combase.dll

  • File Path: C:\Windows\SysWOW64\combase.dll
  • Description: Microsoft COM for Windows

Hashes

Type Hash
MD5 D16C771EB2F48D991971D3D40D57D01C
SHA1 73EAE2C6B49DBFAFB52A255D9F9387F4AF613CC3
SHA256 5404DC05EB84ABCAB0D7E1E6FB6CD94479E74DB6765AA3381D7A088C4BB8F381
SHA384 58E6E0DA0FFC458CC2FBF02E9B921EA9E8FBBB3F8A80D508BE85EB880B1999E36A5C9B92F5047D294E71E44154D39BA7
SHA512 36154E981AE96ADFAC67BB06078BF8086C60A75800305F65FB75927785FD8C5E6F93D55EE8094AD66BA8D7B6755121F48E30EA1F75D84079AAA148B8B6CFB81E
SSDEEP 49152:qPqCxM+swrv2CSuwFh+dbA2utVS+TgK6u5/FQSYDKWmDpK:qx7svCqFh+dbngbn5/FXW4A
IMP 9BDE32B585A08D65B01B467ED3EE3AE1
PESHA1 0B8F4461FB20CDA6FBF728B40FC081708C66C3EF
PE256 60A075A9A310BE380DAF445F9E05B1603324600B0A6469BDF9BA88C3D9037DD8

DLL Exports:

