WMIsvc.dll

  • File Path: C:\Windows\system32\wbem\WMIsvc.dll
  • Description: WMI

Hashes

Type Hash
MD5 EFC55C07562911514148E83C90F7CC79
SHA1 E1C6AA5D8705A70D4E244A5E136D779A6592F0E7
SHA256 5F91DEBE661ED16B0C4A253049E62617E222256E40E633C7F846571FD447E6C0
SHA384 CB91BA0685A2104E8FE1422D7AAE68C50E1E2ED3A822CD329E70CC321A41251D67C8476391281487F9760F8C895C2325
SHA512 1076D30B383DE61B92ED44D9405C4008D50DB5A0384C86ADFC0F4436096D5E1686A30810760DED5A1BC1FE6C4D5D4019D3F0E6F6A74176B310EF44F4066DEC67
SSDEEP 3072:FpZvDwN2wFqfSZy1+9D67x3vJ3ZE3tSK+V1XkY+dFHzdpikH0LipTCusK7wJL7GI:FpZvQSD+9Dq3vSwKKiFHz3nHznMW7
IMP A8071C8826423A68255AF6E367B0795D
PESHA1 8B4A44EE19803DDF6BE776CB1A1B5EC6A4DE87DE
PE256 43BB9A15FB8F16B22CADDF49C00350D74B92E92C75986983F712110AD0AB2F93

DLL Exports:

Function Name Ordinal Type
CWbemCriticalSection::GetRecursionCount 235 Exported Function
Registry::GetLastError 222 Exported Function
CWbemCriticalSection::GetLockCount 223 Exported Function
CUnkInternal::InternalQueryInterface 261 Exported Function
CVar::GetLong 224 Exported Function
CVar::GetShort 238 Exported Function
CWbemInterval::GetInfinity 217 Exported Function
CVar::GetBool 200 Exported Function
CSafeArray::GetBoolAt 201 Exported Function
CSafeArray::GetShortAt 239 Exported Function
WString::operator 141 Exported Function
WString::operator 143 Exported Function
WString::Length 280 Exported Function
WString::Equal 185 Exported Function
WString::EqualNoCase 186 Exported Function
CSafeArray::GetLongAt 225 Exported Function
CSafeArray::Unaccess 327 Exported Function
CSafeArray::Access 166 Exported Function
WString::operator 146 Exported Function
WString::operator 148 Exported Function
CWbemTime::GetInfinity 218 Exported Function
CVar::GetBlob 199 Exported Function
CSafeArray::GetArray 191 Exported Function
CVar::GetUnknown 255 Exported Function
CUnkInternal::GetUnknown 254 Exported Function
CVar::GetEmbeddedObject 211 Exported Function
CNtAce::GetSize 240 Exported Function
CNtAcl::GetStatus 243 Exported Function
CWMITraceSettings::GetTraceLevel 248 Exported Function
CSafeArray::GetByteAt 203 Exported Function
CVar::GetByte 202 Exported Function
CNtAcl::GetPtr 230 Exported Function
CWMITraceSettings::GetEventTraceProperties 212 Exported Function
CNtAce::GetPtr 229 Exported Function
CWbemTime::GetZero 258 Exported Function
CWin32DefaultArena::WbemSysFreeString 329 Exported Function
CUnk::GetInnerUnknown 219 Exported Function
CUnk::GetUnknown 253 Exported Function
CVar::GetDispatch 208 Exported Function
CVar::GetFileTime 213 Exported Function
CVar::GetClsId 205 Exported Function
CWStringArray::Size 323 Exported Function
CSafeArray::ElementSize 182 Exported Function
CSafeArray::GetType 250 Exported Function
CSafeArray::AddShort 175 Exported Function
CSafeArray::AddFloat 171 Exported Function
CSafeArray::AddLong 172 Exported Function
CSafeArray::SetFloatAt 309 Exported Function
CSafeArray::SetLongAt 312 Exported Function
CSafeArray::SetDoubleAt 303 Exported Function
CSafeArray::SetBoolAt 295 Exported Function
CSafeArray::SetByteAt 297 Exported Function
CInsertionString::IsEmpty 263 Exported Function
CNtAcl::IsValid 273 Exported Function
CFlexQueue::GetQueueSize 233 Exported Function
CFlexArray::Add 167 Exported Function
CFlexArray::Size 320 Exported Function
CSafeArray::AddByte 169 Exported Function
CSafeArray::AddDouble 170 Exported Function
CSafeArray::AddBool 168 Exported Function
CNtSecurityDescriptor::IsValid 274 Exported Function
CNtSid::IsValid 275 Exported Function
CSafeArray::SetShortAt 316 Exported Function
CWbemInterval::operator 144 Exported Function
CWbemTime::IsFinite 268 Exported Function
CWbemInterval::operator 139 Exported Function
CWbemInterval::IsFinite 267 Exported Function
CWbemInterval::IsZero 276 Exported Function
CWbemTime::operator 145 Exported Function
CWbemTime::operator 147 Exported Function
CWbemTime::operator 142 Exported Function
CWbemTime::IsZero 277 Exported Function
CWbemTime::operator 140 Exported Function
CVar::CanDelete 178 Exported Function
CVar::GetType 251 Exported Function
CSmallArrayBlob::Size 322 Exported Function
CSafeArray::Size 321 Exported Function
CSafeArray::Status 324 Exported Function
CVarVector::IsOptimized 270 Exported Function
CVarVector::Status 326 Exported Function
CVarVector::GetType 252 Exported Function
CVar::IsNull 269 Exported Function
CVar::Status 325 Exported Function
CNtSecurityDescriptor::GetStatus 244 Exported Function
public: void __cdecl CNtAcl::default constructor closure'(void) __ptr64 163 Exported Function
CSafeArray::SetDestructorPolicy 301 Exported Function
public: void __cdecl CFlexQueue::default constructor closure'(void) __ptr64 162 Exported Function
public: void __cdecl CFlexArray::default constructor closure'(void) __ptr64 161 Exported Function
CFlexArray::SetSize 317 Exported Function
CVar::SetAsNull 293 Exported Function
CVar::SetBool 294 Exported Function
public: void __cdecl CUnk::default constructor closure'(void) __ptr64 164 Exported Function
CSafeArray::SetGrowGranularity 310 Exported Function
CSafeArray::SetRawArrayMaxElement 314 Exported Function
CFlexArray::GetArrayPtr 193 Exported Function
CSmallArrayBlob::GetArrayPtr 195 Exported Function
CVar::GetRawData 234 Exported Function
CSmallArrayBlob::GetAt 197 Exported Function
CSmallArrayBlob::operator 117 Exported Function
CCritSec::Leave 279 Exported Function
public: void __cdecl CEventLog::default constructor closure'(void) __ptr64 160 Exported Function
CCritSec::Enter 184 Exported Function
CCheckedInCritSec::Enter 183 Exported Function
CCheckedInCritSec::Leave 278 Exported Function
CVar::SetByte 296 Exported Function
CWbemTime::Set100nss 291 Exported Function
CWMITraceSettings::SetAreaFlags 292 Exported Function
CWbemTime::operator 110 Exported Function
CWbemInterval::operator 149 Exported Function
CWbemInterval::SetMilliseconds 313 Exported Function
