Should I block it?

No, this file is 100% safe to run.

VersionsAdditional versions

10, 1, 1, 6 55.56%
10, 1, 1, 5 5.56%
10, 1, 1, 4 2.78%
9, 0, 0, 0 8.33%
8, 0, 0, 0 5.56%
7, 0, 5, 0 5.56%
7, 0, 0, 0 8.33%
6, 0, 0, 0 2.78%
5, 0, 5, 3 2.78%
4, 5, 0, 802 2.78%

Relationships


PE structurePE file structure

Show functions
Import table
advapi32.dll
CreateServiceA, InitializeAcl, FreeSid, AddAccessDeniedAce, AddAccessAllowedAce, IsValidSid, GetLengthSid, AllocateAndInitializeSid, RegSetValueExA, RegCreateKeyExA, RegOpenKeyA, RegQueryValueExA, RegCloseKey, SetSecurityInfo, StartServiceCtrlDispatcherA, OpenServiceA, QueryServiceStatus, ControlService, DeleteService, OpenSCManagerA, InitializeSecurityDescriptor, SetSecurityDescriptorDacl, SetServiceObjectSecurity, CloseServiceHandle, RegisterServiceCtrlHandlerA, SetServiceStatus, QueryServiceObjectSecurity, GetSecurityDescriptorDacl, BuildExplicitAccessWithNameA, SetEntriesInAclA
kernel32.dll
lstrcmpA, CreateEventA, lstrcatA, lstrcpyA, CreateFileMappingA, CreateMutexA, GlobalAlloc, GlobalFree, lstrcmpiA, HeapFree, HeapAlloc, GetProcessHeap, ResetEvent, DuplicateHandle, Sleep, lstrlenA, GetStringTypeW, GetStringTypeA, HeapReAlloc, VirtualAlloc, GetOEMCP, GetACP, LCMapStringW, LCMapStringA, MultiByteToWideChar, GetCPInfo, WriteFile, RtlUnwind, VirtualFree, GetVersion, WriteProcessMemory, ReadProcessMemory, WaitForSingleObject, OpenProcess, GetTickCount, GetCurrentProcessId, IsBadStringPtrA, SetEvent, MapViewOfFile, CloseHandle, UnmapViewOfFile, ReleaseMutex, GetCurrentProcess, GetModuleFileNameA, GetLastError, GetCurrentThreadId, OutputDebugStringA, FreeLibrary, GetVersionExA, LoadLibraryA, GetProcAddress, GetModuleHandleA, GetStartupInfoA, GetCommandLineA, ExitProcess, InitializeCriticalSection, EnterCriticalSection, LeaveCriticalSection, TerminateProcess, UnhandledExceptionFilter, FreeEnvironmentStringsA, FreeEnvironmentStringsW, WideCharToMultiByte, GetEnvironmentStrings, GetEnvironmentStringsW, SetHandleCount, GetStdHandle, GetFileType, TlsSetValue, TlsAlloc, SetLastError, TlsGetValue, HeapDestroy, HeapCreate
user32.dll
MsgWaitForMultipleObjects, MessageBoxA, CreateWindowExA, ShowWindow, LoadCursorA, RegisterClassA, DestroyWindow, DefWindowProcA, PeekMessageA, TranslateMessage, DispatchMessageA, PostQuitMessage, SetWindowTextA, PostThreadMessageA, wsprintfA

hpzipm12.exe

HP PML by HP

Remove hpzipm12.exe
Version:   7, 0, 0, 0
MD5:   5c1cadd1cb67c0b9d8a84ec6e4d6b5cc
SHA1:   55a5f9d84661ce988e9dff59a1dbcc53ec53fb6d
SHA256:   33fda381846b5e3bdc17f726c512a60a9fec0d40bece3d13712e87459fc8f4c2

What is hpzipm12.exe?

HP PML is a protocol that allows many applications to exchange device management information with many printers. PML is an object oriented request-reply protocol which supports asynchronous printer query, control, and monitor capabilities.

Overview

hpzipm12.exe runs as a service under the name Pml Driver HPZ12 (SYSTEM\CurrentControlSet\Services\Pml Driver HPZ12) with extensive SYSTEM privileges (full administrator access).

DetailsDetails

File name:hpzipm12.exe
Publisher:HP
Product name:HP PML
Description:PML Driver
Typical file path:C:\Windows\System32\hpzipm12.exe
Original name:PmlDrv.exe
File version:7, 0, 0, 0
Size:64.25 KB (65,795 bytes)
Digital DNA
Entropy:5.671928
File packed:No
.NET CLR:No
More details

BehaviorsBehaviors

Service
Runs under 'SYSTEM\CurrentControlSet\Services' by the Service Controller (services.exe)
  • 'Pml Driver HPZ12'

ResourcesResource utilization

(Note: statistics below are averages based on a minimum sample size of 200 unique participants)
Averages
 
CPU
Total CPU:0.00006148%
0.028634%
Kernel CPU:0.00003710%
0.013761%
User CPU:0.00002439%
0.014873%
Kernel CPU time:17,789 ms/min
100,923,805ms/min
Context switches:4/sec
284/sec
Memory
Private memory:730 KB
21.59 MB
Private (maximum):1.08 MB
Private (minimum):230 KB
Non-paged memory:730 KB
21.59 MB
Virtual memory:15.57 MB
140.96 MB
Virtual memory (peak):15.57 MB
169.69 MB
Working set:310 KB
18.61 MB
Working set (peak):2.74 MB
37.95 MB
Page faults:1,322/min
2,039/min
I/O
I/O read transfer:0 Bytes/sec
1.02 MB/min
I/O read operations:1/sec
343/min
I/O write transfer:0 Bytes/sec
274.99 KB/min
I/O write operations:1/sec
227/min
I/O other transfer:4.81 KB/sec
448.09 KB/min
I/O other operations:30/sec
1,671/min
Resource allocations
Threads:2
12
Handles:48
600
GUI GDI count:4
103
GUI USER count:3
49

BehaviorsProcess properties

Integrety level:Undefined
Platform:32-bit
Command line:C:\Windows\System32\hpzipm12.exe
Owner:SYSTEM
Windows Service
Service name:SYSTEM\CurrentControlSet\Services\Pml Driver HPZ12
Display name:Pml Driver HPZ12
Type:Win32OwnProcess
Parent process:services.exe (Services and Controller app by Microsoft)

ResourcesThreads

Averages
 
advapi32.dll (Advanced Windows 32 Base API by Microsoft)
Total CPU:0.00502868%
0.272967%
Kernel CPU:0.00443205%
0.107585%
User CPU:0.00059663%
0.165382%
Context switches:4/sec
79/sec
Memory:620 KB
1.16 MB
HPZipm12.exe (main module)
Total CPU:0.00000296%
Kernel CPU:0.00000000%
User CPU:0.00000296%
Memory:84 KB

Common loaded modules

These are modules that are typiclaly loaded within the context of this process.

Windows OS versionsDistribution by Windows OS

OS versiondistribution
Microsoft Windows XP 94.44%
Windows XP Home Edition 2.78%
Windows Vista Business 2.78%

Distribution by countryDistribution by country

United States installs about 60.00% of HP PML.

OEM distributionDistribution by PC manufacturer

PC Manufacturerdistribution
Dell 40.00%
Hewlett-Packard 20.00%
Toshiba 16.00%
American Megatrends 12.00%
Intel 8.00%
Acer 4.00%
Should I remove It? Clean your PC of unwanted adware, toolbars and bloatware.

Download it for FREE