adhsvc.dll

Description: AD Harvest Sites and Subnets Service

Version: 10.0.19041.3636

Architecture: 64-bit

Operating System: Windows NT

SHA256: a111db2388bd290c91f3776d84fe5f04

File Size: 98.0 KB

Uploaded At: Dec. 1, 2025, 7:21 a.m.

Views: 12

Exported Functions

SubServiceScmNotification (Ordinal: 1, Address: 0x1ba0)
SubServiceStart (Ordinal: 2, Address: 0x3810)
SubServiceStop (Ordinal: 3, Address: 0x9d80)

Imported DLLs & Functions

api-ms-win-core-com-l1-1-0.dll

CoCreateInstance (Address: 0x180011748)
CoInitializeEx (Address: 0x180011750)
CoTaskMemAlloc (Address: 0x180011740)
CoTaskMemFree (Address: 0x180011730)
CoTaskMemRealloc (Address: 0x180011738)
CoUninitialize (Address: 0x180011758)

api-ms-win-core-debug-l1-1-0.dll

OutputDebugStringA (Address: 0x180011768)

api-ms-win-core-delayload-l1-1-0.dll

DelayLoadFailureHook (Address: 0x180011778)

api-ms-win-core-delayload-l1-1-1.dll

ResolveDelayLoadedAPI (Address: 0x180011788)

api-ms-win-core-errorhandling-l1-1-0.dll

GetLastError (Address: 0x1800117b0)
RaiseException (Address: 0x1800117a8)
SetLastError (Address: 0x1800117b8)
SetUnhandledExceptionFilter (Address: 0x180011798)
UnhandledExceptionFilter (Address: 0x1800117a0)

api-ms-win-core-handle-l1-1-0.dll

CloseHandle (Address: 0x1800117c8)

api-ms-win-core-heap-l1-1-0.dll

GetProcessHeap (Address: 0x1800117e8)
HeapAlloc (Address: 0x1800117d8)
HeapFree (Address: 0x1800117e0)

api-ms-win-core-heap-l2-1-0.dll

LocalFree (Address: 0x1800117f8)

api-ms-win-core-libraryloader-l1-2-0.dll

DisableThreadLibraryCalls (Address: 0x180011808)
FindResourceExW (Address: 0x180011828)
FreeLibrary (Address: 0x180011818)
GetModuleFileNameW (Address: 0x180011848)
GetModuleHandleW (Address: 0x180011840)
GetProcAddress (Address: 0x180011838)
LoadLibraryExW (Address: 0x180011810)
LoadResource (Address: 0x180011820)
SizeofResource (Address: 0x180011830)

api-ms-win-core-processthreads-l1-1-0.dll

CreateThread (Address: 0x180011858)
GetCurrentProcess (Address: 0x180011870)
GetCurrentProcessId (Address: 0x180011868)
GetCurrentThread (Address: 0x180011880)
GetCurrentThreadId (Address: 0x180011878)
OpenThreadToken (Address: 0x180011888)
TerminateProcess (Address: 0x180011860)

api-ms-win-core-profile-l1-1-0.dll

QueryPerformanceCounter (Address: 0x180011898)

api-ms-win-core-registry-l1-1-0.dll

RegCloseKey (Address: 0x1800118d8)
RegCreateKeyExW (Address: 0x1800118b0)
RegDeleteValueW (Address: 0x1800118e0)
RegEnumKeyExW (Address: 0x1800118c8)
RegOpenKeyExW (Address: 0x1800118d0)
RegQueryInfoKeyW (Address: 0x1800118c0)
RegQueryValueExW (Address: 0x1800118a8)
RegSetValueExW (Address: 0x1800118b8)

api-ms-win-core-string-l1-1-0.dll

MultiByteToWideChar (Address: 0x1800118f0)

api-ms-win-core-string-l2-1-0.dll

CharNextW (Address: 0x180011900)

api-ms-win-core-string-obsolete-l1-1-0.dll

lstrcmpiW (Address: 0x180011910)

api-ms-win-core-synch-l1-1-0.dll

AcquireSRWLockExclusive (Address: 0x180011928)
CreateEventW (Address: 0x180011958)
CreateMutexW (Address: 0x180011940)
DeleteCriticalSection (Address: 0x180011948)
EnterCriticalSection (Address: 0x180011988)
InitializeCriticalSection (Address: 0x180011970)
InitializeCriticalSectionAndSpinCount (Address: 0x180011938)
LeaveCriticalSection (Address: 0x180011920)
ReleaseMutex (Address: 0x180011950)
ReleaseSRWLockExclusive (Address: 0x180011968)
SetEvent (Address: 0x180011960)
WaitForMultipleObjectsEx (Address: 0x180011980)
WaitForSingleObject (Address: 0x180011978)
WaitForSingleObjectEx (Address: 0x180011930)

api-ms-win-core-synch-l1-2-0.dll

Sleep (Address: 0x1800119a8)
SleepConditionVariableSRW (Address: 0x180011998)
WakeAllConditionVariable (Address: 0x1800119a0)

api-ms-win-core-sysinfo-l1-1-0.dll

GetSystemTimeAsFileTime (Address: 0x1800119b8)
GetTickCount (Address: 0x1800119c0)

api-ms-win-core-threadpool-l1-2-0.dll

CloseThreadpoolTimer (Address: 0x1800119e0)
CloseThreadpoolWait (Address: 0x180011a08)
CreateThreadpoolTimer (Address: 0x180011a00)
CreateThreadpoolWait (Address: 0x1800119e8)
SetThreadpoolTimer (Address: 0x1800119d8)
SetThreadpoolWait (Address: 0x1800119f0)
WaitForThreadpoolTimerCallbacks (Address: 0x1800119d0)
WaitForThreadpoolWaitCallbacks (Address: 0x1800119f8)

