home

pwcRoute.exe

PrintWhere 4.5

PrinterOn Inc

It is set to automatically execute when any user logs into Windows (through the local user run registry setting) with the name ‘PrintWhere Router 4.5’.
Publisher:
PrinterOn Corporation  (signed by PrinterOn Inc)

Product:
PrintWhere 4.5

Description:
PrintWhere 4.5 Router

Version:
4.5AI

MD5:
de402bd60843a5faa143adb49c1b97ac

SHA-1:
cd67c03930ff83263f5269f7d10320e7f5186463

SHA-256:
3b0808758ea5b7a5e20b57d25adef440def3ac45caf9edbbd8ebb1763c39d539

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
4/19/2024 8:36:59 PM UTC  (today)

File size:
929 KB (951,288 bytes)

Product version:
4.5AI

Copyright:
© 2000-2013 PrinterOn Corporation

Original file name:
pwcRoute.exe

File type:
Executable application (Win64 EXE)

Language:
English (United States)

Common path:
C:\Program Files\printeron corporation\printwhere 4.5\pwcroute.exe

Digital Signature
Signed by:
PrinterOn Inc

Authority:
Thawte, Inc.

Valid from:
8/26/2013 9:00:00 AM

Valid to:
9/10/2014 8:59:59 AM

Subject:
CN=PrinterOn Inc, O=PrinterOn Inc, L=Kitchener, S=Ontario, C=CA

Issuer:
CN=Thawte Code Signing CA - G2, O="Thawte, Inc.", C=US

Serial number:
1DAE0232E85A8E7EB6E0B3B79F4A89B0

File PE Metadata
Compilation timestamp:
9/27/2013 10:44:22 PM

OS version:
5.2

OS bitness:
Win64

Subsystem:
Windows GUI

Linker version:
9.0

Entry address:
0x584DC

Entry point:
48, 83, EC, 28, E8, 6B, 97, 00, 00, 48, 83, C4, 28, E9, 16, FE, FF, FF, CC, CC, 48, 89, 5C, 24, 08, 48, 89, 74, 24, 10, 57, 48, 83, EC, 30, 49, 8B, D9, 49, 8B, F0, 48, 8B, FA, 4D, 85, C9, 75, 04, 33, C0, EB, 66, 48, 85, C9, 75, 25, E8, DD, 64, 00, 00, BB, 16, 00, 00, 00, 48, 83, 64, 24, 20, 00, 45, 33, C9, 45, 33, C0, 33, D2, 33, C9, 89, 18, E8, 65, 1D, 00, 00, 8B, C3, EB, 3C, 4D, 85, C0, 74, 12, 48, 3B, D3, 72, 0D, 4C, 8B, C3, 48, 8B, D6, E8, 60, 08, 00, 00, EB, BB, 4C, 8B, C2, 33, D2, E8, 94, 0E, 00, 00...
 
[+]

Entropy:
6.3193

Code size:
499.5 KB (511,488 bytes)

Startup File (All Users Run)
Registry location:
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run

Name:
PrintWhere Router 4.5

Command:
C:\Program Files\printeron corporation\printwhere 4.5\pwcroute.exe


Scan pwcRoute.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.