home

pamAgent.exe

Printer Activity Monitor

Red Line Software LLC

It runs as a separate (within the context of its own process) windows Service named “Printer Activity Monitor Agent”.
Publisher:
Red Line Software  (signed by Red Line Software LLC)

Product:
Printer Activity Monitor

Description:
Printer Activity Monitor Agent

Version:
4.0.0.0

MD5:
43f6076d78b7f0b268130616d7262bb0

SHA-1:
acf27191a1c01ee6a9a7b783de1d85e63be5f90f

SHA-256:
079c5922115391a075d9948ff8310256b0a1518b52623e3b3a0fc14d0898c95a

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
4/19/2024 6:50:03 PM UTC  (today)

File size:
10.1 MB (10,613,008 bytes)

Product version:
4.0.0.0

Copyright:
Copyright (c) 2003-2012 Red Line Software

Original file name:
pamAgent.exe

File type:
Executable application (Win64 EXE)

Language:
English (United States)

Common path:
C:\windows\pamagent\pamagent.exe

Digital Signature
Signed by:
Red Line Software LLC

Authority:
COMODO CA Limited

Valid from:
9/22/2011 8:00:00 PM

Valid to:
9/22/2013 7:59:59 PM

Subject:
CN=Red Line Software LLC, O=Red Line Software LLC, STREET="2 Mayakovskogo Lane, Building 1", L=Moscow, S=109147, PostalCode=109147, C=RU

Issuer:
CN=COMODO Code Signing CA 2, O=COMODO CA Limited, L=Salford, S=Greater Manchester, C=GB

Serial number:
7CC4B3257E163188925FFAAAAF18AA5C

File PE Metadata
Compilation timestamp:
10/16/2012 7:11:54 AM

OS version:
5.2

OS bitness:
Win64

Subsystem:
Windows GUI

Linker version:
8.0

CTPH (ssdeep):
196608:ORCOoeoIfNEHkYwvHs83saZ8Xevo3TMNgp8:OHoeoIfdYwfs188OvgMGp8

Entry address:
0x9D1352

Entry point:
E9, 63, E9, 4A, 00, 48, 3B, 45, F0, E9, 15, B3, 00, 00, BA, 92, DA, 72, A9, 22, 68, A4, 0F, 1F, 8A, 0A, D2, DD, DC, 03, 0D, A2, 9A, 4B, 4A, 55, 8C, B1, AB, AD, F0, 53, 8C, 3F, 4C, 56, CF, C9, CF, 2A, 48, 62, 08, 64, 12, F4, CB, DD, ED, BD, 25, 9D, D5, DD, 3D, 55, 15, 45, 5D, 3D, 95, B5, AD, FD, 65, 5D, B4, B3, 54, AB, 20, 5D, DA, 35, 43, 6B, 35, 18, 6F, DB, E1, 07, 71, 1A, DC, 13, B4, 5A, DB, C5, 9F, 2B, 00, 00, 00, 00, 07, 2F, D8, 7D, 32, 00, 00, 00, 00, BC, 71, 33, BA, 01, 22, 5C, 6A, 36, FA, 2D, 9A, 14...
 
[+]

Entropy:
7.0772

Packer / compiler:
Xtreme-Protector v1.05

Code size:
4.5 MB (4,753,920 bytes)

Service
Display name:
Printer Activity Monitor Agent

Service name:
pamAgentService

Type:
Win32OwnProcess


Scan pamAgent.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.