CmdID

CmdID / Files

printfilterpipelinesvc.exe

Print Filter Pipeline Host file version info

Program on Windows 7 known copies with hashes

Opens CmdID with your command. It is read in your browser and sent nowhere.

Is it the real printfilterpipelinesvc.exe?

file version info and known copies
Installed inC:\Windows\system32\
Signed byMicrosoft Windows
ProductMicrosoft Windows Operating System, Microsoft Corporation
DescriptionPrint Filter Pipeline Host

7 known copies

10.0.22000.1 (WinBuild.160101.0800) · C:\WINDOWS\system32\printfilterpipelinesvc.exe · signed by Microsoft Windows

cbbb6e4362bda8550ba7af040b646a9e6453d6ebb11b0fb26f981165ae6b4a51

10.0.19041.867 (WinBuild.160101.0800) · C:\Windows\system32\printfilterpipelinesvc.exe · signed by Microsoft Windows

105099819555ed87ef3dab70a2eaf2cb61076f453266cec57ffccb8f4c00df88

10.0.19041.264 (WinBuild.160101.0800) · C:\Windows\system32\printfilterpipelinesvc.exe · signed by Microsoft Windows

3771726d6ff435265391cdd36b2f102ea7e1a157682ec55fe2910d390711e813

10.0.18362.836 (WinBuild.160101.0800) · C:\WINDOWS\system32\printfilterpipelinesvc.exe · signed by Microsoft Windows

59571714902cf3ecc5eb92bcd1d091533170f8f33e68821524f492a0cb0e1d7a

10.0.17763.1217 (WinBuild.160101.0800) · C:\Windows\system32\printfilterpipelinesvc.exe · signed by Microsoft Windows

e8cc7b67b10f92560df2501dabdc5b72980e7ad3bb63908aa650fd02fa277c39

10.0.14393.3686 (rs1_release.200504-1524) · C:\Windows\system32\printfilterpipelinesvc.exe · signed by Microsoft Windows

68e9fe317bdfc488814decebe85172e0b9c7b17df04147810e863ad6aa5b6e83

6.3.9600.19701 (winblue_ltsb_escrow.200429-1700) · C:\windows\system32\printfilterpipelinesvc.exe · not signed

0589d31c6d13f214bf934ccbc319ef39fc67c3d88ceb9fc828ec139d1ea59fa1

From the file’s version info and the copies recorded by xCyclopedia (MIT). A copy in another folder, signed by someone else or with another hash is not necessarily malicious, but it is worth a closer look. In Ceplin, "<sha256>".whatis() says which known copy a hash is.