How to remove Nox.exe
Nox.exe
The module Nox.exe has been detected as Trojan.CoinMiner
File Details
Product Name: | NoxPlayer |
Company Name: | Duodian Technology Co. Ltd. |
MD5: | 3caa1994ae33fe982645bead30a982e8 |
Size: | 8 MB |
First Published: | 2020-02-22 10:35:29 (4 years ago) |
Latest Published: | 2020-03-22 03:40:30 (4 years ago) |
Status: | Trojan.CoinMiner (on last analysis) | |
Analysis Date: | 2020-03-22 03:40:30 (4 years ago) |
Overview
Signed By: | Nox Limited |
Status: | Valid |
Common Places:
%programfiles%\nox |
%programfiles%\nox |
%programfiles%\nox |
%programfiles%\nox |
%programfiles%\nox |
%programfiles%\nox |
%programfiles%\nox |
%programfiles%\nox |
%programfiles%\nox |
%programfiles%\nox |
Geography:
28.6% | ||
28.6% | ||
7.1% | ||
7.1% | ||
7.1% | ||
7.1% | ||
7.1% | ||
7.1% |
OS Version:
Windows 10 | 71.4% | |
Windows 7 | 28.6% |
Analysis
Subsystem: | Windows GUI |
PE Type: | pe |
OS Bitness: | 32 |
Image Base: | 0x00400000 |
Entry Address: | 0x000014c0 |
PE Sections:
Name | Size of data | MD5 |
.text | 7124480 | 3dd741bc131c1b19c849132fc6046458 |
.data | 7168 | 0504e541c0001bdc37e800932282c474 |
.rdata | 601088 | 0ee1d247e454d1e3bf143aa467275428 |
.eh_fram | 587776 | c85df42845820aab17edd27ff92ba51e |
.bss | 0 | 00000000000000000000000000000000 |
.idata | 109568 | e1b8a6bf06905cedcdde8ee4aa73cef9 |
.CRT | 512 | a1ea191fb79215fa3870af0b24375b92 |
.tls | 512 | d81dfc120fb7fecf3983b9db028ddd55 |
.rsrc | 155136 | c45bdc8277e50c71494aa36ad2589aeb |
More information:
Download GridinSoft
Anti-Malware - Removal tool for Nox.exe