Versions

6.3.9600.16384 (winblue_rtm.130821-1623)	4.96%
6.3.9600.16384 (winblue_rtm.130821-1623)	0.23%
6.3.9431.0 (winmain_bluemp.130615-1214)	0.23%
6.2.9200.16518 (win8_gdr.130201-1704)	0.41%
6.2.9200.16398 (win8_gdr_oobssr.120820-1900)	0.32%
6.2.9200.16398 (win8_gdr_oobssr.120820-1900)	1.53%
6.2.9200.16384 (win8_rtm.120725-1247)	1.58%
6.2.9200.16384 (win8_rtm.120725-1247)	15.57%
6.2.8400.0 (winmain_win8rc.120518-1423)	0.05%
6.2.8400.0 (winmain_win8rc.120518-1423)	0.05%
6.2.8250.0 (winmain_win8beta.120217-1520)	0.05%
6.2.8102.0 (winmain_win8m3.110823-1455)	0.09%
6.1.7601.17514 (win7sp1_rtm.101119-1850)	38.54%
6.1.7601.17514 (win7sp1_rtm.101119-1850)	18.64%
6.1.7600.16385 (win7_rtm.090713-1255)	5.37%
6.1.7600.16385 (win7_rtm.090713-1255)	3.75%
6.1.7600.16385 (win7_rtm.090713-1255)	0.05%
6.0.6002.18005 (lh_sp2rtm.090410-1830)	5.64%
6.0.6002.18005 (lh_sp2rtm.090410-1830)	1.49%
6.0.6001.18226 (vistasp1_gdr.090302-1506)	0.05%
6.0.6001.18226 (vistasp1_gdr.090302-1506)	0.41%
6.0.6000.16830 (vista_gdr.090302-1506)	0.23%
6.0.6000.16386 (vista_rtm.061101-2205)	0.05%
5.1.2600.5512 (xpsp.080413-2108)	0.72%
5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)	0.05%

This is a Windows system installed file with Windows File Protection (WFP) enabled.

There are 25 versions of wmiprvse.exe in the wild, the latest version being 6.3.9600.16384 (winblue_rtm.130821-1623). It is started as a Windows Service called 'WmiApSrv' with the name 'WmiApSrv' and described as “Fournit des informations concernant la bibliothèque de performance à partir des fournisseurs HiPerf WMI.”. . It is also run with NETWORK SERVICE privileges. The average file size is about 323.44 KB. During the process's lifecycle, the typical CPU resource utilization is less than 0.01%, the average private memory consumption is about 12.49 MB with the maximum memory reaching around 14.85 MB. Addionally, typically read and write I/O disk operations is about 3.59 KB per minute for reads and 69 Bytes per minute for writes.

WMI provides a uniform interface for any local or remote applications or scripts that obtain management data from a computer system, a network, or an enterprise. The uniform interface is designed such that WMI client applications and scripts do not have to call a wide variety of operating system application programming interfaces (APIs). Many APIs cannot be called by automation clients like scripts or Visual Basic applications. Other APIs do not make calls to remote computers.