How to remove excavator.exe
- File Details
- Overview
- Analysis
excavator.exe
The module excavator.exe has been detected as Trojan.CoinMiner
File Details
| Product Name: |
|
| Company Name: |
|
| MD5: |
4ab958291c4446b44d204f8dbbbc90ea |
| Size: |
30 MB |
| First Published: |
2025-06-12 23:00:52 (5 months ago) |
| Latest Published: |
2025-06-12 23:00:52 (5 months ago) |
| Status: |
Trojan.CoinMiner (on last analysis) |
|
| Analysis Date: |
2025-06-12 23:00:52 (5 months ago) |
Overview
| %localappdata%\programs\nicehash miner\miner_plugins\27315fe0-3b03-11eb-b105-8d43d5bd63be\bins\24.2 |
Analysis
| Subsystem: |
Windows CUI |
| PE Type: |
pe |
| OS Bitness: |
64 |
| Image Base: |
0x0000000140000000 |
| Entry Address: |
0x0722eab0 |
| Name |
Size of data |
MD5 |
| .text |
0 |
d41d8cd98f00b204e9800998ecf8427e |
| .rdata |
0 |
d41d8cd98f00b204e9800998ecf8427e |
| .data |
0 |
d41d8cd98f00b204e9800998ecf8427e |
| .pdata |
0 |
d41d8cd98f00b204e9800998ecf8427e |
| .nv_fatb |
0 |
d41d8cd98f00b204e9800998ecf8427e |
| .nvFatBi |
0 |
d41d8cd98f00b204e9800998ecf8427e |
| _RDATA |
0 |
d41d8cd98f00b204e9800998ecf8427e |
| _RANDOMX |
0 |
d41d8cd98f00b204e9800998ecf8427e |
| .:Bj |
0 |
d41d8cd98f00b204e9800998ecf8427e |
| .I>0 |
17408 |
f9e3c2ac04b4d6aa7aaf289314e1a5e0 |
| .:.3 |
31224832 |
d25a7896c904b6e043a92cb4fd798e1d |
| .reloc |
512 |
562f603e70f6c1b4f610ab62658b8214 |
| .rsrc |
286720 |
d1e6532fd671631435a9e71b15e2e473 |
