What is the "wmiprvse.exe" ? Variant 18655989

Our database contains 1788 different files for filename wmiprvse.exe but this page contains information about single file with specific attributes. If you want to see general information about the wmiprvse.exe then visit General Information Page . You can also check most distributed file variants with name wmiprvse.exe. This file belongs to product Microsoft® Windows® Operating System and was developed by company Microsoft Corporation. This file has description WMI Provider Host. Agregate rating is 5(5) stars - based on 1 reviews.This is executable file. You can find it running in Task Manager as the process wmiprvse.exe.

wmiprvse.exe Process
Product:
Microsoft® Windows® Operating System
Company:
Microsoft Corporation
Description:
WMI Provider Host
Version:
6.2.9200.16518
MD5:
2bf54e692fc1292d182ed056faf8bea0
SHA1:
5ba8f9cfce00b82fecb7b82192f17b86034f0956
SHA256:
747ed75d63cbf05044c74eacbd3b54c0f65c03977ea6093309a29848ea54aac2
Size:
375808
Directory:
C:\Windows\System32\wbem
Operating System:
Windows 8
Occurence:
High oc2

System Explorer Community Antivirus Report

This file was checked and tolerated by following antivirus shields :
Antivirus NameLatest Toleration
360 Total Security2016-09-04 21:42:37
avast! Antivirus2016-08-22 16:13:59
Spybot - Search and Destroy2016-07-24 11:18:35
ESET NOD32 Antivirus 9.0.381.02016-07-23 17:08:21
Windows Defender2016-07-18 16:07:50
ESET Smart Security 8.02016-07-05 10:48:20
Antivirus shields were enabled and have latest antivirus database.

Is the Process "wmiprvse.exe" Safe or Threat ?

Loading Graph
100% of reviewed files are marked as Safe .
Our final rating for this file is Safe. Final rating is based on file reviews, discovered date, users occurence and antivirus scan results.
88% of reviewed files with different MD5 located in different directory are marked as Safe .
6% of reviewed files with different MD5 located in different directory are marked as Threat .

User Reviews of the "wmiprvse.exe"

  • SAFErating from user MikeOne for file C:\Windows\SysWOW64\wbem\wmiprvse.exe (Variant: 19432721)

    The wmiprvse.exe file is otherwise known as Windows Management Instrumentation. It is a Microsoft Windows-based component that provides control and information about management in an enterprise environment. Check the info for Windows Management Instrumentation overview on http://technet.microsoft.com/en-us/library/cc736575(v=ws.10).aspx
    Generally speaking, Windows Management Instrumentation is a MS Windows OS component that provides management information and control in an enterprise environment. Most of developpers can use WMI to create event monitoring applications that can alert users when important incidents occur - e.g. check the WMI Browser sheet in the SE application with help for it on http://systemexplorer.net/onlinehelp.php?t=wmi.
    Previously in older versions, MS Windows providers were loaded in-process with the Windows Management service (WinMgmt.exe). This service was running under the LocalSystem security account. If there was a failure of the provider, such failure caused the entire WMI service to fail and then the next request to WMI restarted the service. Beginning with Windows XP, WMI resides in a shared service host with several other services. To avoid stopping all the services when a provider fails, providers are loaded into a separate host process named Wmiprvse.exe.
    Multiple instances of Wmiprvse.exe can run at the same time under different accounts: LocalSystem, NetworkService or LocalService. The WMI core WinMgmt.exe is loaded into the shared Local Service host named Svchost.exe.