home

pamAgent.exe

Printer Activity Monitor

Red Line Software LLC

It runs as a separate (within the context of its own process) windows Service named “Printer Activity Monitor Agent”.
Publisher:
Red Line Software  (signed by Red Line Software LLC)

Product:
Printer Activity Monitor

Description:
Printer Activity Monitor Agent

Version:
4.0.0.0

MD5:
14b0c864449d63c972a4100f0e656c1e

SHA-1:
786c8df3350d7be11a282639e2033ad6a2e80fcc

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
4/26/2024 9:50:13 AM UTC  (today)

File size:
8.1 MB (8,462,608 bytes)

Product version:
4.0.0.0

Copyright:
Copyright (c) 2003-2012 Red Line Software

Original file name:
pamAgent.exe

File type:
Executable application (Win32 EXE)

Common path:
C:\windows\pamagent\pamagent.exe

Digital Signature
Signed by:
Red Line Software LLC

Authority:
COMODO CA Limited

Valid from:
9/23/2011 3:00:00 AM

Valid to:
9/23/2013 2:59:59 AM

Subject:
CN=Red Line Software LLC, O=Red Line Software LLC, STREET="2 Mayakovskogo Lane, Building 1", L=Moscow, S=109147, PostalCode=109147, C=RU

Issuer:
CN=COMODO Code Signing CA 2, O=COMODO CA Limited, L=Salford, S=Greater Manchester, C=GB

Serial number:
7CC4B3257E163188925FFAAAAF18AA5C

File PE Metadata
Compilation timestamp:
10/3/2012 11:19:11 AM

OS version:
5.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
2.25

CTPH (ssdeep):
98304:rggbV09bcm33+bK+1q3QF/+bm8M/svJb+M8KFIyZaE1qIWwqxN7VCg0awQiQv:rT5094kvAMu0vF+Mnt1qI/I5Ui5Xv

Entry address:
0xC8A606

Entry point:
E9, E9, 5C, FF, FF, DE, DB, DE, 47, DE, 5B, DE, 2F, DE, 5B, DE, 7B, DE, 4F, DE, 5B, DE, 17, DE, 7B, DE, 2F, DE, 5B, DE, 43, DE, 47, DF, 7F, DE, 6B, DE, 37, DE, 37, DE, 43, DE, 37, DF, 7F, DF, 6B, DE, 2B, DF, 47, DF, FF, C7, 44, 24, 20, 37, CF, CA, 19, E9, F5, 2E, B8, FF, 7B, B6, 86, 95, E6, 2E, A5, E1, C1, B3, A1, 63, 72, 32, 90, 41, C2, 11, C2, C1, 8F, 6F, 79, 8C, B8, F1, B4, 47, 65, 4F, 06, E7, F1, 44, E7, 96, CD, CB, 38, EB, AF, C4, EC, D5, 8B, 05, 70, 8C, B7, 71, EC, A5, 85, A6, 5E, 82, 08, 9A, E2, 96...
 
[+]

Packer / compiler:
tElock 0.99 - 1.0 private

Code size:
3 MB (3,153,920 bytes)

Service
Display name:
Printer Activity Monitor Agent

Service name:
pamAgentService

Type:
Win32OwnProcess


Scan pamAgent.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.