Should I block it?

No, this file is 100% safe to run.

VersionsAdditional versions

6.2.9200.16384 (win8_rtm.120725-1247) 7.14%
6.2.9200.16384 (win8_rtm.120725-1247) 7.14%
6.1.7600.16385 (win7_rtm.090713-1255) 42.86%
6.1.7600.16385 (win7_rtm.090713-1255) 14.29%
5.1.2600.5512 (xpsp.080413-2108) 21.43%
5.1.2600.2180 (xpsp_sp2_rtm.040803-2158) 7.14%

Relationships

Parent process
Related files

PE structurePE file structure

Show functions
Import table
advapi32.dll
RegCreateKeyExW, RegNotifyChangeKeyValue, OpenProcessToken, GetTokenInformation, RegOpenCurrentUser, RegEnumValueA, RegEnumKeyW, RegEnumKeyA, RegQueryInfoKeyW, RegQueryInfoKeyA, RegOpenKeyExA, RegDeleteKeyW, RegDeleteKeyA, RegDeleteValueA, RegQueryValueExA, RegSetValueExA, RegCreateKeyExA, InitializeSecurityDescriptor, SetSecurityDescriptorDacl, SetEntriesInAclW, RegEnumValueW, AllocateAndInitializeSid, GetLengthSid, RegCloseKey, RegSetValueExW, RegOpenKeyExW, RegQueryValueExW, RegDeleteValueW, RegEnumKeyExW, FreeSid, AddAccessAllowedAceEx, InitializeAcl
kernel32.dll
MultiByteToWideChar, lstrlenA, FormatMessageA, GetVersionExA, lstrcatW, LCMapStringW, InterlockedIncrement, GetSystemDefaultUILanguage, GetLastError, lstrlenW, WaitForSingleObject, InterlockedDecrement, lstrcmpiW, GetCurrentProcessId, ExpandEnvironmentStringsW, GetProcessHeap, HeapCreate, HeapDestroy, HeapFree, HeapReAlloc, HeapAlloc, FreeLibrary, CloseHandle, ReadFile, GetFileTime, GetFileSize, CreateFileW, GetFileAttributesW, SearchPathW, GetProcAddress, WideCharToMultiByte, LoadLibraryExW, SetErrorMode, ReleaseMutex, CreateMutexW, InitializeCriticalSectionAndSpinCount, DeleteCriticalSection, LeaveCriticalSection, DebugBreak, CreateSemaphoreW, CreateEventW, SetEvent, GetCurrentThreadId, EnterCriticalSection, WaitForMultipleObjects, ReleaseSemaphore, InitializeCriticalSection, OpenProcess, LocalFree, LocalAlloc, GetCurrentProcess, GetTimeZoneInformation, GetLocalTime, GetSystemTimeAsFileTime, ResetEvent, SetUnhandledExceptionFilter, GetVersionExW, QueryPerformanceCounter, GetTickCount, TerminateProcess, UnhandledExceptionFilter, GetModuleHandleA, GetStartupInfoA, lstrcpyW, LoadLibraryW, GetLocaleInfoW, MoveFileExW, DeleteFileW, CreateDirectoryW, WriteFile, lstrcmpW, InterlockedCompareExchange, GetSystemDefaultLCID, OpenEventW, SetLastError, FormatMessageW
loadperf.dll
UnloadPerfCounterTextStringsW, LoadPerfCounterTextStringsW
msvcp60.dll
DllMain
msvcrt.dll
DllMain
ntdll.dll
atol, RtlValidRelativeSecurityDescriptor, memcpy, wcsrchr, _wcsicmp, _wtol, _alloca_probe, memset
ole32.dll
CoInitializeEx, CoInitializeSecurity, CoUninitialize, CoCreateInstance, CoSetProxyBlanket
user32.dll
LoadStringW, wsprintfW, CharNextW

WMIADAP.exe

WMI by Microsoft

Remove WMIADAP.exe
Version:   6.2.9200.16384 (win8_rtm.120725-1247)
MD5:   d664e7319515dce04927b7670a11753d
SHA1:   cdbe1396092339b53e7721ef457a12dba5f9f4ac
SHA256:   9eb01aec553034e7aee490b305e0edc343c5289df392e5462344799e3bde416a
This is a Windows system installed file with Windows File Protection (WFP) enabled.

What is WMIADAP.exe?

WMI provides a uniform interface for any local or remote applications or scripts that obtain management data from a computer system, a network, or an enterprise. The uniform interface is designed such that WMI client applications and scripts do not have to call a wide variety of operating system application programming interfaces (APIs). Many APIs cannot be called by automation clients like scripts or Visual Basic applications. Other APIs do not make calls to remote computers.

About WMIADAP.exe (from Microsoft)

Windows Management Instrumentation (WMI) is the infrastructure for management data and operations on Windows-based operating systems. You can write WMI scripts or applications to automate administrati

DetailsDetails

File name:WMIADAP.EXE
Publisher:Microsoft Corporation
Product name:WMI
Description:Microsoft® Windows® Operating System
Typical file path:C:\Windows\System32\wbem\wmiadap.exe
Original name:wmicookr.dll
File version:6.2.9200.16384 (win8_rtm.120725-1247)
Product version:6.2.9200.16384
Size:121.5 KB (124,416 bytes)
Digital DNA
PE subsystem:Windows GUI
Entropy:6.146211
File packed:No
Code language:Microsoft Visual C++
.NET CLR:No
More details

ResourcesResource utilization

(Note: statistics below are averages based on a minimum sample size of 200 unique participants)
Averages
 
CPU
Total CPU:0.05916293%
0.028634%
Kernel CPU:0.02958146%
0.013761%
User CPU:0.02958146%
0.014873%
Memory
Private (maximum):4 MB
Private (minimum):3.68 MB

BehaviorsProcess properties

Platform:32-bit
Command line:wmiadap.exe /r /t
Owner:SYSTEM
Parent process:svchost.exe (Host Process for Windows Services by Microsoft Corporation)

Windows OS versionsDistribution by Windows OS

OS versiondistribution
Microsoft Windows XP 25.00%
Windows XP Home Edition 25.00%
Microsoft Windows XP Home Edition 25.00%
Windows XP Professional 25.00%

Distribution by countryDistribution by country

Philippines installs about 100.00% of WMI.
Should I remove It? Clean your PC of unwanted adware, toolbars and bloatware.

Download it for FREE