Should I block it?

No, this file is 100% safe to run.

Additional versions

6.3.9600.16384 (winblue_rtm.130821-1623)	3.56%
6.3.9431.0 (winmain_bluemp.130615-1214)	0.27%
6.2.9200.16384 (win8_rtm.120725-1247)	0.27%
6.1.7600.16385 (win7_rtm.090713-1255)	17.53%
6.1.7600.16385 (win7_rtm.090713-1255)	66.85%
6.0.6000.16386 (vista_rtm.061101-2205)	9.32%
6.0.6000.16386 (vista_rtm.061101-2205)	2.19%

Relationships

Parent process

svchost.exe (Host Process for Windows Services by Microsoft Corporation)

Related files

PE file structure

Show functions

Import table

advapi32.dll

TraceMessage, GetTraceEnableFlags, GetTraceEnableLevel, GetTraceLoggerHandle, RegisterTraceGuidsW, UnregisterTraceGuids, RegCloseKey, RegQueryValueExW, RegOpenKeyExW, AdjustTokenPrivileges, OpenProcessToken, LookupPrivilegeValueW, EqualSid, OpenThreadToken, GetTokenInformation, IsValidSid, GetLengthSid, CopySid, ConvertSidToStringSidW

api-ms-win-core-delayload-l1-1-1.dll

ResolveDelayLoadedAPI, DelayLoadFailureHook

api-ms-win-core-errorhandling-l1-1-1.dll

GetLastError, SetUnhandledExceptionFilter, UnhandledExceptionFilter, SetLastError

api-ms-win-core-file-l1-2-0.dll

CreateFileW, ReadFile, WriteFile

api-ms-win-core-handle-l1-1-0.dll

CloseHandle

api-ms-win-core-heap-l1-2-0.dll

HeapSetInformation, HeapFree, HeapAlloc, GetProcessHeap

api-ms-win-core-heap-obsolete-l1-1-0.dll

LocalFree

api-ms-win-core-interlocked-l1-2-0.dll

InterlockedCompareExchange, InterlockedDecrement, InterlockedIncrement, InterlockedExchange

api-ms-win-core-kernel32-legacy-l1-1-0.dll

BindIoCompletionCallback

api-ms-win-core-libraryloader-l1-1-1.dll

LoadLibraryExW, FreeLibrary, GetModuleHandleA, GetProcAddress

api-ms-win-core-processthreads-l1-1-1.dll

OpenThreadToken, ExitProcess, CreateThread, GetCurrentThreadId, TerminateProcess, OpenProcessToken, GetCurrentProcessId, GetCurrentThread, GetCurrentProcess

api-ms-win-core-profile-l1-1-0.dll

QueryPerformanceCounter

api-ms-win-core-registry-l1-1-0.dll

RegQueryValueExW, RegOpenKeyExW, RegCloseKey

api-ms-win-core-synch-l1-2-0.dll

LeaveCriticalSection, Sleep, SetEvent, InitializeCriticalSectionAndSpinCount, ResetEvent, WaitForSingleObject, DeleteCriticalSection, InitializeCriticalSection, CreateEventW, EnterCriticalSection

api-ms-win-core-sysinfo-l1-2-0.dll

GetTickCount, GetTickCount64, GetSystemTimeAsFileTime

api-ms-win-core-threadpool-legacy-l1-1-0.dll

ChangeTimerQueueTimer, CreateTimerQueue, QueueUserWorkItem, DeleteTimerQueueEx, DeleteTimerQueueTimer, CreateTimerQueueTimer

api-ms-win-eventing-classicprovider-l1-1-0.dll

GetTraceEnableLevel, UnregisterTraceGuids, GetTraceLoggerHandle, GetTraceEnableFlags, RegisterTraceGuidsW, TraceMessage

api-ms-win-security-base-l1-2-0.dll

AdjustTokenPrivileges, CopySid, GetLengthSid, IsValidSid, EqualSid, GetTokenInformation

