PrintBrmEngine.exe

  • File Path: C:\Windows\system32\spool\tools\PrintBrmEngine.exe
  • Description: PrintBrmEngine EXE

Hashes

Type Hash
MD5 B012FFD4218AF49AD09156E918A6757E
SHA1 CE8AE6E76B3C1199A568E06CE9C65E4ACD44F6F3
SHA256 C3247F0751FFA3167E89B2DA622AA46BBE5605A5D930511B8209303778499A9B
SHA384 1A59EF1A63B8F3D843402A1B4DA30507844F082C85D281B72A465715FF2D43206FFE8D968D7E98103B0C5CFFEED95171
SHA512 520420DE0F819FD3631A80ABAE14334A0B5FD9CBB7EF3FD37BF2C183FEA06B9900AA4E6A3650D016A39ED44740E66A8091068C95C46A3F3E29E3A47DA542D2BB
SSDEEP 3072:/fxkIjwIiz5+x3llyhRCojCckNT7MqOqCbNvb6t2PnOp8j4d0hvH9KGprQArIqpN:eIjb7Y7jCXN0bE0PhxdKGrIpc
IMP 7B4A0F411CD34A08A69BAB9D0217D8BB
PESHA1 C124E9057AEFF460449ACDBFB90AE9BA085B3F1F
PE256 6305873DA533B81CC33362F37FFF911C679AD43E63B78A85FAD040D2268B9CA4

Runtime Data

Open Handles:

Path Type
(R-D) C:\Windows\System32\spool\tools\en-US\PrintBrmEngine.exe.mui File
(RW-) C:\Users\user File
\BaseNamedObjects__ComCatalogCache__ Section
\BaseNamedObjects\C:*ProgramData*Microsoft*Windows*Caches*{6AF0698E-D558-4F6E-9B3C-3716689AF493}.2.ver0x0000000000000002.db Section
\BaseNamedObjects\C:*ProgramData*Microsoft*Windows*Caches*{DDF571F2-BE98-426D-8288-1A9A39C3FDA2}.2.ver0x0000000000000002.db Section
\BaseNamedObjects\C:*ProgramData*Microsoft*Windows*Caches*cversions.2 Section
\BaseNamedObjects\NLS_CodePage_1252_3_2_0_0 Section
\BaseNamedObjects\NLS_CodePage_437_3_2_0_0 Section

Loaded Modules:

Path
C:\Windows\System32\ADVAPI32.dll
C:\Windows\System32\bcrypt.dll
C:\Windows\SYSTEM32\Cabinet.dll
C:\Windows\SYSTEM32\CLUSAPI.dll
C:\Windows\System32\combase.dll
C:\Windows\System32\GDI32.dll
C:\Windows\System32\gdi32full.dll
C:\Windows\System32\KERNEL32.DLL
C:\Windows\System32\KERNELBASE.dll
C:\Windows\SYSTEM32\mscms.dll
C:\Windows\System32\msvcp_win.dll
C:\Windows\System32\msvcrt.dll
C:\Windows\SYSTEM32\NETAPI32.dll
C:\Windows\SYSTEM32\ntdll.dll
C:\Windows\System32\ole32.dll
C:\Windows\System32\OLEAUT32.dll
C:\Windows\SYSTEM32\RESUTILS.dll
C:\Windows\System32\RPCRT4.dll
C:\Windows\System32\sechost.dll
C:\Windows\System32\SHLWAPI.dll
C:\Windows\system32\spool\tools\PrintBrmEngine.exe
C:\Windows\System32\ucrtbase.dll
C:\Windows\System32\USER32.dll
C:\Windows\System32\win32u.dll
C:\Windows\SYSTEM32\WINSPOOL.DRV
C:\Windows\System32\WS2_32.dll

Signature

  • Status: Signature verified.
  • Serial: 330000026551AE1BBD005CBFBD000000000265
  • Thumbprint: E168609353F30FF2373157B4EB8CD519D07A2BFF
  • Issuer: CN=Microsoft Windows Production PCA 2011, O=Microsoft Corporation, L=Redmond, S=Washington, C=US
  • Subject: CN=Microsoft Windows, O=Microsoft Corporation, L=Redmond, S=Washington, C=US

File Metadata

  • Original Filename: PrintBrmEng.exe.mui
  • Product Name: Microsoft Windows Operating System
  • Company Name: Microsoft Corporation
  • File Version: 10.0.19041.1 (WinBuild.160101.0800)
  • Product Version: 10.0.19041.1
  • Language: English (United States)
  • Legal Copyright: Microsoft Corporation. All rights reserved.
  • Machine Type: 64-bit

File Scan

  • VirusTotal Detections: 0/76
  • VirusTotal Link: https://www.virustotal.com/gui/file/c3247f0751ffa3167e89b2da622aa46bbe5605a5d930511b8209303778499a9b/detection

MIT License. Copyright (c) 2020-2021 Strontic.