home

PCShowServerPMWrapper.exe

PC Show power management wrapper

DIRECTV, LLC.

It is set to automatically start when a user logs into Windows via the current user run registry key under the display name ‘PCShowServer’. This is installed with DIRECTV Player.
Publisher:
Cisco  (signed by DIRECTV, LLC.)

Product:
PC Show power management wrapper

Version:
1.0.0.1

MD5:
5050b783948ff7db6e5166e4e543bd91

SHA-1:
ce67298b76c663862c2eacf46ca262848271884d

SHA-256:
fdf25f91c985b46132c631d97ab80cd01e4d9a5a03381cec4490490ffaefb129

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
5/1/2024 3:11:57 PM UTC  (today)

File size:
1.6 MB (1,631,520 bytes)

Product version:
1.0.0.1

Copyright:
Copyright© 2009-2014, Cisco

Original file name:
PCShowServerPMWrapper.exe

File type:
Executable application (Win32 EXE)

Language:
English (United States)

Common path:
C:\users\{user}\appdata\local\directv player\pcshowserverpmwrapper.exe

Digital Signature
Signed by:
DIRECTV, LLC.

Authority:
VeriSign, Inc.

Valid from:
11/2/2014 6:00:00 PM

Valid to:
11/24/2015 5:59:59 PM

Subject:
CN="DIRECTV, LLC.", OU=IT Ops, O="DIRECTV, LLC.", L=El Segundo, S=California, C=US

Issuer:
CN=VeriSign Class 3 Code Signing 2010 CA, OU=Terms of use at https://www.verisign.com/rpa (c)10, OU=VeriSign Trust Network, O="VeriSign, Inc.", C=US

Serial number:
1915106CA34B001DEDBE3DA1E7D35C9F

File PE Metadata
Compilation timestamp:
4/8/2015 2:12:54 PM

OS version:
5.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
9.0

CTPH (ssdeep):
49152:Kme80CMSOqsNLe3gSrP/b/DI8eGCaCCGUHBM:KIsN2P8GCaFM

Entry address:
0xB1B99

Entry point:
E8, 6B, CA, 00, 00, E9, 79, FE, FF, FF, 8B, FF, 55, 8B, EC, 51, 51, 8D, 45, F8, 50, FF, 15, 60, 17, 58, 00, 8B, 45, F8, 8B, 4D, FC, 6A, 00, 05, 00, 80, C1, 2A, 68, 80, 96, 98, 00, 81, D1, 21, 4E, 62, FE, 51, 50, E8, BD, F1, FF, FF, 83, FA, 07, 7C, 0E, 7F, 07, 3D, FF, 6F, 40, 93, 76, 05, 83, C8, FF, 8B, D0, 8B, 4D, 08, 85, C9, 74, 05, 89, 01, 89, 51, 04, C9, C3, CC, CC, CC, CC, CC, CC, CC, CC, CC, CC, CC, CC, 51, 8D, 4C, 24, 08, 2B, C8, 83, E1, 0F, 03, C1, 1B, C9, 0B, C1, 59, E9, AA, E0, FF, FF, 51, 8D, 4C...
 
[+]

Entropy:
5.7467

Code size:
1.3 MB (1,351,168 bytes)

Startup File (User Run)
Registry location:
HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Run

Name:
PCShowServer

Command:
"C:\users\{user}\appdata\local\directv player\pcshowserverpmwrapper.exe"


The file PCShowServerPMWrapper.exe has been discovered within the following program.

DIRECTV Player  by DIRECTV
Publisher's description - “The DIRECTV Player is FREE software for your computer that optimizes your viewing experience of movies and shows on directv.com. Once installed, it will be available for all of the videos on directv.com.”
www.directv.com/entertainment/player
About 9% of users remove it
 
Powered by Should I Remove It?

Scan PCShowServerPMWrapper.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.