Should I block it?

No, this file is 100% safe to run.

VersionsAdditional versions

2, 0, 14, 1 61.04%
2, 00, 5, 4 9.09%
2, 00, 2, 5 6.49%
2, 00, 2, 4 3.90%
2, 0, 1, 9 14.29%
2, 0, 1, 5 3.90%
2, 0, 1, 2 1.30%

Relationships


PE structurePE file structure

Show functions
Import table
advapi32.dll
StartServiceCtrlDispatcherW, RegisterServiceCtrlHandlerW, CreateWellKnownSid, OpenThreadToken, OpenProcessToken, SetSecurityDescriptorDacl, ControlService, DeleteService, CreateServiceW, InitializeAcl, AddAccessAllowedAce, GetAclInformation, AddAce, GetAce, GetTokenInformation, SetSecurityDescriptorGroup, SetSecurityDescriptorOwner, InitializeSecurityDescriptor, IsValidSid, GetLengthSid, CopySid, RegQueryValueExW, RegisterEventSourceW, ReportEventW, DeregisterEventSource, SetServiceStatus, OpenSCManagerW, OpenServiceW, CloseServiceHandle, RegEnumKeyExW, RegQueryInfoKeyW, RegSetValueExW, RegOpenKeyExW, RegCreateKeyExW, RegCloseKey, RegDeleteValueW, RegDeleteKeyW
gdi32.dll
Escape, SelectObject, SetViewportOrgEx, OffsetViewportOrgEx, SetViewportExtEx, ScaleViewportExtEx, SetWindowExtEx, ScaleWindowExtEx, DeleteDC, GetStockObject, PtVisible, TextOutW, RectVisible, SetMapMode, GetDeviceCaps, CreateBitmap, GetClipBox, SetTextColor, SetBkColor, DeleteObject, ExtTextOutW, RestoreDC, SaveDC
kernel32.dll
GetConsoleCP, GetLocaleInfoA, IsValidCodePage, GetOEMCP, GetACP, GetCPInfo, GetSystemTimeAsFileTime, GetTickCount, QueryPerformanceCounter, GetStartupInfoA, GetFileType, SetHandleCount, GetEnvironmentStringsW, FreeEnvironmentStringsW, GetModuleFileNameA, GetConsoleMode, HeapCreate, VirtualAlloc, VirtualFree, IsDebuggerPresent, SetUnhandledExceptionFilter, UnhandledExceptionFilter, TerminateProcess, ExitProcess, HeapSize, HeapReAlloc, GetStartupInfoW, HeapFree, HeapAlloc, RtlUnwind, GetStringTypeA, GetStringTypeW, LCMapStringA, LCMapStringW, SetStdHandle, WriteConsoleA, GetConsoleOutputCP, WriteConsoleW, CreateFileA, CreateDirectoryW, GetLocalTime, GetModuleHandleA, SetEndOfFile, FlushFileBuffers, SetFilePointer, WriteFile, ReadFile, GlobalFlags, GlobalAddAtomW, GlobalFindAtomW, GlobalDeleteAtom, LoadLibraryW, LoadLibraryA, lstrcmpW, GetVersionExA, lstrlenA, lstrcmpA, WideCharToMultiByte, GetCurrentProcessId, LockResource, TlsFree, GlobalFree, LocalReAlloc, TlsSetValue, TlsAlloc, GlobalAlloc, GlobalHandle, GlobalUnlock, GlobalReAlloc, GlobalLock, TlsGetValue, SetLastError, OpenEventW, PulseEvent, InitializeCriticalSectionAndSpinCount, GetCommandLineW, SetEvent, GetCurrentThreadId, CreateTimerQueue, CreateTimerQueueTimer, GetVersionExW, CreateThread, Sleep, GetCurrentThread, GetCurrentProcess, DeleteTimerQueue, WaitForSingleObject, CreateEventW, LocalAlloc, LocalFree, ExpandEnvironmentStringsW, DeleteFileW, CreateFileW, CloseHandle, LoadLibraryExW, GetProcessHeap, FindResourceW, LoadResource, SizeofResource, MultiByteToWideChar, FreeLibrary, GetModuleFileNameW, InterlockedDecrement, InterlockedIncrement, lstrcmpiW, GetModuleHandleW, GetProcAddress, GetLastError, DeleteCriticalSection, InitializeCriticalSection, RaiseException, lstrlenW, EnterCriticalSection, GetStdHandle, LeaveCriticalSection, InterlockedExchange, GetThreadLocale, HeapDestroy, FreeEnvironmentStringsA, GetEnvironmentStrings, GetCommandLineA
ole32.dll
CoResumeClassObjects, CoInitializeSecurity, CoCreateInstance, StringFromGUID2, CoUninitialize, CoRevokeClassObject, CoSuspendClassObjects, CoInitializeEx, CoTaskMemFree, CoTaskMemRealloc, CoTaskMemAlloc, CoFreeUnusedLibraries, CoSetProxyBlanket, CoRegisterClassObject
oleacc.dll
CreateStdAccessibleObject, LresultFromObject
shell32.dll
SHGetFolderPathW
user32.dll
WinHelpW, GetCapture, GetClassLongW, GetClassNameW, SetPropW, GetPropW, RemovePropW, LoadIconW, CharNextW, TranslateMessage, DispatchMessageW, IsWindow, GetForegroundWindow, GetDlgItem, GetTopWindow, DestroyWindow, GetMessageTime, GetMessagePos, MapWindowPoints, SetMenu, SetForegroundWindow, GetClientRect, PostMessageW, CreateWindowExW, GetClassInfoExW, GetClassInfoW, RegisterWindowMessageW, AdjustWindowRectEx, GetDlgCtrlID, DefWindowProcW, CallWindowProcW, CopyRect, PtInRect, GetMenu, SetWindowLongW, SetWindowPos, GetMessageW, LoadStringW, PostThreadMessageW, CharUpperW, UnhookWindowsHookEx, MessageBoxW, EnableWindow, IsWindowEnabled, GetLastActivePopup, GetWindowLongW, GetParent, SendMessageW, GetWindowThreadProcessId, GetSubMenu, GetMenuItemCount, GetMenuItemID, GetMenuState, ValidateRect, PeekMessageW, GetKeyState, SetWindowTextW, ClientToScreen, DestroyMenu, TabbedTextOutW, DrawTextW, DrawTextExW, GrayStringW, PostQuitMessage, RegisterClassW, SystemParametersInfoA, IsIconic, GetWindowPlacement, GetWindowRect, GetWindow, SetMenuItemBitmaps, GetMenuCheckMarkDimensions, LoadBitmapW, GetFocus, ModifyMenuW, EnableMenuItem, CheckMenuItem, GetWindowTextW, LoadCursorW, GetSystemMetrics, GetDC, ReleaseDC, GetSysColor, GetSysColorBrush, SetWindowsHookExW, CallNextHookEx, UnregisterClassA
winspool.drv
ClosePrinter, OpenPrinterW, DocumentPropertiesW