WString::BindPtr 177 Exported Function
ServiceMain 290 Exported Function
CWStringArray::Compress 179 Exported Function
CWMITraceSettings::SetTraceLevel 318 Exported Function
public: void __cdecl CWStringArray::default constructor closure'(void) __ptr64 165 Exported Function
CVar::SetDWORD 300 Exported Function
CVar::SetEmbeddedObject 304 Exported Function
CVar::SetDouble 302 Exported Function
CVar::SetCanDelete 298 Exported Function
CVar::SetChar 299 Exported Function
CVar::SetShort 315 Exported Function
CVar::SetWord 319 Exported Function
CVar::SetLong 311 Exported Function
CVar::SetFileTime 305 Exported Function
CVar::SetFloat 308 Exported Function
CNtSid::GetPtr 232 Exported Function
CVar::GetWord 257 Exported Function
CWStringArray::GetArrayPtr 196 Exported Function
CEventLogRecord::GetNumStrings 227 Exported Function
CWStringArray::GetAt 198 Exported Function
CWStringArray::operator 118 Exported Function
public: virtual __cdecl CUnkInternal::~CUnkInternal(void) __ptr64 69 Exported Function
C9XAce::GetFlags 214 Exported Function
public: virtual __cdecl CBaseAce::~CBaseAce(void) __ptr64 62 Exported Function
CInsertionString::GetString 246 Exported Function
WString::GetStringPointerByRef 247 Exported Function
CVar::GetDWORD 207 Exported Function
CWbemCriticalSection::GetOwningThreadId 228 Exported Function
CUnkInternal::InternalRelease 262 Exported Function
CNtSid::GetStatus 245 Exported Function
CUnkInternal::InternalAddRef 260 Exported Function
CVar::GetLPWSTR 221 Exported Function
CWMITraceSettings::GetSessionName 237 Exported Function
CWMITraceSettings::GetAreaFlags 190 Exported Function
CWbemInterval::GetMilliseconds 226 Exported Function
CWbemInterval::GetSeconds 236 Exported Function
C9XAce::GetType 249 Exported Function
CContainerControl::ObjectDestroyed 284 Exported Function
CContainerControl::Release 288 Exported Function
CContainerControl::AddRef 173 Exported Function
CWin32DefaultArena::Realloc 287 Exported Function
C9XAce::SetFlags 306 Exported Function
CFlexQueue::Unqueue 328 Exported Function
CNtSecurityDescriptor::GetPtr 231 Exported Function
CSmallArrayBlob::GetArrayPtr 194 Exported Function
CNtAce::SetFlags 307 Exported Function
CFlexArray::GetArrayPtr 192 Exported Function
CUnkInternal::QueryInterface 286 Exported Function
C9XAce::GetAccessMask 189 Exported Function
CWin32DefaultArena::Free 187 Exported Function
CContainerControl::ObjectCreated 283 Exported Function
CUnk::OnInitialize 285 Exported Function
CUnkInternal::Release 289 Exported Function
CWin32DefaultArena::Alloc 176 Exported Function
CUnkInternal::AddRef 174 Exported Function
C9XAce::GetStatus 241 Exported Function
CNtAce::GetStatus 242 Exported Function
CLifeControl::CLifeControl 27 Exported Function
CNtAce::CNtAce 28 Exported Function
CLifeControl::CLifeControl 26 Exported Function
public: __cdecl CInsertionString::~CInsertionString(void) __ptr64 68 Exported Function
CLifeControl::CLifeControl 25 Exported Function
CUnkInternal::CUnkInternal 33 Exported Function
CUnkInternal::CUnkInternal 32 Exported Function
CUnk::CUnk 31 Exported Function
CNtSid::CNtSid 29 Exported Function
CTraceSessionControl::CTraceSessionControl 30 Exported Function
CInCritSec::CInCritSec 19 Exported Function
public: __cdecl CInCritSec::~CInCritSec(void) __ptr64 67 Exported Function
CHex::operator 119 Exported Function
CHaltable::CHaltable 17 Exported Function
CHex::CHex 18 Exported Function
CInsertionString::CInsertionString 23 Exported Function
CInsertionString::CInsertionString 24 Exported Function
CInsertionString::CInsertionString 21 Exported Function
CInsertionString::CInsertionString 22 Exported Function
CInsertionString::CInsertionString 20 Exported Function
CVar::CVar 46 Exported Function
CVar::CVar 51 Exported Function
CVar::CVar 35 Exported Function
CVar::CVar 50 Exported Function
CVar::CVar 48 Exported Function
CVar::CVar 49 Exported Function
CVar::CVar 53 Exported Function
CVar::operator 129 Exported Function
CVar::CVar 38 Exported Function
CVar::CVar 43 Exported Function
CVar::CVar 47 Exported Function
CVar::CVar 44 Exported Function
CVar::CVar 41 Exported Function
CVar::CVar 45 Exported Function
CVar::CVar 34 Exported Function
CVar::CVar 52 Exported Function
CVar::CVar 36 Exported Function
CVar::CVar 37 Exported Function
CVar::CVar 42 Exported Function
CVar::CVar 40 Exported Function
CVar::CVar 39 Exported Function
public: __cdecl CEventLogRecord::~CEventLogRecord(void) __ptr64 66 Exported Function
GetSystemEventsForShutdown 333 Exported Function
IsImproperShutdownDetected 334 Exported Function
DredgeRA 181 Exported Function
DllRegisterServer 331 Exported Function
DllUnregisterServer 332 Exported Function
CWbemInterval::CWbemInterval 54 Exported Function
CWbemTime::CWbemTime 56 Exported Function
MoveToShared 282 Exported Function
IsShutDown 271 Exported Function
MoveToAlone 281 Exported Function
const CContainerControl::vftable' 153 Exported Function
const CHaltable::vftable' 154 Exported Function
const CBaseAce::vftable' 152 Exported Function
const C9XAce::vftable' 150 Exported Function
const CArena::vftable' 151 Exported Function
