WMI file reports

WMI

WMI is a product name observed in ThreatInfo file telemetry. This page groups the latest 26 files that reference this product name, including their detection status and direct file reports.

Review the listed files before removing anything: legitimate software can share product names with unwanted or repacked installers, while malicious files often reuse familiar product metadata to appear trustworthy.

Scan files associated with WMI:

Download GridinSoft scanner
sciter-x.dll f4bbaef66c8964ce17192c2f1483ef2b General Threat
htpcons.exe b7defcd07011a5fb61b5c7d4f81c15e2 Risk.HideTools
wmime.exe 6e44fd8dd73b3cad5ed29f4f8efc626c Risk.HideTools
wflow.exe 16dcebd3e5fa61e84c115a9fd2fc8e3a Risk.HideTools
tmp5E45.exe a726248c6a1ff862b026b954649a6da3 Suspicious.XOR_Encoded
WMISpooferGUI.exe 8583100373804289f44add5bb9f5e812 Ransom.Occamy
WMIController.exe 0ab5453ca2def2160db4e4c5bb2dc1cf Trojan.AI
wmiproviderhost.exe 77207356a5d75aef7238dde0d4ca2a54 Trojan.CoinMiner
CfkBCChFHeEcBCHhHHHBchHCShsSAK 8ba2dc386f2a0574df65c9906e1a6c7a Suspicious Object
GHLPT.exe 0bec1bbb7304f6cfc0991ffe48e19aa3 Trojan.CoinMiner
kKCCSASuASEhKFSKaAeUaUHFAAUkkc 85beeeb4e950c34b0ca411cf138f1e9f Trojan.CoinMiner
wmi.exe 97cfbf3bd2ee33d11d3bf37614a01688 Under review
wmi.exe 8de1bb4a2999911e50c7e14ba09d0c8d Under review
nvWmi64.exe 9c44217804f0906412c6a72d1625a827 Suspicious Object
nvWmi64.exe 86a6fd43419288a96c8d3248ad5fca3b Under review
nvWmi64.exe bacf617c6177e243dae4eb135d922b9a PUP.DriverMax
nvwmi64.exe b341445befbde81d6f64e675f0aac3f5 Under review
nvWmi64.exe 5e34258b80725027ca7db96875332bf5 Under review
nvWmi64.exe.29FE9B8CEE8D9E6495 24ded72b6c864a4ba6c396dbc1bfcc64 Under review
MyBot.run.Wmi.exe a46ff6b0563bd4e5e5248fcd543ae058 General Threat
WMIRegistrationService.exe 6f405572fa098359838e7aa71ed6b107 Under review
wmiregistrationservice.exe 7a641e58a5631ffbb04eee5762f9d92b Ransom.Sabsik
wmiregistrationservice.exe 5907c10aec276eb803163bb6ff8400da Ransom.Sabsik
DellFFDPWmiBridge.exe b9ba241f15afb17e45ab828be84eb5d9 General Threat
DWSWMIC.dll a26be4ef9c7ff89015dbb5065dba76f0 Under review
DWSWMI.dll 6b1cbee1859b5808d90cc9e1e560f22f Under review