coml2.dll

Description: Microsoft COM for Windows

Version: 10.0.19041.4355

Architecture: 64-bit

Operating System: Windows NT

SHA256: c194e0f86ada728d2ee3551e5cc22332

File Size: 477.7 KB

Uploaded At: Dec. 1, 2025, 7:24 a.m.

Views: 14

Security Warning

This file has been flagged as potentially dangerous.

Reason: Detected potentially dangerous functions used for process injection: OpenProcess

Exported Functions

(Ordinal: 1, Address: 0x55080)
(Ordinal: 2, Address: 0x54fb0)
(Ordinal: 3, Address: 0x54e10)
(Ordinal: 4, Address: 0x45030)
(Ordinal: 5, Address: 0x44e30)
(Ordinal: 6, Address: 0x452f0)
(Ordinal: 7, Address: 0x44510)
(Ordinal: 8, Address: 0x47780)
Coml2DllGetClassObject (Ordinal: 9, Address: 0x1fd80)
CreateILockBytesOnHGlobal (Ordinal: 10, Address: 0x1520)
(Ordinal: 11, Address: 0x387b0)
(Ordinal: 12, Address: 0x598c0)
DllGetClassObject (Ordinal: 13, Address: 0x35a90)
FmtIdToPropStgName (Ordinal: 14, Address: 0x43fd0)
GetConvertStg (Ordinal: 15, Address: 0x59890)
GetHGlobalFromILockBytes (Ordinal: 16, Address: 0x59750)
PropStgNameToFmtId (Ordinal: 17, Address: 0x44000)
ReadClassStg (Ordinal: 18, Address: 0x598f0)
ReadClassStm (Ordinal: 19, Address: 0x221a0)
StgCreateDocfile (Ordinal: 20, Address: 0x389f0)
StgCreateDocfileOnILockBytes (Ordinal: 21, Address: 0x1d8e0)
StgCreatePropSetStg (Ordinal: 22, Address: 0x44070)
StgCreatePropStg (Ordinal: 23, Address: 0x441a0)
StgCreateStorageEx (Ordinal: 24, Address: 0x38e20)
StgIsStorageFile (Ordinal: 25, Address: 0x39170)
StgIsStorageILockBytes (Ordinal: 26, Address: 0x39340)
StgOpenPropStg (Ordinal: 27, Address: 0x44360)
StgOpenStorage (Ordinal: 28, Address: 0x1d270)
StgOpenStorageEx (Ordinal: 29, Address: 0x39060)
StgOpenStorageOnILockBytes (Ordinal: 30, Address: 0xa490)
StgSetTimes (Ordinal: 31, Address: 0x393e0)
WriteClassStg (Ordinal: 32, Address: 0x59980)
WriteClassStm (Ordinal: 33, Address: 0x22240)

Imported DLLs & Functions

api-ms-win-core-apiquery-l1-1-0.dll

ApiSetQueryApiSetPresence (Address: 0x1800635a0)

api-ms-win-core-com-l1-1-0.dll

CLSIDFromString (Address: 0x1800635c0)
CoCreateFreeThreadedMarshaler (Address: 0x1800635f0)
CoCreateInstance (Address: 0x1800635d8)
CoGetMalloc (Address: 0x180063608)
CoGetStandardMarshal (Address: 0x1800635e0)
CoReleaseMarshalData (Address: 0x180063610)
CoTaskMemAlloc (Address: 0x1800635f8)
CoTaskMemFree (Address: 0x180063600)
CoTaskMemRealloc (Address: 0x180063618)
CoUnmarshalInterface (Address: 0x1800635e8)
CreateStreamOnHGlobal (Address: 0x1800635d0)
PropVariantClear (Address: 0x1800635b0)
PropVariantCopy (Address: 0x1800635c8)
StringFromCLSID (Address: 0x1800635b8)

api-ms-win-core-com-private-l1-1-0.dll

FreePropVariantArrayWorker (Address: 0x180063640)
InternalCoStdMarshalObject (Address: 0x180063638)
InternalServerExceptionFilter (Address: 0x180063628)
InternalTlsAllocData (Address: 0x180063630)

