Box Proxy Agent
BoxProxy-exe is the installed Windows component of Box Proxy Agent that routes your Box cloud requests through a local proxy for policy enforcement, encryption, and optimized transfers. It runs with Box permissions in corporate environments, ensuring secure access to Box files, shared links, and collaboration features.
BoxProxy-exe provides a local gateway that intercepts Box traffic, applies TLS, token validation, and network policy checks, then forwards requests to Box services. It maintains a persistent connection and uses a lightweight thread pool to minimize latency.
BoxProxy-exe is a legitimate Box Proxy Agent component used by Box, Inc. for enterprise clients to route Box traffic through a controlled proxy. When installed from official Box distributions, signed with Box, Inc. code signing certificates, and located in the standard Program Files path, it behaves as intended with minimal risk. In normal operation it should not inject DLLs into unrelated processes or contact untrusted hosts. If you observe unusual network behavior or modified binaries, investigate the file location, signature, and integrity before concluding safety.
BoxProxy-exe is not a virus when it originates from Box, Inc. and appears in a standard software path as part of the Box Proxy Agent. However, any executable claiming to be BoxProxy-exe that resides outside the official Box install directory, lacks a valid signature, or exhibits unexpected network activity or elevated privileges could be malicious masquerading as BoxProxy-exe. Always verify publisher, hash, and digital signature before trusting the file.
Red Flags: If BoxProxy-exe is not signed by Box, is located in a temp or user-writable folder, has a mismatched hash, or shows unusual network activity, treat as suspicious and investigate further before allowing it to run.
Reasons it's running:
BoxProxy-exe is the Windows executable for Box Proxy Agent. It routes Box traffic through a local proxy, applies security policies, and helps with secure authentication and efficient transfers for Box services.
Yes, when installed from Box distributions and signed by Box, Inc., BoxProxy-exe is a legitimate component. Verify the path, signature, and hash to rule out impersonation.
Disable Box Proxy Agent from Box client settings or stop the BoxProxy-svc.exe service from Services. Uninstall Box Proxy components via the Box installer package if your policy allows.
BoxProxy-exe maintains a persistent local proxy and token validation loop to keep Box services accessible. Idle CPU usage is typically low, but abnormal spikes may indicate misconfiguration.
Commonly under C:\Program Files\Box\BoxProxy\BoxProxy-exe.exe; if you find it elsewhere, verify the publisher and hash to ensure authenticity.
BoxProxy-exe only affects traffic routed through Box Proxy Agent. Other applications should function normally unless your proxy policy intercepts non-Box traffic.