coml2.dll

Description: Microsoft COM for Windows

Version: 10.0.19041.4355

Architecture: 32-bit

Operating System: Windows NT

SHA256: 2db84811352968281564a75b347417ea

File Size: 368.4 KB

Uploaded At: Dec. 1, 2025, 7:54 a.m.

Views: 5

Security Warning

This file has been flagged as potentially dangerous.

Reason: Detected potentially dangerous functions used for process injection: OpenProcess

Exported Functions

(Ordinal: 1, Address: 0x4f620)
(Ordinal: 2, Address: 0x4f570)
(Ordinal: 3, Address: 0x4f410)
(Ordinal: 4, Address: 0x43a80)
(Ordinal: 5, Address: 0x438e0)
(Ordinal: 6, Address: 0x43d00)
(Ordinal: 7, Address: 0x43270)
(Ordinal: 8, Address: 0x45cb0)
Coml2DllGetClassObject (Ordinal: 9, Address: 0x27260)
CreateILockBytesOnHGlobal (Ordinal: 10, Address: 0x62b0)
(Ordinal: 11, Address: 0x3dd20)
(Ordinal: 12, Address: 0x52730)
DllGetClassObject (Ordinal: 13, Address: 0x27260)
FmtIdToPropStgName (Ordinal: 14, Address: 0x42e60)
GetConvertStg (Ordinal: 15, Address: 0x52700)
GetHGlobalFromILockBytes (Ordinal: 16, Address: 0x52600)
PropStgNameToFmtId (Ordinal: 17, Address: 0x42ea0)
ReadClassStg (Ordinal: 18, Address: 0x29090)
ReadClassStm (Ordinal: 19, Address: 0x2f770)
StgCreateDocfile (Ordinal: 20, Address: 0x2cd00)
StgCreateDocfileOnILockBytes (Ordinal: 21, Address: 0x6980)
StgCreatePropSetStg (Ordinal: 22, Address: 0x42f00)
StgCreatePropStg (Ordinal: 23, Address: 0x42fe0)
StgCreateStorageEx (Ordinal: 24, Address: 0x2cd30)
StgIsStorageFile (Ordinal: 25, Address: 0x2e9d0)
StgIsStorageILockBytes (Ordinal: 26, Address: 0x3df40)
StgOpenPropStg (Ordinal: 27, Address: 0x43130)
StgOpenStorage (Ordinal: 28, Address: 0x6b90)
StgOpenStorageEx (Ordinal: 29, Address: 0x2ce20)
StgOpenStorageOnILockBytes (Ordinal: 30, Address: 0x11860)
StgSetTimes (Ordinal: 31, Address: 0x3dfd0)
WriteClassStg (Ordinal: 32, Address: 0x2a840)
WriteClassStm (Ordinal: 33, Address: 0x2f820)

Imported DLLs & Functions

api-ms-win-core-apiquery-l1-1-0.dll

ApiSetQueryApiSetPresence (Address: 0x10056000)

api-ms-win-core-com-l1-1-0.dll

CLSIDFromString (Address: 0x1005601c)
CoCreateFreeThreadedMarshaler (Address: 0x10056034)
CoCreateInstance (Address: 0x10056010)
CoGetMalloc (Address: 0x10056008)
CoGetStandardMarshal (Address: 0x1005602c)
CoReleaseMarshalData (Address: 0x10056028)
CoTaskMemAlloc (Address: 0x10056038)
CoTaskMemFree (Address: 0x1005603c)
CoTaskMemRealloc (Address: 0x1005600c)
CoUnmarshalInterface (Address: 0x10056030)
CreateStreamOnHGlobal (Address: 0x10056024)
PropVariantClear (Address: 0x10056014)
PropVariantCopy (Address: 0x10056020)
StringFromCLSID (Address: 0x10056018)

api-ms-win-core-com-private-l1-1-0.dll

FreePropVariantArrayWorker (Address: 0x1005604c)
InternalCoStdMarshalObject (Address: 0x10056044)
InternalServerExceptionFilter (Address: 0x10056048)
InternalTlsAllocData (Address: 0x10056050)