crypt32.dll

CryptUnprotectData, CryptProtectData

kernel32.dll

EnterCriticalSection, GetCurrentProcessId, FreeLibrary, GetProcAddress, LoadLibraryW, CreateThread, SetEvent, LocalFree, LeaveCriticalSection, SetLastError, CreateFileW, BindIoCompletionCallback, WriteFile, GetTickCount64, ReadFile, HeapSetInformation, InterlockedIncrement, HeapFree, GetProcessHeap, HeapAlloc, InitializeCriticalSectionAndSpinCount, ResetEvent, DeleteCriticalSection, GetCurrentThread, InitializeCriticalSection, DeleteTimerQueueTimer, CreateTimerQueue, CreateTimerQueueTimer, DeleteTimerQueueEx, ChangeTimerQueueTimer, UnhandledExceptionFilter, GetSystemTimeAsFileTime, GetCurrentThreadId, GetTickCount, QueryPerformanceCounter, GetModuleHandleA, SetUnhandledExceptionFilter, CreateEventW, WaitForSingleObject, InterlockedDecrement, InterlockedExchange, Sleep, TerminateProcess, ExitProcess, GetLastError, GetCurrentProcess, CloseHandle, InterlockedCompareExchange, QueueUserWorkItem

msvcrt.dll

DllMain

ntdll.dll

RtlStringFromGUID, NtWaitForSingleObject, NtDeviceIoControlFile, EtwTraceMessage, RtlNtStatusToDosError, RtlFreeUnicodeString

rpcrt4.dll

NdrClientCall2, RpcServerListen, RpcAsyncCompleteCall, RpcMgmtStopServerListening, RpcMgmtWaitServerListen, RpcImpersonateClient, I_RpcExceptionFilter, UuidCreate, NdrAsyncServerCall, RpcServerUseProtseqW, RpcServerInqBindings, RpcEpRegisterW, RpcBindingFree, RpcStringFreeW, RpcBindingSetAuthInfoW, RpcBindingSetAuthInfoExW, RpcMgmtInqServerPrincNameW, RpcBindingSetOption, RpcEpResolveBinding, RpcBindingFromStringBindingW, RpcStringBindingComposeW, RpcBindingVectorFree, RpcServerUnregisterIfEx, RpcEpUnregister, RpcRevertToSelf, RpcBindingInqAuthClientW, RpcStringBindingParseW, RpcBindingToStringBindingW, RpcServerRegisterAuthInfoW, RpcServerRegisterIfEx

user32.dll

GetSystemMetrics

WLANExt.exe

Windows Wireless LAN 802.11 Extensibility Framework by Microsoft

Remove WLANExt.exe

Version:	6.1.7600.16385 (win7_rtm.090713-1255)
MD5:	43fab56ae5f639ad59d7209693f4c4c2
SHA1:	7d23615f778b15791646c31688e63e7d5ebf02ff
SHA256:	c64155944da774a80d443a0e6dcc40a3405d9c69ca3ebc95ca46bfd65c7a4908

This is a Windows system installed file with Windows File Protection (WFP) enabled.

What is WLANExt.exe?

The Windows Wireless LAN 802.11 Extensibility Framework provides an interface to Windows Vista's wireless security and connectivity features for the drivers of wireless network adapters.

Overview

WLANExt.exe executes as a process under the SYSTEM account with extensive privileges (the system and the administrator accounts have the same file privileges) typically within the context of its parent svchost.exe (Host Process for Windows Services by Microsoft Corporation). This version is designed to run on Windows 7 and is compiled as a 64 bit program.

Details

File name:	WLANExt.exe
Publisher:	Microsoft Corporation
Product name:	Windows Wireless LAN 802.11 Extensibility Framework
Description:	Microsoft® Windows® Operating System
Typical file path:	C:\Windows\System32\wlanext.exe
Original name:	wlanext.exe.mui
File version:	6.1.7600.16385 (win7_rtm.090713-1255)
Product version:	6.1.7600.16385
Size:	97 KB (99,328 bytes)
Digital DNA
Entropy:	6.318063
File packed:	No
Code language:	Microsoft Visual C++
.NET CLR:	No

More details

Resource utilization

(Note: statistics below are averages based on a minimum sample size of 200 unique participants)

Averages

CPU
Total CPU:	0.00109178%	0.028634%
Kernel CPU:	0.00065099%	0.013761%
User CPU:	0.00044079%	0.014873%
Kernel CPU time:	1,433,959 ms/min	100,923,805ms/min
CPU cycles:	706,263/sec	17,470,203/sec
Context switches:	25/sec	284/sec
Memory
Private memory:	4.61 MB	21.59 MB
Private (maximum):	9.08 MB
Private (minimum):	6.76 MB
Non-paged memory:	4.61 MB	21.59 MB
Virtual memory:	55.63 MB	140.96 MB
Virtual memory (peak):	57.01 MB	169.69 MB
Working set:	7.45 MB	18.61 MB
Working set (peak):	10.18 MB	37.95 MB
Page faults:	12,618/min	2,039/min
I/O
I/O read transfer:	5.46 KB/sec	1.02 MB/min
I/O read operations:	59/sec	343/min
I/O write transfer:	8 Bytes/sec	274.99 KB/min
I/O write operations:	1/sec	227/min
I/O other transfer:	6.19 KB/sec	448.09 KB/min
I/O other operations:	219/sec	1,671/min
Resource allocations
Threads:	10	12
Handles:	200	600

