home

boxen.exe

This is a setup program which is used to install the application.
MD5:
450702a93d8d98562a6e43eea4abf0c7

SHA-1:
080cdb24f1cdae5432d4bf6340b7a3533437dd2c

SHA-256:
0bbca9574a13ee963b24bf5d396659ada2fa2d25b2d40308c00f1d3b04342f7d

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
11/1/2024 1:34:12 AM UTC  (today)

File size:
930.5 KB (952,832 bytes)

File type:
Executable application (Win32 EXE)

Common path:
C:\users\{user}\downloads\boxen.exe

File PE Metadata
Compilation timestamp:
5/19/2009 2:07:46 PM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
5.0

CTPH (ssdeep):
24576:yOUydrBIfYP5WO3JsA7yLPiOm6Qls/u8:tdtIfYBWO3JsKMiX6o

Entry address:
0x1494

Entry point:
EB, 10, 66, 62, 3A, 43, 2B, 2B, 48, 4F, 4F, 4B, 90, E9, 98, 80, 4C, 00, A1, 8B, 80, 4C, 00, C1, E0, 02, A3, 8F, 80, 4C, 00, 52, 6A, 00, E8, 15, 5A, 0C, 00, 8B, D0, E8, 66, 0E, 0B, 00, 5A, E8, C0, 0D, 0B, 00, E8, 9B, 0E, 0B, 00, 6A, 00, E8, BC, 1F, 0B, 00, 59, 68, 34, 80, 4C, 00, 6A, 00, E8, EF, 59, 0C, 00, A3, 93, 80, 4C, 00, 6A, 00, E9, BF, A1, 0B, 00, E9, EE, 1F, 0B, 00, 33, C0, A0, 7D, 80, 4C, 00, C3, A1, 93, 80, 4C, 00, C3, 60, BB, 00, 50, B0, BC, 53, 68, AD, 0B, 00, 00, C3, B9, E4, 00, 00, 00, 0B, C9...
 
[+]

Code size:
796 KB (815,104 bytes)

The file boxen.exe has been seen being distributed by the following URL.

ftp://cashpoint.mine.nu/Quorion/?vrigt Quorion/.../BOXEN.exe

Scan boxen.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.