api-ms-win-eventing-classicprovider-l1-1-0.dll

GetTraceEnableFlags (Address: 0x180011a40)
GetTraceEnableLevel (Address: 0x180011a28)
GetTraceLoggerHandle (Address: 0x180011a30)
RegisterTraceGuidsW (Address: 0x180011a20)
TraceMessage (Address: 0x180011a38)
UnregisterTraceGuids (Address: 0x180011a18)

api-ms-win-security-base-l1-1-0.dll

AccessCheck (Address: 0x180011a50)

api-ms-win-security-sddl-l1-1-0.dll

ConvertStringSecurityDescriptorToSecurityDescriptorW (Address: 0x180011a68)
ConvertStringSidToSidW (Address: 0x180011a60)

api-ms-win-service-management-l1-1-0.dll

CloseServiceHandle (Address: 0x180011a90)
OpenSCManagerW (Address: 0x180011a88)
OpenServiceW (Address: 0x180011a80)
StartServiceW (Address: 0x180011a78)

api-ms-win-service-management-l2-1-0.dll

NotifyServiceStatusChangeW (Address: 0x180011aa0)

FirewallAPI.dll

FwAlloc (Address: 0x1800115a0)
FwConvertIPv6SubNetToRange (Address: 0x1800115b0)
FwCopyWFAddressesContents (Address: 0x1800115a8)
FwFree (Address: 0x180011598)
FwFreeAddresses (Address: 0x180011590)
FwGetAddressesAsString (Address: 0x1800115c8)
FwMergeAddresses (Address: 0x1800115b8)
FwStringToAddresses (Address: 0x1800115c0)

msvcrt.dll

__C_specific_handler (Address: 0x180011ac0)
__CxxFrameHandler3 (Address: 0x180011b90)
__dllonexit (Address: 0x180011b48)
_amsg_exit (Address: 0x180011ad0)
_callnewh (Address: 0x180011b20)
_CxxThrowException (Address: 0x180011b80)
_errno (Address: 0x180011ab0)
_initterm (Address: 0x180011af0)
_lock (Address: 0x180011b08)
_onexit (Address: 0x180011b58)
_purecall (Address: 0x180011b78)
_unlock (Address: 0x180011b18)
_XcptFilter (Address: 0x180011ad8)
??_V@YAXPEAX@Z (Address: 0x180011b70)
??0exception@@QEAA@AEBQEBD@Z (Address: 0x180011b10)
??0exception@@QEAA@AEBQEBDH@Z (Address: 0x180011b00)
??0exception@@QEAA@AEBV0@@Z (Address: 0x180011b38)
??1exception@@UEAA@XZ (Address: 0x180011b40)
??1type_info@@UEAA@XZ (Address: 0x180011b68)
??3@YAXPEAX@Z (Address: 0x180011b88)
?terminate@@YAXXZ (Address: 0x180011b60)
?what@exception@@UEBAPEBDXZ (Address: 0x180011af8)
free (Address: 0x180011ac8)
malloc (Address: 0x180011b28)
memcpy (Address: 0x180011ae8)
memcpy_s (Address: 0x180011b50)
memmove (Address: 0x180011ae0)
memset (Address: 0x180011b98)
realloc (Address: 0x180011ab8)
wcsncpy_s (Address: 0x180011b30)

ntdll.dll

RtlCaptureContext (Address: 0x180011ba8)
RtlLookupFunctionEntry (Address: 0x180011bb0)
RtlVirtualUnwind (Address: 0x180011bb8)

OLEAUT32.dll

VarUI4FromStr (Address: 0x1800115d8)

RPCRT4.dll

I_RpcBindingIsClientLocal (Address: 0x180011650)
Ndr64AsyncServerCallAll (Address: 0x180011630)
NdrAsyncServerCall (Address: 0x180011620)
NdrServerCall2 (Address: 0x180011658)
NdrServerCallAll (Address: 0x180011648)
RpcAsyncAbortCall (Address: 0x1800115e8)
RpcAsyncCompleteCall (Address: 0x180011628)
RpcBindingInqAuthClientW (Address: 0x180011690)
RpcBindingToStringBindingW (Address: 0x180011670)
RpcBindingVectorFree (Address: 0x180011608)
RpcEpRegisterW (Address: 0x180011638)
RpcEpUnregister (Address: 0x180011640)
RpcImpersonateClient (Address: 0x180011660)
RpcRevertToSelf (Address: 0x180011600)
RpcServerInqBindings (Address: 0x180011680)
RpcServerInqDefaultPrincNameW (Address: 0x180011618)
RpcServerRegisterAuthInfoW (Address: 0x180011610)
RpcServerRegisterIfEx (Address: 0x180011668)
RpcServerUnregisterIfEx (Address: 0x1800115f8)
RpcServerUseProtseqW (Address: 0x180011688)
RpcStringBindingParseW (Address: 0x180011678)
RpcStringFreeW (Address: 0x1800115f0)

WLDAP32.dll

(Address: 0x1800116a0)
(Address: 0x1800116a8)
(Address: 0x1800116b0)
(Address: 0x1800116c8)
(Address: 0x180011718)
(Address: 0x1800116c0)
(Address: 0x1800116d0)
(Address: 0x1800116d8)
(Address: 0x1800116b8)
(Address: 0x1800116e0)
(Address: 0x1800116e8)
(Address: 0x1800116f0)
(Address: 0x1800116f8)
(Address: 0x180011700)
(Address: 0x180011708)
(Address: 0x180011710)
(Address: 0x180011720)