Versions
(Note, Search Safer Inc. publishes each variation of this file with the same version, but the hashes are unique.)
Relationships
pcreg.exe
By Search Safer Inc. (Signed)
Overview
There are 2 versions of pcreg.exe in the wild, the latest version being . It is started as a Windows Service called 'pcregservice Service' with the name 'pcregservice'. In addition, it is run under the context of the SYSTEM account with extensive privileges (the administrator accounts have the same privileges). The average file size is about 138.13 KB. The file is a digitally signed and issued to Search Safer Inc. by DigiCert Inc. During the process's lifecycle, the typical CPU resource utilization is about 0.0001% including both foreground and background operations, the average private memory consumption is about 1.97 MB with the maximum memory reaching around 6.56 MB. Addionally, typically read and write I/O disk operations is about 0 Bytes per minute for reads and 0 Bytes per minute for writes.
Details |
File name: | pcreg.exe |
Typical file path: | C:\Program Files\pcreg\pcreg.exe |
Certificate |
Issued to: | Search Safer Inc. |
Authority (CA): | DigiCert Inc |
Effective date: | Wednesday, March 12, 2014 |
Expiration date: | Wednesday, February 10, 2016 |
Windows Service |
Service name: | pcregservice |
Display name: | pcregservice Service |
Type: | Win32OwnProcess, InteractiveProcess |
Behaviors
(Note, the behaviors below are for all versions of pcreg.exe, select a unique version for details.)
Service
Runs under 'SYSTEM\CurrentControlSet\Services' by the Service Controller (services.exe)
- 'pcregservice' (pcregservice Service)
All file variations of pcreg.exe