api-ms-win-core-com-private-l1-1-1.dll

CleanupComl2StateInAllTls (Address: 0x180063650)
CleanupTlsComl2State (Address: 0x180063658)

api-ms-win-core-debug-l1-1-0.dll

DebugBreak (Address: 0x180063668)
IsDebuggerPresent (Address: 0x180063670)
OutputDebugStringW (Address: 0x180063678)

api-ms-win-core-delayload-l1-1-0.dll

DelayLoadFailureHook (Address: 0x180063688)

api-ms-win-core-delayload-l1-1-1.dll

ResolveDelayLoadedAPI (Address: 0x180063698)

api-ms-win-core-errorhandling-l1-1-0.dll

GetLastError (Address: 0x1800636a8)
SetLastError (Address: 0x1800636b0)
SetUnhandledExceptionFilter (Address: 0x1800636b8)
UnhandledExceptionFilter (Address: 0x1800636c0)

api-ms-win-core-file-l1-1-0.dll

CreateFileW (Address: 0x1800636e8)
DeleteFileW (Address: 0x1800636e0)
FlushFileBuffers (Address: 0x180063730)
GetFileAttributesW (Address: 0x180063708)
GetFileInformationByHandle (Address: 0x1800636d8)
GetFileSize (Address: 0x180063710)
GetFileTime (Address: 0x180063748)
GetFileType (Address: 0x1800636d0)
GetFullPathNameW (Address: 0x1800636f8)
LockFile (Address: 0x180063738)
ReadFile (Address: 0x180063700)
SetEndOfFile (Address: 0x180063718)
SetFilePointer (Address: 0x180063728)
SetFileTime (Address: 0x1800636f0)
UnlockFile (Address: 0x180063740)
WriteFile (Address: 0x180063720)

api-ms-win-core-file-l1-2-0.dll

GetTempPathW (Address: 0x180063758)

api-ms-win-core-handle-l1-1-0.dll

CloseHandle (Address: 0x180063768)
DuplicateHandle (Address: 0x180063770)

api-ms-win-core-heap-l1-1-0.dll

GetProcessHeap (Address: 0x180063788)
HeapAlloc (Address: 0x180063780)
HeapFree (Address: 0x180063790)

api-ms-win-core-heap-obsolete-l1-1-0.dll

GlobalAlloc (Address: 0x1800637b0)
GlobalFree (Address: 0x1800637b8)
GlobalLock (Address: 0x1800637c0)
GlobalReAlloc (Address: 0x1800637d8)
GlobalSize (Address: 0x1800637a0)
GlobalUnlock (Address: 0x1800637c8)
LocalAlloc (Address: 0x1800637a8)
LocalFree (Address: 0x1800637d0)

api-ms-win-core-interlocked-l1-1-0.dll

InitializeSListHead (Address: 0x1800637e8)

api-ms-win-core-io-l1-1-0.dll

GetOverlappedResult (Address: 0x1800637f8)

api-ms-win-core-kernel32-legacy-l1-1-0.dll

GlobalMemoryStatus (Address: 0x180063808)

api-ms-win-core-libraryloader-l1-2-0.dll

GetModuleFileNameA (Address: 0x180063818)
GetModuleFileNameW (Address: 0x180063820)
GetModuleHandleExW (Address: 0x180063828)
GetModuleHandleW (Address: 0x180063838)
GetProcAddress (Address: 0x180063830)

api-ms-win-core-localization-l1-2-0.dll

FormatMessageW (Address: 0x180063858)
GetACP (Address: 0x180063848)
GetUserDefaultLCID (Address: 0x180063850)

api-ms-win-core-memory-l1-1-0.dll

CreateFileMappingW (Address: 0x180063898)
FlushViewOfFile (Address: 0x180063888)
MapViewOfFileEx (Address: 0x180063870)
UnmapViewOfFile (Address: 0x180063878)
VirtualAlloc (Address: 0x180063880)
VirtualProtect (Address: 0x180063868)
VirtualQuery (Address: 0x180063890)

