» gogobox.exe
Overview
Analysis
File Details
Behaviors (1)

gogobox.exe

gogobox

Nextlink Technology Co., Ltd.

File name:

gogobox.exe

Publisher:

Nextlink Technology Co., Ltd. (signed and verified)

Product:

gogobox

Version:

2.0.9.8

MD5:

92f86c7ae7a2ad14e42f8bdc46f35bfc

SHA-1:

310ab378562e41584cdfe351caa250dbabd53f66

SHA-256:

076de0079e2b97e719d11943e0d841e8df3ddb37128da9c02b800a66e28c0ec3

Scanner detections:

0 / 68

Status:

Clean (as of last analysis)

Analysis date:

4/23/2024 8:21:56 PM UTC (today)

File size:

1.3 MB (1,328,984 bytes)

Product version:

2.0.9.8

Original file name:

gogobox.exe

File type:

Executable application (Win32 EXE)

Common path:

C:\Program Files\gogobox\gogobox.exe

Digital Signature

Signed by:

Nextlink Technology Co., Ltd.

Authority:

GlobalSign nv-sa

Valid from:

3/23/2011 10:38:58 AM

Valid to:

3/23/2012 10:38:56 AM

Subject:

CN="Nextlink Technology Co., Ltd.", OU="Nextlink Technology Co., Ltd.", O="Nextlink Technology Co., Ltd.", L=New Taipei City, S=Taiwan, C=TW

Issuer:

CN=GlobalSign ObjectSign CA, OU=ObjectSign CA, O=GlobalSign nv-sa, C=BE

Serial number:

0100000000012EE0C21C45

File PE Metadata

Compilation timestamp:

9/8/2011 3:26:58 AM

OS version:

4.0

OS bitness:

Win32

Subsystem:

Windows GUI

Linker version:

8.0

.NET CLR dependent:

Yes

CTPH (ssdeep):

24576:FStiCGbImZ/bBmqh+71PfYXAXLezUVxoQ4WUP:8tjzm5bBmu+713SAizU94W6

Entry address:

0x642A8

Entry point:

FF, 25, 98, 42, 46, 00, 00, 00, 5F, 43, 6F, 72, 45, 78, 65, 4D, 61, 69, 6E, 00, 6D, 73, 63, 6F, 72, 65, 65, 2E, 64, 6C, 6C, 00, FC, 12, 00, 00, 7B, 7A, 7D, 02, 54, 01, 3D, 9E, EF, 46, 8C, 76, 91, BB, 60, 88, BC, A1, E6, B6, 9B, C7, FF, 10, 87, A2, 95, 22, 21, 5F, FD, E2, C0, 5A, 2D, 14, C3, 10, 5C, 21, BD, FE, 34, F1, 02, 00, 8B, 9C, D0, BE, 1F, D1, DA, B7, 78, 60, C4, 6A, 9C, 07, 03, 3E, 0F, 80, ED, A4, DE, 7F, D7, 2A, 16, AF, E3, 3F, CB, 3C, FE, E4, FA, 37, ED, 92, 98, EB, 09, 4C, F6, 7D, 9A, 4E, 22, 07... 
[+]

Entropy:

7.3803

Code size:

1.3 MB (1,315,328 bytes)

Windows Firewall Allowed Program

Name:

gogobox_firewallagent

Scan gogobox.exe - Powered by Reason Core Security

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.