mofcomp.exe

File Path: C:\WINDOWS\system32\wbem\mofcomp.exe
Description: The Managed Object Format (MOF) Compiler

Hashes

Type	Hash
MD5	`245880CE48A332C88D839E6BD65AAA7F`
SHA1	`3D10EA687E3B4149ECB0D9E2568FE0E44E8EF419`
SHA256	`596A1E4440ADFEA007BC954776CEDE0C8C46BF8EC87D910E5A882B1C0B771E6E`
SHA384	`5D7F6D26484CEA01C9C20E80915F79DF239457A46667D2B808A20DF94E308B92F8265AA8A6C0908C2A65A563A019A115`
SHA512	`9C9EA9F263D1D69BDD6CC30B514B68075D126859EC8721407A78D86E3AC889038BA0A736DE3CE25FA5343F9AFE216FF6019D869D50280F0A4F6EDF1984C9E78B`
SSDEEP	`768:H3NBLpbmlVaiXRqmcY3DnEwIl0oLDYoaNd/6l:XfLhmlVaih0gm+qDxaNd/6l`
IMP	`33E29380499B6B413B576B5B4927D346`
PESHA1	`50EA5EBED333D925B041D7B212F23A3B95E508B1`
PE256	`782E066E09641622739A232E35142F413AC830D5C7017159B6BC8E1D6EE249B3`

Runtime Data

Usage (stdout):

Microsoft (R) MOF Compiler Version 10.0.22000.1
Copyright (c) Microsoft Corp. 1997-2006. All rights reserved.

usage: mofcomp [-check] [-N:<Path>]
               [-class:updateonly|-class:createonly]
               [-instance:updateonly|-instance:createonly]
               [-B:<filename>] [-P:<Password>] [-U:<UserName>]
               [-A:<Authority>] [-WMI] [-AUTORECOVER]
               [-MOF:<path>] [-MFL:<path>] [-AMENDMENT:<Locale>]
               [-ER:<ResourceName>] [-L:<ResourceLocale>] 
               <MOF filename>

   -check                    Syntax check only
   -N:<path>                 Load into this namespace by default
   -class:updateonly         Do not create new classes
   -class:safeupdate         Update unless conflicts exist
   -class:forceupdate        Update resolving conflicts if possible
   -class:createonly         Do not change existing classes
   -instance:updateonly      Do not create new instances
   -instance:createonly      Do not change existing instances
   -U:<UserName>             User Name
   -P:<Password>             Login password
   -A:<Authority>            Example: NTLMDOMAIN:Domain
   -B:<destination filename> Creates a binary MOF file, does not add to DB
   -WMI                      Do Windows Driver Model (WDM) checks, requires -B switch
   -AUTORECOVER              Adds MOF to list of files compiled during DB recovery
   -Amendment:<LOCALE>       splits MOF into language neutral and specific versions
                             where locale is of the form "MS_4??"
   -MOF:<path>               name of the language neutral output
   -MFL:<path>               name of the language specific output
   -ER:<ResourceName>        extracts binary mof from named resource
   -L:<ResourceLocale>       optional specific locale number when using -ER switch

   Example c:>mofcomp -N:root\default yourmof.mof

Loaded Modules:

Path
C:\WINDOWS\System32\KERNEL32.DLL
C:\WINDOWS\System32\KERNELBASE.dll
C:\WINDOWS\SYSTEM32\ntdll.dll
C:\WINDOWS\system32\wbem\mofcomp.exe

Signature

Status: Signature verified.
Serial: 33000002ED2C45E4C145CF48440000000002ED
Thumbprint: 312860D2047EB81F8F58C29FF19ECDB4C634CF6A
Issuer: CN=Microsoft Windows Production PCA 2011, O=Microsoft Corporation, L=Redmond, S=Washington, C=US
Subject: CN=Microsoft Windows, O=Microsoft Corporation, L=Redmond, S=Washington, C=US

File Metadata

Original Filename: mofcomp.exe.mui
Product Name: Microsoft Windows Operating System
Company Name: Microsoft Corporation
File Version: 10.0.22000.1 (WinBuild.160101.0800)
Product Version: 10.0.22000.1
Language: English (United States)
Machine Type: 64-bit

File Scan

VirusTotal Detections: 0/72
VirusTotal Link: https://www.virustotal.com/gui/file/596a1e4440adfea007bc954776cede0c8c46bf8ec87d910e5a882b1c0b771e6e/detection