» WMIEventHandler.dll
Overview
Analysis
File Details
Programs (1)

WMIEventHandler.dll

Intel Management and Security Application Local Management Service

Intel Corporation

This is installed with Intel(R) Management Engine Components.

File name:

WMIEventHandler.dll

Publisher:

Intel Corporation (signed and verified)

Product:

Intel(R) Management and Security Application Local Management Service

Description:

WMI Event Handler

Version:

11.0.0.1149

MD5:

bf6e43dac654dbc39cfa7d43a48fdd76

SHA-1:

aad70f0cf6f8c2c95dbf01f839f4f90a7d96b039

SHA-256:

6441d2313c6f3a53e430fb9e50cbd09038d09a69c6380b60e3ef74eced35feb2

Scanner detections:

0 / 68

Status:

Clean (as of last analysis)

Analysis date:

5/10/2024 3:49:48 AM UTC (today)

File size:

49.8 KB (50,976 bytes)

Product version:

11.0.0.1149

Original file name:

WMIEventHandler.dll

File type:

Dynamic link library (Win32 DLL)

Language:

English (United States)

Common path:

C:\Program Files\intel\intel(r) management engine components\lms\wmieventhandler.dll

Digital Signature

Signed by:

Intel Corporation

Authority:

Intel Corporation

Valid from:

3/18/2014 8:17:07 AM

Valid to:

3/2/2017 8:17:07 AM

Subject:

CN=Intel Corporation - Embedded Subsystems and IP Blocks Group, O=Intel Corporation, L=Santa Clara, S=CA, C=US

Issuer:

CN=Intel External Basic Issuing CA 3B, O=Intel Corporation, L=Santa Clara, S=CA, C=US

Serial number:

330000B10096925C294E64426800020000B100

File PE Metadata

Compilation timestamp:

6/17/2015 7:05:22 PM

OS version:

5.1

OS bitness:

Win32

Subsystem:

Windows GUI

Linker version:

10.0

CTPH (ssdeep):

768:ZwZcLDg33SStadR7YPpxxfRmEWl26xOZKdTP67a7gpTxwL6OLzP:SaWnYshxelXOZU7DT

Entry address:

0x45CA

Entry point:

8B, FF, 55, 8B, EC, 83, 7D, 0C, 01, 75, 05, E8, BE, 03, 00, 00, FF, 75, 08, 8B, 4D, 10, 8B, 55, 0C, E8, CC, FE, FF, FF, 59, 5D, C2, 0C, 00, 8B, FF, 55, 8B, EC, 81, EC, 28, 03, 00, 00, A3, 48, A8, 00, 10, 89, 0D, 44, A8, 00, 10, 89, 15, 40, A8, 00, 10, 89, 1D, 3C, A8, 00, 10, 89, 35, 38, A8, 00, 10, 89, 3D, 34, A8, 00, 10, 66, 8C, 15, 60, A8, 00, 10, 66, 8C, 0D, 54, A8, 00, 10, 66, 8C, 1D, 30, A8, 00, 10, 66, 8C, 05, 2C, A8, 00, 10, 66, 8C, 25, 28, A8, 00, 10, 66, 8C, 2D, 24, A8, 00, 10, 9C, 8F, 05, 58, A8... 
[+]

Code size:

17.5 KB (17,920 bytes)

The file WMIEventHandler.dll has been discovered within the following program.

Intel(R) Management Engine Components by Intel Corporation

This program provides the Intel Management Engine Components Driver for supported notebooks with supported operating systems. The Intel management Components monitor the installed Intel hardware, such as chip sets, storage, and other components.

downloadcenter.intel.com/Detail_Desc.aspx?lang=eng&DwnldID=20402

10% remove it

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.