home

BoxedIce.ServerDensity.Agent.Windows.Forms.exe

Server Density

Server Density Limited

It is set to automatically execute when any user logs into Windows (through the local user run registry setting) with the name ‘Server Density’.
Publisher:
Boxed Ice  (signed by Server Density Limited)

Product:
Server Density

Version:
1.6.0.6

MD5:
018f51729e497ab3e407314a306c41de

SHA-1:
b1878816acdafc43eb99b7b9cd08a15658f7d543

SHA-256:
f7d6e801173adca1f793268c2b75b1cca14bfe39db9b6d9f7ea8d35d62357826

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
4/26/2024 2:31:13 AM UTC  (today)

File size:
41.1 KB (42,040 bytes)

Product version:
1.6.0.6

Copyright:
Copyright © Boxed Ice 2012

Original file name:
BoxedIce.ServerDensity.Agent.Windows.Forms.exe

File type:
Executable application (Win32 EXE)

Language:
Language Neutral

Common path:
C:\Program Files\boxed ice\server density\boxedice.serverdensity.agent.windows.forms.exe

Digital Signature
Signed by:
Server Density Limited

Authority:
VeriSign, Inc.

Valid from:
7/3/2013 5:00:00 PM

Valid to:
6/17/2014 4:59:59 PM

Subject:
CN=Server Density Limited, OU=Digital ID Class 3 - Microsoft Software Validation v2, O=Server Density Limited, L=London, S=London, C=GB

Issuer:
CN=VeriSign Class 3 Code Signing 2010 CA, OU=Terms of use at https://www.verisign.com/rpa (c)10, OU=VeriSign Trust Network, O="VeriSign, Inc.", C=US

Serial number:
3D07C7F5D123543674F85DB40EEA201B

File PE Metadata
Compilation timestamp:
12/17/2013 8:31:39 AM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
11.0

.NET CLR dependent:
Yes

CTPH (ssdeep):
384:vJQ9qQzqJoOcx8QWQ0eJ4lbui470wPEPlv296uM96uAcOsVA+1vUM87WTQ9IhY3I:izqg70wPEPKc1VAYvGIORwLux9Y5

Entry address:
0x8A6E

Entry point:
FF, 25, 00, 20, 40, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00...
 
[+]

Entropy:
5.4369

Code size:
27 KB (27,648 bytes)

Startup File (All Users Run)
Registry location:
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run

Name:
Server Density

Command:
C:\Program Files\boxed ice\server density\boxedice.serverdensity.agent.windows.forms.exe \minimized


Scan BoxedIce.ServerDensity.Agent.Windows.Forms.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.