hpqwmiex.exe

hpqwmiex Module by Hewlett-Packard Company (Signed)

Remove hpqwmiex.exe
Version:   2, 00, 5, 4
MD5:   188ff0adf66768d53ad94f43972e1e9a
SHA1:   9b74d88402bdab9d67fce49912e6f697c42a504a

Overview

hpqwmiex.exe runs as a service under the name hpqwmiex with extensive SYSTEM privileges (full administrator access). The file is digitally signed by Hewlett-Packard Company which was issued by the VeriSign certificate authority (CA).

DetailsDetails

File name:hpqwmiex.exe
Publisher:Hewlett-Packard Development Company, L.P.
Product name:hpqwmiex Module
Typical file path:C:\Program Files\hewlett-packard\shared\hpqwmiex.exe
File version:2, 00, 5, 4
Size:218 KB (223,232 bytes)
Certificate
Issued to:Hewlett-Packard Company
Authority (CA):VeriSign
Effective date:Wednesday, December 17, 2008
Expiration date:Sunday, December 18, 2011
Digital DNA
File packed:No
.NET CLR:No
More details

BehaviorsBehaviors

Service
Runs under 'SYSTEM\CurrentControlSet\Services' by the Service Controller (services.exe)
  • 'hpqwmiex'

ResourcesResource utilization

(Note: statistics below are averages based on a minimum sample size of 200 unique participants)
Averages
 
CPU
Total CPU:0.00028882%
0.028634%
Kernel CPU:0.00017254%
0.013761%
User CPU:0.00011628%
0.014873%
Kernel CPU time:47 ms/min
100,923,805ms/min
CPU cycles:9,223/sec
17,470,203/sec
Memory
Private memory:2.77 MB
21.59 MB
Private (maximum):4.97 MB
Private (minimum):4.28 MB
Non-paged memory:2.77 MB
21.59 MB
Virtual memory:51.13 MB
140.96 MB
Virtual memory (peak):54.17 MB
169.69 MB
Working set:4.29 MB
18.61 MB
Working set (peak):5.32 MB
37.95 MB
Page faults:1,842/min
2,039/min
I/O
I/O read transfer:84 Bytes/sec
1.02 MB/min
I/O read operations:1/sec
343/min
I/O write transfer:0 Bytes/sec
274.99 KB/min
I/O write operations:1/sec
227/min
I/O other transfer:8 Bytes/sec
448.09 KB/min
I/O other operations:1/sec
1,671/min
Resource allocations
Threads:4
12
Handles:100
600

BehaviorsProcess properties

Integrety level:System
Platform:32-bit
Command line:"C:\Program Files\hewlett-packard\shared\hpqwmiex.exe"
Owner:SYSTEM
Windows Service
Service name:hpqwmiex
Type:Win32OwnProcess
Parent process:services.exe (Services and Controller app by Microsoft)

Windows OS versionsDistribution by Windows OS

OS versiondistribution
Windows 7 Home Premium 36.36%
Windows 7 Ultimate 25.45%
Windows Vista Home Premium 18.18%
Windows Vista Home Basic 5.45%
Windows Vista Business 3.64%
Windows 7 Starter 3.64%
Windows 8 Pro 3.64%
Windows 7 Professional 1.82%
Microsoft Windows XP 1.82%

Distribution by countryDistribution by country

United States installs about 56.36% of hpqwmiex Module.

OEM distributionDistribution by PC manufacturer

PC Manufacturerdistribution
Hewlett-Packard 81.08%
ASUS 10.81%
Acer 8.11%
Should I remove It? Clean your PC of unwanted adware, toolbars and bloatware.

Download it for FREE