coadmin.dll
v10.0.19041.3636
32-bit
Windows NT
Analyzed
Security warning
This file has been flagged as potentially dangerous, and downloads are disabled.
Reason: Detected potentially dangerous functions used for process injection: OpenProcess
Exported functions 5
DllCanUnloadNow
#1 · 0xae50
DllRegisterServer
#2 · 0xac70
DllUnregisterServer
#3 · 0xac80
InitComAdmindata
#4 · 0xae60
TerminateComAdmindata
#5 · 0xb500
No function matches your filter.
Imported DLLs & functions 144
GetAboWrapper
0x5e1921d0
InitializeAboCompatibilityLayer
0x5e1921c8
TerminateAboCompatibilityLayer
0x5e1921cc
ReleaseObjectSecurityContextW
0x5e192000
ADVAPI32.dll
26
AccessCheck
0x5e192030
AddAccessAllowedAce
0x5e192034
CloseServiceHandle
0x5e19204c
ControlService
0x5e192048
ConvertSecurityDescriptorToStringSecurityDescriptorW
0x5e192018
CreateWellKnownSid
0x5e19206c
CryptAcquireContextA
0x5e192014
EnumDependentServicesW
0x5e192044
GetLengthSid
0x5e192020
GetSecurityDescriptorControl
0x5e19202c
GetTokenInformation
0x5e192024
ImpersonateLoggedOnUser
0x5e192060
InitializeAcl
0x5e192010
InitializeSecurityDescriptor
0x5e192068
LookupAccountSidW
0x5e19201c
OpenProcessToken
0x5e192028
OpenSCManagerW
0x5e19203c
OpenServiceW
0x5e192040
OpenThreadToken
0x5e192058
QueryServiceStatus
0x5e192054
QueryServiceStatusEx
0x5e192064
RevertToSelf
0x5e19205c
SetSecurityDescriptorDacl
0x5e192038
SetSecurityDescriptorGroup
0x5e19200c
SetSecurityDescriptorOwner
0x5e192008
StartServiceW
0x5e192050
AuthzInstallSecurityEventSource
0x5e19207c
AuthzRegisterSecurityEventSource
0x5e192074
AuthzReportSecurityEventFromParams
0x5e192078
DllGetSimpleObjectByIDEx
0x5e192084
IisRTL.DLL
29
??0STRU@@QAE@PAGK@Z
0x5e1920e0
??0STRU@@QAE@XZ
0x5e1920dc
??1BUFFER@@QAE@XZ
0x5e1920d8
??1STRU@@QAE@XZ
0x5e1920b8
?Append@STRU@@QAEJABV1@@Z
0x5e1920fc
?Append@STRU@@QAEJPBG@Z
0x5e1920a4
?Append@STRU@@QAEJPBGK@Z
0x5e1920bc
?ConvertExclusiveToShared@CReaderWriterLock3@@QAEXXZ
0x5e192098
?ConvertSharedToExclusive@CReaderWriterLock3@@QAEXXZ
0x5e1920f4
?Copy@STRU@@QAEJABV1@@Z
0x5e1920f8
?Copy@STRU@@QAEJPBG@Z
0x5e1920e4
?Copy@STRU@@QAEJPBGK@Z
0x5e1920c0
?ReadLock@CReaderWriterLock3@@QAEXXZ
0x5e1920c4
?ReadUnlock@CReaderWriterLock3@@QAEXXZ
0x5e1920f0
?Resize@BUFFER@@QAE_NK@Z
0x5e1920a0
?Resize@STRU@@QAEJK@Z
0x5e1920b0
?TryConvertSharedToExclusive@CReaderWriterLock3@@QAE_NXZ
0x5e192090
?TryReadLock@CReaderWriterLock3@@QAE_NXZ
0x5e19208c
?TryWriteLock@CReaderWriterLock3@@QAE_NXZ
0x5e192094
