home

boincmgr.exe

BOINC client

University of California, Berkeley

It is set to automatically execute when any user logs into Windows (through the local user run registry setting) with the name ‘boincmgr’.
Publisher:
Space Sciences Laboratory  (signed by University of California, Berkeley)

Product:
BOINC client

Description:
BOINC Manager for Windows

Version:
6.4.5

MD5:
75badd16bf9332fcd8511e7ce1754f14

SHA-1:
3304622d7aada5ece7316f033ed5f3a13b143752

SHA-256:
7345bcb26af21c34c7ebb8459787f45cfcfa902bd8907da3db291ff4da2d3540

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
11/18/2024 1:23:56 AM UTC  (today)

File size:
5.5 MB (5,787,392 bytes)

Product version:
6.4.5

Copyright:
© 2003-2008 University of California

Original file name:
boincmgr.exe

File type:
Executable application (Win64 EXE)

Language:
English (United States)

Common path:
C:\Program Files\boinc\boincmgr.exe

Digital Signature
Signed by:
University of California, Berkeley

Authority:
Thawte Consulting (Pty) Ltd.

Valid from:
12/20/2006 4:00:00 PM

Valid to:
1/5/2009 3:59:59 PM

Subject:
CN="University of California, Berkeley", OU=Space Sciences Laboratory, O="University of California, Berkeley", L=Berkeley, S=California, C=US

Issuer:
CN=Thawte Code Signing CA, O=Thawte Consulting (Pty) Ltd., C=ZA

Serial number:
77C52FEFE32B5A1D31224E33C7944FF1

File PE Metadata
Compilation timestamp:
12/9/2008 7:39:18 AM

OS version:
4.0

OS bitness:
Win64

Subsystem:
Windows GUI

Linker version:
8.0

CTPH (ssdeep):
49152:BT5uaS0Za5FJEJj95u8S7xNPW6Xa7dFRXTyQ7rB+7ZPi4gQsqobTWTA+bIHqae5K:ISJDNRoMfqB5/IBGi

Entry address:
0x10C350

Entry point:
48, 83, EC, 28, E8, 77, 03, 00, 00, 48, 83, C4, 28, E9, BE, FC, FF, FF, CC, CC, CC, CC, CC, CC, CC, CC, CC, CC, CC, CC, CC, CC, 48, 89, 4C, 24, 08, 48, 81, EC, 88, 00, 00, 00, 48, 8D, 0D, DD, 61, 3F, 00, FF, 15, CF, C1, 14, 00, 48, 8B, 05, C8, 62, 3F, 00, 48, 89, 44, 24, 58, 45, 33, C0, 48, 8D, 54, 24, 60, 48, 8B, 4C, 24, 58, E8, F7, 03, 00, 00, 48, 89, 44, 24, 50, 48, 83, 7C, 24, 50, 00, 74, 41, 48, C7, 44, 24, 38, 00, 00, 00, 00, 48, 8D, 44, 24, 48, 48, 89, 44, 24, 30, 48, 8D, 44, 24, 40, 48, 89, 44, 24...
 
[+]

Entropy:
6.3617

Code size:
2.3 MB (2,450,432 bytes)

Startup File (All Users Run)
Registry location:
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run

Name:
boincmgr

Command:
"C:\Program Files\boinc\boincmgr.exe" \a \s


Scan boincmgr.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.