home

pritray.exe

priPrinter Dispatcher

Pelikan Software KFT

It is set to automatically execute when any user logs into Windows (through the local user run registry setting) with the name ‘priPrinterTray’.
Publisher:
Pelikan Software Kft.  (signed by Pelikan Software KFT)

Product:
priPrinter Dispatcher

Version:
5,6,0,2060

MD5:
adbde47392c529f778efa391349131b9

SHA-1:
0d1f2f1617a9eeaf82c8e32df3b5321295ad2db8

SHA-256:
92b019b36971ef44f9509fc949b0d032d1c58bef9e4344fdcaf3de1c172e4a7f

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
4/26/2024 4:57:20 AM UTC  (today)

File size:
37.7 KB (38,648 bytes)

Product version:
5,6,0,2060

Copyright:
Copyright (C) Pelikan Software Kft. 2013

Original file name:
pritray.exe

File type:
Executable application (Win64 EXE)

Language:
English (United States)

Common path:
C:\Program Files\priprinter\pritray.exe

Digital Signature
Signed by:
Pelikan Software KFT

Authority:
The USERTRUST Network

Valid from:
8/25/2010 2:00:00 AM

Valid to:
8/25/2013 1:59:59 AM

Subject:
CN=Pelikan Software KFT, O=Pelikan Software KFT, STREET=Zoldko u. 4/a, L=Budapest, S=Budapest, PostalCode=1025, C=HU

Issuer:
CN=UTN-USERFirst-Object, OU=http://www.usertrust.com, O=The USERTRUST Network, L=Salt Lake City, S=UT, C=US

Serial number:
1C2A6C3674F6245661C776E466EB84C9

File PE Metadata
Compilation timestamp:
6/13/2013 9:09:29 AM

OS version:
5.2

OS bitness:
Win64

Subsystem:
Windows GUI

Linker version:
10.0

CTPH (ssdeep):
768:JQbQyD/7asfEnToIf1cB4Km6f+qXD6iiOnCh91:JU1EnToIfiB4r+CiiOEL

Entry address:
0x2670

Entry point:
48, 89, 5C, 24, 08, 48, 89, 7C, 24, 10, 55, 48, 8D, 6C, 24, A9, 48, 81, EC, E0, 00, 00, 00, 33, C9, FF, 15, A9, 0A, 00, 00, 4C, 8D, 05, 92, 2E, 00, 00, 33, D2, 33, C9, 48, 8B, D8, FF, 15, 9D, 0A, 00, 00, 48, 85, C0, 0F, 84, 20, 01, 00, 00, FF, 15, D6, 09, 00, 00, 3D, B7, 00, 00, 00, 75, 0A, B8, 01, 00, 00, 00, E9, 0B, 01, 00, 00, 83, 65, 17, 00, 83, 65, 1B, 00, 48, 83, 65, 27, 00, 48, 83, 65, 2F, 00, 48, 83, 65, 3F, 00, 48, 83, 65, 4F, 00, 48, 8D, 05, FA, FB, FF, FF, 48, 8D, 3D, E3, 2C, 00, 00, 48, 8D, 4D...
 
[+]

Code size:
6 KB (6,144 bytes)

Startup File (All Users Run)
Registry location:
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run

Name:
priPrinterTray

Command:
C:\Program Files\priprinter\pritray.exe


Scan pritray.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.