Should I block it?

No, this file is 100% safe to run.

VersionsAdditional versions

6.3.9600.16384 (winblue_rtm.130821-1623) 6.65%
6.3.9431.0 (winmain_bluemp.130615-1214) 0.18%
6.2.9200.16398 (win8_gdr_oobssr.120820-1900) 1.26%
6.2.9200.16384 (win8_rtm.120725-1247) 18.71%
6.2.9200.16384 (win8_rtm.120725-1247) 0.72%
6.1.7600.16385 (win7_rtm.090713-1255) 42.45%
6.1.7600.16385 (win7_rtm.090713-1255) 12.59%
6.0.6002.18005 (lh_sp2rtm.090410-1830) 8.63%
6.0.6001.18000 (longhorn_rtm.080118-1840) 2.16%
6.0.6001.18000 (longhorn_rtm.080118-1840) 0.54%
6.0.6000.16386 (vista_rtm.061101-2205) 0.54%
5.1.2600.0 (xpclient.010817-1148) 4.86%
5.1.2600.0 (xpclient.010817-1148) 0.36%
5.1.2600.0 (xpclient.010817-1148) 0.18%
5.1.2600.0 (xpclient.010817-1148) 0.18%

Relationships

PE structurePE file structure
Show functions
Import table
advapi32.dll
EqualSid, GetLengthSid, IsValidSid, CreateServiceW, StartServiceCtrlDispatcherW, RegisterServiceCtrlHandlerW, SetServiceStatus, UnregisterTraceGuids, RegisterTraceGuidsW, GetTraceLoggerHandle, GetTraceEnableLevel, GetTraceEnableFlags, TraceMessage, DeleteService, OpenServiceW, RegSetValueExW, RegCloseKey, RegCreateKeyW, RegDeleteKeyW, RegOpenKeyW, OpenSCManagerW
api-ms-win-core-apiquery-l1-1-0.dll
ApiSetQueryApiSetPresence
api-ms-win-core-com-l1-1-0.dll
CoImpersonateClient, StringFromGUID2, CoInitializeSecurity, CoRevokeClassObject, CoRegisterClassObject, CoRevertToSelf, CoInitializeEx
api-ms-win-core-debug-l1-1-1.dll
DebugBreak
api-ms-win-core-delayload-l1-1-1.dll
ResolveDelayLoadedAPI, DelayLoadFailureHook
api-ms-win-core-errorhandling-l1-1-1.dll
SetUnhandledExceptionFilter, GetLastError, UnhandledExceptionFilter
api-ms-win-core-interlocked-l1-2-0.dll
InterlockedDecrement, InterlockedIncrement, InterlockedCompareExchange, InterlockedExchange
api-ms-win-core-libraryloader-l1-1-1.dll
GetProcAddress, GetModuleFileNameW, LoadLibraryExW, GetModuleHandleA
api-ms-win-core-localization-l1-2-0.dll
LCMapStringW
api-ms-win-core-processenvironment-l1-2-0.dll
GetCommandLineW
api-ms-win-core-processthreads-l1-1-1.dll
GetCurrentProcessId, ExitProcess, GetCurrentThreadId, TerminateProcess, GetCurrentProcess
api-ms-win-core-profile-l1-1-0.dll
QueryPerformanceCounter
api-ms-win-core-synch-l1-2-0.dll
DeleteCriticalSection, EnterCriticalSection, SetEvent, LeaveCriticalSection, CreateEventW, Sleep, InitializeCriticalSectionAndSpinCount
api-ms-win-core-sysinfo-l1-2-0.dll
GetSystemTimeAsFileTime, GetTickCount
api-ms-win-security-base-l1-1-0.dll
EqualSid, GetLengthSid, IsValidSid
api-ms-win-security-base-l1-2-0.dll
GetLengthSid, EqualSid, IsValidSid
api-ms-win-service-core-l1-1-0.dll
SetServiceStatus, StartServiceCtrlDispatcherW
api-ms-win-service-core-l1-1-1.dll
SetServiceStatus, StartServiceCtrlDispatcherW
api-ms-win-service-management-l1-1-0.dll
OpenSCManagerW, CreateServiceW, OpenServiceW, DeleteService
api-ms-win-service-winsvc-l1-1-0.dll
RegisterServiceCtrlHandlerW
api-ms-win-service-winsvc-l1-2-0.dll
RegisterServiceCtrlHandlerW
kernel32.dll
InterlockedIncrement, Sleep, InterlockedCompareExchange, SetUnhandledExceptionFilter, GetModuleHandleA, QueryPerformanceCounter, GetTickCount, GetCurrentThreadId, LeaveCriticalSection, GetSystemTimeAsFileTime, TerminateProcess, GetCurrentProcess, UnhandledExceptionFilter, InitializeCriticalSectionAndSpinCount, DebugBreak, LCMapStringW, EnterCriticalSection, ExitProcess, SetEvent, LoadLibraryExW, GetLastError, CreateEventW, GetModuleFileNameW, lstrlenW, GetCommandLineW, DeleteCriticalSection, InterlockedDecrement, GetCurrentProcessId, GetProcAddress, InterlockedExchange
msvcrt.dll
DllMain
ntdll.dll
EtwUnregisterTraceGuids, EtwRegisterTraceGuidsW, EtwGetTraceLoggerHandle, EtwGetTraceEnableFlags, EtwTraceMessage, EtwGetTraceEnableLevel
ole32.dll
CoImpersonateClient, CoRegisterClassObject, CoRevokeClassObject, StringFromGUID2, CoRevertToSelf, CoInitialize, CoInitializeSecurity
user32.dll
DispatchMessageW, TranslateMessage, GetMessageW, PostQuitMessage, SetTimer, PostThreadMessageW

