mofd.dll - Online Dependency Analysis & Download - DLLView

mofd.dll

Description: WMI

Authors: © Microsoft Corporation. All rights reserved.

Version: 10.0.19041.2664

Architecture: 32-bit

Operating System: Windows NT

SHA256: 2a7c6281b0e097de0f33d931b4d73865

File Size: 201.8 KB

Uploaded At: Dec. 1, 2025, 8:37 a.m.

Views: 15

Security Warning

This file has been flagged as potentially dangerous.

Reason: Detected potentially dangerous functions used for process injection: OpenProcess

Exported Functions

CompileFileViaDLL (Ordinal: 1, Address: 0x23400)
CreateBMOFViaDLL (Ordinal: 2, Address: 0x23610)
DllCanUnloadNow (Ordinal: 3, Address: 0xe170)
DllGetClassObject (Ordinal: 4, Address: 0xdfe0)
DllRegisterServer (Ordinal: 5, Address: 0xe1d0)
DllUnregisterServer (Ordinal: 6, Address: 0xe250)

Imported DLLs & Functions

ADVAPI32.dll

AdjustTokenPrivileges (Address: 0x1002c004)
GetTraceEnableFlags (Address: 0x1002c034)
GetTraceEnableLevel (Address: 0x1002c030)
GetTraceLoggerHandle (Address: 0x1002c02c)
ImpersonateSelf (Address: 0x1002c00c)
LookupPrivilegeValueW (Address: 0x1002c01c)
OpenProcessToken (Address: 0x1002c050)
OpenThreadToken (Address: 0x1002c010)
RegCloseKey (Address: 0x1002c018)
RegCreateKeyExW (Address: 0x1002c024)
RegDeleteKeyW (Address: 0x1002c028)
RegDeleteValueW (Address: 0x1002c04c)
RegEnumKeyExW (Address: 0x1002c044)
RegisterTraceGuidsW (Address: 0x1002c038)
RegOpenKeyExW (Address: 0x1002c048)
RegQueryInfoKeyW (Address: 0x1002c040)
RegQueryValueExW (Address: 0x1002c014)
RegSetValueExW (Address: 0x1002c000)
RevertToSelf (Address: 0x1002c008)
TraceMessage (Address: 0x1002c020)
UnregisterTraceGuids (Address: 0x1002c03c)

api-ms-win-core-sysinfo-l1-1-0.dll

GetVersionExW (Address: 0x1002c1d0)

