Report - github.com/ethereum-mining/ethminer/releases/download/v0.18.0/ethminer-0.18.0-cuda9.1-windows-amd64.zip

Report Overview

Visited public
2025-01-31 12:22:52
Tags
Submit Tags
URL
github.com/ethereum-mining/ethminer/releases/download/v0.18.0/ethminer-0.18.0-cuda9.1-windows-amd64.zip
Finishing URL
about:privatebrowsing
IP / ASN
140.82.121.4
#36459 GITHUB
Title
about:privatebrowsing

Detections

urlquery

0

Network Intrusion Detection

0

Threat Detection Systems

4

Domain Summary

Domain / FQDN	Rank	Registered	First Seen	Last Seen	Sent	Received	IP
github.com	1423	2007-10-09	2016-07-13	2025-01-29	569 B	4.4 kB	140.82.121.4
objects.githubusercontent.com	134060	2014-02-06	2021-11-01	2025-01-29	995 B	1.7 MB	185.199.111.133

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

No alerts detected

Threat Detection Systems

Public InfoSec YARA rules

No alerts detected

OpenPhish

No alerts detected

PhishTank

No alerts detected

Quad9 DNS

No alerts detected

ThreatFox

No alerts detected

Files detected

URL
objects.githubusercontent.com/github-production-release-asset-2e65be/89067146/20cbb000-ad66-11e9-874e-21ba4a81104d?X-Amz-Algorithm=AWS4-HMAC-SHA256&X-Amz-Credential=releaseassetproduction%2F20250131%2Fus-east-1%2Fs3%2Faws4_request&X-Amz-Date=20250131T122221Z&X-Amz-Expires=300&X-Amz-Signature=ca7688793db7a6abed24fd5c0269cc5b63f07ad8a4757d8d155c708a36d5b564&X-Amz-SignedHeaders=host&response-content-disposition=attachment%3B%20filename%3Dethminer-0.18.0-cuda9.1-windows-amd64.zip&response-content-type=application%2Foctet-stream
IP
185.199.111.133
ASN
#54113 FASTLY

File type
Zip archive data, at least v2.0 to extract, compression method=store
Size
1.7 MB (1743090 bytes)
Hash
c94ad172d15f1c24f55bf35bcaceafbe
f17bd2b5e0749368dfcc3760943ae25ef98d9646
01aec9fa9ec80872f46d2d65fee36464908d2103d21215f341e2a2b7dc6f69eb

Archive (31)

Filename

Md5

File type

ethminer.exe

7265d91a63423535c944af25818f72fc

PE32+ executable (console) x86-64, for MS Windows, 10 sections

ethash_baffin_lws128.bin

8385554f2eba61f5499a71b691e56086

ELF 64-bit LSB executable, *unknown arch 0xffffaf5b* version 1 (SYSV)

ethash_baffin_lws128_exit.bin

57c4d571dc4800ddfb0fc9c1c8e042ac

ELF 64-bit LSB executable, *unknown arch 0xffffaf5b* version 1 (SYSV)

ethash_baffin_lws256.bin

19b8bd74391e42b082751ef36a27d983

ELF 64-bit LSB executable, *unknown arch 0xffffaf5b* version 1 (SYSV)

ethash_baffin_lws256_exit.bin

2464199f6d853a5bf4b364a73feecdc3

ELF 64-bit LSB executable, *unknown arch 0xffffaf5b* version 1 (SYSV)

ethash_baffin_lws64.bin

9580657c7741845f59dd1cfe689104f8

ELF 64-bit LSB executable, *unknown arch 0xffffaf5b* version 1 (SYSV)

ethash_baffin_lws64_exit.bin

bf012c5518378f08f5332035b385f467

ELF 64-bit LSB executable, *unknown arch 0xffffaf5b* version 1 (SYSV)

ethash_ellesmere_lws128.bin

2e3db4d0694410b59333307e50bee3e7

ELF 64-bit LSB executable, *unknown arch 0xffffaf5b* version 1 (SYSV)

