Should I block it?
No, this file is 100% safe to run.
Additional versions
Relationships
Parent process
Related files
PE file structure
|
Show functions |
Import table
advapi32.dll
RegQueryValueExW, RegOpenKeyExW, RegCloseKey, EventUnregister, EventWrite, EventRegister
kernel32.dll
GetLastError, lstrlenW, CompareStringA, ExitProcess, FreeLibrary, SetErrorMode, GetProcAddress, HeapFree, SetCurrentDirectoryW, ExpandEnvironmentStringsW, HeapAlloc, CloseHandle, CreateMutexW, GetStartupInfoW, GetProcessHeap, SetThreadPriority, GetCurrentThread, LocalFree, LoadLibraryW, FormatMessageW, GetCommandLineW, GetModuleHandleW, QueryPerformanceCounter, GetTickCount, GetCurrentThreadId, GetCurrentProcessId, GetSystemTimeAsFileTime, TerminateProcess, GetCurrentProcess, UnhandledExceptionFilter, SetUnhandledExceptionFilter, LoadLibraryA, InterlockedExchange, LocalAlloc, RaiseException, CompareStringOrdinal, SetProcessDEPPolicy, SetEvent, OpenEventW, LoadLibraryExA
ntdll.dll
memset
user32.dll
SetForegroundWindow, GetClassNameA, GetParent, GetDesktopWindow, GetWindowThreadProcessId, IsWindowVisible, GetWindow, MessageBoxW, GetSystemMetrics, ShowWindow, FindWindowW, SendMessageTimeoutW, IsIconic, GetClassNameW
wmplayer.exe
Windows Media Player by Microsoft
Version: | 12.0.7600.16385 (win7_rtm.090713-1255) |
MD5: | a0f1dfc9e47b2524213aff32e26be92d |
SHA1: | a58cb4ebd3fb3901235169b4eeba7737845ad735 |
SHA256: | 6ce68d565bbae511fd16cb6919efd18366990a06cf9c4a25f28dfd3345085d10 |
This is a Windows system installed file with Windows File Protection (WFP) enabled.
What is wmplayer.exe?
Windows Media Player (abbreviated WMP) is a media player and media library application developed by Microsoft that is used for playing audio, video and viewing images on personal computers running the Microsoft Windows operating system, as well as on Pocket PC and Windows Mobile-based devices.
About wmplayer.exe (from Microsoft)
“Designed by media lovers, for media lovers. Windows Media Player 12—available only in Windows 7—plays more music and video than ever, including Flip Video and unprotected songs from your iTunes library! Windows Media Player 12 has built-in support for many popular audio and video formats—including 3GP, AAC, AVCHD, MPEG-4, WMV, and WMA. It also supports most AVI, DivX, MOV, and Xvid files.”
Details
File name: | wmplayer.exe |
Publisher: | Microsoft Corporation |
Product name: | Windows Media Player |
Description: | Microsoft® Windows® Operating System |
Typical file path: | C:\Program Files\windows media player\wmplayer.exe |
Original name: | wmplayer.exe.mui |
File version: | 12.0.7600.16385 (win7_rtm.090713-1255) |
Product version: | 12.0.7600.16385 |
Size: | 161 KB (164,864 bytes) |
Digital DNA |
Entropy: | 6.489287 |
File packed: | No |
.NET CLR: | No |
More details
Programs
The following programs will install this file
“The Amazon MP3 Downloader is software you'll use along with Amazon Cloud Player to manage your music. The Downloader is a piece of software that streamlines the process of downloading by enabling you to download entire albums or playlists and automatically import them into iTunes or Windows Media Player.”
Windows Media Player 11 was included with Vista with no updates, final release on XP. Windows Media Player is a media player and media library application developed by Microsoft that is used for playing audio, video and viewing images .In addition to being a media player, Windows Media Player includes the ability to rip music from and copy music to compact discs, burn recordable discs in Audio CD format or as data discs with playlists ...
