mofd.dll - Online Dependency Analysis & Download - DLLView

mofd.dll

Description: WMI

Authors: © Microsoft Corporation. All rights reserved.

Version: 10.0.19041.1

Architecture: 32-bit

Operating System: Windows NT

SHA256: f79a9027e85fdeeafe77275ac1d0ab9f

File Size: 199.5 KB

Uploaded At: Dec. 1, 2025, 8:37 a.m.

Views: 16

Security Warning

This file has been flagged as potentially dangerous.

Reason: Detected potentially dangerous functions used for process injection: OpenProcess

Exported Functions

CompileFileViaDLL (Ordinal: 1, Address: 0x22f70)
CreateBMOFViaDLL (Ordinal: 2, Address: 0x23180)
DllCanUnloadNow (Ordinal: 3, Address: 0xdcc0)
DllGetClassObject (Ordinal: 4, Address: 0xdb30)
DllRegisterServer (Ordinal: 5, Address: 0xdd20)
DllUnregisterServer (Ordinal: 6, Address: 0xdda0)

Imported DLLs & Functions

ADVAPI32.dll

AdjustTokenPrivileges (Address: 0x1002b004)
GetTraceEnableFlags (Address: 0x1002b034)
GetTraceEnableLevel (Address: 0x1002b030)
GetTraceLoggerHandle (Address: 0x1002b02c)
ImpersonateSelf (Address: 0x1002b00c)
LookupPrivilegeValueW (Address: 0x1002b01c)
OpenProcessToken (Address: 0x1002b050)
OpenThreadToken (Address: 0x1002b010)
RegCloseKey (Address: 0x1002b018)
RegCreateKeyExW (Address: 0x1002b024)
RegDeleteKeyW (Address: 0x1002b028)
RegDeleteValueW (Address: 0x1002b04c)
RegEnumKeyExW (Address: 0x1002b044)
RegisterTraceGuidsW (Address: 0x1002b038)
RegOpenKeyExW (Address: 0x1002b048)
RegQueryInfoKeyW (Address: 0x1002b040)
RegQueryValueExW (Address: 0x1002b014)
RegSetValueExW (Address: 0x1002b000)
RevertToSelf (Address: 0x1002b008)
TraceMessage (Address: 0x1002b020)
UnregisterTraceGuids (Address: 0x1002b03c)

api-ms-win-core-sysinfo-l1-1-0.dll

GetVersionExW (Address: 0x1002b1d0)

