home

Boom.exe

Boom Audio Player

Piotr Pawłowski

Publisher:
Piotr Pawlowski  (signed by Piotr Pawłowski)

Product:
Boom Audio Player

Version:
1.0.21.0

MD5:
0edddd82ef0bb985a6f9a803b4cc5ffc

SHA-1:
40b1a09ad9fad2db5955893b05c2d81bdbebf59b

SHA-256:
0ec57de81898b0b6102fd8c9c81bcda4a1dc5bf5a0a669db596f72a3fe7f4a47

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
4/19/2024 7:18:10 AM UTC  (today)

File size:
2 MB (2,148,616 bytes)

Product version:
1.0.21.0

Copyright:
Copyright (C) 2010-2015 Piotr Pawlowski

Original file name:
Boom.exe

File type:
Executable application (Win32 EXE)

Language:
English (United States)

Common path:
C:\users\{user}\downloads\boom.exe

Digital Signature
Signed by:
Piotr Pawłowski

Authority:
StartCom Ltd.

Valid from:
3/19/2015 2:19:01 PM

Valid to:
3/19/2017 7:38:04 PM

Subject:
E=p@perkele.cc, CN=Piotr Pawłowski, L=Plock, S=Mazowieckie, C=PL

Issuer:
CN=StartCom Class 2 Primary Intermediate Object CA, OU=Secure Digital Certificate Signing, O=StartCom Ltd., C=IL

Serial number:
10F9D21D020743

File PE Metadata
Compilation timestamp:
4/7/2015 11:25:06 AM

OS version:
5.1

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
10.0

CTPH (ssdeep):
49152:gRwXB0cXGn95hSqUjWf3VO5ADtWESxAoG:K8Bq5hV/VOADPv

Entry address:
0x131FF3

Entry point:
E8, FD, 7C, 00, 00, E9, 89, FE, FF, FF, 8B, FF, 55, 8B, EC, 8B, 45, 08, 33, C9, 3B, 04, CD, 28, 33, 5A, 00, 74, 13, 41, 83, F9, 2D, 72, F1, 8D, 48, ED, 83, F9, 11, 77, 0E, 6A, 0D, 58, 5D, C3, 8B, 04, CD, 2C, 33, 5A, 00, 5D, C3, 05, 44, FF, FF, FF, 6A, 0E, 59, 3B, C8, 1B, C0, 23, C1, 83, C0, 08, 5D, C3, E8, DF, 43, 00, 00, 85, C0, 75, 06, B8, 90, 34, 5A, 00, C3, 83, C0, 08, C3, E8, CC, 43, 00, 00, 85, C0, 75, 06, B8, 94, 34, 5A, 00, C3, 83, C0, 0C, C3, 8B, FF, 55, 8B, EC, 56, E8, E2, FF, FF, FF, 8B, 4D, 08...
 
[+]

Entropy:
6.7315

Code size:
1.3 MB (1,390,080 bytes)

The file Boom.exe has been seen being distributed by the following 3 URLs.

http://boom.en.softonic.com/download-tracker?th=1/6CH9aeXedl4L8u BHNJXWTW LP1LFlnGQpxqjlxAMhyDnxnNy/G81SeO4PyT1WiVATtDq7vcwLmZRK3ZCKeG04oxScLxCFGOXjpfQUVKZTUR8mlan7YZ4PFctYIeMIVfS 3oQ4A4hxi/.../VZViIPEY=

http://perkele.cc/.../Boom.exe

http://www.majorgeeks.com/index.php?ct=files&action=download&PHPSESSID=tftkba2d5m36llsd8evmc0aud4

Scan Boom.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.