Should I block it?

No, this file is 100% safe to run.

Additional versions

12.0.9600.16384 (winblue_rtm.130821-1623)	4.49%
12.0.9431.0 (winmain_bluemp.130615-1214)	0.23%
12.0.9200.16384 (win8_rtm.120725-1247)	1.00%
12.0.9200.16384 (win8_rtm.120725-1247)	14.41%
12.0.9200.16384 (win8_rtm.120725-1247)	0.06%
12.0.8400.0 (winmain_win8rc.120518-1423)	0.11%
12.0.8250.0 (winmain_win8beta.120217-1520)	0.01%
12.0.8102.0 (winmain_win8m3.110823-1455)	0.03%
12.0.7600.16385 (win7_rtm.090713-1255)	4.08%
12.0.7600.16385 (win7_rtm.090713-1255)	2.14%
12.0.7600.16385 (win7_rtm.090713-1255)	0.22%
12.0.7600.16385 (win7_rtm.090713-1255)	43.01%
12.0.7600.16385 (win7_rtm.090713-1255)	0.01%
12.0.7600.16385 (win7_rtm.090713-1255)	0.01%
12.0.7600.16385 (win7_rtm.090713-1255)	0.01%
12.0.7600.16385 (win7_rtm.090713-1255)	0.01%
12.0.7600.16385 (win7_rtm.090713-1255)	0.11%
12.0.7600.16385 (win7_rtm.090713-1255)	0.04%
12.0.7600.16385 (win7_rtm.090713-1255)	0.01%
12.0.7600.16385 (win7_rtm.090713-1255)	0.02%
12.0.7600.16385 (win7_rtm.090713-1255)	0.01%
12.0.7600.16385 (win7_rtm.090713-1255)	0.01%
12.0.7600.16385 (win7_rtm.090713-1255)	0.01%
12.0.7600.16385 (win7_rtm.090713-1255)	0.01%
12.0.7600.16385 (win7_rtm.090713-1255)	0.01%
View more
12.0.7600.16385 (win7_rtm.090713-1255)	0.01%
12.0.7600.16385 (win7_rtm.090713-1255)	0.01%
12.0.7600.16385 (win7_rtm.090713-1255)	0.01%
12.0.7600.16385 (win7_rtm.090713-1255)	5.10%
12.0.7600.16385 (win7_rtm.090713-1255)	0.01%
12.0.7600.16385 (win7_rtm.090713-1255)	0.01%
11.0.6002.18311 (vistasp2_gdr.100913-0337)	12.74%
11.0.6002.18311 (vistasp2_gdr.100913-0337)	0.01%
11.0.6002.18005 (lh_sp2rtm.090410-1830)	0.09%
11.0.6001.7010 (vistasp1_gdr.100910-0521)	0.65%
11.0.6000.6353 (vista_gdr.090910-0436)	0.48%
11.0.6000.6324 (vista_rtm.061101-2205)	0.01%
11.0.5721.5262 (WMP_11.090130-1421)	2.18%
11.0.5721.5262 (WMP_11.090130-1421)	0.01%
11.0.5721.5262 (WMP_11.090130-1421)	0.27%
11.0.5721.5262 (WMP_11.090130-1421)	0.01%
11.0.5721.5262 (WMP_11.090130-1421)	0.01%
11.0.5721.5262 (WMP_11.090130-1421)	0.01%
11.0.5721.5262 (WMP_11.090130-1421)	0.01%
11.0.5721.5262 (WMP_11.090130-1421)	0.01%
11.0.5721.5145 (WMP_11.061018-2006)	8.01%
11.0.5721.5145 (WMP_11.061018-2006)	0.07%
11.0.5721.5145 (WMP_11.061018-2006)	0.01%
11.0.5721.5145 (WMP_11.061018-2006)	0.06%
11.0.5721.5145 (WMP_11.061018-2006)	0.20%
11.0.5721.5145 (WMP_11.061018-2006)	0.01%
12 other versions