ethash_ellesmere_lws128_exit.bin

eefc08674d3da10b8c3eb76b9344d0f7

ELF 64-bit LSB executable, *unknown arch 0xffffaf5b* version 1 (SYSV)

ethash_ellesmere_lws256.bin

b8126d5cf65262e299c5ecd1383b2ea4

ELF 64-bit LSB executable, *unknown arch 0xffffaf5b* version 1 (SYSV)

ethash_ellesmere_lws256_exit.bin

3e94c999a296170c7fbb406ad1f29567

ELF 64-bit LSB executable, *unknown arch 0xffffaf5b* version 1 (SYSV)

ethash_ellesmere_lws64.bin

1053742f39dec1d2cc74e693d0f34887

ELF 64-bit LSB executable, *unknown arch 0xffffaf5b* version 1 (SYSV)

ethash_ellesmere_lws64_exit.bin

492cc2c9a49b90300f32c8857f16c767

ELF 64-bit LSB executable, *unknown arch 0xffffaf5b* version 1 (SYSV)

ethash_gfx900_lws128.bin

2c62b7965741328aa896fde563a1b760

ELF 64-bit LSB executable, *unknown arch 0xffffaf5b* version 1 (SYSV)

ethash_gfx900_lws128_exit.bin

9a03a9542abefd53f2a4683d3ae9668a

ELF 64-bit LSB executable, *unknown arch 0xffffaf5b* version 1 (SYSV)

ethash_gfx900_lws256.bin

2420123e0225c2887530477b1b9757b1

ELF 64-bit LSB executable, *unknown arch 0xffffaf5b* version 1 (SYSV)

ethash_gfx900_lws256_exit.bin

b5fb7cd0ced35d575e9365f6703f9cae

ELF 64-bit LSB executable, *unknown arch 0xffffaf5b* version 1 (SYSV)

ethash_gfx900_lws64.bin

dd8e4328e44cd1f6b1a0e3eae6910340

ELF 64-bit LSB executable, *unknown arch 0xffffaf5b* version 1 (SYSV)

ethash_gfx900_lws64_exit.bin

da1c6bd65a6876508725b9f99cc70e7b

ELF 64-bit LSB executable, *unknown arch 0xffffaf5b* version 1 (SYSV)

ethash_gfx901_lws128.bin

f689fa1e39d7de86aaeb4658531c3d9e

ELF 64-bit LSB executable, *unknown arch 0xffffaf5b* version 1 (SYSV)

ethash_gfx901_lws128_exit.bin

fc4fa212bed946f8bd14b2ed9a1ae3ae

ELF 64-bit LSB executable, *unknown arch 0xffffaf5b* version 1 (SYSV)

ethash_gfx901_lws256.bin

84945e1076bb6990621dd75ae97621cd

ELF 64-bit LSB executable, *unknown arch 0xffffaf5b* version 1 (SYSV)

ethash_gfx901_lws256_exit.bin

83a7c829ae02c9f081d357be3e053a1f

ELF 64-bit LSB executable, *unknown arch 0xffffaf5b* version 1 (SYSV)

ethash_gfx901_lws64.bin

b708f02cefe6c26cdc8968440eaeda7f

ELF 64-bit LSB executable, *unknown arch 0xffffaf5b* version 1 (SYSV)

ethash_gfx901_lws64_exit.bin

7f1240c9fc2b43598b907da3b2d3f04e

ELF 64-bit LSB executable, *unknown arch 0xffffaf5b* version 1 (SYSV)

ethash_tonga_lws128.bin

f7bdd44c9910663673b4e0d2dccbac46

ELF 64-bit LSB executable, *unknown arch 0xffffaf5b* version 1 (SYSV)

ethash_tonga_lws128_exit.bin

ceddcd85cf1c697eee3196293aeb6272

ELF 64-bit LSB executable, *unknown arch 0xffffaf5b* version 1 (SYSV)