KERNEL32.dll

AcquireSRWLockExclusive (Address: 0x1002c0b0)
CloseHandle (Address: 0x1002c0f0)
CompareStringW (Address: 0x1002c0b8)
CreateFileW (Address: 0x1002c0f4)
CreateProcessW (Address: 0x1002c070)
DebugBreak (Address: 0x1002c0d0)
DeleteCriticalSection (Address: 0x1002c0f8)
DeleteFileW (Address: 0x1002c0bc)
DisableThreadLibraryCalls (Address: 0x1002c088)
EnterCriticalSection (Address: 0x1002c0fc)
ExpandEnvironmentStringsW (Address: 0x1002c0cc)
FindResourceExW (Address: 0x1002c08c)
FreeLibrary (Address: 0x1002c0e8)
GetConsoleOutputCP (Address: 0x1002c07c)
GetCurrentProcess (Address: 0x1002c06c)
GetCurrentProcessId (Address: 0x1002c118)
GetCurrentThread (Address: 0x1002c120)
GetCurrentThreadId (Address: 0x1002c11c)
GetFullPathNameW (Address: 0x1002c084)
GetLastError (Address: 0x1002c110)
GetModuleFileNameW (Address: 0x1002c0c8)
GetModuleHandleW (Address: 0x1002c0a0)
GetProcAddress (Address: 0x1002c0e4)
GetStdHandle (Address: 0x1002c078)
GetStringTypeExW (Address: 0x1002c064)
GetSystemDirectoryW (Address: 0x1002c0d8)
GetSystemTimeAsFileTime (Address: 0x1002c080)
GetTempFileNameW (Address: 0x1002c12c)
GetTempPathW (Address: 0x1002c058)
GetTickCount (Address: 0x1002c124)
InitializeCriticalSection (Address: 0x1002c0c4)
LCMapStringW (Address: 0x1002c068)
LeaveCriticalSection (Address: 0x1002c100)
LoadLibraryExW (Address: 0x1002c0ec)
LoadResource (Address: 0x1002c090)
LocalFree (Address: 0x1002c0a4)
lstrcmpiW (Address: 0x1002c09c)
lstrcmpW (Address: 0x1002c0d4)
MultiByteToWideChar (Address: 0x1002c130)
OpenProcess (Address: 0x1002c10c)
OutputDebugStringA (Address: 0x1002c128)
QueryPerformanceCounter (Address: 0x1002c114)
RaiseException (Address: 0x1002c098)
ReadFile (Address: 0x1002c060)
ReleaseSRWLockExclusive (Address: 0x1002c0ac)
SetFilePointer (Address: 0x1002c05c)
SetUnhandledExceptionFilter (Address: 0x1002c104)
SizeofResource (Address: 0x1002c094)
Sleep (Address: 0x1002c0a8)
SleepConditionVariableSRW (Address: 0x1002c0dc)
TerminateProcess (Address: 0x1002c108)
UnhandledExceptionFilter (Address: 0x1002c0e0)
WakeAllConditionVariable (Address: 0x1002c0b4)
WideCharToMultiByte (Address: 0x1002c0c0)
WriteFile (Address: 0x1002c074)

msvcrt.dll

__CxxFrameHandler3 (Address: 0x1002c21c)
__dllonexit (Address: 0x1002c2bc)
_amsg_exit (Address: 0x1002c2a0)
_close (Address: 0x1002c224)
_CxxThrowException (Address: 0x1002c254)
_errno (Address: 0x1002c1f4)
_except_handler4_common (Address: 0x1002c2ac)
_initterm (Address: 0x1002c2a4)
_lock (Address: 0x1002c2b4)
_onexit (Address: 0x1002c2c0)
_open (Address: 0x1002c218)
_purecall (Address: 0x1002c268)
_resetstkoflw (Address: 0x1002c270)
_ui64tow_s (Address: 0x1002c200)
_unlock (Address: 0x1002c2b8)
_vsnwprintf (Address: 0x1002c290)
_waccess (Address: 0x1002c20c)
_wcsdup (Address: 0x1002c1e0)
_wcserror (Address: 0x1002c208)
_wcsicmp (Address: 0x1002c27c)
_wcsnicmp (Address: 0x1002c278)
_wfopen (Address: 0x1002c260)
_wfullpath (Address: 0x1002c210)
_write (Address: 0x1002c220)
_wsplitpath_s (Address: 0x1002c214)
_wtoi (Address: 0x1002c1e4)
_wtol (Address: 0x1002c1e8)
_XcptFilter (Address: 0x1002c298)
??0exception@@QAE@ABQBD@Z (Address: 0x1002c22c)
??0exception@@QAE@ABQBDH@Z (Address: 0x1002c230)
??0exception@@QAE@ABV0@@Z (Address: 0x1002c234)
??1exception@@UAE@XZ (Address: 0x1002c238)
??1type_info@@UAE@XZ (Address: 0x1002c2b0)
?terminate@@YAXXZ (Address: 0x1002c2a8)
?what@exception@@UBEPBDXZ (Address: 0x1002c250)
calloc (Address: 0x1002c264)
fclose (Address: 0x1002c248)
ferror (Address: 0x1002c240)
fread (Address: 0x1002c244)
free (Address: 0x1002c29c)
fseek (Address: 0x1002c25c)
ftell (Address: 0x1002c24c)
fwrite (Address: 0x1002c1ec)
iswspace (Address: 0x1002c284)
iswxdigit (Address: 0x1002c1f8)
malloc (Address: 0x1002c26c)
mbstowcs (Address: 0x1002c23c)
memcmp (Address: 0x1002c2c4)
memcpy (Address: 0x1002c258)
memcpy_s (Address: 0x1002c28c)
memmove (Address: 0x1002c294)
memset (Address: 0x1002c2cc)
printf (Address: 0x1002c1dc)
realloc (Address: 0x1002c228)
swscanf (Address: 0x1002c2c8)
towupper (Address: 0x1002c1f0)
wcschr (Address: 0x1002c280)
wcsncmp (Address: 0x1002c288)
wcsncpy_s (Address: 0x1002c204)
wcsrchr (Address: 0x1002c274)
wcstok (Address: 0x1002c1fc)
wcstombs (Address: 0x1002c1d8)

