mofd.dll
v10.0.19041.1940
64-bit
Windows NT
Analyzed
Security warning
This file has been flagged as potentially dangerous, and downloads are disabled.
Reason: Detected potentially dangerous functions used for process injection: OpenProcess
Exported functions 6
CompileFileViaDLL
#1 · 0x27530
CreateBMOFViaDLL
#2 · 0x277e0
DllCanUnloadNow
#3 · 0xbf00
DllGetClassObject
#4 · 0xbce0
DllRegisterServer
#5 · 0xbf70
DllUnregisterServer
#6 · 0xc040
No function matches your filter.
Imported DLLs & functions 229
ADVAPI32.dll
21
AdjustTokenPrivileges
0x18002e640
GetTraceEnableFlags
0x18002e6b0
GetTraceEnableLevel
0x18002e6a8
GetTraceLoggerHandle
0x18002e6a0
ImpersonateSelf
0x18002e650
LookupPrivilegeValueW
0x18002e660
OpenProcessToken
0x18002e688
OpenThreadToken
0x18002e658
RegCloseKey
0x18002e690
RegCreateKeyExW
0x18002e670
RegDeleteKeyW
0x18002e680
RegDeleteValueW
0x18002e678
RegEnumKeyExW
0x18002e620
RegisterTraceGuidsW
0x18002e6b8
RegOpenKeyExW
0x18002e638
RegQueryInfoKeyW
0x18002e628
RegQueryValueExW
0x18002e630
RegSetValueExW
0x18002e698
RevertToSelf
0x18002e648
TraceMessage
0x18002e668
UnregisterTraceGuids
0x18002e6c0
GetVersionExW
0x18002e9d8
KERNEL32.dll
58
AcquireSRWLockExclusive
0x18002e6e8
CloseHandle
0x18002e800
CompareStringW
0x18002e6f8
CreateFileW
0x18002e848
CreateProcessW
0x18002e778
DebugBreak
0x18002e730
DeleteCriticalSection
0x18002e810
DeleteFileW
0x18002e700
DisableThreadLibraryCalls
0x18002e7a8
EnterCriticalSection
0x18002e818
ExpandEnvironmentStringsW
0x18002e720
FindResourceExW
0x18002e7b8
FreeLibrary
0x18002e808
GetConsoleOutputCP
0x18002e790
GetCurrentProcess
0x18002e768
GetCurrentProcessId
0x18002e858
GetCurrentThread
0x18002e860
GetCurrentThreadId
0x18002e868
GetFullPathNameW
0x18002e7a0
GetLastError
0x18002e840
GetModuleFileNameW
0x18002e718
GetModuleHandleW
0x18002e880
GetProcAddress
0x18002e7f8
GetStdHandle
0x18002e788
GetStringTypeExW
0x18002e758
GetSystemDirectoryW
0x18002e7d0
GetSystemTimeAsFileTime
0x18002e798
GetTempFileNameW
0x18002e738
GetTempPathW
0x18002e740
GetTickCount
0x18002e870
InitializeCriticalSection
0x18002e710
LCMapStringW
0x18002e760
LeaveCriticalSection
0x18002e820
LoadLibraryExW
0x18002e838
LoadResource
0x18002e7c0
LocalFree
0x18002e6d0
lstrcmpiW
0x18002e888
lstrcmpW
0x18002e7b0
MultiByteToWideChar
0x18002e7c8
OpenProcess
0x18002e850
OutputDebugStringA
0x18002e878
QueryPerformanceCounter
0x18002e830
RaiseException
0x18002e7d8
ReadFile
0x18002e750
ReleaseSRWLockExclusive
0x18002e6e0
RtlCaptureContext
0x18002e748
RtlLookupFunctionEntry
0x18002e770
RtlVirtualUnwind
0x18002e7e0