api-ms-win-core-processthreads-l1-1-0.dll

GetCurrentProcess (Address: 0x1800638a8)
GetCurrentProcessId (Address: 0x1800638b8)
GetCurrentThread (Address: 0x1800638d8)
GetCurrentThreadId (Address: 0x1800638b0)
OpenProcessToken (Address: 0x1800638f0)
OpenThreadToken (Address: 0x1800638d0)
ProcessIdToSessionId (Address: 0x1800638e8)
SetThreadStackGuarantee (Address: 0x1800638e0)
SetThreadToken (Address: 0x1800638c0)
TerminateProcess (Address: 0x1800638c8)

api-ms-win-core-processthreads-l1-1-1.dll

IsProcessorFeaturePresent (Address: 0x180063900)
OpenProcess (Address: 0x180063908)

api-ms-win-core-profile-l1-1-0.dll

QueryPerformanceCounter (Address: 0x180063918)

api-ms-win-core-registry-l1-1-0.dll

RegCloseKey (Address: 0x180063930)
RegGetValueW (Address: 0x180063928)
RegOpenKeyExW (Address: 0x180063938)
RegQueryValueExW (Address: 0x180063940)

api-ms-win-core-string-l1-1-0.dll

CompareStringW (Address: 0x180063950)
MultiByteToWideChar (Address: 0x180063960)
WideCharToMultiByte (Address: 0x180063958)

api-ms-win-core-string-l2-1-0.dll

IsCharAlphaW (Address: 0x180063970)

api-ms-win-core-string-obsolete-l1-1-0.dll

lstrcmpiW (Address: 0x180063988)
lstrcmpW (Address: 0x180063980)

api-ms-win-core-synch-l1-1-0.dll

AcquireSRWLockExclusive (Address: 0x1800639b8)
AcquireSRWLockShared (Address: 0x1800639e8)
CreateEventW (Address: 0x180063a08)
CreateMutexExW (Address: 0x180063a20)
CreateSemaphoreExW (Address: 0x1800639c8)
DeleteCriticalSection (Address: 0x180063a00)
EnterCriticalSection (Address: 0x1800639d0)
InitializeCriticalSection (Address: 0x1800639d8)
InitializeCriticalSectionEx (Address: 0x1800639f8)
LeaveCriticalSection (Address: 0x180063a28)
OpenEventW (Address: 0x1800639c0)
OpenSemaphoreW (Address: 0x180063a18)
ReleaseMutex (Address: 0x1800639a8)
ReleaseSemaphore (Address: 0x180063998)
ReleaseSRWLockExclusive (Address: 0x1800639b0)
ReleaseSRWLockShared (Address: 0x1800639f0)
SetEvent (Address: 0x1800639e0)
WaitForSingleObject (Address: 0x1800639a0)
WaitForSingleObjectEx (Address: 0x180063a10)

api-ms-win-core-synch-l1-2-0.dll

InitOnceBeginInitialize (Address: 0x180063a40)
InitOnceComplete (Address: 0x180063a38)
Sleep (Address: 0x180063a48)

api-ms-win-core-sysinfo-l1-1-0.dll

GetSystemInfo (Address: 0x180063a60)
GetSystemTime (Address: 0x180063a68)
GetSystemTimeAsFileTime (Address: 0x180063a58)
GetTickCount (Address: 0x180063a70)

api-ms-win-core-threadpool-l1-2-0.dll

CloseThreadpoolTimer (Address: 0x180063a98)
CreateThreadpoolTimer (Address: 0x180063a88)
SetThreadpoolTimer (Address: 0x180063a80)
WaitForThreadpoolTimerCallbacks (Address: 0x180063a90)

api-ms-win-core-timezone-l1-1-0.dll

SystemTimeToFileTime (Address: 0x180063aa8)

api-ms-win-core-winrt-string-l1-1-0.dll

WindowsDeleteString (Address: 0x180063ab8)

