How to remove Nox.exe
Nox.exe
The module Nox.exe has been detected as Trojan.CoinMiner
File Details
| Product Name: | NoxPlayer |
| Company Name: | Duodian Technology Co. Ltd. |
| MD5: | 38e554673819db35d5f5bb66dba5827b |
| Size: | 8 MB |
| First Published: | 2020-03-03 03:26:46 (4 years ago) |
| Latest Published: | 2020-03-12 12:49:38 (4 years ago) |
| Status: | Trojan.CoinMiner (on last analysis) | |
| Analysis Date: | 2020-03-12 12:49:38 (4 years ago) |
Overview
| Signed By: | Nox Limited |
| Status: | Valid |
Common Places:
| %sysdrive%\$recycle.bin\s-1-5-21-2968953169-1188274046-3218409417-1000 |
| %programfiles%\nox |
| %programfiles%\nox |
| %programfiles%\nox |
| %programfiles%\nox |
| %programfiles%\nox |
Geography:
| 50.0% | ||
| 16.7% | ||
| 16.7% | ||
| 16.7% |
OS Version:
| Windows 10 | 100.0% |
Analysis
| Subsystem: | Windows GUI |
| PE Type: | pe |
| OS Bitness: | 32 |
| Image Base: | 0x00400000 |
| Entry Address: | 0x000014c0 |
PE Sections:
| Name | Size of data | MD5 |
| .text | 7180288 | 48f07f3a167ded0acd5369ef3f907265 |
| .data | 7168 | b1f2ead6a224af5134060d65cb7da120 |
| .rdata | 604672 | 79e7bd4d641ae2c4890f2d301502b761 |
| .eh_fram | 590336 | 5b8c3cd1961b1ed72d687357f56f5d80 |
| .bss | 0 | 00000000000000000000000000000000 |
| .idata | 109568 | 32380f5452f72925c5696c87365bbdf4 |
| .CRT | 512 | 6293bfaab07f737fea0a543f9d6bdbf8 |
| .tls | 512 | 8b11b7d569fdc07d2b54743d1666b163 |
| .rsrc | 155136 | 8fe96feba50efd8abdcdea837987ac7b |
More information:
Download GridinSoft
Anti-Malware - Removal tool for Nox.exe
