Should I block it?

No, this file is 100% safe to run.

Additional versions

10, 1, 1, 6	55.56%
10, 1, 1, 5	5.56%
10, 1, 1, 4	2.78%
9, 0, 0, 0	8.33%
8, 0, 0, 0	5.56%
7, 0, 5, 0	5.56%
7, 0, 0, 0	8.33%
6, 0, 0, 0	2.78%
5, 0, 5, 3	2.78%
4, 5, 0, 802	2.78%

Relationships

Parent process

services.exe (Tjenester og controllerprogrammer by Microsoft)

Related files

hpzipr12.dll (HP PmlRtl by HP)

PE file structure

Show functions

Import table

advapi32.dll

CreateServiceA, InitializeAcl, FreeSid, AddAccessDeniedAce, AddAccessAllowedAce, IsValidSid, GetLengthSid, AllocateAndInitializeSid, RegSetValueExA, RegCreateKeyExA, RegOpenKeyA, RegQueryValueExA, RegCloseKey, SetSecurityInfo, StartServiceCtrlDispatcherA, OpenServiceA, QueryServiceStatus, ControlService, DeleteService, OpenSCManagerA, InitializeSecurityDescriptor, SetSecurityDescriptorDacl, SetServiceObjectSecurity, CloseServiceHandle, RegisterServiceCtrlHandlerA, SetServiceStatus, QueryServiceObjectSecurity, GetSecurityDescriptorDacl, BuildExplicitAccessWithNameA, SetEntriesInAclA

kernel32.dll

lstrcmpA, CreateEventA, lstrcatA, lstrcpyA, CreateFileMappingA, CreateMutexA, GlobalAlloc, GlobalFree, lstrcmpiA, HeapFree, HeapAlloc, GetProcessHeap, ResetEvent, DuplicateHandle, Sleep, lstrlenA, GetStringTypeW, GetStringTypeA, HeapReAlloc, VirtualAlloc, GetOEMCP, GetACP, LCMapStringW, LCMapStringA, MultiByteToWideChar, GetCPInfo, WriteFile, RtlUnwind, VirtualFree, GetVersion, WriteProcessMemory, ReadProcessMemory, WaitForSingleObject, OpenProcess, GetTickCount, GetCurrentProcessId, IsBadStringPtrA, SetEvent, MapViewOfFile, CloseHandle, UnmapViewOfFile, ReleaseMutex, GetCurrentProcess, GetModuleFileNameA, GetLastError, GetCurrentThreadId, OutputDebugStringA, FreeLibrary, GetVersionExA, LoadLibraryA, GetProcAddress, GetModuleHandleA, GetStartupInfoA, GetCommandLineA, ExitProcess, InitializeCriticalSection, EnterCriticalSection, LeaveCriticalSection, TerminateProcess, UnhandledExceptionFilter, FreeEnvironmentStringsA, FreeEnvironmentStringsW, WideCharToMultiByte, GetEnvironmentStrings, GetEnvironmentStringsW, SetHandleCount, GetStdHandle, GetFileType, TlsSetValue, TlsAlloc, SetLastError, TlsGetValue, HeapDestroy, HeapCreate

user32.dll

MsgWaitForMultipleObjects, MessageBoxA, CreateWindowExA, ShowWindow, LoadCursorA, RegisterClassA, DestroyWindow, DefWindowProcA, PeekMessageA, TranslateMessage, DispatchMessageA, PostQuitMessage, SetWindowTextA, PostThreadMessageA, wsprintfA

hpzipm12.exe

HP PML by HP

Remove hpzipm12.exe

Version:	10, 1, 1, 6
MD5:	2d091a99624fb9e7eef0a86d872ec0c3
SHA1:	01842e4ed202c3736bc1b6c5160cd7a7c129db26
SHA256:	465c0772e23f7959ec71dccfa3304e2e46fd31548ae37d7ba3daaa59e6b561fd

What is hpzipm12.exe?

HP PML is a protocol that allows many applications to exchange device management information with many printers. PML is an object oriented request-reply protocol which supports asynchronous printer query, control, and monitor capabilities.

Overview

hpzipm12.exe runs as a service under the name Pml Driver HPZ12 (SYSTEM\CurrentControlSet\Services\Pml Driver HPZ12) with extensive SYSTEM privileges (full administrator access). This is typically installed with the program REALTEK GbE & FE Ethernet PCI-E NIC Driver published by Realtek Semiconductor Corp..

Details

File name:	hpzipm12.exe
Publisher:	HP
Product name:	HP PML
Description:	PML Driver
Typical file path:	C:\Windows\System32\hpzipm12.exe
Original name:	PmlDrv.exe
File version:	10, 1, 1, 6
Size:	72 KB (73,728 bytes)
Digital DNA
Entropy:	5.671928
File packed:	No
.NET CLR:	No

More details

Programs

The following program will install this file

REALTEK GbE & FE Ethernet PCI-E NIC Driver

Realtek Semiconductor Corp.

7% remove

The REALTEK GbE & FE Ethernet PCI NIC Driver is the software driver for the Realtek GbE & FE Ethernet PCI NICs. It is a program used to communicate from the Windows PC OS to the device. This software is required in most cases for the hardware device to function properly. In most cases, drivers come with Windows or can be found by going to Windows Update in Control Panel and checking for updates as well as downloaded from the Realtek sup...

Behaviors

Service

Runs under 'SYSTEM\CurrentControlSet\Services' by the Service Controller (services.exe)

'Pml Driver HPZ12'

Resource utilization

(Note: statistics below are averages based on a minimum sample size of 200 unique participants)

Averages

CPU
Total CPU:	0.00094463%	0.028634%
Kernel CPU:	0.00039334%	0.013761%
User CPU:	0.00055129%	0.014873%
Kernel CPU time:	4,480 ms/min	100,923,805ms/min
Context switches:	6/sec	284/sec
Memory
Private memory:	1005 KB	21.59 MB
Private (maximum):	1.6 MB
Private (minimum):	603 KB
Non-paged memory:	1005 KB	21.59 MB
Virtual memory:	17.22 MB	140.96 MB
Virtual memory (peak):	17.31 MB	169.69 MB
Working set:	638.5 KB	18.61 MB
Working set (peak):	2.23 MB	37.95 MB
Page faults:	1,079/min	2,039/min
I/O
I/O read transfer:	7 Bytes/sec	1.02 MB/min
I/O read operations:	1/sec	343/min
I/O write transfer:	0 Bytes/sec	274.99 KB/min
I/O write operations:	1/sec	227/min
I/O other transfer:	56 Bytes/sec	448.09 KB/min
I/O other operations:	1/sec	1,671/min
Resource allocations
Threads:	2	12
Handles:	56	600
GUI GDI count:	4	103
GUI USER count:	3	49

Process properties

Integrety level:	Undefined
Platform:	32-bit
Command lines:	C:\Windows\System32\hpzipm12.exe C:\windows.0\system32\hpzipm12.exe
Owner:	SYSTEM
Windows Service
Service name:	SYSTEM\CurrentControlSet\Services\Pml Driver HPZ12
Display name:	Pml Driver HPZ12
Type:	Win32OwnProcess
Parent process:	services.exe (Services and Controller app by Microsoft)

Threads