api-ms-win-core-com-private-l1-1-1.dll

CleanupComl2StateInAllTls (Address: 0x10056058)
CleanupTlsComl2State (Address: 0x1005605c)

api-ms-win-core-debug-l1-1-0.dll

DebugBreak (Address: 0x1005606c)
IsDebuggerPresent (Address: 0x10056064)
OutputDebugStringW (Address: 0x10056068)

api-ms-win-core-delayload-l1-1-0.dll

DelayLoadFailureHook (Address: 0x10056074)

api-ms-win-core-delayload-l1-1-1.dll

ResolveDelayLoadedAPI (Address: 0x1005607c)

api-ms-win-core-errorhandling-l1-1-0.dll

GetLastError (Address: 0x10056088)
SetLastError (Address: 0x10056090)
SetUnhandledExceptionFilter (Address: 0x10056084)
UnhandledExceptionFilter (Address: 0x1005608c)

api-ms-win-core-file-l1-1-0.dll

CreateFileW (Address: 0x100560c8)
DeleteFileW (Address: 0x100560b4)
FlushFileBuffers (Address: 0x100560ac)
GetFileAttributesW (Address: 0x100560c4)
GetFileInformationByHandle (Address: 0x100560a4)
GetFileSize (Address: 0x100560d4)
GetFileTime (Address: 0x100560a0)
GetFileType (Address: 0x100560d0)
GetFullPathNameW (Address: 0x100560c0)
LockFile (Address: 0x10056098)
ReadFile (Address: 0x100560a8)
SetEndOfFile (Address: 0x100560bc)
SetFilePointer (Address: 0x100560b8)
SetFileTime (Address: 0x100560cc)
UnlockFile (Address: 0x1005609c)
WriteFile (Address: 0x100560b0)

api-ms-win-core-file-l1-2-0.dll

GetTempPathW (Address: 0x100560dc)

api-ms-win-core-handle-l1-1-0.dll

CloseHandle (Address: 0x100560e4)
DuplicateHandle (Address: 0x100560e8)

api-ms-win-core-heap-l1-1-0.dll

GetProcessHeap (Address: 0x100560f0)
HeapAlloc (Address: 0x100560f8)
HeapFree (Address: 0x100560f4)

api-ms-win-core-heap-obsolete-l1-1-0.dll

GlobalAlloc (Address: 0x10056108)
GlobalFree (Address: 0x1005610c)
GlobalLock (Address: 0x10056110)
GlobalReAlloc (Address: 0x10056118)
GlobalSize (Address: 0x10056104)
GlobalUnlock (Address: 0x10056114)
LocalAlloc (Address: 0x1005611c)
LocalFree (Address: 0x10056100)

api-ms-win-core-interlocked-l1-1-0.dll

InitializeSListHead (Address: 0x10056124)

api-ms-win-core-io-l1-1-0.dll

GetOverlappedResult (Address: 0x1005612c)

api-ms-win-core-kernel32-legacy-l1-1-0.dll

GlobalMemoryStatus (Address: 0x10056134)

api-ms-win-core-libraryloader-l1-2-0.dll

GetModuleFileNameA (Address: 0x10056140)
GetModuleFileNameW (Address: 0x10056148)
GetModuleHandleExW (Address: 0x10056144)
GetModuleHandleW (Address: 0x1005613c)
GetProcAddress (Address: 0x1005614c)

api-ms-win-core-localization-l1-2-0.dll

FormatMessageW (Address: 0x10056158)
GetACP (Address: 0x1005615c)
GetUserDefaultLCID (Address: 0x10056154)

api-ms-win-core-memory-l1-1-0.dll

CreateFileMappingW (Address: 0x1005616c)
FlushViewOfFile (Address: 0x10056178)
MapViewOfFileEx (Address: 0x10056168)
UnmapViewOfFile (Address: 0x10056164)
VirtualAlloc (Address: 0x1005617c)
VirtualProtect (Address: 0x10056174)
VirtualQuery (Address: 0x10056170)

