RMM
Pcvisit
Pcvisit is a remote monitoring and management (RMM) tool. More information will be added as it becomes available.
Tool overview
- Category
- RMM
- Research authors
- Not recorded
- Created
- 2024-08-02
- Last modified
- 2025-12-14
- Privileges
- Not recorded
- Free / availability
- Not recorded
- Verification required
- Not recorded
- Supported platforms
- Not recorded
Executables & installation paths
- Filename
- Not recorded
- OriginalFileName
- Not recorded
- Description
- Not recorded
Installation paths
pcvisit.exe
pcvisit_client.exe
pcvisit-easysupport.exe
pcvisit_service_client.exe
Code signing
- signer name
- Adobe Systems Incorporated
- certificate thumbprint
- N/A
- tbs sha256
- Not recorded
- tbs sha1
- 7EF13196EC47F2AB7072D93A679AE21C13C764EB
- signer name
- pcvisit software ag
- certificate thumbprint
- N/A
- tbs sha256
- Not recorded
- tbs sha1
- 85E765462871AC9D332C18A9B833A862E2811C83
- signer name
- Martin Prikryl
- issuer
- CN=COMODO Code Signing CA 2
- certificate thumbprint
- ED06995F21BEC16EDF3112F91E121926C7782BB4
- tbs sha256
- 5CDFA7F5F971770D3C1DC097CAD683A24D38A832B87DC56FD67834F9EA5EFCF2
- tbs sha1
- D2F63F6BE83E61B9E64E25752802F7F06F8B5BE5
- valid from
- 2011-09-21T00:00:00+00:00
- valid to
- 2014-09-20T23:59:59+00:00
- signer name
- pcvisit software ag
- issuer
- CN=Thawte Code Signing CA - G2
- certificate thumbprint
- A2183200DC3C802E5699B3068BE452CE2A0D689B
- tbs sha256
- 458ABB4B93C3B182FFF61AB4EE3877574461BAB7C168B2E8E2850E39C5F4A4AC
- tbs sha1
- 85E765462871AC9D332C18A9B833A862E2811C83
- valid from
- 2012-07-11T00:00:00+00:00
- valid to
- 2014-07-11T23:59:59+00:00
- signer name
- Adobe Systems Incorporated
- issuer
- CN=VeriSign Class 3 Code Signing 2010 CA
- certificate thumbprint
- FDF01DD3F37C66AC4C779D92623C77814A07FE4C
- tbs sha256
- 6F11994EC8673B1FDBFB8A08F0AA78F13FC2BE6890F6F5E386FE9FCAE64D2CA4
- tbs sha1
- 7EF13196EC47F2AB7072D93A679AE21C13C764EB
- valid from
- 2010-12-15T00:00:00+00:00
- valid to
- 2012-12-14T23:59:59+00:00
- signer name
- pcvisit software ag
- certificate thumbprint
- 0C371BE84975964A87BF480676D3CEEBFC88CD60
- src file sha256
- 57fa4781f5817841c56b058c0b244318bc18aaa3c842ee3d74294de2441f1da1
- src file path
- downloaded_files/pcvisit/57fa4781f5817841c56b058c0b244318bc18aaa3c842ee3d74294de2441f1da1
- src file company
- pcvisit Software AG
search names
pcvisit-easysupport.exe
pcvisit.exe
pcvisit_client.exe
pcvisit_service_client.exe
company names
signer names
Adobe Systems Incorporated
Martin Prikryl
pcvisit software ag
FORENSIC EVIDENCE
Network artifacts
- Description
- Known remote domains
- Domains
- *.pcvisit.de
- pcvisit.de
- Ports
- Not recorded
Detections
- Sigma
- https://github.com/magicsword-io/LOLRMM/blob/main/detections/sigma/pcvisit_network_sigma.yml
- Description
- Detects potential network activity of Pcvisit RMM tool
- Sigma
- https://github.com/magicsword-io/LOLRMM/blob/main/detections/sigma/pcvisit_processes_sigma.yml
- Description
- Detects potential processes activity of Pcvisit RMM tool