Relationships

PE file structure

Show functions

Import table

advapi32.dll

RegQueryValueExW, RegOpenKeyExW, RegCloseKey, EventUnregister, EventWrite, EventRegister

kernel32.dll

GetLastError, lstrlenW, CompareStringA, ExitProcess, FreeLibrary, SetErrorMode, GetProcAddress, HeapFree, SetCurrentDirectoryW, ExpandEnvironmentStringsW, HeapAlloc, CloseHandle, CreateMutexW, GetStartupInfoW, GetProcessHeap, SetThreadPriority, GetCurrentThread, LocalFree, LoadLibraryW, FormatMessageW, GetCommandLineW, GetModuleHandleW, QueryPerformanceCounter, GetTickCount, GetCurrentThreadId, GetCurrentProcessId, GetSystemTimeAsFileTime, TerminateProcess, GetCurrentProcess, UnhandledExceptionFilter, SetUnhandledExceptionFilter, LoadLibraryA, InterlockedExchange, LocalAlloc, RaiseException, CompareStringOrdinal, SetProcessDEPPolicy, SetEvent, OpenEventW, LoadLibraryExA

ntdll.dll

memset

user32.dll

SetForegroundWindow, GetClassNameA, GetParent, GetDesktopWindow, GetWindowThreadProcessId, IsWindowVisible, GetWindow, MessageBoxW, GetSystemMetrics, ShowWindow, FindWindowW, SendMessageTimeoutW, IsIconic, GetClassNameW

wmplayer.exe

Windows Media Player by Microsoft

Remove wmplayer.exe

Version:	12.0.7600.16385 (win7_rtm.090713-1255)
MD5:	11afc25168ca5d0ded22765d37f4639e
SHA1:	564b7ce5a05ac065479c9b9429f6f1cd6f0d9d0d

This is a Windows system installed file with Windows File Protection (WFP) enabled.

What is wmplayer.exe?

Windows Media Player (abbreviated WMP) is a media player and media library application developed by Microsoft that is used for playing audio, video and viewing images on personal computers running the Microsoft Windows operating system, as well as on Pocket PC and Windows Mobile-based devices.

About wmplayer.exe (from Microsoft)

“Designed by media lovers, for media lovers. Windows Media Player 12—available only in Windows 7—plays more music and video than ever, including Flip Video and unprotected songs from your iTunes librar”

Details

File name:	wmplayer.exe
Publisher:	Microsoft Corporation
Product name:	Windows Media Player
Description:	Microsoft® Windows® Operating System
Typical file path:	C:\Program Files\windows media player\wmplayer.exe
Original name:	wmplayer.exe.mui
File version:	12.0.7600.16385 (win7_rtm.090713-1255)
Product version:	12.0.7600.16385
Size:	163.5 KB (167,424 bytes)
Build date:	7/13/2009 12:23 PM
Digital DNA
Entropy:	6.489287
File packed:	No
.NET CLR:	No

More details

Behaviors

Autoplay handlers

Runs under the registry key 'SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\AutoplayHandlers\Handlers'

Handler name 'IviDVDEventHandler'
Handler name 'IviVideoCDHandler'
Handler name 'MSPlayBluRayOnArrival'
Handler name 'MSWMPBurnDataDVDArrival'
Handler name 'MSRipCDAudioOnArrival'
Handler name 'MSWMPBurnCDOnArrival'
Handler name 'MSPlayDVDMovieOnArrival'
Handler name 'MSPlayCDAudioOnArrival'
Handler name 'MSPlayVideoCDMovieOnArrival'
Handler name 'MSPlaySuperVideoCDMovieOnArrival'

Shell open commands

WPLFile
WMZFile
WMVFile
WMSFile
wmafile
mpegfile
mp3file
AUFile
AVIFile

Windows firewall allowed programs

Exceptions allow programs to access to the Internet through an outbound connections

Firewall exception for 'C:\Programmer\Windows Media Player\wmplayer.exe'
Firewall exception for 'C:\Program Files\Windows Media Player\wmplayer.exe'

Network connections

Access through an approved Windows firewall exception

[UDP] listens on port 55726

Resource utilization

(Note: statistics below are averages based on a minimum sample size of 200 unique participants)

Averages

CPU
Total CPU:	0.00006083%	0.028634%
Kernel CPU:	0.00000563%	0.013761%
User CPU:	0.00005519%	0.014873%
Kernel CPU time:	24,040 ms/min	100,923,805ms/min
Memory
Private memory:	58.93 MB	21.59 MB
Private (maximum):	72.09 MB
Private (minimum):	4.24 MB
Non-paged memory:	58.93 MB	21.59 MB
Virtual memory:	233.44 MB	140.96 MB
Virtual memory (peak):	263.63 MB	169.69 MB
Working set:	37.86 MB	18.61 MB
Working set (peak):	83.44 MB	37.95 MB
Resource allocations
Threads:	26	12
Handles:	696	600
GUI GDI count:	666	103
GUI GDI peak:	679	142
GUI USER count:	111	49
GUI USER peak:	143	71

Process properties

Integrety level:	High
Platform:	64-bit
Command line:	"C:\Program Files\windows media player\wmplayer.exe"
Owner:	User
Parent process:	Explorer.EXE (Windows Explorer by Microsoft)

Threads