ethash_tonga_lws256.bin

7b31398804dbd8eab87e61a8eefd7c18

ELF 64-bit LSB executable, *unknown arch 0xffffaf5b* version 1 (SYSV)

ethash_tonga_lws256_exit.bin

01d1f1d0d8ee1a3e09b0d845077a248f

ELF 64-bit LSB executable, *unknown arch 0xffffaf5b* version 1 (SYSV)

ethash_tonga_lws64.bin

93dbccfaead0447bd55789eeff768bda

ELF 64-bit LSB executable, *unknown arch 0xffffaf5b* version 1 (SYSV)

ethash_tonga_lws64_exit.bin

e36e658c5ca3d5500bcc9744fa262141

ELF 64-bit LSB executable, *unknown arch 0xffffaf5b* version 1 (SYSV)

Detections

Analyzer	Verdict	Alert
Elastic Security YARA Rules	malware	MacOS.Cryptominer.Generic
VirusTotal	malicious	VirusTotal - Scan result 38/63
ClamAV	malicious	Win.Trojan.Miner-9935601-0

JavaScript (0)

HTTP Transactions (2)

URL IP Response Size

GET github.com/ethereum-mining/ethminer/releases/download/v0.18.0/ethminer-0.18.0-cuda9.1-windows-amd64.zip

140.82.121.4

302 Found

0 B

URL User Request GET HTTP/2
github.com/ethereum-mining/ethminer/releases/download/v0.18.0/ethminer-0.18.0-cuda9.1-windows-amd64.zip
IP
140.82.121.4:443
ASN
#36459 GITHUB

Certificate
IssuerSectigo Limited
Subjectgithub.com
FingerprintE7:03:5B:CC:1C:18:77:1F:79:2F:90:86:6B:6C:1D:F8:DF:AA:BD:C0
ValidityThu, 07 Mar 2024 00:00:00 GMT - Fri, 07 Mar 2025 23:59:59 GMT

