home

PCMEDIK.EXE

PCMedik

PGWARE LLC

Publisher:
PGWARE LLC  (signed and verified)

Product:
PCMedik

Version:
7.0.0.0

MD5:
b2c88097fa3a5e176541b5e816f454aa

SHA-1:
d50c40fa2f68b3244aa85d789f49638a3b8f1d15

SHA-256:
c2a1fea77da2d8bdb3a41bfedcab2a49e0dab0bad60eac5e514a3a08e09331ca

Scanner detections:
2 / 68

Status:
Clean  (2 probable false positive detections)

Explanation:
These detections are probably false positives (erroneous), the file is probably malware free.

Analysis date:
4/23/2024 4:00:00 PM UTC  (today)

Scan engine
Detection
Engine version

Bkav FE
W32.HfsAutoA
1.3.0.4923

Clam AntiVirus
Win.Trojan.PCRat-1
0.98/21511

File size:
2.3 MB (2,411,136 bytes)

Product version:
7.0.0.0

Copyright:
Copyright © 2001-2014 PGWARE LLC

Original file name:
PCMEDIK.EXE

File type:
Executable application (Win32 EXE)

Language:
English (United States)

Common path:
C:\Program Files\pgware\pcmedik\pcmedik.exe

Digital Signature
Signed by:
PGWARE LLC

Authority:
COMODO CA Limited

Valid from:
8/2/2013 7:00:00 AM

Valid to:
8/2/2016 6:59:59 AM

Subject:
CN=PGWARE LLC, O=PGWARE LLC, STREET=3610 Jubilee St, L=Norman, S=OK, PostalCode=73072, C=US

Issuer:
CN=COMODO Code Signing CA 2, O=COMODO CA Limited, L=Salford, S=Greater Manchester, C=GB

Serial number:
00E52CDEF62F34DC4A4E0DB68E4D2903F4

File PE Metadata
Compilation timestamp:
1/26/2015 2:25:47 AM

OS version:
5.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
2.25

CTPH (ssdeep):
49152:aSSzAEcm8b/CcjJdKTNyufMLLuf7UJ3d9Vrf:88bzHyy6MLLuf7UJ3d9Vrf

Entry address:
0x16D5D8

Entry point:
55, 8B, EC, B9, 09, 00, 00, 00, 6A, 00, 6A, 00, 49, 75, F9, 51, 53, B8, C0, 4D, 56, 00, E8, E1, CC, E9, FF, 33, C0, 55, 68, F5, D9, 56, 00, 64, FF, 30, 64, 89, 20, BB, 02, 00, 00, 80, B8, 6C, C8, 57, 00, BA, 10, DA, 56, 00, E8, C3, 94, E9, FF, 6A, 00, 6A, 00, 8D, 45, EC, 50, B9, 50, DA, 56, 00, 8B, 15, 6C, C8, 57, 00, 8B, C3, E8, 8D, 59, F8, FF, 8B, 55, EC, B8, 70, C8, 57, 00, E8, 9C, 94, E9, FF, 83, 3D, 70, C8, 57, 00, 00, 75, 40, E8, 7E, 88, EA, FF, 83, C4, F8, DD, 1C, 24, 9B, E8, F2, FA, FE, FF, 8D, 55...
 
[+]

Entropy:
6.4691

Developed / compiled with:
Microsoft Visual C++

Code size:
1.4 MB (1,493,504 bytes)

Scan PCMEDIK.EXE - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.