home

Box for Office.exe

main

Box.net, Inc.

This is a setup program which is used to install the application. The file has been seen being downloaded from sync.box.net.
Publisher:
Box  (signed by Box.net, Inc.)

Product:
main

Description:
Simple, Secure Collaboration : Online File Storage, FTP Replacement, Team Workspaces

Version:
3.6.2

MD5:
dfb7b0b1263b929f7a5a26f6789ffc44

SHA-1:
616c99a2361a4402d226633a66842a1d6064d8d9

SHA-256:
2e8aa08090c1b081f1cd627a2c9b402f1ef4a95528fd269b67bdddeda92723c5

Scanner detections:
1 / 68

Status:
Clean  (1 probable false positive detection)

Explanation:
This is mosty likely a false positive detection, the file is probably clean.

Analysis date:
12/27/2024 2:43:33 AM UTC  (today)

Scan engine
Detection
Engine version

Dr.Web
Tool.SMSSend.241
9.0.1.094

File size:
19.4 MB (20,342,488 bytes)

Product version:
3.6.2

Copyright:
Copyright (C) Box

Original file name:
Box for Office.exe

File type:
Executable application (Win32 EXE)

Language:
English (United States)

Common path:
C:\users\{user}\downloads\box for office.exe

Digital Signature
Signed by:
Box.net, Inc.

Authority:
Thawte, Inc.

Valid from:
10/6/2011 5:00:00 PM

Valid to:
10/7/2013 4:59:59 PM

Subject:
CN="Box.net, Inc.", OU=Unknown, O="Box.net, Inc.", L=Palo Alto, S=California, C=US

Issuer:
CN=Thawte Code Signing CA - G2, O="Thawte, Inc.", C=US

Serial number:
3AC3971B7F8047952169FD83D6A803C2

File PE Metadata
Compilation timestamp:
8/16/2011 2:31:34 AM

OS version:
5.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
9.0

CTPH (ssdeep):
393216:HQeBSe5h/3yUCpnOa6berh7eey6nClZmRCpnOal:lsUCoa9e6nCWRCoal

Entry address:
0x2CA27

Entry point:
E8, 96, 91, 00, 00, E9, 79, FE, FF, FF, 8B, FF, 55, 8B, EC, 83, EC, 10, 53, 56, FF, 75, 10, 8D, 4D, F0, E8, D7, FA, FF, FF, 8B, 5D, 08, 33, F6, 3B, DE, 75, 2F, E8, 42, 2B, 00, 00, 56, 56, 56, 56, 56, C7, 00, 16, 00, 00, 00, E8, CA, 2A, 00, 00, 83, C4, 14, 80, 7D, FC, 00, 74, 07, 8B, 45, F8, 83, 60, 70, FD, B8, FF, FF, FF, 7F, E9, C0, 00, 00, 00, 57, 8B, 7D, 0C, 3B, FE, 75, 2F, E8, 0B, 2B, 00, 00, 56, 56, 56, 56, 56, C7, 00, 16, 00, 00, 00, E8, 93, 2A, 00, 00, 83, C4, 14, 80, 7D, FC, 00, 74, 07, 8B, 45, F8...
 
[+]

Entropy:
7.6682

Code size:
247.5 KB (253,440 bytes)

The file Box for Office.exe has been discovered within the following program.

Toolwiz Time Freeze 2016  by ToolWiz
www.Toolwiz.com
About 4% of users remove it
 
Powered by Should I Remove It?

The file Box for Office.exe has been seen being distributed by the following URL.

http://sync.box.net/toolbar/OFFICE/.../Box for Office.exe

Scan Box for Office.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.