How to remove nox_unload.exe
- File Details
- Overview
- Analysis
nox_unload.exe
The module nox_unload.exe has been detected as Trojan.Agent
File Details
| Product Name: |
|
| Company Name: |
|
| MD5: |
6f3a09c7d64f4027c008e2e19b4d85b7 |
| Size: |
1 MB |
| First Published: |
2020-01-17 13:57:53 (4 years ago) |
| Latest Published: |
2020-04-24 09:39:58 (4 years ago) |
| Status: |
Trojan.Agent (on last analysis) |
|
| Analysis Date: |
2020-04-24 09:39:58 (4 years ago) |
Overview
| %programfiles%\nox |
| %programfiles%\nox |
| %programfiles%\nox |
| %programfiles%\nox |
| %programfiles%\nox |
| %programfiles%\nox |
| %programfiles%\nox |
| %programfiles%\nox |
| %sysdrive%\nox |
| %programfiles%\nox |
|
23.5% |
|
|
11.8% |
|
|
11.8% |
|
|
11.8% |
|
|
5.9% |
|
|
5.9% |
|
|
5.9% |
|
|
5.9% |
|
|
5.9% |
|
|
5.9% |
|
|
5.9% |
|
| Windows 10 |
94.1% |
|
| Windows 7 |
5.9% |
|
Analysis
| Subsystem: |
Windows GUI |
| PE Type: |
pe |
| OS Bitness: |
32 |
| Image Base: |
0x00400000 |
| Entry Address: |
0x000014c0 |
| Name |
Size of data |
MD5 |
| .text |
214016 |
ad822bc79bdaa48131526d4293b82376 |
| .data |
512 |
09eb181d1ec79517f7115ea7cbf581d7 |
| .rdata |
27136 |
20fe8b90ca8a8ff038aa4dc19bbd21da |
| .eh_fram |
27136 |
5c3b6336705e77f6973360f021427bd8 |
| .bss |
0 |
00000000000000000000000000000000 |
| .idata |
26112 |
781200e851e1bfc329025c12e6426e00 |
| .CRT |
512 |
e420567f849ce9b5d345658cf2693a08 |
| .tls |
512 |
86e5c0e549afee9ae28d73406b9957c3 |
| .rsrc |
1196032 |
38cc2324f94e8ce04b5818ca592bcd9e |
