CmdID

CmdID / Files

PrintIsolationHost.exe

PrintIsolationHost file version info

Program on Windows 7 known copies with hashes

Opens CmdID with your command. It is read in your browser and sent nowhere.

Is it the real PrintIsolationHost.exe?

file version info and known copies
Installed inC:\Windows\system32\
Signed byMicrosoft Windows
ProductMicrosoft Windows Operating System, Microsoft Corporation
DescriptionPrintIsolationHost

7 known copies

10.0.22000.1 (WinBuild.160101.0800) · C:\WINDOWS\system32\PrintIsolationHost.exe · signed by Microsoft Windows

d2dc286eb7372a4e3aeb008f7157ec354cb854926d0a0eabaef1603152f02d97

10.0.19041.746 (WinBuild.160101.0800) · C:\Windows\system32\PrintIsolationHost.exe · signed by Microsoft Windows

34707c8cf3e90cad74dc5be54ee9393ce73c07f2b6775729ddf48a4b090ebaad

10.0.19041.1 (WinBuild.160101.0800) · C:\Windows\system32\PrintIsolationHost.exe · signed by Microsoft Windows

eb0ac5d09d1cb7830feb6fd002f07bf26dab139546c48fa03aaa5383190db1ad

10.0.18362.1 (WinBuild.160101.0800) · C:\WINDOWS\system32\PrintIsolationHost.exe · signed by Microsoft Windows

5f36948fd8cce954b75c4f2d4f4d49c935f9eed45c0bc95d20433408bcd05b6a

10.0.17763.1 (WinBuild.160101.0800) · C:\Windows\system32\PrintIsolationHost.exe · signed by Microsoft Windows

f0d0591c4cd1a475ed985659b03d16c0fc772a82a7efb643b8d94ae851b4a2b7

10.0.14393.0 (rs1_release.160715-1616) · C:\Windows\system32\PrintIsolationHost.exe · signed by Microsoft Windows

cbe38e823405b4b24a5e27f29ddfd21afb3c228f871ccc217e1c60f74f745fb0

6.3.9600.17415 (winblue_r4.141028-1500) · C:\windows\system32\PrintIsolationHost.exe · not signed

e7188e280f93f24f88e779fa4288e22e40e7ed43921fcf9b5c69189d662630d7

From the file’s version info and the copies recorded by xCyclopedia (MIT). A copy in another folder, signed by someone else or with another hash is not necessarily malicious, but it is worth a closer look. In Ceplin, "<sha256>".whatis() says which known copy a hash is.