unsecapp.exe

Sink to receive asynchronous callbacks for WMI client application by Microsoft

Remove unsecapp.exe
Version:   5.1.2600.0 (xpclient.010817-1148)
MD5:   87ed195ff0307a3285ebdfffdf467a64
SHA1:   e74843bdb6f438eecaf66ba8ba15f1587ce3c0a6
This is a Windows system installed file with Windows File Protection (WFP) enabled.

Overview

unsecapp.exe executes as a process with the local user's privileges. This version is installed on Windows XP and is compiled as a 32 bit program.

DetailsDetails

File name:unsecapp.exe
Publisher:Microsoft Corporation
Product name:Sink to receive asynchronous callbacks for WMI client application
Description:Microsoft® Windows® Operating System
Typical file path:C:\Windows\System32\wbem\unsecapp.exe
Original name:unsecapp.dll
File version:5.1.2600.0 (xpclient.010817-1148)
Product version:5.1.2600.0
Size:16.5 KB (16,896 bytes)
Digital DNA
PE subsystem:Windows GUI
Entropy:6.314833
File packed:No
Code language:Microsoft Visual C++
.NET CLR:No
More details

ResourcesResource utilization

(Note: statistics below are averages based on a minimum sample size of 200 unique participants)
Averages
 
CPU
Total CPU:0.00013747%
0.028634%
Kernel CPU:0.00006392%
0.013761%
User CPU:0.00007355%
0.014873%
Kernel CPU time:93,125 ms/min
100,923,805ms/min
Memory
Private memory:2.18 MB
21.59 MB
Private (maximum):6.09 MB
Private (minimum):180 KB
Non-paged memory:2.18 MB
21.59 MB
Virtual memory:52.5 MB
140.96 MB
Virtual memory (peak):55.5 MB
169.69 MB
Working set:1.71 MB
18.61 MB
Working set (peak):6.35 MB
37.95 MB
Resource allocations
Threads:4
12
Handles:161
600
GUI GDI count:8
103
GUI USER count:6
49

BehaviorsProcess properties

Integrety level:Undefined
Platform:32-bit
Command line:C:\Windows\System32\wbem\unsecapp.exe -embedding
Owner:User
Parent process:svchost.exe (Generic Host Process for Win32 Services by Microsoft)

Windows OS versionsDistribution by Windows OS

OS versiondistribution
Windows 7 Home Premium 31.00%
Windows 8 13.00%
Windows 7 Ultimate 11.00%
Windows 8.1 10.00%
Windows 7 Professional 7.50%
Windows 8.1 Single Language 5.50%
Windows 8 Single Language 4.50%
Windows Vista Home Premium 4.00%
Windows 7 Home Basic 3.50%
Windows 8.1 Pro 2.50%
Windows 8 Pro 2.00%
Windows Vista Ultimate 1.00%
Windows Vista Home Basic 1.00%
Windows 8 Pro with Media Center 1.00%
Windows 8.1 Pro with Media Center 0.50%
Windows 7 Starter 0.50%
Windows Vista Business 0.50%
Windows 7 Enterprise 0.50%
Windows 8.1 Pro Preview with Media Center 0.50%

Distribution by countryDistribution by country

United States installs about 41.71% of Sink to receive asynchronous callbacks for WMI client application.

OEM distributionDistribution by PC manufacturer

PC Manufacturerdistribution
Acer 25.56%
Dell 15.56%
Hewlett-Packard 13.70%
Toshiba 11.85%
Lenovo 9.63%
ASUS 9.63%
Sony 4.44%
MSI 1.48%
NEC 1.48%
Alienware 1.11%
GIGABYTE 1.11%
Samsung 1.11%
Intel 0.74%
Medion 0.74%
Apple 0.74%
Gateway 0.74%
Sahara 0.37%
Back to top
Should I remove It? Clean your PC of unwanted adware, toolbars and bloatware.

Download it for FREE