coadmin.dll
v10.0.19041.3636
64-bit
Windows NT
Analyzed
Security warning
This file has been flagged as potentially dangerous, and downloads are disabled.
Reason: Detected potentially dangerous functions used for process injection: OpenProcess
Exported functions 5
DllCanUnloadNow
#1 · 0x9d50
DllRegisterServer
#2 · 0x9be0
DllUnregisterServer
#3 · 0x9c00
InitComAdmindata
#4 · 0x9d60
TerminateComAdmindata
#5 · 0xa450
No function matches your filter.
Imported DLLs & functions 149
GetAboWrapper
0x1800117a0
InitializeAboCompatibilityLayer
0x180011790
TerminateAboCompatibilityLayer
0x180011798
ReleaseObjectSecurityContextW
0x1800113d8
ADVAPI32.dll
26
AccessCheck
0x180011438
AddAccessAllowedAce
0x180011440
CloseServiceHandle
0x180011470
ControlService
0x180011468
ConvertSecurityDescriptorToStringSecurityDescriptorW
0x180011408
CreateWellKnownSid
0x1800114b0
CryptAcquireContextA
0x180011400
EnumDependentServicesW
0x180011460
GetLengthSid
0x180011418
GetSecurityDescriptorControl
0x180011430
GetTokenInformation
0x180011420
ImpersonateLoggedOnUser
0x180011498
InitializeAcl
0x1800113f8
InitializeSecurityDescriptor
0x1800114a8
LookupAccountSidW
0x180011410
OpenProcessToken
0x180011428
OpenSCManagerW
0x180011450
OpenServiceW
0x180011458
OpenThreadToken
0x180011488
QueryServiceStatus
0x180011480
QueryServiceStatusEx
0x1800114a0
RevertToSelf
0x180011490
SetSecurityDescriptorDacl
0x180011448
SetSecurityDescriptorGroup
0x1800113f0
SetSecurityDescriptorOwner
0x1800113e8
StartServiceW
0x180011478
AuthzInstallSecurityEventSource
0x1800114d0
AuthzRegisterSecurityEventSource
0x1800114c0
AuthzReportSecurityEventFromParams
0x1800114c8
DllGetSimpleObjectByIDEx
0x1800114e0
IisRTL.DLL
31
??0BUFFER@@QEAA@XZ
0x180011588
??0STRU@@QEAA@PEAGK@Z
0x1800115a0
??0STRU@@QEAA@XZ
0x180011598
??1BUFFER@@QEAA@XZ
0x180011590
??1STRU@@QEAA@XZ
0x180011548
?Append@STRU@@QEAAJAEBV1@@Z
0x1800115d8
?Append@STRU@@QEAAJPEBG@Z
0x180011520
?Append@STRU@@QEAAJPEBGK@Z
0x180011550
?ConvertExclusiveToShared@CReaderWriterLock3@@QEAAXXZ
0x180011508
?ConvertSharedToExclusive@CReaderWriterLock3@@QEAAXXZ
0x1800115c8
?Copy@STRU@@QEAAJAEBV1@@Z
0x1800115d0
?Copy@STRU@@QEAAJPEBG@Z
0x1800115a8
?Copy@STRU@@QEAAJPEBGK@Z
0x180011558
?ReadLock@CReaderWriterLock3@@QEAAXXZ
0x180011570
?ReadUnlock@CReaderWriterLock3@@QEAAXXZ
0x1800115c0
?Resize@BUFFER@@QEAA_NK@Z
0x180011518
?Resize@STRU@@QEAAJK@Z
0x180011538
?SetLen@STRU@@QEAA_NK@Z
0x1800115e0
?TryConvertSharedToExclusive@CReaderWriterLock3@@QEAA_NXZ
0x1800114f8
?TryReadLock@CReaderWriterLock3@@QEAA_NXZ
0x1800114f0
?TryWriteLock@CReaderWriterLock3@@QEAA_NXZ
0x180011500
?WriteLock@CReaderWriterLock3@@QEAAXXZ
