Should I block it?

No, this file is 100% safe to run.

VersionsAdditional versions

12.0.9600.16384 (winblue_rtm.130821-1623) 4.49%
12.0.9431.0 (winmain_bluemp.130615-1214) 0.23%
12.0.9200.16384 (win8_rtm.120725-1247) 1.00%
12.0.9200.16384 (win8_rtm.120725-1247) 14.41%
12.0.9200.16384 (win8_rtm.120725-1247) 0.06%
12.0.8400.0 (winmain_win8rc.120518-1423) 0.11%
12.0.8250.0 (winmain_win8beta.120217-1520) 0.01%
12.0.8102.0 (winmain_win8m3.110823-1455) 0.03%
12.0.7600.16385 (win7_rtm.090713-1255) 4.08%
12.0.7600.16385 (win7_rtm.090713-1255) 2.14%
12.0.7600.16385 (win7_rtm.090713-1255) 0.22%
12.0.7600.16385 (win7_rtm.090713-1255) 43.01%
12.0.7600.16385 (win7_rtm.090713-1255) 0.01%
12.0.7600.16385 (win7_rtm.090713-1255) 0.01%
12.0.7600.16385 (win7_rtm.090713-1255) 0.01%
12.0.7600.16385 (win7_rtm.090713-1255) 0.01%
12.0.7600.16385 (win7_rtm.090713-1255) 0.11%
12.0.7600.16385 (win7_rtm.090713-1255) 0.04%
12.0.7600.16385 (win7_rtm.090713-1255) 0.01%
12.0.7600.16385 (win7_rtm.090713-1255) 0.02%
12.0.7600.16385 (win7_rtm.090713-1255) 0.01%
12.0.7600.16385 (win7_rtm.090713-1255) 0.01%
12.0.7600.16385 (win7_rtm.090713-1255) 0.01%
12.0.7600.16385 (win7_rtm.090713-1255) 0.01%
12.0.7600.16385 (win7_rtm.090713-1255) 0.01%
View more

Relationships


PE structurePE file structure

Show functions
Import table
advapi32.dll
RegQueryValueExW, RegOpenKeyExW, RegCloseKey, EventUnregister, EventWrite, EventRegister
kernel32.dll
GetLastError, lstrlenW, CompareStringA, ExitProcess, FreeLibrary, SetErrorMode, GetProcAddress, HeapFree, SetCurrentDirectoryW, ExpandEnvironmentStringsW, HeapAlloc, CloseHandle, CreateMutexW, GetStartupInfoW, GetProcessHeap, SetThreadPriority, GetCurrentThread, LocalFree, LoadLibraryW, FormatMessageW, GetCommandLineW, GetModuleHandleW, QueryPerformanceCounter, GetTickCount, GetCurrentThreadId, GetCurrentProcessId, GetSystemTimeAsFileTime, TerminateProcess, GetCurrentProcess, UnhandledExceptionFilter, SetUnhandledExceptionFilter, LoadLibraryA, InterlockedExchange, LocalAlloc, RaiseException, CompareStringOrdinal, SetProcessDEPPolicy, SetEvent, OpenEventW, LoadLibraryExA
ntdll.dll
memset
user32.dll
SetForegroundWindow, GetClassNameA, GetParent, GetDesktopWindow, GetWindowThreadProcessId, IsWindowVisible, GetWindow, MessageBoxW, GetSystemMetrics, ShowWindow, FindWindowW, SendMessageTimeoutW, IsIconic, GetClassNameW

wmplayer.exe

Windows Media Player by Microsoft

Remove wmplayer.exe
Version:   12.0.7600.16385 (win7_rtm.090713-1255)
MD5:   11afc25168ca5d0ded22765d37f4639e
SHA1:   564b7ce5a05ac065479c9b9429f6f1cd6f0d9d0d
This is a Windows system installed file with Windows File Protection (WFP) enabled.

What is wmplayer.exe?

Windows Media Player (abbreviated WMP) is a media player and media library application developed by Microsoft that is used for playing audio, video and viewing images on personal computers running the Microsoft Windows operating system, as well as on Pocket PC and Windows Mobile-based devices.

