What is the "wmiprvse.exe" ? Variant 10115807

Our database contains 1788 different files for filename wmiprvse.exe but this page contains information about single file with specific attributes. If you want to see general information about the wmiprvse.exe then visit General Information Page . You can also check most distributed file variants with name wmiprvse.exe. This file belongs to product Microsoft® Windows® Operating System and was developed by company Microsoft Corporation. This file has description WMI Provider Host. Agregate rating is 5(5) stars - based on 1 reviews.This is executable file. You can find it running in Task Manager as the process wmiprvse.exe.

Product:: Microsoft® Windows® Operating System
Company:: Microsoft Corporation
Description:: WMI Provider Host
Version:: 6.2.8400.0
MD5:: de4c02870b048e921c0613e6e3e65578
SHA1:: 0bb81f214caf1339136eb882d8f0bc3c0c0b9585
SHA256:: 0d9f9fe1ac25e41deced2a021ae6a573e322e4ab480df3c89449017bae0a81be
Size:: 480768
Directory:: C:\Windows\System32\wbem
Operating System:: Windows 8
Occurence:: Medium

System Explorer Community Antivirus Report

This file was checked and tolerated by following antivirus shields :

Antivirus Name	Latest Toleration
360 Total Security	2016-08-28 23:44:17
Windows Defender	2016-05-07 04:15:20
avast! Antivirus	2015-04-15 10:13:48
Avira Desktop	2014-08-07 13:42:52
AVG Internet Security 2012	2014-07-14 21:09:53
ESET Smart Security 6.0	2013-08-22 17:15:19
AVG AntiVirus Free Edition 2013	2013-06-24 15:07:44
Advanced SystemCare Ultimate	2013-03-10 17:22:34
Norton Internet Security	2013-03-03 02:04:50
COMODO Antivirus	2013-01-13 18:03:12

Antivirus shields were enabled and have latest antivirus database.

Is the Process "wmiprvse.exe" Safe or Threat ?

Loading Graph

100% of reviewed files are marked as Safe .
100% of reviewed files are marked as System file.

Our final rating for this file is Safe. Final rating is based on file reviews, discovered date, users occurence and antivirus scan results.

Filename "wmiprvse.exe" is used by Microsoft Windows System files. Many threats uses filenames of System Processes to camouflage itself. You should consider suspected any file which uses system filename and is not stored in system directory or has invalid file version information. Correct system file contains full file version information from Microsoft.

88% of reviewed files with different MD5 located in different directory are marked as Safe .
6% of reviewed files with different MD5 located in different directory are marked as Threat .

User Reviews of the "wmiprvse.exe"

Add Own Review

SAFErating from user MikeOne (Variant: 10115807)
The wmiprvse.exe file is otherwise known as Windows Management Instrumentation. It is a Microsoft Windows-based component that provides control and information about management in an enterprise environment. Check the info for Windows Management Instrumentation overview on http://technet.microsoft.com/en-us/library/cc736575(v=ws.10).aspx

Reviews of all wmiprvse.exe variants

Reviews for different files with filename "C:\Windows\System32\wbem\wmiprvse.exe"

SAFErating from user Mindconnect2020 for file C:\Windows\System32\wbem\wmiprvse.exe (Variant: 46589332)
Windows internal. - Look at MikeOne's comment
SAFErating from user volk_of for file C:\Windows\System32\wbem\wmiprvse.exe
SAFErating from user TK for file C:\Windows\System32\wbem\wmiprvse.exe (Variant: 675043)
This is a safe file
SAFErating from user libor420 for file C:\Windows\System32\wbem\wmiprvse.exe
SAFErating from user CommTruk for file C:\Windows\System32\wbem\wmiprvse.exe
SAFErating from user Simon for file C:\Windows\System32\wbem\wmiprvse.exe (Variant: 29009489)
It does chew up a lot of CPU cycles but it cannot be uninstalled.
SAFErating from user tratru for file C:\Windows\System32\wbem\wmiprvse.exe
SAFErating from user Dam for file C:\Windows\System32\wbem\wmiprvse.exe
SAFErating from user Tony for file C:\Windows\System32\wbem\wmiprvse.exe
SAFErating from user a for file C:\Windows\System32\wbem\wmiprvse.exe
SAFErating from user Sergej Nefjodov for file C:\Windows\System32\wbem\wmiprvse.exe
SAFErating from user Ghost for file C:\Windows\System32\wbem\wmiprvse.exe (Variant: 675043)
It's safe but very annoying and a resource hog.
SAFErating from user Mikel for file C:\Windows\System32\wbem\wmiprvse.exe
SAFErating from user lucien for file C:\Windows\System32\wbem\wmiprvse.exe
SAFErating from user al3x for file C:\Windows\System32\wbem\wmiprvse.exe
SAFErating from user MikeOne for file C:\Windows\System32\wbem\wmiprvse.exe (Variant: 19503553)
The wmiprvse.exe file is otherwise known as Windows Management Instrumentation. It is a Microsoft Windows-based component that provides control and information about management in an enterprise environment. Check the info for Windows Management Instrumentation overview on http://technet.microsoft.com/en-us/library/cc736575(v=ws.10).aspx
Generally speaking, Windows Management Instrumentation is a MS Windows OS component that provides management information and control in an enterprise environment. Most of developpers can use WMI to create event monitoring applications that can alert users when important incidents occur - e.g. check the WMI Browser sheet in the SE application with help for it on http://systemexplorer.net/onlinehelp.php?t=wmi.
Previously in older versions, MS Windows providers were loaded in-process with the Windows Management service (WinMgmt.exe). This service was running under the LocalSystem security account. If there was a failure of the provider, such failure caused the entire WMI service to fail and then the next request to WMI restarted the service. Beginning with Windows XP, WMI resides in a shared service host with several other services. To avoid stopping all the services when a provider fails, providers are loaded into a separate host process named Wmiprvse.exe.
Multiple instances of Wmiprvse.exe can run at the same time under different accounts: LocalSystem, NetworkService or LocalService. The WMI core WinMgmt.exe is loaded into the shared Local Service host named Svchost.exe.
SAFErating from user rots for file C:\Windows\System32\wbem\wmiprvse.exe