api-ms-win-core-processthreads-l1-1-0.dll

GetCurrentProcess (Address: 0x100561a8)
GetCurrentProcessId (Address: 0x1005619c)
GetCurrentThread (Address: 0x10056188)
GetCurrentThreadId (Address: 0x100561a0)
OpenProcessToken (Address: 0x10056194)
OpenThreadToken (Address: 0x10056184)
ProcessIdToSessionId (Address: 0x1005618c)
SetThreadStackGuarantee (Address: 0x10056190)
SetThreadToken (Address: 0x10056198)
TerminateProcess (Address: 0x100561a4)

api-ms-win-core-processthreads-l1-1-1.dll

IsProcessorFeaturePresent (Address: 0x100561b0)
OpenProcess (Address: 0x100561b4)

api-ms-win-core-profile-l1-1-0.dll

QueryPerformanceCounter (Address: 0x100561bc)

api-ms-win-core-registry-l1-1-0.dll

RegCloseKey (Address: 0x100561d0)
RegGetValueW (Address: 0x100561c4)
RegOpenKeyExW (Address: 0x100561cc)
RegQueryValueExW (Address: 0x100561c8)

api-ms-win-core-string-l1-1-0.dll

CompareStringW (Address: 0x100561e0)
MultiByteToWideChar (Address: 0x100561d8)
WideCharToMultiByte (Address: 0x100561dc)

api-ms-win-core-string-l2-1-0.dll

IsCharAlphaW (Address: 0x100561e8)

api-ms-win-core-string-obsolete-l1-1-0.dll

lstrcmpiW (Address: 0x100561f4)
lstrcmpW (Address: 0x100561f0)

api-ms-win-core-synch-l1-1-0.dll

AcquireSRWLockExclusive (Address: 0x1005620c)
AcquireSRWLockShared (Address: 0x100561fc)
CreateEventW (Address: 0x1005621c)
CreateMutexExW (Address: 0x10056234)
CreateSemaphoreExW (Address: 0x10056228)
DeleteCriticalSection (Address: 0x10056230)
EnterCriticalSection (Address: 0x10056224)
InitializeCriticalSection (Address: 0x10056210)
InitializeCriticalSectionEx (Address: 0x10056204)
LeaveCriticalSection (Address: 0x10056220)
OpenEventW (Address: 0x10056208)
OpenSemaphoreW (Address: 0x10056238)
ReleaseMutex (Address: 0x10056240)
ReleaseSemaphore (Address: 0x1005622c)
ReleaseSRWLockExclusive (Address: 0x10056218)
ReleaseSRWLockShared (Address: 0x10056200)
SetEvent (Address: 0x10056214)
WaitForSingleObject (Address: 0x10056244)
WaitForSingleObjectEx (Address: 0x1005623c)

api-ms-win-core-synch-l1-2-0.dll

InitOnceBeginInitialize (Address: 0x10056254)
InitOnceComplete (Address: 0x10056250)
Sleep (Address: 0x1005624c)

api-ms-win-core-sysinfo-l1-1-0.dll

GetSystemInfo (Address: 0x1005625c)
GetSystemTime (Address: 0x10056260)
GetSystemTimeAsFileTime (Address: 0x10056264)
GetTickCount (Address: 0x10056268)

api-ms-win-core-threadpool-l1-2-0.dll

CloseThreadpoolTimer (Address: 0x10056274)
CreateThreadpoolTimer (Address: 0x10056270)
SetThreadpoolTimer (Address: 0x10056278)
WaitForThreadpoolTimerCallbacks (Address: 0x1005627c)

api-ms-win-core-timezone-l1-1-0.dll

SystemTimeToFileTime (Address: 0x10056284)

api-ms-win-core-winrt-string-l1-1-0.dll

WindowsDeleteString (Address: 0x1005628c)