?WriteLock@CReaderWriterLock3@@QAEXXZ
0x5e1920d0
?WriteUnlock@CReaderWriterLock3@@QAEXXZ
0x5e1920cc
CreateRefTraceLog
0x5e1920a8
DestroyRefTraceLog
0x5e1920ac
IISGetPlatformType
0x5e1920b4
IISInitializeCriticalSection
0x5e19209c
PuCreateDebugPrintsObject
0x5e1920ec
PuDbgPrint
0x5e1920d4
PuLoadDebugFlagsFromRegStr
0x5e1920e8
WriteRefTraceLog
0x5e1920c8
?EtwTraceEvent@CEtwTracer@@QAAKPBU_GUID@@KZZ
0x5e1921d8
KERNEL32.dll
43
CloseHandle
0x5e192144
CreateEventA
0x5e192150
CreateFileW
0x5e1921ac
CreateThread
0x5e19214c
DeleteCriticalSection
0x5e192184
EnterCriticalSection
0x5e192160
FileTimeToLocalFileTime
0x5e192168
FreeLibrary
0x5e19219c
GetCurrentProcess
0x5e192110
GetCurrentProcessId
0x5e19210c
GetCurrentThread
0x5e192138
GetCurrentThreadId
0x5e1921a8
GetLastError
0x5e192178
GetProcAddress
0x5e192198
GetProcessHeap
0x5e192170
GetSystemDirectoryW
0x5e192194
GetSystemTimeAsFileTime
0x5e19212c
GetTickCount
0x5e192130
GetVersionExA
0x5e192190
HeapAlloc
0x5e192118
HeapFree
0x5e192174
InitializeCriticalSection
0x5e192188
InitializeCriticalSectionAndSpinCount
0x5e192154
LeaveCriticalSection
0x5e19215c
LoadLibraryExW
0x5e1921a0
LocalAlloc
0x5e192164
LocalFileTimeToFileTime
0x5e19216c
LocalFree
0x5e19218c
OpenProcess
0x5e192134
OutputDebugStringA
0x5e192114
QueryFullProcessImageNameW
0x5e19213c
QueryPerformanceCounter
0x5e192128
RegisterWaitForSingleObject
0x5e1921a4
SetEvent
0x5e192158
SetLastError
0x5e192108
SetUnhandledExceptionFilter
0x5e192120
SignalObjectAndWait
0x5e192148
Sleep
0x5e192180
SleepEx
0x5e19217c
TerminateProcess
0x5e192124
UnhandledExceptionFilter
0x5e19211c
UnregisterWaitEx
0x5e192104
WaitForMultipleObjects
0x5e192140
msvcrt.dll
23
__dllonexit
0x5e1921e4
_amsg_exit
0x5e192234
_callnewh
0x5e1921fc
_except_handler4_common
0x5e192230
_initterm
0x5e1921f0
_lock
0x5e1921ec
_onexit
0x5e1921e0
_ultow
0x5e192204
_unlock
0x5e1921e8
_wcsdup
0x5e192210
_wcsicmp
0x5e192214
_wcsnicmp
0x5e192220
_wcsupr
0x5e19220c
_XcptFilter
0x5e1921f8
free
0x5e192208
malloc
0x5e192200
memcpy
0x5e1921f4
memset
0x5e192238
wcscat_s
0x5e19222c
wcschr
0x5e192228
wcscpy_s
0x5e192218
wcsncmp
0x5e19221c
wcsstr
0x5e192224
CoCreateFreeThreadedMarshaler
0x5e19226c
CoCreateInstance
0x5e192268
CoDisconnectObject
0x5e192250
CoGetCallContext
0x5e192254
CoImpersonateClient
0x5e192264
CoInitializeEx
0x5e192260
CoRegisterClassObject
0x5e19224c
CoRevokeClassObject
0x5e192258
CoUninitialize
0x5e19225c
GetErrorInfo
0x5e1921b4
No function matches your filter.