NXSUB.EXE – Unclassified Malware removal

NXSUB.EXE size: 94275 bytes
NXSUB.EXE hash: 464F20DFBC3AD487B8A951C2ECDF99E5

Created files:

%Program Files%\nxtech\nsearchx.exe
%Program Files%\nxtech\nxsub.exe
%Common AppData%\Microsoft\Dr Watson\user.dmp

Autostart registry keys:

HKLM\System\CurrentControlSet\Services\nsearchx\Type: 10000000
HKLM\System\CurrentControlSet\Services\nsearchx\Start: 02000000
HKLM\System\CurrentControlSet\Services\nsearchx\ErrorControl: 01000000
HKLM\System\CurrentControlSet\Services\nsearchx\DisplayName: nsearchx svc
HKLM\System\CurrentControlSet\Services\nsearchx\ImagePath: %Program Files%\nxtech\nxsub.exe

Detected by UnHackMe:

NXSUB.EXE
Default location: %PROGRAM FILES%\NXTECH\NXSUB.EXE

Dropper information:
MD5: 9e1125979be7ec801afab6ee356adba8
File size: 107041 bytes