home

pritray.exe

priPrinter Dispatcher

Pelikan Software KFT

It is set to automatically execute when any user logs into Windows (through the local user run registry setting) with the name ‘priPrinterTray’.
Publisher:
Pelikan Software Kft.  (signed by Pelikan Software KFT)

Product:
priPrinter Dispatcher

Version:
6,2,0,2334

MD5:
71b5e1556e1c33a635ebaa27f1b186f9

SHA-1:
8ce2ef5f14b27a8d96e1de8fbd5b51d84d72121a

SHA-256:
11693301f2415ceb0d92252b32f74c8ed91aed0ef812fc4b4b9109e921c872a3

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
4/23/2024 10:05:51 PM UTC  (today)

File size:
37 KB (37,888 bytes)

Product version:
6,2,0,2334

Copyright:
Copyright (C) Pelikan Software Kft. 2015

Original file name:
pritray.exe

File type:
Executable application (Win32 EXE)

Language:
English (United States)

Common path:
C:\Program Files\priprinter\pritray.exe

Digital Signature
Signed by:
Pelikan Software KFT

Authority:
COMODO CA Limited

Valid from:
9/19/2013 12:00:00 AM

Valid to:
9/19/2015 11:59:59 PM

Subject:
CN=Pelikan Software KFT, O=Pelikan Software KFT, STREET="Nagykovácsi út 6, S ép. 2.", L=Nagykovácsi, S=Nagykovácsi, PostalCode=2094, C=HU

Issuer:
CN=COMODO Code Signing CA 2, O=COMODO CA Limited, L=Salford, S=Greater Manchester, C=GB

Serial number:
00D5853894F3F0FEEF233C36F62A6AD7D6

File PE Metadata
Compilation timestamp:
1/28/2015 8:00:41 PM

OS version:
5.1

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
10.0

CTPH (ssdeep):
384:xhlxzWbXUbcTwHxXvjX3hwlHt6oIfESxDYbyG47kR5iBS8xIqiBjjRiBNjaiBp6p:xhWbXUbxnToIf18+Nk6f+qXD6i79Dhh+

Entry address:
0x22E6

Entry point:
55, 8B, EC, 83, EC, 1C, 56, 57, 33, F6, 56, FF, 15, A0, 30, 40, 00, 68, 20, 54, 40, 00, 56, 56, 8B, F8, FF, 15, A4, 30, 40, 00, 85, C0, 75, 04, 33, C0, EB, 71, FF, 15, 44, 30, 40, 00, 3D, B7, 00, 00, 00, 75, 05, 33, C0, 40, EB, 5F, 8B, CF, E8, CD, FA, FF, FF, 8B, C7, E8, 12, FB, FF, FF, 85, C0, 74, D8, 8B, 3D, F8, 30, 40, 00, EB, 14, 8D, 45, E4, 50, FF, 15, FC, 30, 40, 00, 8D, 45, E4, 50, FF, 15, 00, 31, 40, 00, 56, 56, 56, 8D, 45, E4, 50, FF, D7, 85, C0, 75, DF, A1, 38, 60, 40, 00, 3B, C6, 74, 08, 56, 50...
 
[+]

Entropy:
6.7486

Developed / compiled with:
Microsoft Visual C++

Code size:
5 KB (5,120 bytes)

Startup File (All Users Run)
Registry location:
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run

Name:
priPrinterTray

Command:
C:\Program Files\priprinter\pritray.exe


Scan pritray.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.