SoloPoolMiner.exetigerrat analysis report - Suspicious

Nothing in the signature set below matched this file. That is one engine's negative answer against one signature set on one day, and it is not a verdict. A signature engine only recognises what has already been named and published, so a file nobody has named yet scans exactly like a file that is harmless. What this file does when it runs is the stronger evidence; read the behaviour sections for that.

This run did not record which signature set answered, so the result above cannot be tied to a named set or reproduced against one. Recording the set began part way through this platform's history, and this scan predates it.

This scan ran before the local classifier was installed on this host, so no model score was produced for it. Submitting the same file again produces one.

Structural rules of thumb, not a model. 2 cheap static signals fired, for 15 of 100 on a rule-of-thumb scale that is deliberately left out of the verdict score: the packing, entropy and signing cards on this report already price the same facts, and counting them a second time under a machine-learning heading would charge one piece of evidence twice.

• unsigned executable
• TLS callback

Flagged string categories

These say what the file IS or holds - bitness, subsystem, an overlay, an embedded macro stream, which compiler built it. Ordinary files match several, and none of them carry weight in the score.

None of the rules above moved the score. The score model reads four rule categories - anti-vm, anti-debug, dropper and packer - and a rule outside them can match, and be worth reading, without being evidence the verdict is built on.

• !This program cannot be run in DOS mode.
• .text
• `.rdata
• @.data
• .pdata
• @.nv_fatbh
• @.fptable
• .reloc
• @USVWATAUAVAWH
• t$ UWATAUAVH
• t$ UWATAVAWH
• L$DHi
• xqt.I
• ntel
• ineI
• Genu
• G0Hch
• G0Lch
• p AWH
• stZE
• stXE
• stYE
• VWATAVAWH
• UWATAVAWH
• @USWH
• @USVWATAVAWH
• USVWATAUAVAWH
• WATAVH
• xtCA
• t\<jtLA
• x ATAVAWH
• VWATAVAW
• @USVWATAUAVH
• l$ VWATAVAWH
• ATAVAWH
• USVWATAVAWH
• ATAUAVAWH
• dybE3
• // SHA256 constants
• inline uint bswap32_cl(uint x) {
• __kernel void sha256d_opencl_kernel(
• __global const uint* midstate,
• __global const uint* tail,
• uint nonce_base,
• __global uint* results
• uint nonce = nonce_base + get_global_id(0);
• // Load midstate
• // Second block: tail + nonce + padding
• // Second SHA256 on the 32-byte result
• uint final_h = 0x5be0cd19 + h;
• uint le_h = bswap32_cl(final_h);
• // Check if hash meets minimum difficulty (last 4 bytes zero)
• uint idx = atomic_add(&results[0], 1);
• bestshare.txt
• %lf %7s
• %.2f %s
• solopool_config.txt
• address=%s
• password=%s
• address=
• password=
• %s: %u%%
• solopool_miner.log
• -cl-mad-enable -cl-fast-relaxed-math
• OpenCL build error: %s
• sha256d_opencl_kernel
• CUDA GPU %d: %s (%d SMs)
• NVIDIA
• OpenCL GPU %d: %s
• GPU: %d CUDA + %d OpenCL devices
• GPU: %d CUDA device(s)
• GPU: %d OpenCL device(s)
• No GPU devices found
• Connected to %s:%d
• mining.submit
• mining.suggest_difficulty
• TX: %s
• {"id":99,"method":"mining.suggest_difficulty","params":[%d]}
• >>> Suggested new difficulty: %d (was pool diff: %d)
• %s%s%s%s
• 0000000000000000000000000000000000000000000000000000000000000000
• %s%s%s%s%s%s
• "params"
• true
• Ready to submit shares
• [CLEAN]
• New job: %s diff=%.0f %s
• Pool difficulty: %.0f
• {"id":1,"method":"mining.subscribe","params":["SoloPoolMiner/44.3-GUI"]}
• Subscribed: extranonce1=%s, size=%d
• {"id":2,"method":"mining.authorize","params":["%s","%s"]}
• {"id":3,"method":"mining.suggest_difficulty","params":[%d]}
• Suggested initial difficulty: %d
• mining.notify
• mining.set_difficulty
• Authorized OK
• "result":true
• Share ACCEPTED [%u/%u]
• "result":false
• reject
• Share REJECTED [%u/%u]
• {"id":%d,"method":"mining.submit","params":["%s","%s","%s","%s","%s"]}
• [%s] Share diff=%.1f (pool=%.0f)
• Connection lost, reconnecting...
• Error
• Please enter a valid Bitcoin address
• stratum.solopool.com
• SoloPool Miner v1.0.4 - GUI Edition
• stratum.solopool.com:3333
• Pool: %s
• Worker: %s
• CPU: %d threads @ %d%% power | GPU: %d device(s) @ %d%% power
• Stopping miner...
• Miner stopped
• CPU: %u/%u | GPU: %u/%u | Total: %u/%u (%.1f%%) | SPM: %.1f
• Best: %.1f / %.1f | Uptime: %02d:%02d:%02d | Diff: %.0f | Suggested: %d
• Consolas
• SoloPool.Com Miner v1.0.4
• STATIC
• Pool: stratum.solopool.com:3333
• Worker:
• EDIT
• Password:
• Enable CPU Mining
• BUTTON
• Power
• msctls_trackbar32
• %d%%
• Enable GPU Mining
• Generate Coins
• Stop Mining
• View My Stats on SoloPool
• CPU Red Zone
• CPU RED ZONE ACTIVATED!
• CPU is now running above 80% power.
• WARNING:
• - Increased heat and power consumption
• - Higher CPU temperatures
• - May cause system instability
• Monitor your temps!
• GPU Red Zone
• GPU RED ZONE ACTIVATED!
• GPU is now running above 80% power.
• - Higher GPU temperatures
• - Potential thermal throttling
• https://www.solopool.com/user.html?network=mainnet&address=%s
• open
• Info
• Please enter a valid Bitcoin address first
• SoloPool Miner
• Mining is in progress. Stop and exit?
• SoloPoolMinerGUIClass
• SoloPool.Com Miner v1.0.4 - CUDA + CPU Hybrid
• Failed to create window
• SoloPool Miner v1.0.4 GUI ready
• SHA256-NI
• Software
• CPU: %d cores | SHA: %s
• Best share ever: %.2f (%s)
• Enter your BTCADDR.WORKERNAME and click 'Generate Coins' to start!
• _Z19sha256d_cuda_kernelPKjS0_jPj
• o.ho,
• nvcuda.dll
• cuGetProcAddress_v2
• cuGetExportTable
• nvcudart_hybrid64.dll
• __cdecl
• __stdcall
• __thiscall
• __fastcall
• __vectorcall
• __preserve_none
• __clrcall
• __eabi
• __restrict
• __unaligned
• restrict(
• delete
• operator
• `vftable'
• `vbtable'
• `vcall'
• `typeof'
• `local static guard'
• `string'
• `vbase destructor'
• `vector deleting destructor'
• `default constructor closure'
• `scalar deleting destructor'
• `vector constructor iterator'
• `vector destructor iterator'
• `vector vbase constructor iterator'
• `virtual displacement map'
• `eh vector constructor iterator'
• `eh vector destructor iterator'
• `eh vector vbase constructor iterator'
• `copy constructor closure'
• `udt returning'
• `RTTI
• `local vftable'

No strings match this filter.