OLE32.dll

CoCreateGuid (Address: 0x1002c140)
CoCreateInstance (Address: 0x1002c14c)
CoQueryProxyBlanket (Address: 0x1002c138)
CoTaskMemAlloc (Address: 0x1002c150)
CoTaskMemFree (Address: 0x1002c13c)
CoTaskMemRealloc (Address: 0x1002c144)
StringFromGUID2 (Address: 0x1002c148)

OLEAUT32.dll

CreateErrorInfo (Address: 0x1002c180)
GetErrorInfo (Address: 0x1002c158)
LoadRegTypeLib (Address: 0x1002c188)
LoadTypeLib (Address: 0x1002c18c)
SafeArrayCreate (Address: 0x1002c178)
SafeArrayDestroy (Address: 0x1002c174)
SafeArrayDestroyData (Address: 0x1002c194)
SafeArrayDestroyDescriptor (Address: 0x1002c1a8)
SafeArrayGetElement (Address: 0x1002c160)
SafeArrayGetLBound (Address: 0x1002c190)
SafeArrayGetUBound (Address: 0x1002c15c)
SafeArrayPutElement (Address: 0x1002c164)
SetErrorInfo (Address: 0x1002c17c)
SysAllocString (Address: 0x1002c1b0)
SysAllocStringByteLen (Address: 0x1002c170)
SysAllocStringLen (Address: 0x1002c1b8)
SysFreeString (Address: 0x1002c198)
SysStringByteLen (Address: 0x1002c16c)
SysStringLen (Address: 0x1002c1b4)
VarBstrCat (Address: 0x1002c168)
VariantChangeTypeEx (Address: 0x1002c19c)
VariantClear (Address: 0x1002c1a0)
VariantCopy (Address: 0x1002c1ac)
VariantInit (Address: 0x1002c184)
VarUI4FromStr (Address: 0x1002c1a4)

USER32.dll

CharLowerBuffW (Address: 0x1002c1c4)
CharNextW (Address: 0x1002c1c8)
LoadStringW (Address: 0x1002c1c0)