Behaviors
Autoplay handlers
Runs under the registry key 'SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\AutoplayHandlers\Handlers'
- Handler name 'IviDVDEventHandler'
- Handler name 'IviVideoCDHandler'
- Handler name 'MSPlayBluRayOnArrival'
- Handler name 'MSWMPBurnDataDVDArrival'
- Handler name 'MSRipCDAudioOnArrival'
- Handler name 'MSWMPBurnCDOnArrival'
- Handler name 'MSPlayDVDMovieOnArrival'
- Handler name 'MSPlayCDAudioOnArrival'
- Handler name 'MSPlayVideoCDMovieOnArrival'
- Handler name 'MSPlaySuperVideoCDMovieOnArrival'
Shell open commands
- WPLFile
- WMZFile
- WMVFile
- WMSFile
- wmafile
- mpegfile
- mp3file
- AUFile
- AVIFile
Windows firewall allowed programs
Exceptions allow programs to access to the Internet through an outbound connections
- Firewall exception for 'C:\Programmer\Windows Media Player\wmplayer.exe'
- Firewall exception for 'C:\Program Files\Windows Media Player\wmplayer.exe'
Network connections
Access through an approved Windows firewall exception
[UDP] listens on port 60000
[UDP] listens on port 56445
Resource utilization
(Note: statistics below are averages based on a minimum sample size of 200 unique participants)
Averages
CPU |
Total CPU: | 0.00821563% | |
Kernel CPU: | 0.00388692% | |
User CPU: | 0.00432871% | |
Kernel CPU time: | 306,183 ms/min | |
Context switches: | 4/sec | |
Memory |
Private memory: | 72.35 MB | |
Private (maximum): | 96.02 MB | |
Private (minimum): | 16.1 MB | |
Non-paged memory: | 72.35 MB | |
Virtual memory: | 292.16 MB | |
Virtual memory (peak): | 418.62 MB | |
Working set: | 32.51 MB | |
Working set (peak): | 171.51 MB | |
Resource allocations |
Threads: | 26 | |
Handles: | 700 | |
GUI GDI count: | 848 | |
GUI GDI peak: | 866 | |
GUI USER count: | 208 | |
GUI USER peak: | 242 | |
Process properties
Integrety level: | High |
Platform: | 32-bit |
Command lines: |
- "C:\Program Files\windows media player\wmplayer.exe" /play -embedding
- "C:\Program Files\windows media player\wmplayer.exe" /prefetcC:11 /querC:3;1;0;all music - 'ishq wala';602;-10;;ishq wala;localmls;0;;;;0;;
|
Owner: | User |
Parent processes: |
|
Threads
Averages
wmp.dll |
Total CPU: | 2.04758521% | |
Kernel CPU: | 1.10167452% | |
User CPU: | 0.94591070% | |
CPU cycles: | 39,514,129/sec | |
Memory: | 10.95 MB | |
msvcrt.dll |
Total CPU: | 0.25814494% | |
Kernel CPU: | 0.00298738% | |
User CPU: | 0.25515756% | |
CPU cycles: | 10,294,522/sec | |
Memory: | 688 KB | |
wmplayer.exe (main module) |
Total CPU: | 0.16934393% | |
Kernel CPU: | 0.09749987% | |
User CPU: | 0.07184406% | |
CPU cycles: | 16,538,754/sec | |
Memory: | 176 KB | |
WMNetMgr.dll |
Total CPU: | 0.01257633% | |
Kernel CPU: | 0.00475861% | |
User CPU: | 0.00781772% | |
CPU cycles: | 890,864/sec | |
Memory: | 1008 KB | |
ntdll.dll |
Total CPU: | 0.00353289% | |
Kernel CPU: | 0.00040244% | |
User CPU: | 0.00313045% | |
CPU cycles: | 74,799/sec | |
Memory: | 1.23 MB | |
wininet.dll |
Total CPU: | 0.00072690% | |
Kernel CPU: | 0.00043614% | |
User CPU: | 0.00029076% | |
CPU cycles: | 26,144/sec | |
Memory: | 1.11 MB | |
mswmdm.dll |
Total CPU: | 0.00072610% | |
Kernel CPU: | 0.00058088% | |
User CPU: | 0.00014522% | |
CPU cycles: | 20,278/sec | |
Memory: | 304 KB | |
MMDevApi.dll |
Total CPU: | 0.00029019% | |
Kernel CPU: | 0.00029019% | |
User CPU: | 0.00000000% | |
CPU cycles: | 1,115/sec | |
Memory: | 228 KB | |
ole32.dll |
Total CPU: | 0.00014522% | |
Kernel CPU: | 0.00014522% | |
User CPU: | 0.00000000% | |
CPU cycles: | 2,801/sec | |
Memory: | 1.36 MB | |
wow64.dll |
Total CPU: | 0.00000015% | |
Kernel CPU: | 0.00000004% | |
User CPU: | 0.00000011% | |
CPU cycles: | 430/sec | |
Memory: | 252 KB | |
Common loaded modules
These are modules that are typiclaly loaded within the context of this process.
Distribution by Windows OS
OS version | distribution |
Windows 7 Ultimate |
20.00% |
|
Windows 7 Home Premium |
20.00% |
|
Windows 8 |
20.00% |
|
Windows 8 Single Language |
20.00% |
|
Windows Seven Black Edition |
5.00% |
|
Windows 7 Professional |
5.00% |
|
Windows 8 Pro |
5.00% |
|
Windows Vista Home Premium |
5.00% |
|
Distribution by country
United States installs about 30.00% of Windows Media Player.
Distribution by PC manufacturer
PC Manufacturer | distribution |
Dell |
30.77% |
|
Acer |
23.08% |
|
Hewlett-Packard |
15.38% |
|
Lenovo |
15.38% |
|
ASUS |
7.69% |
|
Samsung |
7.69% |
|