home

pagent.exe

Print Job Agent

CZ Solution Co., Ltd.

It is set to automatically execute when any user logs into Windows (through the local user run registry setting) with the name ‘PrintAgent’.
Publisher:
CZ Solution Co., Ltd.   (signed and verified)

Product:
Print Job Agent

Version:
1.00

MD5:
c862a53c6ccec4eab4253821f420f99a

SHA-1:
c713af8e5de955fbf61a464e92f6c95fdbbc8a30

SHA-256:
d64fa3448b066f5c1b91e6dad014545fd7783a64f521ec7057895404683e2083

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
4/26/2024 3:08:19 AM UTC  (today)

File size:
1 MB (1,079,160 bytes)

Product version:
1.00

Original file name:
pagent.exe

File type:
Executable application (Win32 EXE)

Language:
English (United States)

Common path:
C:\Program Files\print job agent\print job agent\pagent.exe

Digital Signature
Signed by:
CZ Solution Co., Ltd.

Authority:
VeriSign, Inc.

Valid from:
12/7/2011 10:00:00 PM

Valid to:
12/28/2012 9:59:59 PM

Subject:
CN="CZ Solution Co., Ltd. ", OU=Digital ID Class 3 - Microsoft Software Validation v2, O="CZ Solution Co., Ltd. ", L=Xiamen, S=Fujian, C=CN

Issuer:
CN=VeriSign Class 3 Code Signing 2010 CA, OU=Terms of use at https://www.verisign.com/rpa (c)10, OU=VeriSign Trust Network, O="VeriSign, Inc.", C=US

Serial number:
4401D7C3C1B415A42950E1371B681DB3

File PE Metadata
Compilation timestamp:
5/16/2012 6:58:20 PM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
6.0

CTPH (ssdeep):
12288:dKYlve8nhuJoVzpqyPW/2FzRGbFB5fxw/OF3IDBdGS:drlve8nhueVzpqy+0Rm5f4e3IBdGS

Entry address:
0x5AB0

Entry point:
68, B4, 1D, 41, 00, E8, EE, FF, FF, FF, 00, 00, 00, 00, 00, 00, 30, 00, 00, 00, 58, 00, 00, 00, 40, 00, 00, 00, 5A, 89, 32, 91, 0C, 49, E1, 48, 90, 67, 84, B7, 7C, A2, EB, 30, 00, 00, 00, 00, 00, 00, 01, 00, 00, 00, 42, 00, 02, 50, 83, 01, 50, 72, 69, 6E, 74, 4A, 6F, 62, 41, 67, 65, 6E, 74, 00, FD, 00, 43, 5A, 20, 50, 72, 69, 6E, 74, 20, 4A, 6F, 62, 20, 41, 67, 65, 6E, 74, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, FF, CC, 31, 00, 08, 1D, 22, 30, 9C, F3, 98, 14, 4B, A2, 6A, 23, 6E, 23, E2, E1, A0, 62, DD, 0A...
 
[+]

Developed / compiled with:
Microsoft Visual Basic v5.0/v6.0

Code size:
928 KB (950,272 bytes)

Startup File (All Users Run)
Registry location:
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run

Name:
PrintAgent

Command:
"C:\Program Files\print job agent\print job agent\pagent.exe"


Scan pagent.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.