KERNEL32.dll

AcquireSRWLockExclusive (Address: 0x1002b0b0)
CloseHandle (Address: 0x1002b0f0)
CompareStringW (Address: 0x1002b0b8)
CreateFileW (Address: 0x1002b0f4)
CreateProcessW (Address: 0x1002b070)
DebugBreak (Address: 0x1002b0d0)
DeleteCriticalSection (Address: 0x1002b0f8)
DeleteFileW (Address: 0x1002b0bc)
DisableThreadLibraryCalls (Address: 0x1002b088)
EnterCriticalSection (Address: 0x1002b0fc)
ExpandEnvironmentStringsW (Address: 0x1002b0cc)
FindResourceExW (Address: 0x1002b08c)
FreeLibrary (Address: 0x1002b0e8)
GetConsoleOutputCP (Address: 0x1002b07c)
GetCurrentProcess (Address: 0x1002b06c)
GetCurrentProcessId (Address: 0x1002b118)
GetCurrentThread (Address: 0x1002b120)
GetCurrentThreadId (Address: 0x1002b11c)
GetFullPathNameW (Address: 0x1002b084)
GetLastError (Address: 0x1002b110)
GetModuleFileNameW (Address: 0x1002b0c8)
GetModuleHandleW (Address: 0x1002b0a0)
GetProcAddress (Address: 0x1002b0e4)
GetStdHandle (Address: 0x1002b078)
GetStringTypeExW (Address: 0x1002b064)
GetSystemDirectoryW (Address: 0x1002b0d8)
GetSystemTimeAsFileTime (Address: 0x1002b080)
GetTempFileNameW (Address: 0x1002b12c)
GetTempPathW (Address: 0x1002b058)
GetTickCount (Address: 0x1002b124)
InitializeCriticalSection (Address: 0x1002b0c4)
LCMapStringW (Address: 0x1002b068)
LeaveCriticalSection (Address: 0x1002b100)
LoadLibraryExW (Address: 0x1002b0ec)
LoadResource (Address: 0x1002b090)
LocalFree (Address: 0x1002b0a4)
lstrcmpiW (Address: 0x1002b09c)
lstrcmpW (Address: 0x1002b0d4)
MultiByteToWideChar (Address: 0x1002b130)
OpenProcess (Address: 0x1002b10c)
OutputDebugStringA (Address: 0x1002b128)
QueryPerformanceCounter (Address: 0x1002b114)
RaiseException (Address: 0x1002b098)
ReadFile (Address: 0x1002b060)
ReleaseSRWLockExclusive (Address: 0x1002b0ac)
SetFilePointer (Address: 0x1002b05c)
SetUnhandledExceptionFilter (Address: 0x1002b104)
SizeofResource (Address: 0x1002b094)
Sleep (Address: 0x1002b0a8)
SleepConditionVariableSRW (Address: 0x1002b0dc)
TerminateProcess (Address: 0x1002b108)
UnhandledExceptionFilter (Address: 0x1002b0e0)
WakeAllConditionVariable (Address: 0x1002b0b4)
WideCharToMultiByte (Address: 0x1002b0c0)
WriteFile (Address: 0x1002b074)

msvcrt.dll

__CxxFrameHandler3 (Address: 0x1002b21c)
__dllonexit (Address: 0x1002b2bc)
_amsg_exit (Address: 0x1002b2a0)
_close (Address: 0x1002b224)
_CxxThrowException (Address: 0x1002b254)
_errno (Address: 0x1002b1f4)
_except_handler4_common (Address: 0x1002b2ac)
_initterm (Address: 0x1002b2a4)
_lock (Address: 0x1002b2b4)
_onexit (Address: 0x1002b2c0)
_open (Address: 0x1002b218)
_purecall (Address: 0x1002b268)
_resetstkoflw (Address: 0x1002b270)
_ui64tow_s (Address: 0x1002b200)
_unlock (Address: 0x1002b2b8)
_vsnwprintf (Address: 0x1002b290)
_waccess (Address: 0x1002b20c)
_wcsdup (Address: 0x1002b1e0)
_wcserror (Address: 0x1002b208)
_wcsicmp (Address: 0x1002b27c)
_wcsnicmp (Address: 0x1002b278)
_wfopen (Address: 0x1002b260)
_wfullpath (Address: 0x1002b210)
_write (Address: 0x1002b220)
_wsplitpath_s (Address: 0x1002b214)
_wtoi (Address: 0x1002b1e4)
_wtol (Address: 0x1002b1e8)
_XcptFilter (Address: 0x1002b298)
??0exception@@QAE@ABQBD@Z (Address: 0x1002b22c)
??0exception@@QAE@ABQBDH@Z (Address: 0x1002b230)
??0exception@@QAE@ABV0@@Z (Address: 0x1002b234)
??1exception@@UAE@XZ (Address: 0x1002b238)
??1type_info@@UAE@XZ (Address: 0x1002b2b0)
?terminate@@YAXXZ (Address: 0x1002b2a8)
?what@exception@@UBEPBDXZ (Address: 0x1002b250)
calloc (Address: 0x1002b264)
fclose (Address: 0x1002b248)
ferror (Address: 0x1002b240)
fread (Address: 0x1002b244)
free (Address: 0x1002b29c)
fseek (Address: 0x1002b25c)
ftell (Address: 0x1002b24c)
fwrite (Address: 0x1002b1ec)
iswspace (Address: 0x1002b284)
iswxdigit (Address: 0x1002b1f8)
malloc (Address: 0x1002b26c)
mbstowcs (Address: 0x1002b23c)
memcmp (Address: 0x1002b2c4)
memcpy (Address: 0x1002b258)
memcpy_s (Address: 0x1002b28c)
memmove (Address: 0x1002b294)
memset (Address: 0x1002b2cc)
printf (Address: 0x1002b1dc)
realloc (Address: 0x1002b228)
swscanf (Address: 0x1002b2c8)
towupper (Address: 0x1002b1f0)
wcschr (Address: 0x1002b280)
wcsncmp (Address: 0x1002b288)
wcsncpy_s (Address: 0x1002b204)
wcsrchr (Address: 0x1002b274)
wcstok (Address: 0x1002b1fc)
wcstombs (Address: 0x1002b1d8)

