How to remove excavator.exe

excavator.exe

The module excavator.exe has been detected as Risk.CoinMiner

excavator.exe
Product Name:

NiceHash Excavator

Company Name:

NICEHASH Ltd

MD5: e0b4f561b8d2b7b1f52da2d886dd1f7e
Size: 29 MB
First Published: 2025-08-10 23:01:41 (a week ago)
Latest Published: 2025-08-10 23:01:41 (a week ago)
Status: Risk.CoinMiner (on last analysis)
Analysis Date: 2025-08-10 23:01:41 (a week ago)
Signed By: H-BIT, d.o.o.
Status: Valid
%localappdata%\programs\nicehash miner\miner_plugins\27315fe0-3b03-11eb-b105-8d43d5bd63be\bins\22.3
100.0%
Windows 10 100.0%
Subsystem: Windows CUI
PE Type: pe
OS Bitness: 64
Image Base: 0x0000000140000000
Entry Address: 0x07c751d9

PE Sections:

Name Size of data MD5
.text 0 d41d8cd98f00b204e9800998ecf8427e
.rdata 0 d41d8cd98f00b204e9800998ecf8427e
.data 0 d41d8cd98f00b204e9800998ecf8427e
.pdata 0 d41d8cd98f00b204e9800998ecf8427e
.nv_fatb 0 d41d8cd98f00b204e9800998ecf8427e
.nvFatBi 0 d41d8cd98f00b204e9800998ecf8427e
_RDATA 0 d41d8cd98f00b204e9800998ecf8427e
_RANDOMX 0 d41d8cd98f00b204e9800998ecf8427e
.BPQ 0 d41d8cd98f00b204e9800998ecf8427e
.qyc 17408 bcf681f149b1ec519d1b809e2810db70
.xYt 30213632 31a2d09e5c0c271e0e1fc78acef52627
.reloc 512 3db2a9d2f2bd8ce5431107905dca46ca
.rsrc 286720 2949628303ce474b3970df7fbfabafa5

More information:

Download GridinSoft Anti-Malware - Removal tool for excavator.exe