Should I block it?

No, this file is 100% safe to run.

Additional versions

8.0.9200.16384 (win8_rtm.120725-1247)	9.15%
8.0.9200.16384 (win8_rtm.120725-1247)	0.70%
7.5.7600.16385 (win7_rtm.090713-1255)	2.11%
7.5.7600.16385 (win7_rtm.090713-1255)	19.01%
7.5.7600.16385 (win7_rtm.090713-1255)	23.94%
7.0.6000.16386 (vista_rtm.061101-2205)	7.75%
7.0.6000.16386 (vista_rtm.061101-2205)	0.70%
6.0.3790.3959 (srv03_sp2_rtm.070216-1710)	0.70%
5.1.2600.5512 (xpsp.080413-0852)	32.39%
5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)	3.52%

Relationships

Parent process

services.exe (Services and Controller app by Microsoft)

Related files

PE file structure

Show functions

Import table

advapi32.dll

RegQueryValueExA, RegOpenKeyExA, SetServiceStatus, RegisterServiceCtrlHandlerA, StartServiceCtrlDispatcherA, RegCloseKey

api-ms-win-core-errorhandling-l1-1-1.dll

SetUnhandledExceptionFilter, UnhandledExceptionFilter

api-ms-win-core-interlocked-l1-2-0.dll

InterlockedCompareExchange, InterlockedExchange

api-ms-win-core-libraryloader-l1-1-1.dll

GetModuleHandleA

api-ms-win-core-processthreads-l1-1-1.dll

TerminateProcess, GetCurrentProcessId, GetCurrentThreadId, GetCurrentProcess

api-ms-win-core-profile-l1-1-0.dll

QueryPerformanceCounter

api-ms-win-core-sysinfo-l1-2-0.dll

GetSystemTimeAsFileTime, GetTickCount

iisrtl.dll

PuDeleteDebugPrintsObject, _PuInitiateDebug@0, PuCreateDebugPrintsObject, _PuUninitiateDebug@0, PuDbgPrint

iisutil.dll

PuDeleteDebugPrintsObject, PuCreateDebugPrintsObject, PuDbgPrint

kernel32.dll

LoadLibraryA, LocalAlloc, FreeLibrary, Sleep, GetProcAddress, LeaveCriticalSection, LoadLibraryExA, EnterCriticalSection, DeleteCriticalSection, LocalFree, InitializeCriticalSection, OutputDebugStringA, GetCurrentProcess, TerminateProcess, GetSystemTimeAsFileTime, GetCurrentProcessId, GetCurrentThreadId, GetTickCount, QueryPerformanceCounter, GetModuleHandleA, SetUnhandledExceptionFilter, UnhandledExceptionFilter, InterlockedCompareExchange, InterlockedExchange, GetLastError, lstrcmpiA, SetLastError, SetErrorMode, GetVersionExA, SetEvent, CloseHandle, CreateEventA, CreateThread

msvcrt.dll

DllMain

ole32.dll

CoUninitialize, CoInitializeEx

user32.dll

DispatchMessageA, MsgWaitForMultipleObjects, RegisterClassA, CreateWindowExA, GetMessageA, TranslateMessage, DefWindowProcA, wsprintfA

INETINFO.exe

Internet Information Services by Microsoft

Remove INETINFO.exe

Version:	7.5.7600.16385 (win7_rtm.090713-1255)
MD5:	fc9735b66850cf8aebbc1e207ecb2ad8
SHA1:	4274b830724a783a531b00f96d8a9f632fd51783
SHA256:	a2546ffb6e49784f052efa036776e246cada34d7146b3aa2d19ac1463d20b480

This is a Windows system installed file with Windows File Protection (WFP) enabled.

What is INETINFO.exe?

When IIS runs in worker process isolation mode,Inetinfo.exe is a user-mode component that hosts the IIS metabase and that also hosts the non-Web services of IIS 6.0, including the FTP service, the SMTP service, and the NNTP service. Inetinfo.exe depends on IIS Admin service to host the metabase. In IIS, regardless of the application isolation mode used, the services that run in Inetinfo.exe run as DLLs under the Local System account.

About INETINFO.exe (from Microsoft)

“IIS (Internet Information Services) is a secure, reliable, and scalable Web server that provides an easy to manage platform for developing and hosting Web applications and services.”

Details

File name:	inetinfo.exe
Publisher:	Microsoft Corporation
Product name:	Internet Information Services
Typical file path:	C:\Windows\System32\inetsrv\inetinfo.exe
File version:	7.5.7600.16385 (win7_rtm.090713-1255)
Product version:	7.5.7600.16385
Size:	13.5 KB (13,824 bytes)
Digital DNA
PE subsystem:	Windows GUI
Entropy:	5.526762
File packed:	No
Code language:	Microsoft Visual C++
.NET CLR:	No

More details

Behaviors

Services

Runs under 'SYSTEM\CurrentControlSet\Services' as a shared service by the Service Host (svchost.exe)

'IISADMIN' (Service d'administration IIS)
W3SVC
'IISADMIN' (IIS Admin Service)

Resource utilization

(Note: statistics below are averages based on a minimum sample size of 200 unique participants)

Averages

CPU
Total CPU:	0.00072794%	0.028634%
Kernel CPU:	0.00043320%	0.013761%
User CPU:	0.00029474%	0.014873%
Kernel CPU time:	324,073 ms/min	100,923,805ms/min
CPU cycles:	51,517/sec	17,470,203/sec
Memory
Private memory:	6.2 MB	21.59 MB
Private (maximum):	8.41 MB
Private (minimum):	5.71 MB
Non-paged memory:	6.2 MB	21.59 MB
Virtual memory:	58.03 MB	140.96 MB
Virtual memory (peak):	58.92 MB	169.69 MB
Working set:	5.93 MB	18.61 MB
Working set (peak):	11.47 MB	37.95 MB
Page faults:	4,604/min	2,039/min
I/O
I/O read transfer:	6.14 KB/sec	1.02 MB/min
I/O read operations:	1/sec	343/min
I/O write transfer:	5.94 KB/sec	274.99 KB/min
I/O write operations:	1/sec	227/min
I/O other transfer:	197 Bytes/sec	448.09 KB/min
I/O other operations:	11/sec	1,671/min
Resource allocations
Threads:	5	12
Handles:	157	600

Process properties

Integrety level:	System
Platform:	32-bit
Command line:	C:\Windows\System32\inetsrv\inetinfo.exe
Owner:	SYSTEM
Windows Service
Service name:	IISADMIN
Display name:	Service d'administration IIS
Description:	“Permet à ce serveur d'administrer la métabase IIS. La métabase IIS stocke la configuration des services SMTP et FTP. Si ce service est arrêté, le serveur ne pourra pas configurer SMTP ou FTP. S'il est désactivé, les services qui en dépendent explicitement ne démarreront pas.”
Type:	Win32ShareProcess
Parent process:	services.exe (Services and Controller app by Microsoft)

Threads