ntprint.exe

  • File Path: C:\WINDOWS\system32\ntprint.exe
  • Description: Printer driver software installation

Hashes

Type Hash
MD5 2F9CAEF557BF32DC1F679F7B3B876E56
SHA1 C1CC7A23D85115C39FD7FB045307DA5E9109F9B6
SHA256 B84C0DE83904C1F01BBE20BD03E80B732579A0CDB7F7D3E4959C8578C79D0BFD
SHA384 03C554915A44629038F46C1DCC283623070731DF1F9A399444EEC9D56868C9D7657B1AFB52E1C00F52264C95A49320BC
SHA512 E1DAAFC8B5484D6EBAC5F5F4950F059439F2BD77B935F123FC72FA3A106B6ED215208BD9DD46E7BFB1A2650A97EA8E52DF160A41AB090CCB4A203A83E528DA5B
SSDEEP 768:do2kVPMr95vI1iQfCIWVM9G4qW4ne+S/ly+PKAoXRZX6fbX57UWkCRPPA7/Qnl:afWxVIPd4n+lbeRZIbSQPPA7Y
IMP 598CA250C4CE0ED92CFA650D081AD874
PESHA1 E23F7795FA86225FFAEBE80B2F09EEC2B53CC594
PE256 E70CD73C892D517B3F58F08BBC164F927B72B340A42432A1F6E3B31BF09D8E5D

Runtime Data

Loaded Modules:

Path
C:\WINDOWS\System32\KERNEL32.DLL
C:\WINDOWS\System32\KERNELBASE.dll
C:\WINDOWS\SYSTEM32\ntdll.dll
C:\WINDOWS\system32\ntprint.exe

Signature

  • Status: Signature verified.
  • Serial: 33000002ED2C45E4C145CF48440000000002ED
  • Thumbprint: 312860D2047EB81F8F58C29FF19ECDB4C634CF6A
  • Issuer: CN=Microsoft Windows Production PCA 2011, O=Microsoft Corporation, L=Redmond, S=Washington, C=US
  • Subject: CN=Microsoft Windows, O=Microsoft Corporation, L=Redmond, S=Washington, C=US

File Metadata

  • Original Filename: ntprint.exe.mui
  • Product Name: Microsoft Windows Operating System
  • Company Name: Microsoft Corporation
  • File Version: 10.0.22000.1 (WinBuild.160101.0800)
  • Product Version: 10.0.22000.1
  • Language: English (United States)
  • Legal Copyright: Microsoft Corporation. All rights reserved.
  • Machine Type: 64-bit

File Scan

  • VirusTotal Detections: Unknown

File Similarity (ssdeep match)

File Score
C:\WINDOWS\splwow64.exe 44
C:\Windows\splwow64.exe 43
C:\Windows\splwow64.exe 40
C:\windows\splwow64.exe 40
C:\Windows\system32\ntprint.exe 88
C:\windows\system32\ntprint.exe 88
C:\Windows\system32\ntprint.exe 88
C:\Windows\system32\ntprint.exe 93
C:\WINDOWS\system32\ntprint.exe 90
C:\Windows\system32\ntprint.exe 88
C:\Windows\system32\PrintIsolationHost.exe 60
C:\Windows\system32\PrintIsolationHost.exe 55
C:\Windows\system32\PrintIsolationHost.exe 57
C:\WINDOWS\system32\PrintIsolationHost.exe 55
C:\Windows\system32\PrintIsolationHost.exe 55
C:\WINDOWS\system32\PrintIsolationHost.exe 68
C:\windows\system32\PrintIsolationHost.exe 60
C:\Windows\system32\printui.exe 86
C:\Windows\system32\printui.exe 83
C:\Windows\system32\printui.exe 85
C:\Windows\system32\printui.exe 82
C:\WINDOWS\system32\printui.exe 90
C:\windows\system32\printui.exe 88
C:\WINDOWS\system32\printui.exe 88
C:\Windows\system32\printui.exe 86
C:\windows\SysWOW64\ntprint.exe 85
C:\WINDOWS\SysWOW64\ntprint.exe 86
C:\Windows\SysWOW64\ntprint.exe 83
C:\WINDOWS\SysWOW64\ntprint.exe 83
C:\Windows\SysWOW64\ntprint.exe 88
C:\Windows\SysWOW64\ntprint.exe 88
C:\Windows\SysWOW64\ntprint.exe 90
C:\WINDOWS\SysWOW64\printui.exe 85
C:\Windows\SysWOW64\printui.exe 88
C:\Windows\SysWOW64\printui.exe 88
C:\WINDOWS\SysWOW64\printui.exe 90
C:\windows\SysWOW64\printui.exe 88
C:\Windows\SysWOW64\printui.exe 83
C:\Windows\SysWOW64\printui.exe 88
C:\Windows\SysWOW64\printui.exe 86

MIT License. Copyright (c) 2020-2021 Strontic.