About wmplayer.exe (from Microsoft)

Designed by media lovers, for media lovers. Windows Media Player 12—available only in Windows 7—plays more music and video than ever, including Flip Video and unprotected songs from your iTunes librar

DetailsDetails

File name:wmplayer.exe
Publisher:Microsoft Corporation
Product name:Windows Media Player
Description:Microsoft® Windows® Operating System
Typical file path:C:\Program Files\windows media player\wmplayer.exe
Original name:wmplayer.exe.mui
File version:12.0.7600.16385 (win7_rtm.090713-1255)
Product version:12.0.7600.16385
Size:163.5 KB (167,424 bytes)
Build date:7/13/2009 12:23 PM
Digital DNA
Entropy:6.489287
File packed:No
.NET CLR:No
More details

BehaviorsBehaviors

Autoplay handlers
Runs under the registry key 'SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\AutoplayHandlers\Handlers'
  • Handler name 'IviDVDEventHandler'
  • Handler name 'IviVideoCDHandler'
  • Handler name 'MSPlayBluRayOnArrival'
  • Handler name 'MSWMPBurnDataDVDArrival'
  • Handler name 'MSRipCDAudioOnArrival'
  • Handler name 'MSWMPBurnCDOnArrival'
  • Handler name 'MSPlayDVDMovieOnArrival'
  • Handler name 'MSPlayCDAudioOnArrival'
  • Handler name 'MSPlayVideoCDMovieOnArrival'
  • Handler name 'MSPlaySuperVideoCDMovieOnArrival'
Shell open commands
  • WPLFile
  • WMZFile
  • WMVFile
  • WMSFile
  • wmafile
  • mpegfile
  • mp3file
  • AUFile
  • AVIFile
Windows firewall allowed programs
Exceptions allow programs to access to the Internet through an outbound connections
  • Firewall exception for 'C:\Programmer\Windows Media Player\wmplayer.exe'
  • Firewall exception for 'C:\Program Files\Windows Media Player\wmplayer.exe'
Network connections
Access through an approved Windows firewall exception
  • [UDP] listens on port 55726

  • ResourcesResource utilization

    (Note: statistics below are averages based on a minimum sample size of 200 unique participants)
    Averages
     
    CPU
    Total CPU:0.00006083%
    0.028634%
    Kernel CPU:0.00000563%
    0.013761%
    User CPU:0.00005519%
    0.014873%
    Kernel CPU time:24,040 ms/min
    100,923,805ms/min
    Memory
    Private memory:58.93 MB
    21.59 MB
    Private (maximum):72.09 MB
    Private (minimum):4.24 MB
    Non-paged memory:58.93 MB
    21.59 MB
    Virtual memory:233.44 MB
    140.96 MB
    Virtual memory (peak):263.63 MB
    169.69 MB
    Working set:37.86 MB
    18.61 MB
    Working set (peak):83.44 MB
    37.95 MB
    Resource allocations
    Threads:26
    12
    Handles:696
    600
    GUI GDI count:666
    103
    GUI GDI peak:679
    142
    GUI USER count:111
    49
    GUI USER peak:143
    71

    BehaviorsProcess properties

    Integrety level:High
    Platform:64-bit
    Command line:"C:\Program Files\windows media player\wmplayer.exe"
    Owner:User
    Parent process:Explorer.EXE (Windows Explorer by Microsoft)

    ResourcesThreads

    Averages
     
    wmplayer.exe (main module)
    Total CPU:0.02295759%
    0.272967%
    Kernel CPU:0.00873974%
    0.107585%
    User CPU:0.01421785%
    0.165382%
    CPU cycles:30,415,499/sec
    5,741,424/sec
    Context switches:427/sec
    79/sec
    Memory:180 KB
    1.16 MB
    wmp.dll
    Total CPU:0.01706586%
    Kernel CPU:0.00563456%
    User CPU:0.01143131%
    CPU cycles:3,271,210/sec
    Context switches:28/sec
    Memory:12.86 MB
    msvcrt.dll (Windows NT CRT DLL by Microsoft)
    Total CPU:0.00057089%
    Kernel CPU:0.00047474%
    User CPU:0.00009615%
    CPU cycles:949,791/sec
    Context switches:34/sec
    Memory:636 KB
    mswmdm.dll
    Total CPU:0.00005406%
    Kernel CPU:0.00003604%
    User CPU:0.00001802%
    CPU cycles:465/sec
    Memory:400 KB
    ole32.dll
    Total CPU:0.00001802%
    Kernel CPU:0.00001802%
    User CPU:0.00000000%
    CPU cycles:768/sec
    Memory:2 MB

    Windows OS versionsDistribution by Windows OS

    OS versiondistribution
    Windows 7 Ultimate 20.00%
    Windows 7 Home Premium 20.00%
    Windows 8 20.00%
    Windows 8 Single Language 20.00%
    Windows Seven Black Edition 5.00%
    Windows 7 Professional 5.00%
    Windows 8 Pro 5.00%
    Windows Vista Home Premium 5.00%

    Distribution by countryDistribution by country

    United States installs about 30.00% of Windows Media Player.

    OEM distributionDistribution by PC manufacturer

    PC Manufacturerdistribution
    Dell 30.77%
    Acer 23.08%
    Hewlett-Packard 15.38%
    Lenovo 15.38%
    ASUS 7.69%
    Samsung 7.69%
    Should I remove It? Clean your PC of unwanted adware, toolbars and bloatware.

    Download it for FREE