SetFilePointer
0x18002e890
SetUnhandledExceptionFilter
0x18002e7f0
SizeofResource
0x18002e898
Sleep
0x18002e6d8
SleepConditionVariableSRW
0x18002e728
TerminateProcess
0x18002e828
UnhandledExceptionFilter
0x18002e7e8
WakeAllConditionVariable
0x18002e6f0
WideCharToMultiByte
0x18002e708
WriteFile
0x18002e780
msvcrt.dll
62
__C_specific_handler
0x18002eb80
__CxxFrameHandler3
0x18002ebc8
__dllonexit
0x18002eac0
_amsg_exit
0x18002eba8
_close
0x18002ea08
_CxxThrowException
0x18002eb88
_errno
0x18002ea98
_initterm
0x18002ebb0
_lock
0x18002ea88
_onexit
0x18002eac8
_open
0x18002ea18
_purecall
0x18002eb10
_resetstkoflw
0x18002eb20
_ui64tow_s
0x18002eab0
_unlock
0x18002ea90
_vsnwprintf
0x18002eb68
_waccess
0x18002ea30
_wcsdup
0x18002ea58
_wcserror
0x18002ea38
_wcsicmp
0x18002eb38
_wcsnicmp
0x18002eb30
_wfopen
0x18002eb00
_wfullpath
0x18002ea28
_write
0x18002ea10
_wsplitpath_s
0x18002ea20
_wtoi
0x18002ea60
_wtol
0x18002ea68
_XcptFilter
0x18002eba0
??0exception@@QEAA@AEBQEBD@Z
0x18002e9f8
??0exception@@QEAA@AEBQEBDH@Z
0x18002e9f0
??0exception@@QEAA@AEBV0@@Z
0x18002e9e8
??1exception@@UEAA@XZ
0x18002eaa0
??1type_info@@UEAA@XZ
0x18002ea80
?terminate@@YAXXZ
0x18002ebb8
?what@exception@@UEBAPEBDXZ
0x18002eb78
calloc
0x18002eb08
fclose
0x18002eae8
ferror
0x18002ead8
fread
0x18002eae0
free
0x18002eb70
fseek
0x18002eaf8
ftell
0x18002eaf0
fwrite
0x18002ea40
iswspace
0x18002eb48
iswxdigit
0x18002ebc0
malloc
0x18002eb18
mbstowcs
0x18002ead0
memcmp
0x18002eb60
memcpy
0x18002eb90
memcpy_s
0x18002eb58
memmove
0x18002eb98
memset
0x18002ebd0
printf
0x18002ea50
realloc
0x18002ea00
swscanf
0x18002ea70
towupper
0x18002ea78
wcschr
0x18002eb40
wcsncmp
0x18002eb50
wcsncpy_s
0x18002eab8
wcsrchr
0x18002eb28
wcstok
0x18002eaa8
wcstombs
0x18002ea48
CoCreateGuid
0x18002e8b0
CoCreateInstance
0x18002e8d8
CoQueryProxyBlanket
0x18002e8b8
CoTaskMemAlloc
0x18002e8d0
CoTaskMemFree
0x18002e8c0
CoTaskMemRealloc
0x18002e8c8
StringFromGUID2
0x18002e8a8
OLEAUT32.dll
25
CreateErrorInfo
0x18002e9a0
GetErrorInfo
0x18002e920
LoadRegTypeLib
0x18002e930
LoadTypeLib
0x18002e938
SafeArrayCreate
0x18002e908
SafeArrayDestroy
0x18002e958
SafeArrayDestroyData
0x18002e960
SafeArrayDestroyDescriptor
0x18002e970
SafeArrayGetElement
0x18002e950
SafeArrayGetLBound
0x18002e940
SafeArrayGetUBound
0x18002e948
SafeArrayPutElement
0x18002e910
SetErrorInfo
0x18002e918
SysAllocString
0x18002e990
SysAllocStringByteLen
0x18002e900
SysAllocStringLen
0x18002e9a8
SysFreeString
0x18002e980
SysStringByteLen
0x18002e8f8
SysStringLen
0x18002e998
VarBstrCat
0x18002e8f0
VariantChangeTypeEx
0x18002e8e8
VariantClear
