home

boinctray.exe

BOINC client

University of California, Berkeley

It is set to automatically execute when any user logs into Windows (through the local user run registry setting) with the name ‘boinctray’.
Publisher:
Charity Engine  (signed by University of California, Berkeley)

Product:
BOINC client

Description:
Charity Engine System Tray for Windows

Version:
7.0.80

MD5:
95b6feee86490aebaf2da6912768031f

SHA-1:
a1b67a70120cf13c6d9c629f3d1b2d6f8dcf1161

SHA-256:
eabc5a0f57b6071670f341352b4dd511728e7ed310a4ee59d7e28a9e1550d4c4

Scanner detections:
2 / 68

Status:
Inconclusive  (not enough data for an accurate detection)

Analysis date:
11/17/2024 11:34:47 PM UTC  (a few moments ago)

Scan engine
Detection
Engine version

ESET NOD32
Win32/Floxif.H virus
6.3.12010.0

F-Prot
W32/Floxif.B
4.6.5.141

File size:
146.1 KB (149,591 bytes)

Product version:
7.0.80

Copyright:
© 2003-2013 University of California

Original file name:
boinctray.exe

File type:
Executable application (Win32 EXE)

Language:
English (United States)

Common path:
C:\Program Files\boinc\boinctray.exe

Digital Signature
Signed by:
University of California, Berkeley

Authority:
Thawte, Inc.

Valid from:
1/8/2013 6:00:00 AM

Valid to:
1/5/2015 5:59:59 AM

Subject:
CN="University of California, Berkeley", OU=SPACE SCIENCES LABORATORY, O="University of California, Berkeley", L=Berkeley, S=California, C=US

Issuer:
CN=Thawte Code Signing CA - G2, O="Thawte, Inc.", C=US

Serial number:
7A3A0B81EFB73737F878809989C13B50

File PE Metadata
Compilation timestamp:
3/8/2014 1:51:31 AM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
8.0

Entry address:
0x15B1

Entry point:
E9, BA, 38, 00, 00, E9, 39, FD, FF, FF, CC, FF, 25, 68, 92, 40, 00, 6A, 14, 68, 60, B6, 40, 00, E8, 5A, 03, 00, 00, 83, 65, FC, 00, FF, 4D, 10, 78, 3A, 8B, 4D, 08, 2B, 4D, 0C, 89, 4D, 08, FF, 55, 14, EB, ED, 8B, 45, EC, 89, 45, E4, 8B, 45, E4, 8B, 00, 89, 45, E0, 8B, 45, E0, 81, 38, 63, 73, 6D, E0, 74, 0B, C7, 45, DC, 00, 00, 00, 00, 8B, 45, DC, C3, E8, 56, 04, 00, 00, 8B, 65, E8, C7, 45, FC, FE, FF, FF, FF, E8, 50, 03, 00, 00, C2, 10, 00, 6A, 0C, 68, 80, B6, 40, 00, E8, FC, 02, 00, 00, 83, 65, E4, 00, 8B...
 
[+]

Entropy:
7.1701

Packer / compiler:
Xtreme-Protector v1.05

Code size:
32 KB (32,768 bytes)

Startup File (All Users Run)
Registry location:
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run

Name:
boinctray

Command:
"C:\Program Files\boinc\boinctray.exe"


Scan boinctray.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.