File type

Size
0 B (0 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

HTTP Headers

GET /ethereum-mining/ethminer/releases/download/v0.18.0/ethminer-0.18.0-cuda9.1-windows-amd64.zip HTTP/1.1
Host: github.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 302 Found
server: GitHub.com
date: Fri, 31 Jan 2025 12:22:21 GMT
content-type: text/html; charset=utf-8
vary: X-PJAX, X-PJAX-Container, Turbo-Visit, Turbo-Frame, Accept-Encoding, Accept, X-Requested-With
location: https://objects.githubusercontent.com/github-production-release-asset-2e65be/89067146/20cbb000-ad66-11e9-874e-21ba4a81104d?X-Amz-Algorithm=AWS4-HMAC-SHA256&X-Amz-Credential=releaseassetproduction%2F20250131%2Fus-east-1%2Fs3%2Faws4_request&X-Amz-Date=20250131T122221Z&X-Amz-Expires=300&X-Amz-Signature=ca7688793db7a6abed24fd5c0269cc5b63f07ad8a4757d8d155c708a36d5b564&X-Amz-SignedHeaders=host&response-content-disposition=attachment%3B%20filename%3Dethminer-0.18.0-cuda9.1-windows-amd64.zip&response-content-type=application%2Foctet-stream
cache-control: no-cache
strict-transport-security: max-age=31536000; includeSubdomains; preload
x-frame-options: deny
x-content-type-options: nosniff
x-xss-protection: 0
referrer-policy: no-referrer-when-downgrade
content-security-policy: default-src 'none'; base-uri 'self'; child-src github.com/assets-cdn/worker/ github.com/webpack/ github.com/assets/ gist.github.com/assets-cdn/worker/; connect-src 'self' uploads.github.com www.githubstatus.com collector.github.com raw.githubusercontent.com api.github.com github-cloud.s3.amazonaws.com github-production-repository-file-5c1aeb.s3.amazonaws.com github-production-upload-manifest-file-7fdce7.s3.amazonaws.com github-production-user-asset-6210df.s3.amazonaws.com *.rel.tunnels.api.visualstudio.com wss://*.rel.tunnels.api.visualstudio.com objects-origin.githubusercontent.com copilot-proxy.githubusercontent.com proxy.individual.githubcopilot.com proxy.business.githubcopilot.com proxy.enterprise.githubcopilot.com *.actions.githubusercontent.com wss://*.actions.githubusercontent.com productionresultssa0.blob.core.windows.net/ productionresultssa1.blob.core.windows.net/ productionresultssa2.blob.core.windows.net/ productionresultssa3.blob.core.windows.net/ productionresultssa4.blob.core.windows.net/ productionresultssa5.blob.core.windows.net/ productionresultssa6.blob.core.windows.net/ productionresultssa7.blob.core.windows.net/ productionresultssa8.blob.core.windows.net/ productionresultssa9.blob.core.windows.net/ productionresultssa10.blob.core.windows.net/ productionresultssa11.blob.core.windows.net/ productionresultssa12.blob.core.windows.net/ productionresultssa13.blob.core.windows.net/ productionresultssa14.blob.core.windows.net/ productionresultssa15.blob.core.windows.net/ productionresultssa16.blob.core.windows.net/ productionresultssa17.blob.core.windows.net/ productionresultssa18.blob.core.windows.net/ productionresultssa19.blob.core.windows.net/ github-production-repository-image-32fea6.s3.amazonaws.com github-production-release-asset-2e65be.s3.amazonaws.com insights.github.com wss://alive.github.com api.githubcopilot.com api.individual.githubcopilot.com api.business.githubcopilot.com api.enterprise.githubcopilot.com; font-src github.githubassets.com; form-action 'self' github.com gist.github.com copilot-workspace.githubnext.com objects-origin.githubusercontent.com; frame-ancestors 'none'; frame-src viewscreen.githubusercontent.com notebooks.githubusercontent.com; img-src 'self' data: blob: github.githubassets.com media.githubusercontent.com camo.githubusercontent.com identicons.github.com avatars.githubusercontent.com private-avatars.githubusercontent.com github-cloud.s3.amazonaws.com objects.githubusercontent.com secured-user-images.githubusercontent.com/ user-images.githubusercontent.com/ private-user-images.githubusercontent.com opengraph.githubassets.com github-production-user-asset-6210df.s3.amazonaws.com customer-stories-feed.github.com spotlights-feed.github.com objects-origin.githubusercontent.com *.githubusercontent.com; manifest-src 'self'; media-src github.com user-images.githubusercontent.com/ secured-user-images.githubusercontent.com/ private-user-images.githubusercontent.com github-production-user-asset-6210df.s3.amazonaws.com gist.github.com; script-src github.githubassets.com; style-src 'unsafe-inline' github.githubassets.com; upgrade-insecure-requests; worker-src github.com/assets-cdn/worker/ github.com/webpack/ github.com/assets/ gist.github.com/assets-cdn/worker/
content-length: 0
x-github-request-id: 08AE:28037B:1CFF19D:1DD5CF9:679CC07D
X-Firefox-Spdy: h2

GET objects.githubusercontent.com/github-production-release-asset-2e65be/89067146/20cbb000-ad66-11e9-874e-21ba4a81104d?X-Amz-Algorithm=AWS4-HMAC-SHA256&X-Amz-Credential=releaseassetproduction%2F20250131%2Fus-east-1%2Fs3%2Faws4_request&X-Amz-Date=20250131T122221Z&X-Amz-Expires=300&X-Amz-Signature=ca7688793db7a6abed24fd5c0269cc5b63f07ad8a4757d8d155c708a36d5b564&X-Amz-SignedHeaders=host&response-content-disposition=attachment%3B%20filename%3Dethminer-0.18.0-cuda9.1-windows-amd64.zip&response-content-type=application%2Foctet-stream

