.com/github-production-release-asset-2e65be/89067146/8cfae380-ad67-11e9-91c0-05eaf39fa731?X-Amz-Algorithm=AWS4-HMAC-SHA256&X-Amz-Credential=releaseassetproduction%2F20250123%2Fus-east-1%2Fs3%2Faws4_request&X-Amz-Date=20250123T102602Z&X-Amz-Expires=300&X-Amz-Signature=c8ca7ca3c3f41de663f67c452e9ada9b5e9a9f25212d6c5be183d3e9a2fb95c8&X-Amz-SignedHeaders=host&response-content-disposition=attachment%3B%20filename%3Dethminer-0.18.0-cuda10.0-windows-amd64.zip&response-content-type=application%2Foctet-stream
cache-control: no-cache
strict-transport-security: max-age=31536000; includeSubdomains; preload
x-frame-options: deny
x-content-type-options: nosniff
x-xss-protection: 0
referrer-policy: no-referrer-when-downgrade
content-security-policy: default-src 'none'; base-uri 'self'; child-src github.com/assets-cdn/worker/ github.com/webpack/ github.com/assets/ gist.github.com/assets-cdn/worker/; connect-src 'self' uploads.github.com www.githubstatus.com collector.github.com raw.githubusercontent.com api.github.com github-cloud.s3.amazonaws.com github-production-repository-file-5c1aeb.s3.amazonaws.com github-production-upload-manifest-file-7fdce7.s3.amazonaws.com github-production-user-asset-6210df.s3.amazonaws.com *.rel.tunnels.api.visualstudio.com wss://*.rel.tunnels.api.visualstudio.com objects-origin.githubusercontent.com copilot-proxy.githubusercontent.com proxy.individual.githubcopilot.com proxy.business.githubcopilot.com proxy.enterprise.githubcopilot.com *.actions.githubusercontent.com wss://*.actions.githubusercontent.com productionresultssa0.blob.core.windows.net/ productionresultssa1.blob.core.windows.net/ productionresultssa2.blob.core.windows.net/ productionresultssa3.blob.core.windows.net/ productionresultssa4.blob.core.windows.net/ productionresultssa5.blob.core.windows.net/ productionresultssa6.blob.core.windows.net/ productionresultssa7.blob.core.windows.net/ productionresultssa8.blob.core.windows.net/ productionresultssa9.blob.core.windows.net/ productionresultssa10.blob.core.windows.net/ productionresultssa11.blob.core.windows.net/ productionresultssa12.blob.core.windows.net/ productionresultssa13.blob.core.windows.net/ productionresultssa14.blob.core.windows.net/ productionresultssa15.blob.core.windows.net/ productionresultssa16.blob.core.windows.net/ productionresultssa17.blob.core.windows.net/ productionresultssa18.blob.core.windows.net/ productionresultssa19.blob.core.windows.net/ github-production-repository-image-32fea6.s3.amazonaws.com github-production-release-asset-2e65be.s3.amazonaws.com insights.github.com wss://alive.github.com api.githubcopilot.com api.individual.githubcopilot.com api.business.githubcopilot.com api.enterprise.githubcopilot.com; font-src github.githubassets.com; form-action 'self' github.com gist.github.com copilot-workspace.githubnext.com objects-origin.githubusercontent.com; frame-ancestors 'none'; frame-src viewscreen.githubusercontent.com notebooks.githubusercontent.com; img-src 'self' data: blob: github.githubassets.com media.githubusercontent.com camo.githubusercontent.com identicons.github.com avatars.githubusercontent.com private-avatars.githubusercontent.com github-cloud.s3.amazonaws.com objects.githubusercontent.com secured-user-images.githubusercontent.com/ user-images.githubusercontent.com/ private-user-images.githubusercontent.com opengraph.githubassets.com github-production-user-asset-6210df.s3.amazonaws.com customer-stories-feed.github.com spotlights-feed.github.com objects-origin.githubusercontent.com *.githubusercontent.com; manifest-src 'self'; media-src github.com user-images.githubusercontent.com/ secured-user-images.githubusercontent.com/ private-user-images.githubusercontent.com github-production-user-asset-6210df.s3.amazonaws.com gist.github.com; script-src github.githubassets.com; style-src 'unsafe-inline' github.githubassets.com; upgrade-insecure-requests; worker-src github.com/assets-cdn/worker/ github.com/webpack/ github.com/assets/ gist.github.com/assets-cdn/worker/
content-length: 0
x-github-request-id: 244B:172FCD:19B20E4:1A7D1AC:6792193A
X-Firefox-Spdy: h2