OLE32.dll

CoCreateGuid (Address: 0x1002b140)
CoCreateInstance (Address: 0x1002b14c)
CoQueryProxyBlanket (Address: 0x1002b138)
CoTaskMemAlloc (Address: 0x1002b150)
CoTaskMemFree (Address: 0x1002b13c)
CoTaskMemRealloc (Address: 0x1002b144)
StringFromGUID2 (Address: 0x1002b148)

OLEAUT32.dll

CreateErrorInfo (Address: 0x1002b180)
GetErrorInfo (Address: 0x1002b158)
LoadRegTypeLib (Address: 0x1002b188)
LoadTypeLib (Address: 0x1002b18c)
SafeArrayCreate (Address: 0x1002b178)
SafeArrayDestroy (Address: 0x1002b174)
SafeArrayDestroyData (Address: 0x1002b194)
SafeArrayDestroyDescriptor (Address: 0x1002b1a8)
SafeArrayGetElement (Address: 0x1002b160)
SafeArrayGetLBound (Address: 0x1002b190)
SafeArrayGetUBound (Address: 0x1002b15c)
SafeArrayPutElement (Address: 0x1002b164)
SetErrorInfo (Address: 0x1002b17c)
SysAllocString (Address: 0x1002b1b0)
SysAllocStringByteLen (Address: 0x1002b170)
SysAllocStringLen (Address: 0x1002b1b8)
SysFreeString (Address: 0x1002b198)
SysStringByteLen (Address: 0x1002b16c)
SysStringLen (Address: 0x1002b1b4)
VarBstrCat (Address: 0x1002b168)
VariantChangeTypeEx (Address: 0x1002b19c)
VariantClear (Address: 0x1002b1a0)
VariantCopy (Address: 0x1002b1ac)
VariantInit (Address: 0x1002b184)
VarUI4FromStr (Address: 0x1002b1a4)

USER32.dll

CharLowerBuffW (Address: 0x1002b1c4)
CharNextW (Address: 0x1002b1c8)
LoadStringW (Address: 0x1002b1c0)

