» gogobox.exe
Overview
Analysis
File Details
Behaviors (1)

gogobox.exe

gogobox

NEXTLINK TECHNOLOGY CO. LTD.

File name:

gogobox.exe

Publisher:

NEXTLiNK Technology Co., Ltd. (signed by NEXTLINK TECHNOLOGY CO. LTD.)

Product:

gogobox

Version:

2.0.8.1

MD5:

2a5a7af66c4180cae273c1f364fea747

SHA-1:

47af66fcfe70221ff62a904171787acbdd5773fe

Scanner detections:

0 / 68

Status:

Clean (as of last analysis)

Analysis date:

4/30/2024 3:50:03 AM UTC (today)

File size:

574.7 KB (588,472 bytes)

Product version:

2.0.8.1

Original file name:

gogobox.exe

File type:

Executable application (Win32 EXE)

Digital Signature

Signed by:

NEXTLINK TECHNOLOGY CO. LTD.

Authority:

GlobalSign nv-sa

Valid from:

3/23/2010 1:33:52 PM

Valid to:

3/23/2011 1:33:52 PM

Subject:

CN=NEXTLINK TECHNOLOGY CO. LTD., O=NEXTLINK TECHNOLOGY CO. LTD., C=TW

Issuer:

CN=GlobalSign ObjectSign CA, OU=ObjectSign CA, O=GlobalSign nv-sa, C=BE

Serial number:

0100000000012789BB1EB3

File PE Metadata

Compilation timestamp:

9/8/2010 12:54:05 AM

OS version:

4.0

OS bitness:

Win32

Subsystem:

Windows GUI

Linker version:

8.0

.NET CLR dependent:

Yes

CTPH (ssdeep):

6144:lrG8QmpFG3ny5Al0AaQ0vUXNTuHvP50qpFupiQnQ5dFDjF5nIK6r87ZNmbMC2mMr:jQoAe0Xiv43gG2h+gLk5cdlvV6Wbaa

Entry address:

0x4E5FC

Entry point:

FF, 25, EC, E5, 44, 00, 00, 00, 5F, 43, 6F, 72, 45, 78, 65, 4D, 61, 69, 6E, 00, 6D, 73, 63, 6F, 72, 65, 65, 2E, 64, 6C, 6C, 00, 2C, 08, 02, 00, 7B, 7A, 7D, 02, B0, 6B, 9E, A3, F4, AA, C1, E4, 76, A0, 0B, 99, 33, B4, D7, 83, 57, D6, 9F, 6E, B8, 91, 72, 5E, FF, FB, 49, A3, 04, E2, 0A, DE, E4, D0, 9F, 15, C5, FE, 8F, C3, 96, 05, C4, 6F, E2, 2B, DF, 31, E2, 79, 5D, 42, BD, B9, FA, D2, E8, C0, 05, C5, 43, 16, 90, 06, 75, CB, 9E, E6, F6, 82, 4F, 7F, EC, A7, 7D, 09, 2E, 35, 82, DC, 0E, FB, 73, BC, DC, 58, F1, AF... 
[+]

Entropy:

6.6471

Code size:

559.5 KB (572,928 bytes)

Windows Firewall Allowed Program

Name:

D:\GOGOBOX\gogobox.exe

Scan gogobox.exe - Powered by Reason Core Security

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.