printui.exe

  • File Path: C:\WINDOWS\SysWOW64\printui.exe
  • Description: Change Printing Settings

Screenshot

printui.exe

Hashes

Type Hash
MD5 3E73A7C249046C8D6AD2E583B6CC9455
SHA1 21FCA89B2DFB23B31FF2097C78C75604F0234A6B
SHA256 23A565D862E7D01DE92851EBC4263246D531AE69EA21483B14BAF5D79E546102
SHA384 BE4C5272460F16E8658D4DC31AD2D3579A27D044502898A04254866BB791F440EAAA6966DF5B87E96EE27FF8786484C1
SHA512 27ED27E5E1D00857DF31B90101828E698ED808F4A5926EA7E9E70D3B5EA702F9E00051DF7F68BB75C1B9797DA0F16C680F6781FF2193B37E73EC389F93FF65E1
SSDEEP 768:jr8qE5vI1iQfCIWVM9G4qW4ne+S/ly+PKAoXRZX6fbX57UWkCRPPA7/Qn1J:cTVIPd4n+lbeRZIbSQPPA7YJ
IMP 6F4EF9E489C40856B4C2A7590D1E7B05
PESHA1 BD8FF95DC9C082139A4EA1D6B237FD2E9B962DF9
PE256 5C2E516D166383681F80D0E2BF95B5DF37443BF58BD32402CE1291B7F5764424

Runtime Data

Window Title:

Printers

Open Handles:

Path Type
(R-D) C:\Windows\Fonts\StaticCache.dat File
(R-D) C:\Windows\System32\en-US\duser.dll.mui File
(R-D) C:\Windows\System32\en-US\printui.dll.mui File
(R-D) C:\Windows\System32\en-US\printui.exe.mui File
(R-D) C:\Windows\SystemResources\imageres.dll.mun File
(R-D) C:\Windows\WinSxS\x86_microsoft.windows.c..-controls.resources_6595b64144ccf1df_6.0.22000.1_en-us_b335b4dbed333454\comctl32.dll.mui File
(RW-) C:\Windows File
(RW-) C:\Windows\SysWOW64 File
(RW-) C:\Windows\WinSxS\x86_microsoft.windows.c..-controls.resources_6595b64144ccf1df_6.0.22000.1_en-us_b335b4dbed333454 File
(RW-) C:\Windows\WinSxS\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.22000.120_none_e541a94fcce8ed6d File
\BaseNamedObjects\C:*ProgramData*Microsoft*Windows*Caches*{6AF0698E-D558-4F6E-9B3C-3716689AF493}.2.ver0x0000000000000001.db Section
\BaseNamedObjects\C:*ProgramData*Microsoft*Windows*Caches*{DDF571F2-BE98-426D-8288-1A9A39C3FDA2}.2.ver0x0000000000000001.db Section
\BaseNamedObjects\C:*ProgramData*Microsoft*Windows*Caches*cversions.2.ro Section
\Sessions\2\BaseNamedObjects\NLS_CodePage_1252_3_2_0_0 Section
\Sessions\2\BaseNamedObjects\NLS_CodePage_437_3_2_0_0 Section
\Sessions\2\Windows\Theme1077709572 Section
\Windows\Theme3461253685 Section

Loaded Modules:

Path
C:\WINDOWS\SYSTEM32\ntdll.dll
C:\WINDOWS\System32\wow64.dll
C:\WINDOWS\System32\wow64base.dll
C:\WINDOWS\System32\wow64con.dll
C:\WINDOWS\System32\wow64cpu.dll
C:\WINDOWS\System32\wow64win.dll
C:\WINDOWS\SysWOW64\printui.exe

Signature

  • Status: Signature verified.
  • Serial: 33000002ED2C45E4C145CF48440000000002ED
  • Thumbprint: 312860D2047EB81F8F58C29FF19ECDB4C634CF6A
  • Issuer: CN=Microsoft Windows Production PCA 2011, O=Microsoft Corporation, L=Redmond, S=Washington, C=US
  • Subject: CN=Microsoft Windows, O=Microsoft Corporation, L=Redmond, S=Washington, C=US

File Metadata

  • Original Filename: printui.exe
  • Product Name: Microsoft Windows Operating System
  • Company Name: Microsoft Corporation
  • File Version: 10.0.22000.194 (WinBuild.160101.0800)
  • Product Version: 10.0.22000.194
  • Language: English (United States)
  • Legal Copyright: Microsoft Corporation. All rights reserved.
  • Machine Type: 32-bit

File Scan

  • VirusTotal Detections: 0/73
  • VirusTotal Link: https://www.virustotal.com/gui/file/23a565d862e7d01de92851ebc4263246d531ae69ea21483b14baf5d79e546102/detection

File Similarity (ssdeep match)

File Score
C:\WINDOWS\splwow64.exe 44
C:\Windows\splwow64.exe 43
C:\Windows\splwow64.exe 40
C:\windows\splwow64.exe 41
C:\Windows\system32\ntprint.exe 88
C:\WINDOWS\system32\ntprint.exe 90
C:\windows\system32\ntprint.exe 88
C:\Windows\system32\ntprint.exe 88
C:\Windows\system32\ntprint.exe 91
C:\WINDOWS\system32\ntprint.exe 90
C:\Windows\system32\ntprint.exe 86
C:\Windows\system32\PrintIsolationHost.exe 66
C:\Windows\system32\PrintIsolationHost.exe 57
C:\Windows\system32\PrintIsolationHost.exe 57
C:\WINDOWS\system32\PrintIsolationHost.exe 57
C:\Windows\system32\PrintIsolationHost.exe 57
C:\WINDOWS\system32\PrintIsolationHost.exe 61
C:\windows\system32\PrintIsolationHost.exe 61
C:\Windows\system32\printui.exe 88
C:\Windows\system32\printui.exe 86
C:\Windows\system32\printui.exe 86
C:\Windows\system32\printui.exe 83
C:\WINDOWS\system32\printui.exe 88
C:\windows\system32\printui.exe 88
C:\WINDOWS\system32\printui.exe 91
C:\Windows\system32\printui.exe 88
C:\windows\SysWOW64\ntprint.exe 88
C:\WINDOWS\SysWOW64\ntprint.exe 93
C:\Windows\SysWOW64\ntprint.exe 85
C:\WINDOWS\SysWOW64\ntprint.exe 86
C:\Windows\SysWOW64\ntprint.exe 88
C:\Windows\SysWOW64\ntprint.exe 88
C:\Windows\SysWOW64\ntprint.exe 91
C:\WINDOWS\SysWOW64\printui.exe 88
C:\Windows\SysWOW64\printui.exe 88
C:\Windows\SysWOW64\printui.exe 90
C:\windows\SysWOW64\printui.exe 88
C:\Windows\SysWOW64\printui.exe 86
C:\Windows\SysWOW64\printui.exe 91
C:\Windows\SysWOW64\printui.exe 88

MIT License. Copyright (c) 2020-2021 Strontic.