home

PA6clint.exe

Print Audit 6

PJLM Software Inc.

It is set to automatically execute when any user logs into Windows (through the local user run registry setting) with the name ‘PrintAudit6’. This is installed with multiple programs including Print Audit 6.
Publisher:
PJLM Software Inc.  (signed and verified)

Product:
Print Audit 6

Description:
PA6 Windows Client

Version:
6.2.0

MD5:
e39311d4c5f8cb7c243bcef1cb14d4a4

SHA-1:
9cb40fc1800243b8185407963c4dd4a0783ae045

SHA-256:
34c88b239e6439711784b41b9f2bcfac411d05c77145a1317d077e78ed019be3

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
4/19/2024 2:13:25 AM UTC  (today)

File size:
1.5 MB (1,533,264 bytes)

Product version:
6.2.0

Copyright:
Copyright 2007-2010

Original file name:
PA6clint.exe

File type:
Executable application (Win32 EXE)

Language:
English (United States)

Common path:
C:\Program Files\print audit inc\print audit 6\client\pa6clint.exe

Digital Signature
Signed by:
PJLM Software Inc.

Authority:
VeriSign, Inc.

Valid from:
8/19/2008 8:00:00 PM

Valid to:
9/8/2010 7:59:59 PM

Subject:
CN=PJLM Software Inc., OU=Print Audit Inc., OU=Digital ID Class 3 - Microsoft Software Validation v2, O=PJLM Software Inc., L=Calgary, S=Alberta, C=CA

Issuer:
CN=VeriSign Class 3 Code Signing 2004 CA, OU=Terms of use at https://www.verisign.com/rpa (c)04, OU=VeriSign Trust Network, O="VeriSign, Inc.", C=US

Serial number:
62DEAF940D59A95E58D23F0D7950F786

File PE Metadata
Compilation timestamp:
4/20/2010 6:42:30 PM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
8.0

CTPH (ssdeep):
24576:XBAxm5F4OvaS9vhPb0BjsOQxeJcQJ61yRhdqdOXNTSjpwABJEf:Xq6H5IBirQJ61GjqdMTIpwABJEf

Entry address:
0xD216D

Entry point:
E8, CF, FE, 00, 00, E9, 16, FE, FF, FF, CC, 55, 8B, EC, 53, 56, 57, 55, 6A, 00, 6A, 00, 68, 90, 21, 4D, 00, FF, 75, 08, E8, 68, 16, 02, 00, 5D, 5F, 5E, 5B, 8B, E5, 5D, C3, 8B, 4C, 24, 04, F7, 41, 04, 06, 00, 00, 00, B8, 01, 00, 00, 00, 74, 32, 8B, 44, 24, 14, 8B, 48, FC, 33, C8, E8, 76, BC, FF, FF, 55, 8B, 68, 10, 8B, 50, 28, 52, 8B, 50, 24, 52, E8, 14, 00, 00, 00, 83, C4, 08, 5D, 8B, 44, 24, 08, 8B, 54, 24, 10, 89, 02, B8, 03, 00, 00, 00, C3, 53, 56, 57, 8B, 44, 24, 10, 55, 50, 6A, FE, 68, 98, 21, 4D, 00...
 
[+]

Entropy:
6.5951

Code size:
1 MB (1,073,152 bytes)

Startup File (All Users Run)
Registry location:
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run

Name:
PrintAudit6

Command:
C:\Program Files\print audit inc\print audit 6\client\pa6clint.exe


The file PA6clint.exe has been discovered within the following programs.

PCS Director  by RICOH
Provides reports on printer inventory, device volumes, budgets, cost baselines and printing workflow issues on the network
www.ricoh-usa.com/services_and_solutions/services_solutions_details.aspx?cid=148&scid=164&sid=747&ptm=overview
About 6% of users remove it
Print Audit 6  by PJLM Software Inc.
www.PrintAudit.com
About 8% of users remove it
 
Powered by Should I Remove It?

Scan PA6clint.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.