const CUnkInternal::vftable' 158 Exported Function
const CWin32DefaultArena::vftable' 159 Exported Function
const CUnk::vftable' 157 Exported Function
const CLifeControl::vftable' 155 Exported Function
const CNtAce::vftable' 156 Exported Function
CFlexQueue::DecrementIndex 180 Exported Function
CContainerControl::CContainerControl 12 Exported Function
CCritSec::CCritSec 13 Exported Function
CContainerControl::CContainerControl 11 Exported Function
CCircularQueue::CCircularQueue 9 Exported Function
CContainerControl::CContainerControl 10 Exported Function
CEventLog::CEventLog 15 Exported Function
CEventLogRecord::CEventLogRecord 16 Exported Function
public: __cdecl CEnterWbemCriticalSection::~CEnterWbemCriticalSection(void) __ptr64 65 Exported Function
public: __cdecl CCritSec::~CCritSec(void) __ptr64 64 Exported Function
CEnterWbemCriticalSection::CEnterWbemCriticalSection 14 Exported Function
CArena::CArena 3 Exported Function
CArena::CArena 4 Exported Function
C9XAce::C9XAce 2 Exported Function
CFlexQueue::IncrementIndex 259 Exported Function
C9XAce::C9XAce 1 Exported Function
CCheckedInCritSec::CCheckedInCritSec 8 Exported Function
public: __cdecl CCheckedInCritSec::~CCheckedInCritSec(void) __ptr64 63 Exported Function
CBaseAce::CBaseAce 7 Exported Function
CArena::CArena 5 Exported Function
CBaseAce::CBaseAce 6 Exported Function
CVar::operator 121 Exported Function
CSmallArrayBlob::operator 99 Exported Function
CStaticCritSec::operator 100 Exported Function
CSmallArrayBlob::operator 98 Exported Function
CPersistentConfig::operator 96 Exported Function
CPersistentConfig::operator 97 Exported Function
CUnkInternal::operator 104 Exported Function
CVar::GetVarVector 256 Exported Function
CUnk::operator 103 Exported Function
CTraceSessionControl::operator 101 Exported Function
CTraceSessionControl::operator 102 Exported Function
CInsertionString::operator 89 Exported Function
CLifeControl::operator 90 Exported Function
CInsertionString::operator 88 Exported Function
CHex::operator 86 Exported Function
CInCritSec::operator 87 Exported Function
CNtSecurity::operator 94 Exported Function
CNtSecurity::operator 95 Exported Function
CMemoryLog::operator 93 Exported Function
CLifeControl::operator 91 Exported Function
CMemoryLog::operator 92 Exported Function
CWbemCriticalSection::operator 107 Exported Function
Registry::operator 116 Exported Function
CSafeArray::GetDoubleAt 210 Exported Function
MD5::operator 115 Exported Function
CWMITraceSettings::operator 106 Exported Function
MD5::operator 114 Exported Function
CCheckedInCritSec::IsEntered 265 Exported Function
CEnterWbemCriticalSection::IsEntered 266 Exported Function
CVar::GetFloat 215 Exported Function
CVar::GetDouble 209 Exported Function
CSafeArray::GetFloatAt 216 Exported Function
CWbemInterval::operator 138 Exported Function
CWbemTime::operator 137 Exported Function
CWbemInterval::operator 136 Exported Function
CWbemInterval::operator 108 Exported Function
CWbemInterval::operator 109 Exported Function
CWin32DefaultArena::operator 113 Exported Function
CWMITraceSettings::operator 105 Exported Function
CWbemTimeSpan::operator 112 Exported Function
CEventLogRecord::GetCreationTime 206 Exported Function
CWbemTimeSpan::operator 111 Exported Function
CHex::operator 85 Exported Function
CWbemTime::CWbemTime 57 Exported Function
CWbemTime::CWbemTime 58 Exported Function
CWbemInterval::CWbemInterval 55 Exported Function
CVar::operator 130 Exported Function
CVar::operator 124 Exported Function
WString::operator 134 Exported Function
WString::operator 135 Exported Function
public: __cdecl CWin32DefaultArena::~CWin32DefaultArena(void) __ptr64 70 Exported Function
CWin32DefaultArena::CWin32DefaultArena 59 Exported Function
CWin32DefaultArena::CWin32DefaultArena 60 Exported Function
CVar::operator 125 Exported Function
CVar::operator 123 Exported Function
CVar::operator 127 Exported Function
CVar::operator 133 Exported Function
CVar::operator 128 Exported Function
CVar::operator 122 Exported Function
CVar::operator 126 Exported Function
CVar::operator 132 Exported Function
CVar::operator 120 Exported Function
CVar::operator 131 Exported Function
WString::WString 61 Exported Function
CCircularQueue::operator 78 Exported Function
CContainerControl::operator 79 Exported Function
CCircularQueue::operator 77 Exported Function
CBaseAce::operator 75 Exported Function
CCheckedInCritSec::operator 76 Exported Function
CFlexQueue::operator 83 Exported Function
CHaltable::operator 84 Exported Function
CEnterWbemCriticalSection::operator 82 Exported Function
CContainerControl::operator 80 Exported Function
CCritSec::operator 81 Exported Function
CNtSid::IsUser 272 Exported Function
CTraceSessionControl::IsEnabled 264 Exported Function
CHaltable::isValid 330 Exported Function
public: __cdecl WString::~WString(void) __ptr64 71 Exported Function
CWbemTime::Get100nss 188 Exported Function
CArena::operator 73 Exported Function
CArena::operator 74 Exported Function
C9XAce::operator 72 Exported Function
CVar::GetLPSTR 220 Exported Function
CVar::GetChar 204 Exported Function

