prnport.vbs

File Path: C:\Windows\system32\Printing_Admin_Scripts\en-US\prnport.vbs

Hashes

Type	Hash
MD5	`6D0114E9FBAE0DD8081C9A0D8F67D69F`
SHA1	`2CB608C38B4682F0805583A52A965A78F2B14839`
SHA256	`0EDFF7C55DA4C5ADD13CEDC93226564D46BD8773D8B2EEC9CB8DE76AA40FCC3E`
SHA384	`5CB77BFA46C3AE730DB7C6F7E92FFA9A6B0DD335B2EDA81B85643BAB698620106D68834306859AB8FFFE9F51E4A8F38B`
SHA512	`648F5A016C7EAFB468CFF6581C5CFEAB5AEDBC091AB681695523228E17B1CB559EFB58B5D4583C4E49278E7D7D239FCA2EC4F807962585DEE45DBF08BD482C83`
SSDEEP	`768:mDvBIRggkRq9ZpZAXe6buhoBiNy45zzKWDnWtrqSq+CyP:SJmlZAXbbu6TqqWDzSzCyP`
PESHA1	`2CB608C38B4682F0805583A52A965A78F2B14839`
PE256	`0EDFF7C55DA4C5ADD13CEDC93226564D46BD8773D8B2EEC9CB8DE76AA40FCC3E`

Runtime Data

Usage (stdout):

Usage: prnport [-adlgt?] [-r port][-s server][-u user name][-w password]
               [-o raw|lpr][-h host address][-q queue][-n number]
               [-me | -md ][-i SNMP index][-y community][-2e | -2d]
Arguments:
-a     - add a port
-d     - delete the specified port
-g     - get configuration for a TCP port
-h     - IP address of the device
-i     - SNMP index, if SNMP is enabled
-l     - list all TCP ports
-m     - SNMP type. [e] enable, [d] disable
-n     - port number, applies to TCP RAW ports
-o     - port type, raw or lpr
-q     - queue name, applies to TCP LPR ports only
-r     - port name
-s     - server name
-t     - set configuration for a TCP port
-u     - user name
-w     - password
-y     - community name, if SNMP is enabled
-2     - double spool, applies to TCP LPR ports. [e] enable, [d] disable
-?     - display command usage

Examples:
prnport -l -s server
prnport -d -s server -r IP_1.2.3.4
prnport -a -s server -r IP_1.2.3.4 -h 1.2.3.4 -o raw -n 9100
prnport -t -s server -r IP_1.2.3.4 -me -y public -i 1 -n 9100
prnport -g -s server -r IP_1.2.3.4
prnport -a -r IP_1.2.3.4 -h 1.2.3.4

Remark:
The last example will try to get the device settings at the specified IP address.
If a device is detected, then a TCP port is added with the preferred settings for that device.

Loaded Modules:

Path
C:\Windows\SYSTEM32\cscript.exe
C:\Windows\System32\KERNEL32.DLL
C:\Windows\System32\KERNELBASE.dll
C:\Windows\SYSTEM32\ntdll.dll

Signature

Status: Signature verified.
Serial: 3300000266BD1580EFA75CD6D3000000000266
Thumbprint: A4341B9FD50FB9964283220A36A1EF6F6FAA7840
Issuer: CN=Microsoft Windows Production PCA 2011, O=Microsoft Corporation, L=Redmond, S=Washington, C=US
Subject: CN=Microsoft Windows, O=Microsoft Corporation, L=Redmond, S=Washington, C=US

File Metadata

Original Filename:
Product Name:
Company Name:
File Version:
Product Version:
Language:
Legal Copyright:

File Scan

VirusTotal Detections: 0/75
VirusTotal Link: https://www.virustotal.com/gui/file/0edff7c55da4c5add13cedc93226564d46bd8773d8b2eec9cb8de76aa40fcc3e/detection

File Similarity (ssdeep match)

File	Score
C:\Windows\system32\Printing_Admin_Scripts\en-US\prnqctl.vbs	43
C:\Windows\system32\Printing_Admin_Scripts\en-US\pubprn.vbs	40
C:\Windows\SysWOW64\Printing_Admin_Scripts\en-US\prnport.vbs	60
C:\Windows\SysWOW64\Printing_Admin_Scripts\en-US\prnqctl.vbs	36
C:\Windows\SysWOW64\Printing_Admin_Scripts\en-US\pubprn.vbs	32

