mofcomp.exe

File Path: C:\WINDOWS\SysWOW64\wbem\mofcomp.exe
Description: The Managed Object Format (MOF) Compiler

Hashes

Type	Hash
MD5	`07B099AE1B628AA5D1EDFAA03038B80A`
SHA1	`8319BC90D8CDD3DA505981A2CCCD550D4BB3B117`
SHA256	`291E9FB6F7EA45037C2E12172DEA641EF1F744621621A498E1B25CDA07011652`
SHA384	`C7A81C8511E2328B0E8DA28BD186DC32E3C91311EBCFF41E0F9E352FCE6CC93CAF70BF346E4673A4CFBF7744A829F060`
SHA512	`E188B2A25FA2BB3F47E3AA035FCA9F10D65192E57AD623D59927DAD48A0673307FA7446BFA58699D88B8CBF34396D5072C8220BD7797A9C761C9B5C7CA2E634F`
SSDEEP	`384:5cPsuwsKmxBT5S2esn74O6vujVF698PXmxcrkTEGVtkVKPaYoaKt/tnCWxoWPwZf:5cPsVlUBL3kQs4OPaYoai/tnl2`
IMP	`ACD3E0F2D0B3D1E0EF9E8B2AB96C581C`
PESHA1	`0ED677237CEBD20CCE9EE4958D80BE2A8AD2CFA4`
PE256	`6F78B1738FB110ECFF0E112E78E233A40D78B3D605AE4DFBE65C5A3FD42CA657`

Runtime Data

Usage (stdout):

Microsoft (R) MOF Compiler Version 10.0.22000.1
Copyright (c) Microsoft Corp. 1997-2006. All rights reserved.

usage: mofcomp [-check] [-N:<Path>]
               [-class:updateonly|-class:createonly]
               [-instance:updateonly|-instance:createonly]
               [-B:<filename>] [-P:<Password>] [-U:<UserName>]
               [-A:<Authority>] [-WMI] [-AUTORECOVER]
               [-MOF:<path>] [-MFL:<path>] [-AMENDMENT:<Locale>]
               [-ER:<ResourceName>] [-L:<ResourceLocale>] 
               <MOF filename>

   -check                    Syntax check only
   -N:<path>                 Load into this namespace by default
   -class:updateonly         Do not create new classes
   -class:safeupdate         Update unless conflicts exist
   -class:forceupdate        Update resolving conflicts if possible
   -class:createonly         Do not change existing classes
   -instance:updateonly      Do not create new instances
   -instance:createonly      Do not change existing instances
   -U:<UserName>             User Name
   -P:<Password>             Login password
   -A:<Authority>            Example: NTLMDOMAIN:Domain
   -B:<destination filename> Creates a binary MOF file, does not add to DB
   -WMI                      Do Windows Driver Model (WDM) checks, requires -B switch
   -AUTORECOVER              Adds MOF to list of files compiled during DB recovery
   -Amendment:<LOCALE>       splits MOF into language neutral and specific versions
                             where locale is of the form "MS_4??"
   -MOF:<path>               name of the language neutral output
   -MFL:<path>               name of the language specific output
   -ER:<ResourceName>        extracts binary mof from named resource
   -L:<ResourceLocale>       optional specific locale number when using -ER switch

   Example c:>mofcomp -N:root\default yourmof.mof

Loaded Modules:

Path
C:\WINDOWS\SYSTEM32\ntdll.dll
C:\WINDOWS\System32\wow64.dll
C:\WINDOWS\System32\wow64base.dll
C:\WINDOWS\System32\wow64con.dll
C:\WINDOWS\System32\wow64cpu.dll
C:\WINDOWS\System32\wow64win.dll
C:\WINDOWS\SysWOW64\wbem\mofcomp.exe

Signature

Status: Signature verified.
Serial: 33000002ED2C45E4C145CF48440000000002ED
Thumbprint: 312860D2047EB81F8F58C29FF19ECDB4C634CF6A
Issuer: CN=Microsoft Windows Production PCA 2011, O=Microsoft Corporation, L=Redmond, S=Washington, C=US
Subject: CN=Microsoft Windows, O=Microsoft Corporation, L=Redmond, S=Washington, C=US

File Metadata

Original Filename: mofcomp.exe.mui
Product Name: Microsoft Windows Operating System
Company Name: Microsoft Corporation
File Version: 10.0.22000.1 (WinBuild.160101.0800)
Product Version: 10.0.22000.1
Language: English (United States)
Machine Type: 32-bit

File Scan

VirusTotal Detections: 0/73
VirusTotal Link: https://www.virustotal.com/gui/file/291e9fb6f7ea45037c2e12172dea641ef1f744621621a498e1b25cda07011652/detection