Should I block it?

No, this file is 100% safe to run.

VersionsAdditional versions

6.2.9200.16384 (win8_rtm.120725-1247) 7.14%
6.2.9200.16384 (win8_rtm.120725-1247) 7.14%
6.1.7600.16385 (win7_rtm.090713-1255) 42.86%
6.1.7600.16385 (win7_rtm.090713-1255) 14.29%
5.1.2600.5512 (xpsp.080413-2108) 21.43%
5.1.2600.2180 (xpsp_sp2_rtm.040803-2158) 7.14%

Relationships

Parent process
Related files

PE structurePE file structure

Show functions
Import table
advapi32.dll
RegCreateKeyExW, RegNotifyChangeKeyValue, OpenProcessToken, GetTokenInformation, RegOpenCurrentUser, RegEnumValueA, RegEnumKeyW, RegEnumKeyA, RegQueryInfoKeyW, RegQueryInfoKeyA, RegOpenKeyExA, RegDeleteKeyW, RegDeleteKeyA, RegDeleteValueA, RegQueryValueExA, RegSetValueExA, RegCreateKeyExA, InitializeSecurityDescriptor, SetSecurityDescriptorDacl, SetEntriesInAclW, RegEnumValueW, AllocateAndInitializeSid, GetLengthSid, RegCloseKey, RegSetValueExW, RegOpenKeyExW, RegQueryValueExW, RegDeleteValueW, RegEnumKeyExW, FreeSid, AddAccessAllowedAceEx, InitializeAcl
kernel32.dll
MultiByteToWideChar, lstrlenA, FormatMessageA, GetVersionExA, lstrcatW, LCMapStringW, InterlockedIncrement, GetSystemDefaultUILanguage, GetLastError, lstrlenW, WaitForSingleObject, InterlockedDecrement, lstrcmpiW, GetCurrentProcessId, ExpandEnvironmentStringsW, GetProcessHeap, HeapCreate, HeapDestroy, HeapFree, HeapReAlloc, HeapAlloc, FreeLibrary, CloseHandle, ReadFile, GetFileTime, GetFileSize, CreateFileW, GetFileAttributesW, SearchPathW, GetProcAddress, WideCharToMultiByte, LoadLibraryExW, SetErrorMode, ReleaseMutex, CreateMutexW, InitializeCriticalSectionAndSpinCount, DeleteCriticalSection, LeaveCriticalSection, DebugBreak, CreateSemaphoreW, CreateEventW, SetEvent, GetCurrentThreadId, EnterCriticalSection, WaitForMultipleObjects, ReleaseSemaphore, InitializeCriticalSection, OpenProcess, LocalFree, LocalAlloc, GetCurrentProcess, GetTimeZoneInformation, GetLocalTime, GetSystemTimeAsFileTime, ResetEvent, SetUnhandledExceptionFilter, GetVersionExW, QueryPerformanceCounter, GetTickCount, TerminateProcess, UnhandledExceptionFilter, GetModuleHandleA, GetStartupInfoA, lstrcpyW, LoadLibraryW, GetLocaleInfoW, MoveFileExW, DeleteFileW, CreateDirectoryW, WriteFile, lstrcmpW, InterlockedCompareExchange, GetSystemDefaultLCID, OpenEventW, SetLastError, FormatMessageW
loadperf.dll
UnloadPerfCounterTextStringsW, LoadPerfCounterTextStringsW
msvcp60.dll
DllMain
msvcrt.dll
DllMain
ntdll.dll
atol, RtlValidRelativeSecurityDescriptor, memcpy, wcsrchr, _wcsicmp, _wtol, _alloca_probe, memset
ole32.dll
CoInitializeEx, CoInitializeSecurity, CoUninitialize, CoCreateInstance, CoSetProxyBlanket
user32.dll
LoadStringW, wsprintfW, CharNextW

WMIADAP.exe

WMI by Microsoft

Remove WMIADAP.exe
Version:   6.1.7600.16385 (win7_rtm.090713-1255)
MD5:   52799ead792b0e9ae7fd4ba5bd18fe5c
SHA1:   dc6dc543eac398de6821325bff3625c1cfc8ec3d
SHA256:   be4838f4db23d56cf75730dd36451c5f0f2aca36b8a74844e7675dc5d5ad0c58
This is a Windows system installed file with Windows File Protection (WFP) enabled.

What is WMIADAP.exe?

WMI provides a uniform interface for any local or remote applications or scripts that obtain management data from a computer system, a network, or an enterprise. The uniform interface is designed such that WMI client applications and scripts do not have to call a wide variety of operating system application programming interfaces (APIs). Many APIs cannot be called by automation clients like scripts or Visual Basic applications. Other APIs do not make calls to remote computers.

About WMIADAP.exe (from Microsoft)

Windows Management Instrumentation (WMI) is the infrastructure for management data and operations on Windows-based operating systems. You can write WMI scripts or applications to automate administrati

DetailsDetails

File name:WMIADAP.EXE
Publisher:Microsoft Corporation
Product name:WMI
Description:Microsoft® Windows® Operating System
Typical file path:C:\Windows\System32\wbem\wmiadap.exe
Original name:wmicookr.dll
File version:6.1.7600.16385 (win7_rtm.090713-1255)
Product version:6.1.7600.16385
Size:112.5 KB (115,200 bytes)
Digital DNA
PE subsystem:Windows GUI
Entropy:6.146211
File packed:No
Code language:Microsoft Visual C++
.NET CLR:No
More details

ResourcesResource utilization

(Note: statistics below are averages based on a minimum sample size of 200 unique participants)
Averages
 
CPU
Total CPU:0.15385479%
0.028634%
Kernel CPU:0.11400308%
0.013761%
User CPU:0.03985171%
0.014873%
Kernel CPU time:23 ms/min
100,923,805ms/min
Context switches:164/sec
284/sec
Memory
Private memory:2.22 MB
21.59 MB
Private (maximum):4.61 MB
Private (minimum):3.96 MB
Non-paged memory:2.22 MB
21.59 MB
Virtual memory:28 MB
140.96 MB
Virtual memory (peak):29.51 MB
169.69 MB
Working set:4.95 MB
18.61 MB
Working set (peak):5.32 MB
37.95 MB
Resource allocations
Threads:6
12
Handles:129
600

BehaviorsProcess properties

Platform:32-bit
Command lines:
  • wmiadap.exe /r /t
  • wmiadap.exe /f /t /r
Owner:SYSTEM
Parent process:svchost.exe (Host Process for Windows Services by Microsoft Corporation)

Windows OS versionsDistribution by Windows OS

OS versiondistribution
Microsoft Windows XP 25.00%
Windows XP Home Edition 25.00%
Microsoft Windows XP Home Edition 25.00%
Windows XP Professional 25.00%

Distribution by countryDistribution by country

Philippines installs about 100.00% of WMI.
Should I remove It? Clean your PC of unwanted adware, toolbars and bloatware.

Download it for FREE