Additional Info*

*The information below is copied from MicrosoftDocs, which is maintained by Microsoft. Available under CC BY 4.0 license.

prnport

Applies to: Windows Server (Semi-Annual Channel), Windows Server 2019, Windows Server 2016, Windows Server 2012 R2, Windows Server 2012

Creates, deletes, and lists standard TCP/IP printer ports, in addition to displaying and changing port configuration. This command is a Visual Basic script located in the %WINdir%\System32\printing_Admin_Scripts\<language> directory. To use this command at a command prompt, type cscript followed by the full path to the prnport file, or change directories to the appropriate folder. For example: cscript %WINdir%\System32\printing_Admin_Scripts\en-US\prnport.

Syntax

cscript prnport {-a | -d | -l | -g | -t | -?} [-r <portname>] [-s <Servername>] [-u <Username>] [-w <password>] [-o {raw | lpr}] [-h <Hostaddress>] [-q <Queuename>] [-n <portnumber>] -m{e | d} [-i <SNMPindex>] [-y <communityname>] -2{e | -d}

Parameters

Parameter	Description
-a	Creates a standard TCP/IP printer port.
-d	Deletes a standard TCP/IP printer port.
-l	Lists all standard TCP/IP printer ports on the computer specified by the -s parameter.
-g	Displays the configuration of a standard TCP/IP printer port.
-t	Configures the port settings for a standard TCP/IP printer port.
-r `<portname>`	Specifies the port to which the printer is connected.
-s `<Servername>`	Specifies the name of the remote computer that hosts the printer that you want to manage. If you don’t specify a computer, the local computer is used.
-u `<Username>` -w `<password>`	Specifies an account with permissions to connect to the computer that hosts the printer that you want to manage. All members of the target computer’s local Administrators group have these permissions, but the permissions can also be granted to other users. If you don’t specify an account, you must be logged on under an account with these permissions for the command to work.
-o `{raw\|lpr}`	Specifies which protocol the port uses: TCP raw or TCP lpr. The TCP raw protocol is a higher performance protocol on Windows than the lpr protocol. If you use TCP raw, you can optionally specify the port number by using the -n parameter. The default port number is 9100.
-h `<Hostaddress>`	Specifies (by IP address) the printer for which you want to configure the port.
-q `<Queuename>`	Specifies the queue name for a TCP raw port.
-n `<portnumber>`	Specifies the port number for a TCP raw port. The default port number is 9100.
-m`{e\|d}`	Specifies whether SNMP is enabled. The parameter e enables SNMP. The parameter d disables SNMP.
-i `<SNMPindex`	Specifies the SNMP index, if SNMP is enabled. For more information, see Rfc 1759 at the Rfc editor website.
-y `<communityname>`	Specifies the SNMP community name, if SNMP is enabled.
-2`{e\|-d}`	Specifies whether double spools (also known as respooling) are enabled for TCP lpr ports. Double spools are necessary because TCP lpr must include an accurate byte count in the control file that is sent to the printer, but the protocol cannot get the count from the local print provider. Therefore, when a file is spooled to a TCP lpr print queue, it is also spooled as a temporary file in the system32 directory. TCP lpr determines the size of the temporary file and sends the size to the server running LPD. The parameter e enables double spools. The parameter d disables double spools.
/?	Displays help at the command prompt.

Remarks

If the information that you supply contains spaces, use quotation marks around the text (for example, “Computer Name”).

Examples

To display all standard TCP/IP printing ports on the server \Server1, type:

cscript prnport -l -s Server1

To delete the standard TCP/IP printing port on the server \Server1 that connects to a network printer at 10.2.3.4, type:

cscript prnport -d -s Server1 -r IP_10.2.3.4

To add a standard TCP/IP printing port on the server \Server1 that connects to a network printer at 10.2.3.4 and uses the TCP raw protocol on port 9100, type:

cscript prnport -a -s Server1 -r IP_10.2.3.4 -h 10.2.3.4 -o raw -n 9100

To enable SNMP, specify the “public” community name and set the SNMP index to 1 on a network printer at 10.2.3.4 shared by the server \Server1, type:

cscript prnport -t -s Server1 -r IP_10.2.3.4 -me -y public -i 1 -n 9100

To add a standard TCP/IP printing port on the local computer that connects to a network printer at 10.2.3.4 and automatically get the device settings from the printer, type:

cscript prnport -a -r IP_10.2.3.4 -h 10.2.3.4