I downloaded the Microsoft SDK and Visual Studio 2015 on Windows 10, and a shortcut for the WPCups.exe file appeared on my desktop. It is located in C: \ Windows \ SysWOW64 \ WindowsPowerShell \ v1.0 \ Modules \ TShell \ TShell.
Some searches have found that this may be due to IP phones:
This is a linear CMD utility for testing and sending IP over a USB connection. This is part of the WDK. It will connect to IPoverUSB.exe and will use RPC to communicate with the Windows phone. It will put the log file in the "My Documents" folder, which you can also see by the way.
But it still seems strange to me, in part, that it would set a shortcut on my desktop. VirusTotal says that it is clean, and the disassembly of the IDA looks as if it does what the responder I mentioned above should do, but I can not find any documentation on windows, not to mention the hash value.
In another forum, someone mentioned that WPCups.exe is usually installed with the Microsoft SDK, but I can’t find any documentation that confirms this.
It causes:
ADVAPI32.dll, KERNEL32.dll, WSOCK32.dll, WS2_32.dll, msvcrt.dll, IPHLPAPI.DLL, RPCRT4.dll.
Which seems reasonable.
malwr.com, , "modules.packages.exe" ... , - ? , IPoverUSB.exe.
- ?
: Windows, -, : " Linux"
Linux CUPS (Linux CUPS), , Mac OS X. CUPS cupsd, lpr . CUPS , (IPP), , HTTP- TCP- 631. , CUPS, http://localhost: 631/, . IPP, Windows, .
, , -, . , , . , /etc/cups. , , . , , .
, , PostScript PDF. Linux , , . CUPS (RIP) . RIP Ghostscript (gs) , , . , CUPS, PostScript Printer Definition (PPD) , , .
, Linux?