api-ms-win-crt-private-l1-1-0.dll

__C_specific_handler (Address: 0x180063b20)
_o___std_type_info_destroy_list (Address: 0x180063b60)
_o___stdio_common_vswprintf (Address: 0x180063b58)
_o__cexit (Address: 0x180063b50)
_o__configure_narrow_argv (Address: 0x180063b48)
_o__crt_atexit (Address: 0x180063b40)
_o__errno (Address: 0x180063b38)
_o__execute_onexit_table (Address: 0x180063b28)
_o__initialize_narrow_environment (Address: 0x180063ac8)
_o__initialize_onexit_table (Address: 0x180063ad0)
_o__invalid_parameter_noinfo (Address: 0x180063ad8)
_o__purecall (Address: 0x180063ae0)
_o__register_onexit_function (Address: 0x180063ae8)
_o__resetstkoflw (Address: 0x180063af0)
_o__seh_filter_dll (Address: 0x180063af8)
_o__wcsicmp (Address: 0x180063b08)
_o__wcsnicmp (Address: 0x180063b10)
_o_qsort (Address: 0x180063b18)
memcmp (Address: 0x180063b68)
memcpy (Address: 0x180063b70)
memmove (Address: 0x180063b00)
wcsstr (Address: 0x180063b30)

api-ms-win-crt-runtime-l1-1-0.dll

_initterm (Address: 0x180063b88)
_initterm_e (Address: 0x180063b80)

api-ms-win-crt-string-l1-1-0.dll

__isascii (Address: 0x180063ba8)
memset (Address: 0x180063ba0)
wcsncmp (Address: 0x180063b98)

api-ms-win-security-base-l1-1-0.dll

AddAccessAllowedAce (Address: 0x180063bc0)
AllocateLocallyUniqueId (Address: 0x180063bd0)
CheckTokenMembership (Address: 0x180063c00)
EqualSid (Address: 0x180063be0)
GetKernelObjectSecurity (Address: 0x180063be8)
GetSecurityDescriptorOwner (Address: 0x180063bf0)
GetTokenInformation (Address: 0x180063bd8)
InitializeAcl (Address: 0x180063c10)
InitializeSecurityDescriptor (Address: 0x180063bb8)
IsValidSecurityDescriptor (Address: 0x180063c08)
SetSecurityDescriptorDacl (Address: 0x180063bc8)
SetSecurityDescriptorOwner (Address: 0x180063bf8)

bcryptPrimitives.dll

ProcessPrng (Address: 0x180063c20)

ntdll.dll

EtwEventRegister (Address: 0x180063c98)
EtwEventSetInformation (Address: 0x180063cb8)
EtwEventUnregister (Address: 0x180063ca0)
EtwEventWriteTransfer (Address: 0x180063ca8)
EtwGetTraceEnableFlags (Address: 0x180063cc0)
EtwGetTraceEnableLevel (Address: 0x180063cd8)
EtwGetTraceLoggerHandle (Address: 0x180063cd0)
EtwRegisterTraceGuidsW (Address: 0x180063ce0)
EtwTraceMessage (Address: 0x180063cc8)
EtwUnregisterTraceGuids (Address: 0x180063cb0)
NtClose (Address: 0x180063c38)
NtCreateFile (Address: 0x180063d18)
NtMapViewOfSection (Address: 0x180063c68)
NtQueryInformationFile (Address: 0x180063c70)
NtQueryObject (Address: 0x180063c88)
NtQueryVolumeInformationFile (Address: 0x180063c78)
NtSetInformationFile (Address: 0x180063d28)
NtSetInformationObject (Address: 0x180063c80)
RtlAllocateHeap (Address: 0x180063d10)
RtlCaptureContext (Address: 0x180063cf8)
RtlDosPathNameToNtPathName_U (Address: 0x180063c48)
RtlFreeHeap (Address: 0x180063c40)
RtlGetCurrentDirectory_U (Address: 0x180063d20)
RtlImageNtHeader (Address: 0x180063d08)
RtlInitializeCriticalSection (Address: 0x180063d00)
RtlInitializeSid (Address: 0x180063d30)
RtlInitUnicodeString (Address: 0x180063c30)
RtlLookupFunctionEntry (Address: 0x180063cf0)
RtlNtStatusToDosError (Address: 0x180063c90)
RtlRaiseStatus (Address: 0x180063c50)
RtlSidDominates (Address: 0x180063c58)
RtlSubAuthoritySid (Address: 0x180063c60)
RtlVirtualUnwind (Address: 0x180063ce8)