pa6clcom.exe

Print Audit 6

PJLM Software Inc.

It runs as a separate (within the context of its own process) windows Service named “Print Audit 6 Database Communicator”.
Publisher:
PJLM Software Inc.  (signed and verified)

Product:
Print Audit 6

Description:
PA6 Database Communicator

Version:
6.7.2.0

MD5:
0f45e992c8a247cc6fa59cef7a473e5b

SHA-1:
745a9e68171e7e19ca91d45924165a7f57d0e15e

SHA-256:
4747d974ac4182404601649dc64ac1b4c14527ef138ff38ba069504686ff3a1e

Scanner detections:
1 / 68

Status:
Inconclusive  (not enough data for an accurate detection)

Analysis date:
4/25/2024 2:41:23 PM UTC  (today)

Scan engine
Detection
Engine version

Dr.Web
probably BACKDOOR.Trojan
9.0.1.05190

File size:
2 MB (2,054,080 bytes)

Product version:
6.7.2.0

Copyright:
Copyright (C) 2007-2012

Trademarks:
Print Audit

Original file name:
pa6clcom.exe

File type:
Executable application (Win32 EXE)

Language:
English (United States)

Common path:
C:\Program Files\print audit inc\print audit 6\data\pa6clcom.exe

Digital Signature
Authority:
VeriSign, Inc.

Valid from:
8/30/2012 9:00:00 PM

Valid to:
9/7/2015 8:59:59 PM

Subject:
CN=PJLM Software Inc., OU=Print Audit Inc., OU=Digital ID Class 3 - Microsoft Software Validation v2, O=PJLM Software Inc., L=Calgary, S=Alberta, C=CA

Issuer:
CN=VeriSign Class 3 Code Signing 2010 CA, OU=Terms of use at https://www.verisign.com/rpa (c)10, OU=VeriSign Trust Network, O="VeriSign, Inc.", C=US

Serial number:
5CCB50ADE9E1CC9B0B689DCD8A41F8B0

File PE Metadata
Compilation timestamp:
10/23/2012 2:21:20 PM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
8.0

CTPH (ssdeep):
49152:NlRd9sMSTgFw/e+glJrF9EAmdWKXTcpQUcfNn+:NlSTgjVlF6N+

Entry address:
0x111017

Entry point:
E8, 49, 04, 01, 00, E9, 16, FE, FF, FF, 8B, 54, 24, 08, 56, 8B, 74, 24, 08, 57, 0F, B6, 06, 8D, 48, BF, 46, 83, F9, 19, 77, 03, 83, C0, 20, 0F, B6, 0A, 8D, 79, BF, 42, 83, FF, 19, 77, 03, 83, C1, 20, 85, C0, 74, 04, 3B, C1, 74, DA, 5F, 2B, C1, 5E, C3, 55, 8B, EC, 83, EC, 10, 53, FF, 75, 10, 8D, 4D, F0, E8, 5D, D9, FF, FF, 33, DB, 39, 5D, 08, 75, 2E, E8, D9, 45, 00, 00, 53, 53, 53, 53, 53, C7, 00, 16, 00, 00, 00, E8, 1A, FD, FF, FF, 83, C4, 14, 38, 5D, FC, 74, 07, 8B, 45, F8, 83, 60, 70, FD, B8, FF, FF, FF...
 
[+]

Code size:
1.3 MB (1,355,776 bytes)

Service
Display name:
Print Audit 6 Database Communicator

Service name:
PA6ClientCommunicator

Description:
This service handles all communication between Print Audit 6 Clients and the database.

Type:
Win32OwnProcess


The file pa6clcom.exe has been discovered within the following program.

PCS Director  by RICOH
Provides reports on printer inventory, device volumes, budgets, cost baselines and printing workflow issues on the network
www.ricoh-usa.com/services_and_solutions/services_solutions_details.aspx?cid=148&scid=164&sid=747&ptm=overview
About 6% of users remove it
 
Powered by Should I Remove It?

Scan pa6clcom.exe - Powered by Reason Core Security