什么是 WPCups.exe？
What is WPCups.exe?
我在 Windows 10 下载了 Microsoft SDK 和 Visual Studio 2015，我的桌面上出现了文件 WPCups.exe 的快捷方式。它位于 C:\Windows\SysWOW64\WindowsPowerShell\v1.0\Modules\TShell\TShell。
一些搜索发现它可能与 IP 电话有关：
This is a CMD line utility to test and send ip over usb connectivity. Its included with the the WDK. It will connect to IPoverUSB.exe and will use RPC to talk to a Windows phone. It will drop a log file in your my documents folder that you may see also btw.
但对我来说仍然很奇怪，部分原因是它会在我的桌面上安装一个快捷方式。 VirusTotal 说它很干净，IDA 的反汇编看起来就像我上面引用的响应者所说的那样，但我找不到任何 windows 文档，更不用说哈希值了。
在另一个论坛上有人提到 WPCups.exe 通常与 Microsoft SDK 一起安装，但我找不到任何文档证实这一点。
它调用：
ADVAPI32.dll, KERNEL32.dll, WSOCK32.dll, WS2_32.dll, msvcrt.dll, IPHLPAPI.DLL, RPCRT4.dll.
这似乎是合理的。
我 运行 它在 malwr.com 但分析失败，那个包 "modules.packages.exe" 启动函数引发了一个错误......我想是因为未满足的依赖关系？但是程序看起来即使没有 IPoverUSB.exe 也应该优雅地结束。
有人熟悉这个文件吗？
更新：
因为找到 Windows 文档显然是最直接的疯狂途径：
来自 Brian Ward Linux 的工作原理
The standard printing system in Linux is CUPS (Linux CUPS), which is the same system used on Mac OS X. The CUPS server daemon is
called cupsd, and you can use the lpr command as a simple client to
send files to the daemon. One significant feature of CUPS is that it
implements Internet Print Protocol (IPP), a system that allows for
HTTP-like transactions amont clients and servers on TCP port 631. In
fact, if you have CUPS running on your system, you can probablt
connect to http://localhost:631/ to see you current configuration
and check on any printer jobs. Most network printers and print servers
support IPP, as does Windows, which can make setting up remote
printers a relatively simple task.
You probably won't be able to administer the system from the web
interface, because the default setup isn't very secure. Instead, your
distribution likely has a graphical settings interface to add and
modify printers. These tools manipulate the configuration files,
normally found in /etc/cups. It's usually best to let these tools do
the work for you, because configuration can be complicated. And even
if you do run into a problem and need to configure manually, it's
usually best to create a printer using the graphical tools so that you
have somewhere to start.
Many printers, including nearly all low-end models, do not understand
PostScript or PDF. In order for Linux to support one of these
printers, it must convert documents to a format specific to the
printer. CUPS sends the document to a Raster Image Processor (RIP) to
produce a bitmap. The RIP almost always uses the Ghostscript (gs)
program to do most of the real work, but it's somewhat complicated
because the bitmap must fit the format of the printer. Therefore, the
printer drivers that CUPS uses consult the PostScript Printer
Definition (PPD) file for the specific printer to figure out settings
such as resolution and paper sizes.
所以，点 Linux?
不，这与 Linux 的 Printing Deamon 无关。
WPCups 属于 TShell Powershell 模块，是将与 WDK 一起安装的应用程序开发工具包的一部分。
我在 Windows 10 下载了 Microsoft SDK 和 Visual Studio 2015，我的桌面上出现了文件 WPCups.exe 的快捷方式。它位于 C:\Windows\SysWOW64\WindowsPowerShell\v1.0\Modules\TShell\TShell。
一些搜索发现它可能与 IP 电话有关：
This is a CMD line utility to test and send ip over usb connectivity. Its included with the the WDK. It will connect to IPoverUSB.exe and will use RPC to talk to a Windows phone. It will drop a log file in your my documents folder that you may see also btw.
但对我来说仍然很奇怪，部分原因是它会在我的桌面上安装一个快捷方式。 VirusTotal 说它很干净，IDA 的反汇编看起来就像我上面引用的响应者所说的那样，但我找不到任何 windows 文档，更不用说哈希值了。
在另一个论坛上有人提到 WPCups.exe 通常与 Microsoft SDK 一起安装，但我找不到任何文档证实这一点。
它调用：
ADVAPI32.dll, KERNEL32.dll, WSOCK32.dll, WS2_32.dll, msvcrt.dll, IPHLPAPI.DLL, RPCRT4.dll.
这似乎是合理的。
我 运行 它在 malwr.com 但分析失败，那个包 "modules.packages.exe" 启动函数引发了一个错误......我想是因为未满足的依赖关系？但是程序看起来即使没有 IPoverUSB.exe 也应该优雅地结束。
有人熟悉这个文件吗？
更新： 因为找到 Windows 文档显然是最直接的疯狂途径： 来自 Brian Ward Linux 的工作原理
The standard printing system in Linux is CUPS (Linux CUPS), which is the same system used on Mac OS X. The CUPS server daemon is called cupsd, and you can use the lpr command as a simple client to send files to the daemon. One significant feature of CUPS is that it implements Internet Print Protocol (IPP), a system that allows for HTTP-like transactions amont clients and servers on TCP port 631. In fact, if you have CUPS running on your system, you can probablt connect to http://localhost:631/ to see you current configuration and check on any printer jobs. Most network printers and print servers support IPP, as does Windows, which can make setting up remote printers a relatively simple task.
You probably won't be able to administer the system from the web interface, because the default setup isn't very secure. Instead, your distribution likely has a graphical settings interface to add and modify printers. These tools manipulate the configuration files, normally found in /etc/cups. It's usually best to let these tools do the work for you, because configuration can be complicated. And even if you do run into a problem and need to configure manually, it's usually best to create a printer using the graphical tools so that you have somewhere to start.
Many printers, including nearly all low-end models, do not understand PostScript or PDF. In order for Linux to support one of these printers, it must convert documents to a format specific to the printer. CUPS sends the document to a Raster Image Processor (RIP) to produce a bitmap. The RIP almost always uses the Ghostscript (gs) program to do most of the real work, but it's somewhat complicated because the bitmap must fit the format of the printer. Therefore, the printer drivers that CUPS uses consult the PostScript Printer Definition (PPD) file for the specific printer to figure out settings such as resolution and paper sizes.
所以，点 Linux?
不，这与 Linux 的 Printing Deamon 无关。 WPCups 属于 TShell Powershell 模块，是将与 WDK 一起安装的应用程序开发工具包的一部分。