ntprint.exe

  • File Path: C:\Windows\SysWOW64\ntprint.exe
  • Description: Printer driver software installation

Hashes

Type Hash
MD5 CD70EBBFAE5AE49C9E7F67D49BDC8B29
SHA1 58C44AFB0006E4AC7F3CE756F15039758F22C101
SHA256 64AF478F82D33510A4B3B8241B97F516130E871474848829CF0022D107E0822C
SHA384 CFEF0B0ACEF00F5C639C0A59E99AE0186CD0CCE2A19ECF2324D6196927006DAFF68851C2937DB24EA10CDD4E921FA8B6
SHA512 384D70A96B1F6EEF1E84FCAD2F5672FD9CC2243FA48A653C725B5607F4BF3C68493E6F70783C90B0F1E186D46A875D2FE2FF98C3CBC82C496C8190CAD14CB520
SSDEEP 768:kDo9bquhFT5vI1iQfCIWVM9G4qW4ne+S/ly+PKAoXRZX6fbX57UWkCRPPA7/Qn6:eUHVIPd4n+lbeRZIbSQPPA7L
IMP 84E6CE32AD78D98B8E208DD970DC233E
PESHA1 60F78943C7DCF983859D42287289EDF7C058CDF6
PE256 F9D568C44BE27E4C6F740B94D13144E9009B387238C7D070194E06F63880F7B7

Runtime Data

Loaded Modules:

Path
C:\Windows\SYSTEM32\ntdll.dll
C:\Windows\System32\wow64.dll
C:\Windows\System32\wow64cpu.dll
C:\Windows\System32\wow64win.dll
C:\Windows\SysWOW64\ntprint.exe

Signature

  • Status: Signature verified.
  • Serial: 33000002EC6579AD1E670890130000000002EC
  • Thumbprint: F7C2F2C96A328C13CDA8CDB57B715BDEA2CBD1D9
  • Issuer: CN=Microsoft Windows Production PCA 2011, O=Microsoft Corporation, L=Redmond, S=Washington, C=US
  • Subject: CN=Microsoft Windows, O=Microsoft Corporation, L=Redmond, S=Washington, C=US

File Metadata

  • Original Filename: ntprint.exe
  • Product Name: Microsoft Windows Operating System
  • Company Name: Microsoft Corporation
  • File Version: 10.0.19041.1288 (WinBuild.160101.0800)
  • Product Version: 10.0.19041.1288
  • Language: English (United States)
  • Legal Copyright: Microsoft Corporation. All rights reserved.
  • Machine Type: 32-bit

File Scan

  • VirusTotal Detections: 0/73
  • VirusTotal Link: https://www.virustotal.com/gui/file/64af478f82d33510a4b3b8241b97f516130e871474848829cf0022d107e0822c/detection

File Similarity (ssdeep match)

File Score
C:\WINDOWS\splwow64.exe 44
C:\Windows\splwow64.exe 41
C:\Windows\splwow64.exe 40
C:\windows\splwow64.exe 46
C:\Windows\system32\ntprint.exe 86
C:\WINDOWS\system32\ntprint.exe 88
C:\windows\system32\ntprint.exe 88
C:\Windows\system32\ntprint.exe 86
C:\Windows\system32\ntprint.exe 91
C:\WINDOWS\system32\ntprint.exe 86
C:\Windows\system32\ntprint.exe 86
C:\Windows\system32\PrintIsolationHost.exe 61
C:\Windows\system32\PrintIsolationHost.exe 60
C:\Windows\system32\PrintIsolationHost.exe 61
C:\WINDOWS\system32\PrintIsolationHost.exe 57
C:\Windows\system32\PrintIsolationHost.exe 60
C:\WINDOWS\system32\PrintIsolationHost.exe 66
C:\windows\system32\PrintIsolationHost.exe 61
C:\Windows\system32\printui.exe 86
C:\Windows\system32\printui.exe 85
C:\Windows\system32\printui.exe 83
C:\Windows\system32\printui.exe 80
C:\WINDOWS\system32\printui.exe 88
C:\windows\system32\printui.exe 86
C:\WINDOWS\system32\printui.exe 85
C:\Windows\system32\printui.exe 88
C:\windows\SysWOW64\ntprint.exe 86
C:\WINDOWS\SysWOW64\ntprint.exe 90
C:\Windows\SysWOW64\ntprint.exe 88
C:\WINDOWS\SysWOW64\ntprint.exe 90
C:\Windows\SysWOW64\ntprint.exe 91
C:\Windows\SysWOW64\ntprint.exe 91
C:\WINDOWS\SysWOW64\printui.exe 85
C:\Windows\SysWOW64\printui.exe 88
C:\Windows\SysWOW64\printui.exe 88
C:\WINDOWS\SysWOW64\printui.exe 88
C:\windows\SysWOW64\printui.exe 86
C:\Windows\SysWOW64\printui.exe 86
C:\Windows\SysWOW64\printui.exe 86
C:\Windows\SysWOW64\printui.exe 88

MIT License. Copyright (c) 2020-2021 Strontic.