wbemcomn.dll

_ThrowMemoryException_ (Address: 0x1002b2d4)
??0CFlexArray@@QAE@HH@Z (Address: 0x1002b358)
??0CMRCICompression@@QAE@XZ (Address: 0x1002b348)
??0Registry@@QAE@PBGK@Z (Address: 0x1002b330)
??0WString@@QAE@PBG@Z (Address: 0x1002b370)
??0WString@@QAE@XZ (Address: 0x1002b2e8)
??1CFlexArray@@QAE@XZ (Address: 0x1002b35c)
??1CMRCICompression@@QAE@XZ (Address: 0x1002b364)
??1CVar@@QAE@XZ (Address: 0x1002b388)
??1Registry@@QAE@XZ (Address: 0x1002b39c)
??4WString@@QAEAAV0@PBG@Z (Address: 0x1002b318)
?AddEnvironmentValue@CWbemInstallObject@@SGJPBG0@Z (Address: 0x1002b2ec)
?CleanUp@CWbemInstallObject@@SGXXZ (Address: 0x1002b314)
?CoCreateInstance@CWbemInstallObject@@SGJABU_GUID@@PAUIUnknown@@K0PAPAX@Z (Address: 0x1002b344)
?DeleteString@WString@@AAEXPAG@Z (Address: 0x1002b2d8)
?ExpandEnvironmentStringsW@CWbemInstallObject@@SGKPBGPAGK@Z (Address: 0x1002b350)
?FlushRepository@CWbemInstallObject@@SGJXZ (Address: 0x1002b310)
?GetAt@CFlexArray@@QBEPAXH@Z (Address: 0x1002b360)
?GetMultiStr@Registry@@QAEPAGPBGAAK@Z (Address: 0x1002b338)
?GetRepositoryFolder@CWbemInstallObject@@SGPBGXZ (Address: 0x1002b354)
?GetText@CVar@@QAEPAGJJPBG@Z (Address: 0x1002b38c)
?Init@CVar@@AAEXXZ (Address: 0x1002b380)
?InsertAt@CFlexArray@@QAEHHPAX@Z (Address: 0x1002b390)
?IsOffline@CWbemInstallObject@@SG_NXZ (Address: 0x1002b2e4)
?LocaleName_To_LCID@CMUILocale@@SGJPBGPA_NPAK@Z (Address: 0x1002b37c)
?Mrci1Decompress@CBaseMrciCompression@@QAEIPAEI0I@Z (Address: 0x1002b34c)
?Mrci1MaxCompress@CBaseMrciCompression@@QAEIPAEI0I@Z (Address: 0x1002b398)
?ms_XXX_Locale_To_LCID@CMUILocale@@SGJPBGPAK@Z (Address: 0x1002b378)
?RemoveAt@CFlexArray@@QAEHH@Z (Address: 0x1002b394)
?SetAutoRecoverFolder@CWbemInstallObject@@SGXPBG@Z (Address: 0x1002b300)
?SetBinaryPath@CWbemInstallObject@@SGXPBG@Z (Address: 0x1002b2f8)
?SetMultiStr@Registry@@QAEHPBGPAGK@Z (Address: 0x1002b33c)
?SetOffline@CWbemInstallObject@@SGX_N@Z (Address: 0x1002b2f4)
?SetRegistryPathCIMOM@CWbemInstallObject@@SGXPBG@Z (Address: 0x1002b308)
?SetRegistryPathWbem@CWbemInstallObject@@SGXPBG@Z (Address: 0x1002b304)
?SetRepositoryFolder@CWbemInstallObject@@SGXPBG@Z (Address: 0x1002b2fc)
?SetStr@Registry@@QAEHPBG0@Z (Address: 0x1002b340)
?SetVariant@CVar@@QAEHPAUtagVARIANT@@H@Z (Address: 0x1002b384)
?Shutdown@CWbemInstallObject@@SGXXZ (Address: 0x1002b2f0)
?WbemMemAlloc@CWin32DefaultArena@@SAPAXK@Z (Address: 0x1002b3a0)
?WbemMemFree@CWin32DefaultArena@@SAHPAX@Z (Address: 0x1002b334)
?Write@CMemoryLog@@QAEXJ@Z (Address: 0x1002b2dc)
bAreWeLocal (Address: 0x1002b36c)
CopyFileToAutorecover (Address: 0x1002b32c)
ExtractMachineName (Address: 0x1002b368)
GetMemLogObject (Address: 0x1002b2e0)
RegisterDLL (Address: 0x1002b31c)
RegisterDllAppid (Address: 0x1002b320)
RemoveFileFromAutoRecoverFolder (Address: 0x1002b30c)
UnRegisterDLL (Address: 0x1002b324)
UnregisterDllAppid (Address: 0x1002b328)
WbemVariantChangeType (Address: 0x1002b374)