Microsoft starts removing WMIC tool used by cybercriminals
4 Articles
4 Articles
Microsoft starts removing WMIC tool used by cybercriminals
Microsoft announced that it removed the Windows Management Instrumentation Command-line (WMIC) tool from Windows 11 24H2 and 25H2, as well as from Windows 11 beta builds released this week.
Microsoft removed the WMIC component from a clean install of Windows 11. This component has long been abused by hackers for launching attacks.
Microsoft will remove WMIC completely from Windows 11 24H2 and 25H2 in August 2026 because malware has abused the tool for years. Reinstallation will be blocked. Nothing changes for gaming PCs, the WMI interface may remain.
Microsoft completely removes the WMIC utility from Windows 11 with the August 2026 update. Already disabled by default since version 25H2, the tool can no longer be reactivated by system administrators.
Coverage Details
Bias Distribution
- 100% of the sources are Center
Factuality
To view factuality data please Upgrade to Premium





