Wmiprvse.exe
WMI Provider Host by Microsoft
| Version: | 6.2.9200.16384 (win8_rtm.120725-1247) |
| MD5: | 3a4de678e4e709c0794da57c198aa7e3 |
| SHA1: | 03d226e18a0a0ce06857edc2e83445a705cb7eb8 |
| SHA256: | 0ba37d0db6d5d74e9b1d8ebc540c1acd4a471386d683e5392360f06e06e60de4 |
This is a Windows system installed file with Windows File Protection (WFP) enabled.
What is Wmiprvse.exe?
WMI provides a uniform interface for any local or remote applications or scripts that obtain management data from a computer system, a network, or an enterprise. The uniform interface is designed such that WMI client applications and scripts do not have to call a wide variety of operating system application programming interfaces (APIs). Many APIs cannot be called by automation clients like scripts or Visual Basic applications. Other APIs do not make calls to remote computers.
About Wmiprvse.exe (from Microsoft)
“Windows Management Instrumentation (WMI) is the infrastructure for management data and operations on Windows-based operating systems. You can write WMI scripts or applications to automate administrati”
Details
| File name: | wmiprvse.exe |
| Publisher: | Microsoft Corporation |
| Product name: | WMI Provider Host |
| Description: | Microsoft® Windows® Operating System |
| Typical file path: | C:\Windows\System32\wbem\wmiprvse.exe |
| File version: | 6.2.9200.16384 (win8_rtm.120725-1247) |
| Product version: | 6.2.9200.16384 |
| Size: | 468 KB (479,232 bytes) |
| Digital DNA |
| Entropy: | 6.464498 |
| File packed: | No |
| Code language: | Microsoft Visual C++ |
| .NET CLR: | No |
More details
Network connections
[UDP] listens on port 57761
[UDP] listens on port 64783
Resource utilization
(Note: statistics below are averages based on a minimum sample size of 200 unique participants)
Averages
| CPU |
| Total CPU: | 0.02275076% | |
| Kernel CPU: | 0.01511212% | |
| User CPU: | 0.00763863% | |
| Kernel CPU time: | 710,008,871 ms/min | |
| CPU cycles: | 1,533,698/sec | |
| Context switches: | 38/sec | |
| Memory |
| Private memory: | 12.69 MB | |
| Private (maximum): | 13.88 MB | |
| Private (minimum): | 6.36 MB | |
| Non-paged memory: | 12.69 MB | |
| Virtual memory: | 92.46 MB | |
| Virtual memory (peak): | 100.58 MB | |
| Working set: | 17.27 MB | |
| Working set (peak): | 19.27 MB | |
| Page faults: | 6,665,272/min | |
| I/O |
| I/O read transfer: | 23.22 KB/sec | |
| I/O read operations: | 3/sec | |
| I/O write transfer: | 6.14 KB/sec | |
| I/O write operations: | 20/sec | |
| I/O other transfer: | 85.79 KB/sec | |
| I/O other operations: | 5,554/sec | |
| Resource allocations |
| Threads: | 10 | |
| Handles: | 273 | |
Process properties
| Integrety level: | System |
| Platform: | 64-bit |
| Command line: | C:\Windows\System32\wbem\wmiprvse.exe |
| Owner: | SYSTEM |
| Parent process: | svchost.exe (by Microsoft) |
Threads
Averages
| ntdll.dll |
| Total CPU: | 1.10123665% | |
| Kernel CPU: | 0.90960660% | |
| User CPU: | 0.19163004% | |
| CPU cycles: | 29,647,390/sec | |