wbemcomn.dll

_ThrowMemoryException_ (Address: 0x1002c2d4)
??0CFlexArray@@QAE@HH@Z (Address: 0x1002c358)
??0CMRCICompression@@QAE@XZ (Address: 0x1002c348)
??0Registry@@QAE@PBGK@Z (Address: 0x1002c330)
??0WString@@QAE@PBG@Z (Address: 0x1002c370)
??0WString@@QAE@XZ (Address: 0x1002c2e8)
??1CFlexArray@@QAE@XZ (Address: 0x1002c35c)
??1CMRCICompression@@QAE@XZ (Address: 0x1002c364)
??1CVar@@QAE@XZ (Address: 0x1002c388)
??1Registry@@QAE@XZ (Address: 0x1002c39c)
??4WString@@QAEAAV0@PBG@Z (Address: 0x1002c318)
?AddEnvironmentValue@CWbemInstallObject@@SGJPBG0@Z (Address: 0x1002c2ec)
?CleanUp@CWbemInstallObject@@SGXXZ (Address: 0x1002c314)
?CoCreateInstance@CWbemInstallObject@@SGJABU_GUID@@PAUIUnknown@@K0PAPAX@Z (Address: 0x1002c344)
?DeleteString@WString@@AAEXPAG@Z (Address: 0x1002c2d8)
?ExpandEnvironmentStringsW@CWbemInstallObject@@SGKPBGPAGK@Z (Address: 0x1002c350)
?FlushRepository@CWbemInstallObject@@SGJXZ (Address: 0x1002c310)
?GetAt@CFlexArray@@QBEPAXH@Z (Address: 0x1002c360)
?GetMultiStr@Registry@@QAEPAGPBGAAK@Z (Address: 0x1002c338)
?GetRepositoryFolder@CWbemInstallObject@@SGPBGXZ (Address: 0x1002c354)
?GetText@CVar@@QAEPAGJJPBG@Z (Address: 0x1002c38c)
?Init@CVar@@AAEXXZ (Address: 0x1002c380)
?InsertAt@CFlexArray@@QAEHHPAX@Z (Address: 0x1002c390)
?IsOffline@CWbemInstallObject@@SG_NXZ (Address: 0x1002c2e4)
?LocaleName_To_LCID@CMUILocale@@SGJPBGPA_NPAK@Z (Address: 0x1002c37c)
?Mrci1Decompress@CBaseMrciCompression@@QAEIPAEI0I@Z (Address: 0x1002c34c)
?Mrci1MaxCompress@CBaseMrciCompression@@QAEIPAEI0I@Z (Address: 0x1002c398)
?ms_XXX_Locale_To_LCID@CMUILocale@@SGJPBGPAK@Z (Address: 0x1002c378)
?RemoveAt@CFlexArray@@QAEHH@Z (Address: 0x1002c394)
?SetAutoRecoverFolder@CWbemInstallObject@@SGXPBG@Z (Address: 0x1002c300)
?SetBinaryPath@CWbemInstallObject@@SGXPBG@Z (Address: 0x1002c2f8)
?SetMultiStr@Registry@@QAEHPBGPAGK@Z (Address: 0x1002c33c)
?SetOffline@CWbemInstallObject@@SGX_N@Z (Address: 0x1002c2f4)
?SetRegistryPathCIMOM@CWbemInstallObject@@SGXPBG@Z (Address: 0x1002c308)
?SetRegistryPathWbem@CWbemInstallObject@@SGXPBG@Z (Address: 0x1002c304)
?SetRepositoryFolder@CWbemInstallObject@@SGXPBG@Z (Address: 0x1002c2fc)
?SetStr@Registry@@QAEHPBG0@Z (Address: 0x1002c340)
?SetVariant@CVar@@QAEHPAUtagVARIANT@@H@Z (Address: 0x1002c384)
?Shutdown@CWbemInstallObject@@SGXXZ (Address: 0x1002c2f0)
?WbemMemAlloc@CWin32DefaultArena@@SAPAXK@Z (Address: 0x1002c3a0)
?WbemMemFree@CWin32DefaultArena@@SAHPAX@Z (Address: 0x1002c334)
?Write@CMemoryLog@@QAEXJ@Z (Address: 0x1002c2dc)
bAreWeLocal (Address: 0x1002c36c)
CopyFileToAutorecover (Address: 0x1002c32c)
ExtractMachineName (Address: 0x1002c368)
GetMemLogObject (Address: 0x1002c2e0)
RegisterDLL (Address: 0x1002c31c)
RegisterDllAppid (Address: 0x1002c320)
RemoveFileFromAutoRecoverFolder (Address: 0x1002c30c)
UnRegisterDLL (Address: 0x1002c324)
UnregisterDllAppid (Address: 0x1002c328)
WbemVariantChangeType (Address: 0x1002c374)