How to remove Nox.exe
Nox.exe
The module Nox.exe has been detected as Trojan.CoinMiner
File Details
Product Name: | NoxPlayer |
Company Name: | Duodian Technology Co. Ltd. |
MD5: | 6912b4ef68521acb9f91fb7815e56ab6 |
Size: | 8 MB |
First Published: | 2020-02-15 09:13:45 (4 years ago) |
Latest Published: | 2020-03-20 08:48:03 (4 years ago) |
Status: | Trojan.CoinMiner (on last analysis) | |
Analysis Date: | 2020-03-20 08:48:03 (4 years ago) |
Overview
Signed By: | Nox Limited |
Status: | Valid |
Common Places:
%programfiles%\nox |
%programfiles%\nox |
%programfiles%\nox |
%programfiles%\nox |
%programfiles%\nox |
%programfiles%\nox |
%programfiles%\nox |
%programfiles%\nox |
%programfiles%\nox |
%programfiles%\nox |
Geography:
23.5% | ||
17.6% | ||
17.6% | ||
11.8% | ||
11.8% | ||
11.8% | ||
5.9% |
OS Version:
Windows 10 | 64.7% | |
Windows 7 | 35.3% |
Analysis
Subsystem: | Windows GUI |
PE Type: | pe |
OS Bitness: | 32 |
Image Base: | 0x00400000 |
Entry Address: | 0x000014c0 |
PE Sections:
Name | Size of data | MD5 |
.text | 6954496 | 0a40d0732413ba5ff9d9e94f4b7c1ed8 |
.data | 7168 | 5af3df470febd8b9291d39e8008289cc |
.rdata | 590848 | 19d04e72d2b025718fccd0f5407974c2 |
.eh_fram | 576512 | 52c6f73a6bfde151c68334a0c39377d4 |
.bss | 0 | 00000000000000000000000000000000 |
.idata | 109056 | 65063617290fc8e85cd5f3db18d03192 |
.CRT | 512 | b4f667775293bc43aa7ef49f67b0e301 |
.tls | 512 | 6b0fa407fcac1ae6c29f05b778546fa9 |
.rsrc | 155136 | 242b029e7b985e613f47c7f27b20ec9a |
More information:
Download GridinSoft
Anti-Malware - Removal tool for Nox.exe