| Memory: | 1.74 MB | |
| WmiPerfClass.dll |
| Total CPU: | 0.22965927% | |
| Kernel CPU: | 0.17174095% | |
| User CPU: | 0.05791831% | |
| CPU cycles: | 4,564,380/sec | |
| Memory: | 140 KB | |
| CorperfmonExt.dll |
| Total CPU: | 0.09648575% | |
| Kernel CPU: | 0.08771432% | |
| User CPU: | 0.00877143% | |
| CPU cycles: | 2,367,132/sec | |
| Memory: | 156 KB | |
| rasctrs.dll |
| Total CPU: | 0.06755575% | |
| Kernel CPU: | 0.04000974% | |
| User CPU: | 0.02754601% | |
| CPU cycles: | 20,360/sec | |
| Context switches: | 4/sec | |
| Memory: | 36 KB | |
| perfdisk.dll |
| Total CPU: | 0.03024899% | |
| Kernel CPU: | 0.00767184% | |
| User CPU: | 0.02257715% | |
| CPU cycles: | 47,476/sec | |
| Memory: | 52 KB | |
| cimwin32.dll |
| Total CPU: | 0.01761988% | |
| Kernel CPU: | 0.00947268% | |
| User CPU: | 0.00814720% | |
| CPU cycles: | 601,388/sec | |
| Context switches: | 370/sec | |
| Memory: | 1.84 MB | |
| aspnet_perf.dll |
| Total CPU: | 0.01618968% | |
| Kernel CPU: | 0.01393488% | |
| User CPU: | 0.00225480% | |
| CPU cycles: | 255,838/sec | |
| Memory: | 52 KB | |
| wmiprvse.exe (main module) |
| Total CPU: | 0.00183423% | |
| Kernel CPU: | 0.00138957% | |
| User CPU: | 0.00044467% | |
| CPU cycles: | 39,289/sec | |
| Memory: | 480 KB | |
| combase.dll |
| Total CPU: | 0.00108479% | |
| Kernel CPU: | 0.00064538% | |
| User CPU: | 0.00043940% | |
| CPU cycles: | 7,625/sec | |
| Memory: | 1.69 MB | |
| msvcr100.dll (Microsoft Visual Studio 2010 by Microsoft) |
| Total CPU: | 0.00044018% | |
| Kernel CPU: | 0.00005857% | |
| User CPU: | 0.00038161% | |
| CPU cycles: | 8,343/sec | |
| Memory: | 840 KB | |
| npggNT64.des |
| Total CPU: | 0.00014458% | |
| Kernel CPU: | 0.00000000% | |
| User CPU: | 0.00014458% | |
| CPU cycles: | 44,179/sec | |
| Memory: | 296 KB | |
| NCObjAPI.DLL |
| Total CPU: | 0.00003708% | |
| Kernel CPU: | 0.00003708% | |
| User CPU: | 0.00000000% | |
| CPU cycles: | 25/sec | |
| Memory: | 88 KB | |
Distribution by Windows OS
| OS version | distribution |
| Windows 7 Home Premium |
32.00% |
|
| Windows 8.1 |
21.50% |
|
| Windows 7 Ultimate |
9.00% |
|
| Windows 8.1 Pro |
6.50% |
|
| Windows 8 |
5.00% |
|
| Windows 8 Single Language |
5.00% |
|
| Windows 8.1 Single Language |
4.50% |
|
| Windows 7 Professional |
4.00% |
|
| Windows 8 Pro |
3.50% |
|
| Windows 8.1 Pro with Media Center |
2.50% |
|
| Windows 7 Home Basic |
2.50% |
|
| Windows Vista Home Premium |
1.50% |
|
| Windows 8 Enterprise |
1.00% |
|
| Windows 8.1 N |
0.50% |
|
| Windows Seven Black Edition |
0.50% |
|
| Windows 8.1 Enterprise Evaluation |
0.50% |
|
Distribution by country
United States installs about 44.72% of WMI Provider Host.
Distribution by PC manufacturer
| PC Manufacturer | distribution |
| Dell |
23.75% |
|
| Hewlett-Packard |
18.01% |
|
| ASUS |
16.86% |
|
| Acer |
12.64% |
|
| Toshiba |
8.43% |
|
| Lenovo |
8.43% |
|
| Sony |
5.36% |
|
| GIGABYTE |
2.30% |
|
| Alienware |
1.92% |
|
| Samsung |
1.53% |
|
| Intel |
0.77% |
|
