Windows PE crypter-as-a-service. Free file check, prepaid XMR credits, private stub on every crypt.
Check for free. Buy credits when ready. Pay only when a package is produced.
Upload a PE with no account. Same gate as crypt — hard refusals and soft-risk notes before you spend.
Register, pick a pack, pay in Monero. Credits land after 3 confirmations (~5 min). No calendar expiry.
EXE or DLL. Soft risks need confirm. A credit is reserved, then finalized only when the delivery ZIP is ready.
ZIP = crypted EXE + README. Two free remorphs: re-upload the same original (SHA-256). Originals are not kept on the server.
Private drops, prepaid credits, and gates that protect expensive crypts.
1 credit = 1 distinct crypt. Free re-issues included. Credits burn only when a ZIP is produced.
Shared stubs burn with one AV signature. Nox prices a private stub into every crypt. Check your file free before you buy.
Credits, file check, re-issues, MotW, and what Nox will and will not do.
1 credit = 1 distinct crypt (one original PE → one private polymorphic package). Credits do not calendar-expire. Soft risks need your confirm before a credit is reserved.
A credit is reserved when packaging starts and finalized only after a delivery ZIP is written. Hard refusals never charge. If the build fails, the reserve is refunded automatically.
Yes. Use Check file — free, no account. It runs the same gate as crypt time and reports hard refusals and soft risks.
32-bit and 64-bit Windows PE: native EXE/DLL and .NET. PE overlays (PyInstaller/SFX) are preserved. ARM64 is refused. Electron/onedir apps often need their whole folder beside the drop.
Shapes that can pack but may fail at runtime — for example missing app-local DLLs, .NET needing config/args, or stripped relocs. You must confirm before a credit is reserved.
Each crypt includes two free remorphs. Re-upload the same original PE; Nox verifies SHA-256 against the fingerprint from the credited crypt. A different file is refused. Originals are not kept on the server after packaging — keep your own copy.
The original is used only to build, then deleted. The server keeps SHA-256 + size for re-issue checks, plus the delivery ZIP for the retention window so you can download it.
Your crypted EXE and a README with receipt token and MotW Unblock steps. Browser downloads still get MotW on the ZIP; Unblock is buyer-side.
No. Unblock removes the “downloaded from the internet” mark. It does not change scanning or reputation for a new unsigned hash.
No. Packaging is lab-checked under live Microsoft Defender with Tamper Protection on. That is evidence for that lab, not immunity to every EDR or future signature.
The outer Nox PE is asInvoker (no UAC from the stub). If you need elevation, put that in your payload.
Monero (XMR) only. Fresh subaddress per invoice. Credits land after 3 confirmations (~5 minutes). Over/late payment rules bank excess XMR to your account balance where applicable.
Email support from the footer contact address. Include your crypt receipt token when asking about a package.
Account, balances, password, and shortcuts.
Changing password signs out other sessions.
One-time voucher codes grant free credits.
Free preflight — no account, no credit. See if Nox would accept your PE before you buy.
Same gate as crypt time. Hard refusals never charge. Soft risks need confirm when you crypt. Runtime success still depends on host and side-by-side DLLs.
Pay in Monero. Credits land after confirmations — then crypt whenever you're ready.
Paste your receipt token or the exact XMR subaddress you paid. Works without cookies.
Upload a Windows PE/DLL. Credits finalize only when a delivery ZIP is produced.
Credits burn only when a delivery ZIP is produced. Hard refusals never charge. Soft risks ask for confirm first.
Evasion profile
Every crypt ships the full profile — anti-VM, AMSI/ETW patch, indirect syscalls, fresh-ntdll unhook.
Icon
Your crypts, credit invoices, and ledger.
One-time-use voucher codes grant free credits. Paste a code and redeem it to your account.
Overpayments, late payments and refunds land here. Checkout against a pack applies your balance automatically. Request a payout to any Monero address — the owner approves and sends.