Signature

  • Status: Signature verified.
  • Serial: 330000026551AE1BBD005CBFBD000000000265
  • Thumbprint: E168609353F30FF2373157B4EB8CD519D07A2BFF
  • Issuer: CN=Microsoft Windows Production PCA 2011, O=Microsoft Corporation, L=Redmond, S=Washington, C=US
  • Subject: CN=Microsoft Windows, O=Microsoft Corporation, L=Redmond, S=Washington, C=US

File Metadata

  • Original Filename: wmisvc.dll.mui
  • Product Name: Microsoft Windows Operating System
  • Company Name: Microsoft Corporation
  • File Version: 10.0.19041.1 (WinBuild.160101.0800)
  • Product Version: 10.0.19041.1
  • Language: English (United States)
  • Legal Copyright: Microsoft Corporation. All rights reserved.
  • Machine Type: 64-bit

File Scan

  • VirusTotal Detections: 0/66
  • VirusTotal Link: https://www.virustotal.com/gui/file/5f91debe661ed16b0c4a253049e62617e222256e40e633c7f846571fd447e6c0/detection/

Possible Misuse

The following table contains possible examples of WMIsvc.dll being misused. While WMIsvc.dll is not inherently malicious, its legitimate functionality can be abused for malicious purposes.

Source Source File Example License
malware-ioc nukesped_lazarus .wmisvc.exe`` © ESET 2014-2018

MIT License. Copyright (c) 2020 Strontic.