A malware downloader being dubbed DePriMon registers itself as a Windows print monitor in order to gain persistence on infected user’s computers. Using this method, the malware will have SYSTEM privileges, which allows it to execute commands with elevated privileges such as the downloading of additional malware. A print monitor is a Windows DLL that registers itself with the system as a printer that a user can print to. This printer can perform a variety of tasks, such as printing a document and automatically saving it to a PDF or printing it into OneNote.
Source: https://www.bleepingcomputer.com/news/security/deprimon-malware-registers-itself-as-a-windows-print-monitor/