home

boincmgr.exe

BOINC client

University of California, Berkeley

It is set to automatically execute when any user logs into Windows (through the local user run registry setting) with the name ‘boincmgr’.
Publisher:
Space Sciences Laboratory  (signed by University of California, Berkeley)

Product:
BOINC client

Description:
BOINC Manager for Windows

Version:
6.13.12

MD5:
ef01bf4b6eefce2d14851fbc4f1fac6b

SHA-1:
6c90124822aa3f45220a4af7835bbc1a0433ef7c

SHA-256:
870f1a017d8494c03d27b54b0361182381a5aa1e938f5b2b6dcf38d26bfb80b1

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
4/24/2024 10:59:24 PM UTC  (today)

File size:
5.6 MB (5,834,416 bytes)

Product version:
6.13.12

Copyright:
© 2003-2011 University of California

Original file name:
boincmgr.exe

File type:
Executable application (Win64 EXE)

Language:
English (United States)

Common path:
C:\Program Files\boinc\boincmgr.exe

Digital Signature
Signed by:
University of California, Berkeley

Authority:
Thawte, Inc.

Valid from:
2/28/2011 7:00:00 PM

Valid to:
1/4/2013 6:59:59 PM

Subject:
CN="University of California, Berkeley", OU=SPACE SCIENCES LABORATORY, O="University of California, Berkeley", L=Berkeley, S=California, C=US

Issuer:
CN=Thawte Code Signing CA - G2, O="Thawte, Inc.", C=US

Serial number:
03475730592F03FF278231AAE2D9786D

File PE Metadata
Compilation timestamp:
11/11/2011 12:43:40 PM

OS version:
4.0

OS bitness:
Win64

Subsystem:
Windows GUI

Linker version:
8.0

CTPH (ssdeep):
49152:WRAi3mOo6jV13ftoHXHj1knkk07nySk0zCdc9fA5Dau+VxLePw4eRW5TjYd3Wt/3:Q913DkbA5mxmVy0/IBGX

Entry address:
0x1725A0

Entry point:
48, 83, EC, 28, E8, 67, 03, 00, 00, 48, 83, C4, 28, E9, BE, FC, FF, FF, FF, 25, 60, 54, 1A, 00, FF, 25, 62, 54, 1A, 00, FF, 25, 64, 54, 1A, 00, FF, 25, 6E, 54, 1A, 00, CC, CC, CC, CC, CC, CC, 48, 89, 4C, 24, 08, 48, 81, EC, 88, 00, 00, 00, 48, 8D, 0D, FD, 6A, 37, 00, FF, 15, FF, 4F, 1A, 00, 48, 8B, 05, E8, 6B, 37, 00, 48, 89, 44, 24, 58, 45, 33, C0, 48, 8D, 54, 24, 60, 48, 8B, 4C, 24, 58, E8, D7, 03, 00, 00, 48, 89, 44, 24, 50, 48, 83, 7C, 24, 50, 00, 74, 41, 48, C7, 44, 24, 38, 00, 00, 00, 00, 48, 8D, 44...
 
[+]

Entropy:
6.0997

Code size:
3.1 MB (3,234,816 bytes)

Startup File (All Users Run)
Registry location:
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run

Name:
boincmgr

Command:
"C:\Program Files\boinc\boincmgr.exe" \a \s


Scan boincmgr.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.