WMI Provider Service could be legitimate Windows OS process. WMI Provider Service enables a provider for WMI to be loaded in it own host (may be several instances) so if provider fails, WMI will not fail, and other services running on same host as WMI will not fail. Providers give information from hardware/software operations to WMI. Windows Management Instrumentation (WMI) -provides platform to access management information/control of systems, networks, applications, devices, services, …(anything else)… CAUTION: Varjan/worm/spyware overwrite or create a file by this name.