Process properties

Integrety level:	System
Platform:	64-bit
Command lines:	C:\Windows\System32\wlanext.exe 31279328 C:\Windows\System32\wlanext.exe 22501728 C:\Windows\System32\wlanext.exe 24708560 C:\Windows\System32\wlanext.exe 26008048 C:\Windows\System32\wlanext.exe 1852160 C:\Windows\System32\wlanext.exe 21617664 C:\Windows\System32\wlanext.exe 30267840 (199 more)
Owner:	SYSTEM
Parent process:	svchost.exe (Host Process for Windows Services by Microsoft Corporation)

Threads

Averages

ntdll.dll
Total CPU:	0.66869904%	0.272967%
Kernel CPU:	0.58727780%	0.107585%
User CPU:	0.08142124%	0.165382%
CPU cycles:	16,738,457/sec	5,741,424/sec
Context switches:	1/sec	79/sec
Memory:	1.66 MB	1.16 MB
MSVCR110.dll
Total CPU:	0.03313920%
Kernel CPU:	0.02222099%
User CPU:	0.01091821%
CPU cycles:	704,268/sec
Memory:	848 KB
bcmihvsrv64.dll
Total CPU:	0.00224692%
Kernel CPU:	0.00207737%
User CPU:	0.00016955%
CPU cycles:	33,913/sec
Memory:	3.73 MB
MSVCR100.dll
Total CPU:	0.00068733%
Kernel CPU:	0.00018856%
User CPU:	0.00049877%
CPU cycles:	15,316/sec
Memory:	840 KB
Wlanapi.dll
Total CPU:	0.00065069%
Kernel CPU:	0.00035288%
User CPU:	0.00029782%
CPU cycles:	24,593/sec
Memory:	128 KB
FunDisc.dll
Total CPU:	0.00044899%
Kernel CPU:	0.00044899%
User CPU:	0.00000000%
CPU cycles:	1,907/sec
Memory:	204 KB
IWMSSvc.dll
Total CPU:	0.00030349%
Kernel CPU:	0.00020560%
User CPU:	0.00009789%
CPU cycles:	6,604/sec
Memory:	1.88 MB
athihvwpap2p.dll
Total CPU:	0.00027082%
Kernel CPU:	0.00020312%
User CPU:	0.00006771%
CPU cycles:	28,120/sec
Memory:	284 KB
WLANExt.exe (main module)
Total CPU:	0.00025466%
Kernel CPU:	0.00015261%
User CPU:	0.00010205%
CPU cycles:	4,160/sec
Memory:	112 KB
ccxplugin.dll
Total CPU:	0.00016802%
Kernel CPU:	0.00014948%
User CPU:	0.00001855%
CPU cycles:	4,363/sec
Memory:	548 KB
athihvs.dll
Total CPU:	0.00008128%
Kernel CPU:	0.00005861%
User CPU:	0.00002268%
CPU cycles:	2,124/sec
Memory:	448 KB

Common loaded modules

These are modules that are typiclaly loaded within the context of this process.

shell32.dll (Windows Shell Common Dll by Microsoft)

Distribution by Windows OS

OS version	distribution
Windows 7 Home Premium	51.00%
Windows 7 Ultimate	23.00%
Windows Vista Home Premium	6.00%
Windows 7 Home Basic	5.00%
Windows 8.1	4.00%
Windows 7 Professional	4.00%
Windows 8.1 Pro with Media Center	1.50%
Windows 8.1 Pro	1.00%
Windows 7 Starter	1.00%
Windows Vista Business	1.00%
Windows Vista Home Basic	1.00%
Windows Vista Ultimate	0.50%
Windows 7 Enterprise	0.50%
Windows 8.1 Pro Preview with Media Center	0.50%

Distribution by country

United States installs about 44.22% of Windows Wireless LAN 802.11 Extensibility Framework.

Distribution by PC manufacturer

PC Manufacturer	distribution
Dell	30.42%
Hewlett-Packard	13.92%
ASUS	13.59%
Toshiba	12.94%
Acer	8.09%
Lenovo	7.77%
Sony	7.12%
Samsung	1.62%
Alienware	1.29%
NEC	1.29%
Gateway	1.29%
Medion	0.65%

Remove Adware and Spyware Programs, FREE Download!