185.199.111.133

200 OK

1.7 MB

URL User Request GET HTTP/2
objects.githubusercontent.com/github-production-release-asset-2e65be/89067146/20cbb000-ad66-11e9-874e-21ba4a81104d?X-Amz-Algorithm=AWS4-HMAC-SHA256&X-Amz-Credential=releaseassetproduction%2F20250131%2Fus-east-1%2Fs3%2Faws4_request&X-Amz-Date=20250131T122221Z&X-Amz-Expires=300&X-Amz-Signature=ca7688793db7a6abed24fd5c0269cc5b63f07ad8a4757d8d155c708a36d5b564&X-Amz-SignedHeaders=host&response-content-disposition=attachment%3B%20filename%3Dethminer-0.18.0-cuda9.1-windows-amd64.zip&response-content-type=application%2Foctet-stream
IP
185.199.111.133:443
ASN
#54113 FASTLY

Certificate
IssuerDigiCert Inc
Subject*.github.io
Fingerprint97:D8:C5:70:0F:12:24:6C:88:BC:FA:06:7E:8C:A7:4D:A8:62:67:28
ValidityFri, 15 Mar 2024 00:00:00 GMT - Fri, 14 Mar 2025 23:59:59 GMT

File type
Zip archive data, at least v2.0 to extract, compression method=store
Size
1.7 MB (1743090 bytes)
Hash
c94ad172d15f1c24f55bf35bcaceafbe
f17bd2b5e0749368dfcc3760943ae25ef98d9646
01aec9fa9ec80872f46d2d65fee36464908d2103d21215f341e2a2b7dc6f69eb

Detections

Analyzer	Verdict	Alert
VirusTotal	malicious	VirusTotal - Scan result 38/63
ClamAV	malicious	Win.Trojan.Miner-9935601-0

HTTP Headers

GET /github-production-release-asset-2e65be/89067146/20cbb000-ad66-11e9-874e-21ba4a81104d?X-Amz-Algorithm=AWS4-HMAC-SHA256&X-Amz-Credential=releaseassetproduction%2F20250131%2Fus-east-1%2Fs3%2Faws4_request&X-Amz-Date=20250131T122221Z&X-Amz-Expires=300&X-Amz-Signature=ca7688793db7a6abed24fd5c0269cc5b63f07ad8a4757d8d155c708a36d5b564&X-Amz-SignedHeaders=host&response-content-disposition=attachment%3B%20filename%3Dethminer-0.18.0-cuda9.1-windows-amd64.zip&response-content-type=application%2Foctet-stream HTTP/1.1
Host: objects.githubusercontent.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
content-type: application/octet-stream
last-modified: Wed, 08 Dec 2021 07:53:49 GMT
etag: "0x8D9BA1FDEE394B5"
server: Windows-Azure-Blob/1.0 Microsoft-HTTPAPI/2.0
x-ms-request-id: 29a53cf2-801e-0056-03b9-7310ba000000
x-ms-version: 2025-01-05
x-ms-creation-time: Wed, 18 Aug 2021 06:43:45 GMT
x-ms-blob-content-md5: yUrRctFfHCT1W/Nbys6vvg==
x-ms-lease-status: unlocked
x-ms-lease-state: available
x-ms-blob-type: BlockBlob
content-disposition: attachment; filename=ethminer-0.18.0-cuda9.1-windows-amd64.zip
x-ms-server-encrypted: true
via: 1.1 varnish, 1.1 varnish
fastly-restarts: 1
accept-ranges: bytes
age: 0
date: Fri, 31 Jan 2025 12:22:22 GMT
x-served-by: cache-iad-kjyo7100030-IAD, cache-hel1410024-HEL
x-cache: HIT, MISS
x-cache-hits: 4, 0
x-timer: S1738326142.659798,VS0,VE102
content-length: 1743090
X-Firefox-Spdy: h2