objects.githubusercontent.com/github-production-release-asset-2e65be/89067146/8cfae380-ad67-11e9-91c0-05eaf39fa731?X-Amz-Algorithm=AWS4-HMAC-SHA256&X-Amz-Credential=releaseassetproduction%2F20250123%2Fus-east-1%2Fs3%2Faws4_request&X-Amz-Date=20250123T102602Z&X-Amz-Expires=300&X-Amz-Signature=c8ca7ca3c3f41de663f67c452e9ada9b5e9a9f25212d6c5be183d3e9a2fb95c8&X-Amz-SignedHeaders=host&response-content-disposition=attachment%3B%20filename%3Dethminer-0.18.0-cuda10.0-windows-amd64.zip&response-content-type=application%2Foctet-stream

185.199.111.133

200 OK

1.7 MB

URL User Request GET HTTP/2
objects.githubusercontent.com/github-production-release-asset-2e65be/89067146/8cfae380-ad67-11e9-91c0-05eaf39fa731?X-Amz-Algorithm=AWS4-HMAC-SHA256&X-Amz-Credential=releaseassetproduction%2F20250123%2Fus-east-1%2Fs3%2Faws4_request&X-Amz-Date=20250123T102602Z&X-Amz-Expires=300&X-Amz-Signature=c8ca7ca3c3f41de663f67c452e9ada9b5e9a9f25212d6c5be183d3e9a2fb95c8&X-Amz-SignedHeaders=host&response-content-disposition=attachment%3B%20filename%3Dethminer-0.18.0-cuda10.0-windows-amd64.zip&response-content-type=application%2Foctet-stream
IP
185.199.111.133:443
ASN
#54113 FASTLY

Certificate
IssuerDigiCert Inc
Subject*.github.io
Fingerprint97:D8:C5:70:0F:12:24:6C:88:BC:FA:06:7E:8C:A7:4D:A8:62:67:28
ValidityFri, 15 Mar 2024 00:00:00 GMT - Fri, 14 Mar 2025 23:59:59 GMT

File type
Zip archive data, at least v2.0 to extract, compression method=store
Size
1.7 MB (1738511 bytes)
Hash
29aceb5e89406f4d77e7d447107b0830
201e5dca0d8ab5aa0d19ad2bde8f65546f319e0a
9331ae5aed54ebbae83ab42b3deb7c01d3b2a9c397e33eade268c3901bcad00b

Detections

Analyzer	Verdict	Alert
VirusTotal	malicious	VirusTotal - Scan result 47/68
ClamAV	malicious	Win.Trojan.Miner-9935601-0

