How to remove MP.Excavator.dll

MP.Excavator.dll

The module MP.Excavator.dll has been detected as Trojan.CoinMiner

MP.Excavator.dll
Remove MP.Excavator.dll

File Details

Product Name:

MP.Excavator
Company Name:

MP.Excavator
MD5: 2471ddb59f0605e6bc59b860e837cc27
Size: 15 KB
First Published: 2021-09-04 20:26:50 (4 years ago)
Latest Published: 2024-12-16 23:02:05 (11 months ago)
Status: Trojan.CoinMiner (on last analysis)
Analysis Date: 2024-12-16 23:02:05 (11 months ago)

Common Places:

%localappdata%\programs\nicehash miner\miner_plugins\27315fe0-3b03-11eb-b105-8d43d5bd63be\dlls
%localappdata%\programs\nicehash miner\miner_plugins\27315fe0-3b03-11eb-b105-8d43d5bd63be\dlls
%localappdata%\programs\nicehash miner\miner_plugins\27315fe0-3b03-11eb-b105-8d43d5bd63be\dlls
%sysdrive%\$recycle.bin\s-1-5-21-1284783439-2142034451-2678478511-1001\$re5kgse\miner_plugins\27315fe0-3b03-11eb-b105-8d43d5bd63be\dlls
%localappdata%\programs\nicehash miner\miner_plugins\27315fe0-3b03-11eb-b105-8d43d5bd63be\dlls
%localappdata%\programs\nicehash miner\miner_plugins\27315fe0-3b03-11eb-b105-8d43d5bd63be\dlls
%localappdata%\programs\nicehash miner\miner_plugins\27315fe0-3b03-11eb-b105-8d43d5bd63be\dlls

Geography:

28.6%
28.6%
14.3%
14.3%
14.3%

OS Version:

Windows 10 100.0%

Analysis

Subsystem: Windows CUI
PE Type: pe
OS Bitness: 64
Image Base:
Entry Address:

.NET Info:

MVID: beab7397-3558-4a06-9864-40a9cee31723

PE Sections:

Name Size of data MD5
.text 14336 ec0475a041ce66d86916dbeba86bf422
.rsrc 1024 c99c0e96a930bc6c12b41f290c12955d

More information:

Search on Virustotal
Download GridinSoft Anti-Malware - Removal tool for MP.Excavator.dll
copyright for information about MP.Excavator.dll