0x18002e988
VariantCopy
0x18002e978
VariantInit
0x18002e928
VarUI4FromStr
0x18002e968
wbemcomn.dll
52
_ThrowMemoryException_
0x18002ebe0
??0CFlexArray@@QEAA@HH@Z
0x18002ece8
??0CMRCICompression@@QEAA@XZ
0x18002ecc8
??0Registry@@QEAA@PEBGK@Z
0x18002ec98
??0WString@@QEAA@PEBG@Z
0x18002ed18
??0WString@@QEAA@XZ
0x18002ec08
??1CFlexArray@@QEAA@XZ
0x18002ecf0
??1CMRCICompression@@QEAA@XZ
0x18002ed00
??1CVar@@QEAA@XZ
0x18002ed48
??1Registry@@QEAA@XZ
0x18002ed70
??4WString@@QEAAAEAV0@PEBG@Z
0x18002ec68
?AddEnvironmentValue@CWbemInstallObject@@SAJPEBG0@Z
0x18002ec10
?CleanUp@CWbemInstallObject@@SAXXZ
0x18002ec60
?CoCreateInstance@CWbemInstallObject@@SAJAEBU_GUID@@PEAUIUnknown@@K0PEAPEAX@Z
0x18002ecc0
?DeleteString@WString@@AEAAXPEAG@Z
0x18002ebe8
?ExpandEnvironmentStringsW@CWbemInstallObject@@SAKPEBGPEAGK@Z
0x18002ecd8
?FlushRepository@CWbemInstallObject@@SAJXZ
0x18002ec58
?GetAt@CFlexArray@@QEBAPEAXH@Z
0x18002ecf8
?GetMultiStr@Registry@@QEAAPEAGPEBGAEAK@Z
0x18002eca8
?GetRepositoryFolder@CWbemInstallObject@@SAPEBGXZ
0x18002ece0
?GetText@CVar@@QEAAPEAGJJPEBG@Z
0x18002ed50
?Init@CVar@@AEAAXXZ
0x18002ed38
?InsertAt@CFlexArray@@QEAAHHPEAX@Z
0x18002ed58
?IsOffline@CWbemInstallObject@@SA_NXZ
0x18002ec00
?LocaleName_To_LCID@CMUILocale@@SAJPEBGPEA_NPEAK@Z
0x18002ed30
?Mrci1Decompress@CBaseMrciCompression@@QEAAIPEAEI0I@Z
0x18002ecd0
?Mrci1MaxCompress@CBaseMrciCompression@@QEAAIPEAEI0I@Z
0x18002ed68
?ms_XXX_Locale_To_LCID@CMUILocale@@SAJPEBGPEAK@Z
0x18002ed28
?RemoveAt@CFlexArray@@QEAAHH@Z
0x18002ed60
?SetAutoRecoverFolder@CWbemInstallObject@@SAXPEBG@Z
0x18002ec38
?SetBinaryPath@CWbemInstallObject@@SAXPEBG@Z
0x18002ec28
?SetMultiStr@Registry@@QEAAHPEBGPEAGK@Z
0x18002ecb0
?SetOffline@CWbemInstallObject@@SAX_N@Z
0x18002ec20
?SetRegistryPathCIMOM@CWbemInstallObject@@SAXPEBG@Z
0x18002ec48
?SetRegistryPathWbem@CWbemInstallObject@@SAXPEBG@Z
0x18002ec40
?SetRepositoryFolder@CWbemInstallObject@@SAXPEBG@Z
0x18002ec30
?SetStr@Registry@@QEAAHPEBG0@Z
0x18002ecb8
?SetVariant@CVar@@QEAAHPEAUtagVARIANT@@H@Z
0x18002ed40
?Shutdown@CWbemInstallObject@@SAXXZ
0x18002ec18
?WbemMemAlloc@CWin32DefaultArena@@SAPEAX_K@Z
0x18002ed78
?WbemMemFree@CWin32DefaultArena@@SAHPEAX@Z
0x18002eca0
?Write@CMemoryLog@@QEAAXJ@Z
0x18002ebf0
bAreWeLocal
0x18002ed10
CopyFileToAutorecover
0x18002ec90
ExtractMachineName
0x18002ed08
GetMemLogObject
0x18002ebf8
RegisterDLL
0x18002ec70
RegisterDllAppid
0x18002ec78
RemoveFileFromAutoRecoverFolder
0x18002ec50
UnRegisterDLL
0x18002ec80
UnregisterDllAppid
0x18002ec88
WbemVariantChangeType
0x18002ed20
No function matches your filter.