home

charityengine.exe

BOINC client

University of California, Berkeley

It is set to automatically execute when any user logs into Windows (through the local user run registry setting) with the name ‘boincmgr’.
Publisher:
Charity Engine  (signed by University of California, Berkeley)

Product:
BOINC client

Description:
Charity Engine for Windows

Version:
7.0.80

MD5:
995b5d463b7f9563ce2c62d63d569e68

SHA-1:
235b56bb57b0f896f4f19f606a253b996a37e0b4

SHA-256:
ea8b3d1c3ba8fdbb356f43f26e7866a98c541f25c71c951282b5cb6d51083891

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
11/17/2024 11:33:13 PM UTC  (a few moments ago)

File size:
3.6 MB (3,757,712 bytes)

Product version:
7.0.80

Copyright:
© 2003-2013 University of California

Original file name:
progressthruprocessors.exe

File type:
Executable application (Win32 EXE)

Language:
English (United States)

Common path:
C:\Program Files\boinc\charityengine.exe

Digital Signature
Signed by:
University of California, Berkeley

Authority:
Thawte, Inc.

Valid from:
1/8/2013 1:00:00 AM

Valid to:
1/5/2015 12:59:59 AM

Subject:
CN="University of California, Berkeley", OU=SPACE SCIENCES LABORATORY, O="University of California, Berkeley", L=Berkeley, S=California, C=US

Issuer:
CN=Thawte Code Signing CA - G2, O="Thawte, Inc.", C=US

Serial number:
7A3A0B81EFB73737F878809989C13B50

File PE Metadata
Compilation timestamp:
3/7/2014 8:52:26 PM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
8.0

Entry address:
0xB5814

Entry point:
E8, BB, 04, 00, 00, E9, 39, FD, FF, FF, 55, 8B, EC, 81, EC, 28, 03, 00, 00, A3, 20, 56, 73, 00, 89, 0D, 1C, 56, 73, 00, 89, 15, 18, 56, 73, 00, 89, 1D, 14, 56, 73, 00, 89, 35, 10, 56, 73, 00, 89, 3D, 0C, 56, 73, 00, 66, 8C, 15, 38, 56, 73, 00, 66, 8C, 0D, 2C, 56, 73, 00, 66, 8C, 1D, 08, 56, 73, 00, 66, 8C, 05, 04, 56, 73, 00, 66, 8C, 25, 00, 56, 73, 00, 66, 8C, 2D, FC, 55, 73, 00, 9C, 8F, 05, 30, 56, 73, 00, 8B, 45, 00, A3, 24, 56, 73, 00, 8B, 45, 04, A3, 28, 56, 73, 00, 8D, 45, 08, A3, 34, 56, 73, 00, 8B...
 
[+]

Code size:
2.2 MB (2,281,472 bytes)

Startup File (All Users Run)
Registry location:
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run

Name:
boincmgr

Command:
"C:\Program Files\boinc\charityengine.exe" \a \s


Scan charityengine.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.