0x180011578
?WriteUnlock@CReaderWriterLock3@@QEAAXXZ
0x180011568
CreateRefTraceLog
0x180011528
DestroyRefTraceLog
0x180011530
IISGetPlatformType
0x180011540
IISInitializeCriticalSection
0x180011510
PuCreateDebugPrintsObject
0x1800115b8
PuDbgPrint
0x180011580
PuLoadDebugFlagsFromRegStr
0x1800115b0
WriteRefTraceLog
0x180011560
?EtwTraceEvent@CEtwTracer@@QEAAKPEBU_GUID@@KZZ
0x1800117b0
KERNEL32.dll
46
CloseHandle
0x180011688
CreateEventA
0x1800116a0
CreateFileW
0x180011608
CreateThread
0x180011698
DeleteCriticalSection
0x180011700
EnterCriticalSection
0x1800116c0
FileTimeToLocalFileTime
0x1800116d0
FreeLibrary
0x180011738
GetCurrentProcess
0x180011610
GetCurrentProcessId
0x180011600
GetCurrentThread
0x180011670
GetCurrentThreadId
0x180011708
GetLastError
0x1800116f0
GetProcAddress
0x180011730
GetProcessHeap
0x1800116e0
GetSystemDirectoryW
0x180011728
GetSystemTimeAsFileTime
0x180011658
GetTickCount
0x180011660
GetVersionExA
0x180011720
HeapAlloc
0x180011618
HeapFree
0x1800116e8
InitializeCriticalSection
0x180011710
InitializeCriticalSectionAndSpinCount
0x1800116a8
LeaveCriticalSection
0x1800116b8
LoadLibraryExW
0x180011740
LocalAlloc
0x1800116c8
LocalFileTimeToFileTime
0x1800116d8
LocalFree
0x180011718
OpenProcess
0x180011668
OutputDebugStringA
0x180011758
QueryFullProcessImageNameW
0x180011678
QueryPerformanceCounter
0x180011650
RegisterWaitForSingleObject
0x180011748
RtlCaptureContext
0x180011620
RtlLookupFunctionEntry
0x180011628
RtlVirtualUnwind
0x180011630
SetEvent
0x1800116b0
SetLastError
0x1800115f8
SetUnhandledExceptionFilter
0x180011640
SignalObjectAndWait
0x180011690
Sleep
0x180011750
SleepEx
0x1800116f8
TerminateProcess
0x180011648
UnhandledExceptionFilter
0x180011638
UnregisterWaitEx
0x1800115f0
WaitForMultipleObjects
0x180011680
msvcrt.dll
23
__C_specific_handler
0x1800117d8
__dllonexit
0x1800117c0
_amsg_exit
0x180011868
_callnewh
0x1800117f8
_initterm
0x1800117e0
_lock
0x1800117d0
_onexit
0x180011860
_ultow
0x180011808
_unlock
0x1800117c8
_wcsdup
0x180011820
_wcsicmp
0x180011828
_wcsnicmp
0x180011840
_wcsupr
0x180011818
_XcptFilter
0x1800117f0
free
0x180011810
malloc
0x180011800
memcpy
0x1800117e8
memset
0x180011870
wcscat_s
0x180011858
wcschr
0x180011850
wcscpy_s
0x180011830
wcsncmp
0x180011838
wcsstr
0x180011848
CoCreateFreeThreadedMarshaler
0x1800118d8
CoCreateInstance
0x1800118d0
CoDisconnectObject
0x1800118a0
CoGetCallContext
0x1800118a8
CoImpersonateClient
0x1800118c8
CoInitializeEx
0x1800118c0
CoRegisterClassObject
0x180011898
CoRevokeClassObject
0x1800118b0
CoUninitialize
0x1800118b8
GetErrorInfo
0x180011768
No function matches your filter.