home

BOXPN_Client.exe

Boxpn_Client_Win7

Cakinberk Telekom Ltd Sti

It is set to automatically start when a user logs into Windows via the current user run registry key under the display name ‘Boxpn_VPN_Startup’.
Publisher:
Boxpn  (signed by Cakinberk Telekom Ltd Sti)

Product:
Boxpn_Client_Win7

Description:
Boxpn_Client

Version:
1.1.0.11

MD5:
1dd5cd05c2987e9a29d2391d28073cfb

SHA-1:
7e97048cf2127f0ecd9bbd2c10b60e3545e7d3f0

SHA-256:
c5f70f1b43f474a10eabbd3718496d9ec40432e27971e667f7ecca774f1d4130

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
4/24/2024 6:41:25 AM UTC  (today)

File size:
600.2 KB (614,592 bytes)

Product version:
1.1.0.11

Copyright:
Cakinberk Telekom Ltd Sti

Original file name:
BOXPN_Client.exe

File type:
Executable application (Win32 EXE)

Language:
Language Neutral

Common path:
C:\Program Files\boxpn\boxpn client win7\boxpn_client.exe

Digital Signature
Signed by:
Cakinberk Telekom Ltd Sti

Authority:
GlobalSign nv-sa

Valid from:
6/28/2013 5:39:30 PM

Valid to:
7/29/2014 5:39:30 PM

Subject:
E=support@boxpn.com, CN=Cakinberk Telekom Ltd Sti, O=Cakinberk Telekom Ltd Sti, L=Balikesir, S=TR, C=TR

Issuer:
CN=GlobalSign CodeSigning CA - G2, O=GlobalSign nv-sa, C=BE

Serial number:
1121606F36707D742B4E2AAA5C1C092B58A2

File PE Metadata
Compilation timestamp:
7/5/2013 1:09:33 PM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
8.0

.NET CLR dependent:
Yes

CTPH (ssdeep):
6144:vtsclZ5S0cGdQH09/GdQH0Dt5kHzS0tzS0evnsWkebaT7WBcoFuk925ke0/:1scJrcGdQHmGdQHVr9revVkC47SlOH0/

Entry address:
0x8390E

Entry point:
FF, 25, 00, 20, 40, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00...
 
[+]

Entropy:
6.3269

Developed / compiled with:
Microsoft Visual C# / Basic .NET

Code size:
518.5 KB (530,944 bytes)

Startup File (User Run)
Registry location:
HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Run

Name:
Boxpn_VPN_Startup

Command:
"C:\Program Files\boxpn\boxpn client win7\boxpn_client.exe"


Scan BOXPN_Client.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.