api-ms-win-crt-private-l1-1-0.dll

_except_handler4_common (Address: 0x100562c0)
_o___std_type_info_destroy_list (Address: 0x100562d8)
_o___stdio_common_vswprintf (Address: 0x100562d4)
_o__cexit (Address: 0x100562cc)
_o__configure_narrow_argv (Address: 0x100562e0)
_o__crt_atexit (Address: 0x100562dc)
_o__errno (Address: 0x100562c8)
_o__execute_onexit_table (Address: 0x100562c4)
_o__initialize_narrow_environment (Address: 0x10056294)
_o__initialize_onexit_table (Address: 0x10056298)
_o__invalid_parameter_noinfo (Address: 0x1005629c)
_o__purecall (Address: 0x100562a0)
_o__register_onexit_function (Address: 0x100562a4)
_o__resetstkoflw (Address: 0x100562a8)
_o__seh_filter_dll (Address: 0x100562ac)
_o__wcsicmp (Address: 0x100562b4)
_o__wcsnicmp (Address: 0x100562b8)
_o_qsort (Address: 0x100562bc)
memcmp (Address: 0x100562e4)
memcpy (Address: 0x100562e8)
memmove (Address: 0x100562b0)
wcsstr (Address: 0x100562d0)

api-ms-win-crt-runtime-l1-1-0.dll

_initterm (Address: 0x100562f4)
_initterm_e (Address: 0x100562f0)

api-ms-win-crt-string-l1-1-0.dll

__isascii (Address: 0x100562fc)
memset (Address: 0x10056300)
wcsncmp (Address: 0x10056304)

api-ms-win-security-base-l1-1-0.dll

AddAccessAllowedAce (Address: 0x10056320)
AllocateLocallyUniqueId (Address: 0x10056314)
CheckTokenMembership (Address: 0x10056324)
EqualSid (Address: 0x10056334)
GetKernelObjectSecurity (Address: 0x10056330)
GetSecurityDescriptorOwner (Address: 0x1005632c)
GetTokenInformation (Address: 0x10056338)
InitializeAcl (Address: 0x10056318)
InitializeSecurityDescriptor (Address: 0x1005631c)
IsValidSecurityDescriptor (Address: 0x10056328)
SetSecurityDescriptorDacl (Address: 0x10056310)
SetSecurityDescriptorOwner (Address: 0x1005630c)

bcryptPrimitives.dll

ProcessPrng (Address: 0x10056340)

ntdll.dll

EtwEventRegister (Address: 0x10056388)
EtwEventSetInformation (Address: 0x10056398)
EtwEventUnregister (Address: 0x1005638c)
EtwEventWriteTransfer (Address: 0x10056390)
EtwGetTraceEnableFlags (Address: 0x1005639c)
EtwGetTraceEnableLevel (Address: 0x100563a8)
EtwGetTraceLoggerHandle (Address: 0x100563a4)
EtwRegisterTraceGuidsW (Address: 0x100563ac)
EtwTraceMessage (Address: 0x100563a0)
EtwUnregisterTraceGuids (Address: 0x10056394)
NtClose (Address: 0x1005634c)
NtCreateFile (Address: 0x10056384)
NtMapViewOfSection (Address: 0x10056368)
NtQueryInformationFile (Address: 0x1005636c)
NtQueryObject (Address: 0x10056378)
NtQueryVolumeInformationFile (Address: 0x10056370)
NtSetInformationFile (Address: 0x10056380)
NtSetInformationObject (Address: 0x10056374)
RtlAllocateHeap (Address: 0x100563b8)
RtlDosPathNameToNtPathName_U (Address: 0x10056354)
RtlFreeHeap (Address: 0x10056350)
RtlGetCurrentDirectory_U (Address: 0x10056360)
RtlImageNtHeader (Address: 0x100563b4)
RtlInitializeCriticalSection (Address: 0x100563b0)
RtlInitializeSid (Address: 0x10056364)
RtlInitUnicodeString (Address: 0x10056348)
RtlNtStatusToDosError (Address: 0x1005637c)
RtlRaiseStatus (Address: 0x10056358)
RtlSidDominates (Address: 0x100563bc)
RtlSubAuthoritySid (Address: 0x1005635c)