home

pritray.exe

priPrinter Dispatcher

Pelikan Software KFT

It is set to automatically execute when any user logs into Windows (through the local user run registry setting) with the name ‘priPrinterTray’.
Publisher:
Pelikan Software Kft.  (signed by Pelikan Software KFT)

Product:
priPrinter Dispatcher

Version:
6,3,0,2382

MD5:
f2a89564674b73d53bf0bb5e2f079283

SHA-1:
1fcd1694d9deb2ea6837bbbc58974fe55e0da538

SHA-256:
e47fb4e4d77cbe0a624618716735b6a8eef641789a20eae2985ce4e6c4cf4bf9

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
4/19/2024 12:35:14 PM UTC  (today)

File size:
39.5 KB (40,448 bytes)

Product version:
6,3,0,2382

Copyright:
Copyright (C) Pelikan Software Kft. 2015

Original file name:
pritray.exe

File type:
Executable application (Win64 EXE)

Language:
English (United States)

Common path:
C:\Program Files\priprinter\pritray.exe

Digital Signature
Signed by:
Pelikan Software KFT

Authority:
COMODO CA Limited

Valid from:
9/19/2013 5:30:00 AM

Valid to:
9/20/2015 5:29:59 AM

Subject:
CN=Pelikan Software KFT, O=Pelikan Software KFT, STREET="Nagykovácsi út 6, S ép. 2.", L=Nagykovácsi, S=Nagykovácsi, PostalCode=2094, C=HU

Issuer:
CN=COMODO Code Signing CA 2, O=COMODO CA Limited, L=Salford, S=Greater Manchester, C=GB

Serial number:
00D5853894F3F0FEEF233C36F62A6AD7D6

File PE Metadata
Compilation timestamp:
9/7/2015 1:32:07 AM

OS version:
5.2

OS bitness:
Win64

Subsystem:
Windows GUI

Linker version:
10.0

Entry address:
0x2688

Entry point:
48, 89, 5C, 24, 08, 48, 89, 7C, 24, 10, 55, 48, 8D, 6C, 24, A9, 48, 81, EC, E0, 00, 00, 00, 33, C9, FF, 15, 91, 0A, 00, 00, 4C, 8D, 05, DA, 2E, 00, 00, 33, D2, 33, C9, 48, 8B, D8, FF, 15, 85, 0A, 00, 00, 48, 85, C0, 0F, 84, 3D, 01, 00, 00, FF, 15, BE, 09, 00, 00, 3D, B7, 00, 00, 00, 75, 0A, B8, 01, 00, 00, 00, E9, 28, 01, 00, 00, 83, 65, 17, 00, 83, 65, 1B, 00, 48, 83, 65, 27, 00, 48, 83, 65, 2F, 00, 48, 83, 65, 3F, 00, 48, 83, 65, 4F, 00, 48, 8D, 05, E2, FB, FF, FF, 48, 8D, 3D, DB, 2C, 00, 00, 48, 8D, 4D...
 
[+]

Entropy:
6.5310

Code size:
6.5 KB (6,656 bytes)

Startup File (All Users Run)
Registry location:
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run

Name:
priPrinterTray

Command:
C:\Program Files\priprinter\pritray.exe


Scan pritray.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.