» gogobox.exe
Overview
Analysis
File Details
Behaviors (1)

gogobox.exe

gogobox

Nextlink Technology Co., Ltd.

File name:

gogobox.exe

Publisher:

Nextlink Technology Co., Ltd. (signed and verified)

Product:

gogobox

Version:

2.0.9.6

MD5:

28e7e9aefc01a2390a607f73843c6616

SHA-1:

f0eab8f7e32d5dd8efc4ec3686a0f6d7dc6347ce

Scanner detections:

0 / 68

Status:

Clean (as of last analysis)

Analysis date:

4/18/2024 6:44:54 AM UTC (today)

File size:

1.2 MB (1,278,296 bytes)

Product version:

2.0.9.6

Original file name:

gogobox.exe

File type:

Executable application (Win32 EXE)

Common path:

C:\Program Files\gogobox\gogobox.exe

Digital Signature

Signed by:

Nextlink Technology Co., Ltd.

Authority:

GlobalSign nv-sa

Valid from:

3/23/2011 10:38:58 AM

Valid to:

3/23/2012 10:38:56 AM

Subject:

CN="Nextlink Technology Co., Ltd.", OU="Nextlink Technology Co., Ltd.", O="Nextlink Technology Co., Ltd.", L=New Taipei City, S=Taiwan, C=TW

Issuer:

CN=GlobalSign ObjectSign CA, OU=ObjectSign CA, O=GlobalSign nv-sa, C=BE

Serial number:

0100000000012EE0C21C45

File PE Metadata

Compilation timestamp:

7/7/2011 5:16:52 PM

OS version:

4.0

OS bitness:

Win32

Subsystem:

Windows GUI

Linker version:

8.0

.NET CLR dependent:

Yes

CTPH (ssdeep):

12288:mxk8bj7k/wwOTW0HUeLy5nYdYItklGfvuE0JqnP/GpJGsYu1WPXP81WY8P3tYYTz:8klK1/cJo+pJ9Yu18rVdFUIKU3eb4rYc

Entry address:

0x5F85C

Entry point:

FF, 25, 4C, F8, 45, 00, 00, 00, 5F, 43, 6F, 72, 45, 78, 65, 4D, 61, 69, 6E, 00, 6D, 73, 63, 6F, 72, 65, 65, 2E, 64, 6C, 6C, 00, FC, 12, 00, 00, 7B, 7A, 7D, 02, 9D, 85, 32, D8, F2, D8, 04, B5, E3, 9E, FA, 32, 99, 21, B7, BC, FA, E3, C0, 36, 86, F2, 91, 51, 4B, 95, 8C, 94, 10, F9, F4, BE, 3F, FB, 0D, E0, A9, BC, C4, B7, AC, CD, EB, 45, 2B, C0, 18, F0, 15, DF, 84, 50, 15, 90, 72, 88, 23, B5, F2, 54, A0, 57, 7F, 37, 96, C7, 9C, 00, 3E, EE, 5A, A8, A1, 4D, 85, 98, FD, F2, 1A, 56, DA, E3, 1E, D9, 47, 82, 19, 6B... 
[+]

Entropy:

7.3871

Code size:

1.2 MB (1,264,640 bytes)

Windows Firewall Allowed Program

Name:

C:\Program Files\gogobox\gogobox.exe

Scan gogobox.exe - Powered by Reason Core Security

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.