Should I block it?
No, this file is 100% safe to run.
Additional versions
Relationships
Parent process
Related files
 PE file structure
|
Show functions |
Import table
mscoree.dll
DllMain
BoxCryptor.exe
BoxCryptor by Secomba GmbH (Signed)
| Version: | 1.5.405.138 |
| MD5: | 007412f6c69cb5bcd598bb5b79363171 |
| SHA1: | 97ffa19a7e3c53a4f51382bfed07a845cae6e6b8 |
Overview
boxcryptor.exe executes as a process with the local user's privileges usually within the context of Windows Explorer. It is set to be run when the PC boots and the user logs into Windows (added to the Run registry key for the current user). This is typically installed with the program BoxCryptor 1.5 published by Secomba GmbH. The assembly utilizes the .NET run-time framework (which is required to be installed on the PC). The file is digitally signed by Secomba GmbH which was issued by the VeriSign certificate authority (CA).
Details
| File name: | boxcryptor.exe |
| Publisher: | Secomba GmbH |
| Product name: | BoxCryptor |
| Typical file path: | C:\Program Files\boxcryptor\boxcryptor.exe |
| File version: | 1.5.405.138 |
| Product version: | 1.5 |
| Size: | 3.94 MB (4,134,656 bytes) |
| Certificate |
| Issued to: | Secomba GmbH |
| Authority (CA): | VeriSign |
| Effective date: | Wednesday, October 17, 2012 |
| Expiration date: | Friday, October 18, 2013 |
| Digital DNA |
| File packed: | No |
| Code language: | Microsoft Visual C# / Basic .NET |
| .NET CLR: | Yes |
| .NET NGENed: | No |
More details
Programs
The following program will install this file
Behaviors
Startup files (user) run
Runs under the registry key 'HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run'
- 'BoxCryptor' → C:\Program Files\BoxCryptor\BoxCryptor.exe
Resource utilization
(Note: statistics below are averages based on a minimum sample size of 200 unique participants)
Averages
| CPU |
| Total CPU: | 0.00107503% | |
| Kernel CPU: | 0.00042367% | |
| User CPU: | 0.00065136% | |
| Kernel CPU time: | 4,334 ms/min | |
| CPU cycles: | 145,024/sec | |
| Context switches: | 2/sec | |
| Memory |
| Private memory: | 32.56 MB | |
| Private (maximum): | 36.58 MB | |
| Private (minimum): | 15.59 MB | |
| Non-paged memory: | 32.56 MB | |
| Virtual memory: | 197.62 MB | |
| Virtual memory (peak): | 203.56 MB | |
| Working set: | 17.34 MB | |
| Working set (peak): | 36.68 MB | |
| Page faults: | 21,980/min | |
| I/O |
| I/O read transfer: | 1.55 KB/sec | |
| I/O read operations: | 1/sec | |
| I/O write transfer: | 44 Bytes/sec | |
| I/O write operations: | 1/sec | |
| I/O other transfer: | 362 Bytes/sec | |
| I/O other operations: | 292/sec | |
| Resource allocations |
| Threads: | 19 | |
| Handles: | 473 | |
| GUI GDI count: | 38 | |
| GUI GDI peak: | 37 | |
| GUI USER count: | 18 | |
| GUI USER peak: | 18 | |
Process properties
Threads
Common loaded modules
These are modules that are typiclaly loaded within the context of this process.
Distribution by Windows OS
| OS version | distribution |
| Microsoft Windows XP |
50.00% |
|
| Windows 7 Home Premium |
50.00% |
|
Distribution by country
Philippines installs about 50.00% of BoxCryptor.
Distribution by PC manufacturer
| PC Manufacturer | distribution |
| Acer |
75.00% |
|
| Hewlett-Packard |
25.00% |
|
