home

pcmaticrt.exe

Super Shield Realtime Protection

P.C. Pitstop LLC

It is set to automatically execute when any user logs into Windows (through the local user run registry setting) with the name ‘PC MaticRT’.
Publisher:
PC Pitstop LLC  (signed by P.C. Pitstop LLC)

Product:
Super Shield Realtime Protection

Description:
PC Matic Super Shield

Version:
1.0.0.45

MD5:
35d349c7f5bb6247b95a7f93c4db4951

SHA-1:
447588cb76d8c1fb3263b16ec135af5e44351a25

SHA-256:
b2ee473e3ab662d604e03e84f9c2a57af339d93fd04bf1da1fe4587026a7bcbd

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
12/26/2024 12:54:32 PM UTC  (today)

File size:
1.5 MB (1,591,920 bytes)

Product version:
1.0.0.45

Copyright:
2014 (c) PC Pitstop LLC. All rights reserved.

File type:
Executable application (Win32 EXE)

Language:
English (United States)

Common path:
C:\Program Files\pcpitstop\super shield\pcmaticrt.exe

Digital Signature
Signed by:
P.C. Pitstop LLC

Authority:
Thawte, Inc.

Valid from:
2/4/2013 7:00:00 PM

Valid to:
2/20/2015 6:59:59 PM

Subject:
CN=P.C. Pitstop LLC, OU=SECURE APPLICATION DEVELOPMENT, O=P.C. Pitstop LLC, L=Dakota Dunes, S=South Dakota, C=US

Issuer:
CN=Thawte Code Signing CA - G2, O="Thawte, Inc.", C=US

Serial number:
398EF05E9772B034B6F033FC5DBE28B9

File PE Metadata
Compilation timestamp:
4/21/2014 5:24:28 PM

OS version:
5.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
9.0

CTPH (ssdeep):
12288:U+0uxySiNp6wtbEdY/kQzI4Dr1TuHSSfTvBp4RDU:U+/xYzzbKmkEIixU

Entry address:
0x2078B

Entry point:
E8, E0, E5, 00, 00, E9, 78, FE, FF, FF, CC, CC, CC, 68, 30, 08, 42, 00, 64, FF, 35, 00, 00, 00, 00, 8B, 44, 24, 10, 89, 6C, 24, 10, 8D, 6C, 24, 10, 2B, E0, 53, 56, 57, A1, 18, 68, 45, 00, 31, 45, FC, 33, C5, 50, 89, 65, E8, FF, 75, F8, 8B, 45, FC, C7, 45, FC, FE, FF, FF, FF, 89, 45, F8, 8D, 45, F0, 64, A3, 00, 00, 00, 00, C3, 8B, 4D, F0, 64, 89, 0D, 00, 00, 00, 00, 59, 5F, 5F, 5E, 5B, 8B, E5, 5D, 51, C3, CC, CC, CC, CC, CC, CC, CC, CC, CC, CC, CC, CC, CC, CC, CC, 8B, 07, 83, F8, FE, 74, 0D, 8B, 4F, 04, 03...
 
[+]

Entropy:
4.5273

Code size:
278 KB (284,672 bytes)

Startup File (All Users Run)
Registry location:
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run

Name:
PC MaticRT

Command:
C:\Program Files\pcpitstop\super shield\pcmaticrt.exe


Scan pcmaticrt.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.