Boxore.exe

Boxore

Boxore OU

The application Boxore.exe has been detected as a potentially unwanted program by 1 anti-malware scanner with very strong indications that the file is a potential threat. It is set to automatically execute when any user logs into Windows (through the local user run registry setting) with the name ‘Boxore Client’. This file is typically installed with the program Boxore Client by Boxore OU which is a potentially unwanted software program. While running, it connects to the Internet address ns04.hiwit.net on port 80 using the HTTP protocol.
Publisher:
Boxore OU

Product:
Boxore

Version:
6, 0, 0, 0

MD5:
5cb2e8a9b6935f228623c69f1b17669d

SHA-1:
13a6576d10d4058dc52ccf737f39ebac76fe18af

SHA-256:
be974e99513a039056fd7085ce8c177bc663bddfa18022045fe27cd7be9b68f8

Scanner detections:
1 / 68

Status:
Potentially unwanted

Analysis date:
4/6/2025 12:25:24 AM UTC  (today)

Scan engine
Detection
Engine version

Reason Heuristics
PUP.Boxore.BoxoreOU.Meta (M)
15.8.1.13

File size:
1.5 MB (1,538,560 bytes)

Product version:
6, 0, 0, 0

Original file name:
Boxore.exe

File type:
Executable application (Win32 EXE)

Language:
English (United States)

Common path:
C:\Program Files\boxore\boxore client\boxore.exe

File PE Metadata
Compilation timestamp:
7/30/2015 9:23:57 PM

OS version:
5.1

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
12.0

CTPH (ssdeep):
24576:uQFpZ+XJz3MabTtnaTJElFmjyCytJlFNs6HpIcXeiqHV9XOotnlHQ4IgEIY2Ws:Enla1CHJ1sh2otnlHQ4IvIIs

Entry address:
0x161000

Entry point:
E9, 3E, DD, F7, FF, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, C3, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00...
 
[+]

Entropy:
6.6096

Packer / compiler:
Xtreme-Protector v1.05

Code size:
1.2 MB (1,229,312 bytes)

Startup File (All Users Run)
Registry location:
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run

Name:
Boxore Client

Command:
C:\Program Files\boxore\boxore client\boxore.exe


The file Boxore.exe has been discovered within the following program.

Boxore Client  by Boxore OU
Typically bundled through 3rd party download managers as an 'offer'. The software will modify the user's web browser and display advertisements in Internet Explorer, Chrome and Firefox as well as modify the home and search pages.
www.boxore.com
81% remove it
 
Powered by Should I Remove It?

The executing file has been seen to make the following network communication in live environments.

TCP (HTTP):
Connects to ns04.hiwit.net  (194.150.236.156:80)

Remove Boxore.exe - Powered by Reason Core Security