HTTP Headers

GET /github-production-release-asset-2e65be/89067146/8cfae380-ad67-11e9-91c0-05eaf39fa731?X-Amz-Algorithm=AWS4-HMAC-SHA256&X-Amz-Credential=releaseassetproduction%2F20250123%2Fus-east-1%2Fs3%2Faws4_request&X-Amz-Date=20250123T102602Z&X-Amz-Expires=300&X-Amz-Signature=c8ca7ca3c3f41de663f67c452e9ada9b5e9a9f25212d6c5be183d3e9a2fb95c8&X-Amz-SignedHeaders=host&response-content-disposition=attachment%3B%20filename%3Dethminer-0.18.0-cuda10.0-windows-amd64.zip&response-content-type=application%2Foctet-stream HTTP/1.1
Host: objects.githubusercontent.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
content-type: application/octet-stream
last-modified: Wed, 08 Dec 2021 07:53:31 GMT
etag: "0x8D9BA1FD457A58B"
server: Windows-Azure-Blob/1.0 Microsoft-HTTPAPI/2.0
x-ms-request-id: 5a640281-901e-0065-0ebb-6a4f11000000
x-ms-version: 2024-11-04
x-ms-creation-time: Wed, 18 Aug 2021 06:43:19 GMT
x-ms-blob-content-md5: KazrXolAb01359RHEHsIMA==
x-ms-lease-status: unlocked
x-ms-lease-state: available
x-ms-blob-type: BlockBlob
content-disposition: attachment; filename=ethminer-0.18.0-cuda10.0-windows-amd64.zip
x-ms-server-encrypted: true
via: 1.1 varnish, 1.1 varnish
fastly-restarts: 1
accept-ranges: bytes
age: 472
date: Thu, 23 Jan 2025 10:26:03 GMT
x-served-by: cache-iad-kiad7000026-IAD, cache-hel1410025-HEL
x-cache: HIT, HIT
x-cache-hits: 290, 0
x-timer: S1737627963.507649,VS0,VE108
content-length: 1738511
X-Firefox-Spdy: h2

aus5.mozilla.org/update/3/GMP/111.0a1/20240129201730/Linux_x86_64-gcc3/null/default/Linux%205.15.0-102-generic%20(GTK%203.24.37%2Clibpulse%20not-available)/default/default/update.xml

35.244.181.201

200 OK

444 B

URL
aus5.mozilla.org/update/3/GMP/111.0a1/20240129201730/Linux_x86_64-gcc3/null/default/Linux%205.15.0-102-generic%20(GTK%203.24.37%2Clibpulse%20not-available)/default/default/update.xml
IP
35.244.181.201:0
ASN
#396982 GOOGLE-CLOUD-PLATFORM

File type
XML 1.0 document, ASCII text, with very long lines (332)
Size
444 B (444 bytes)
Hash
3b324dec137a87ef7e24a30a65b13dd0
c0faa95b2f1018e264b3a14aaf50d1003e6c27b3
6cd0b591d9239fc8564627e92a804fc261951b1cbaf5fa58a8ada3cc13f51463

HTTP Headers

GET /update/3/GMP/111.0a1/20240129201730/Linux_x86_64-gcc3/null/default/Linux%205.15.0-102-generic%20(GTK%203.24.37%2Clibpulse%20not-available)/default/default/update.xml HTTP/1.1
Host: aus5.mozilla.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Cache-Control: no-cache
Pragma: no-cache
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
server: nginx
rule-id: unknown
rule-data-version: unknown
content-signature: x5u=https://content-signature-2.cdn.mozilla.net/g/chains/202402/aus.content-signature.mozilla.org-2025-02-28-18-04-21.chain; p384ecdsa=g-o9F9qquHzWmvhi0Ttp06RE96B8ejxNXBHHfzYWlpcf0cRyw4o5vbbbY1IQtc9mnqLmOsLmn2SgaXnVQ2qlmqSvrGIwqHUUG6E7jNA9fIjUruPeMQt3KQCpR-pi4IOD
strict-transport-security: max-age=31536000;
x-content-type-options: nosniff
content-security-policy: default-src 'none'; frame-ancestors 'none'
x-proxy-cache-status: EXPIRED
content-encoding: gzip
via: 1.1 google
date: Thu, 23 Jan 2025 10:25:41 GMT
content-type: text/xml; charset=utf-8
vary: Accept-Encoding
content-length: 444
age: 40
cache-control: public,max-age=90
alt-svc: clear
X-Firefox-Spdy: h2