Function Name Ordinal Type
NdrExtStubInitialize 446 Exported Function
NdrOleDllGetClassObject 447 Exported Function
NdrOleInitializeExtension 75 Exported Function
IsErrorPropagationEnabled 443 Exported Function
NdrCStdStubBuffer2_Release 444 Exported Function
NdrCStdStubBuffer_Release 445 Exported Function
NdrProxyForwardingFunction12 41 Exported Function
NdrProxyForwardingFunction13 42 Exported Function
NdrProxyForwardingFunction14 43 Exported Function
NdrpFindInterface 448 Exported Function
NdrProxyForwardingFunction10 39 Exported Function
NdrProxyForwardingFunction11 40 Exported Function
InternalUnmarshalObjRef 442 Exported Function
InternalRegisterWindowPropInterface2 432 Exported Function
InternalReleaseMarshalObjRef 434 Exported Function
InternalRevokeWindowPropInterface 435 Exported Function
InternalNotifyDDStartOrStop 430 Exported Function
InternalOleModalLoopBlockFn 431 Exported Function
InternalRegisterWindowPropInterface 433 Exported Function
InternalSTAInvoke 436 Exported Function
InternalStubInvoke 440 Exported Function
InternalTlsAllocData 441 Exported Function
InternalServerExceptionFilter 437 Exported Function
InternalSetAptCallCtrlOnTlsIfRequired 438 Exported Function
InternalSetOleThunkWowPtr 439 Exported Function
NdrProxyForwardingFunction30 59 Exported Function
NdrProxyForwardingFunction31 60 Exported Function
NdrProxyForwardingFunction32 61 Exported Function
NdrProxyForwardingFunction28 57 Exported Function
NdrProxyForwardingFunction29 58 Exported Function
NdrProxyForwardingFunction3 32 Exported Function
NdrProxyForwardingFunction7 36 Exported Function
NdrProxyForwardingFunction8 37 Exported Function
NdrProxyForwardingFunction9 38 Exported Function
NdrProxyForwardingFunction4 33 Exported Function
NdrProxyForwardingFunction5 34 Exported Function
NdrProxyForwardingFunction6 35 Exported Function
NdrProxyForwardingFunction27 56 Exported Function
NdrProxyForwardingFunction18 47 Exported Function
NdrProxyForwardingFunction19 48 Exported Function
NdrProxyForwardingFunction20 49 Exported Function
NdrProxyForwardingFunction15 44 Exported Function
NdrProxyForwardingFunction16 45 Exported Function
NdrProxyForwardingFunction17 46 Exported Function
NdrProxyForwardingFunction24 53 Exported Function
NdrProxyForwardingFunction25 54 Exported Function
NdrProxyForwardingFunction26 55 Exported Function
NdrProxyForwardingFunction21 50 Exported Function
NdrProxyForwardingFunction22 51 Exported Function
NdrProxyForwardingFunction23 52 Exported Function
InternalCCSetDdeServerWindow 391 Exported Function
InternalCMLSendReceive 393 Exported Function
InternalCMLSendReceive2 392 Exported Function
InternalCCFreeUnused 388 Exported Function
InternalCCGetClassInformationForDde 389 Exported Function
InternalCCGetClassInformationFromKey 390 Exported Function
InternalCoRegisterSurrogatedObject 404 Exported Function
InternalCoStdMarshalObject 405 Exported Function
InternalCoUnregisterDisconnectCallback 406 Exported Function
InternalCoIsSurrogateProcess 402 Exported Function
InternalCompleteObjRef 407 Exported Function
InternalCoRegisterDisconnectCallback 403 Exported Function
InternalCanMakeOutCall2 400 Exported Function
HWND_UserUnmarshal 382 Exported Function
IIDFromString 384 Exported Function
InternalAppInvokeExceptionFilter 385 Exported Function
HWND_UserFree 379 Exported Function
HWND_UserMarshal 380 Exported Function
HWND_UserSize 381 Exported Function
InternalCallerIsAppContainer 399 Exported Function
InternalCallFrameExceptionFilter 398 Exported Function
InternalCanMakeOutCall 401 Exported Function
InternalCAggIdRelease 386 Exported Function
InternalCAggIdSetHandler 387 Exported Function
InternalCallAsProxyExceptionFilter 397 Exported Function
InternalIrotGetTimeOfLastChange2 420 Exported Function
InternalIrotIsRunning 423 Exported Function
InternalIrotIsRunning2 422 Exported Function
InternalIrotGetObject2 417 Exported Function
InternalIrotGetObject3 418 Exported Function
InternalIrotGetTimeOfLastChange 421 Exported Function
InternalIsApartmentInitialized 427 Exported Function
InternalIsProcessInitialized 428 Exported Function
InternalMarshalObjRef 429 Exported Function
InternalIrotNoteChangeTime 424 Exported Function
InternalIrotRegister 425 Exported Function
InternalIrotRevoke 426 Exported Function
InternalIrotGetObject 419 Exported Function
InternalCStdIdentityGetIProxyManager 394 Exported Function
InternalCStdIdentityUpdateFlags 396 Exported Function
InternalDoATClassCreate 410 Exported Function
InternalCreateCAggId 408 Exported Function
InternalCreateIdentityHandler 409 Exported Function
InternalCStdIdentityGetInternalUnk 395 Exported Function
InternalGetWindowPropInterface2 413 Exported Function
InternalIrotEnumRunning 416 Exported Function
InternalIrotEnumRunning2 415 Exported Function
InternalFillLocalOXIDInfo 411 Exported Function
InternalFreeObjRef 412 Exported Function
InternalGetWindowPropInterface 414 Exported Function
RoUninitialize 483 Exported Function
RoUnregisterForApartmentShutdown 484 Exported Function
SetCleanupFlag 485 Exported Function
RoSetErrorReportingFlags 480 Exported Function
RoTransformError 481 Exported Function
RoTransformErrorW 482 Exported Function
StringFromGUID2 489 Exported Function
StringFromIID 490 Exported Function
UpdateDCOMSettings 491 Exported Function
SetErrorInfo 486 Exported Function
SetRestrictedErrorInfo 487 Exported Function
StringFromCLSID 488 Exported Function
RoRevokeActivationFactories 479 Exported Function
RoOriginateErrorW 470 Exported Function
RoOriginateLanguageException 471 Exported Function
RoParameterizedTypeExtraGetTypeSignature 472 Exported Function
RoInspectCapturedStackBackTrace 467 Exported Function
RoInspectThreadErrorInfo 468 Exported Function
RoOriginateError 469 Exported Function
RoReportFailedDelegate 476 Exported Function
RoReportUnhandledError 477 Exported Function
RoResolveRestrictedErrorInfoReference 478 Exported Function
RoRegisterActivationFactories 473 Exported Function
RoRegisterForApartmentShutdown 474 Exported Function
RoReportCapabilityCheckFailure 475 Exported Function
WindowsIsStringEmpty 507 Exported Function
WindowsPreallocateStringBuffer 508 Exported Function
WindowsPromoteStringBuffer 509 Exported Function
WindowsGetStringRawBuffer 504 Exported Function
WindowsInspectString 506 Exported Function
WindowsInspectString2 505 Exported Function
WindowsSubstringWithSpecifiedLength 513 Exported Function
WindowsTrimStringEnd 514 Exported Function
WindowsTrimStringStart 515 Exported Function
WindowsReplaceString 510 Exported Function
WindowsStringHasEmbeddedNull 511 Exported Function
WindowsSubstring 512 Exported Function
WindowsGetStringLen 503 Exported Function
WdtpInterfacePointer_UserSize 494 Exported Function
WdtpInterfacePointer_UserUnmarshal 495 Exported Function
WindowsCompareStringOrdinal 496 Exported Function
UpdateProcessTracing 78 Exported Function
WdtpInterfacePointer_UserFree 492 Exported Function
WdtpInterfacePointer_UserMarshal 493 Exported Function
WindowsDeleteString 500 Exported Function
WindowsDeleteStringBuffer 501 Exported Function
WindowsDuplicateString 502 Exported Function
WindowsConcatString 497 Exported Function
WindowsCreateString 498 Exported Function
WindowsCreateStringReference 499 Exported Function
ObjectStublessClient26 25 Exported Function
ObjectStublessClient27 26 Exported Function
ObjectStublessClient28 27 Exported Function
ObjectStublessClient23 22 Exported Function
ObjectStublessClient24 23 Exported Function
ObjectStublessClient25 24 Exported Function
ObjectStublessClient31 30 Exported Function
ObjectStublessClient32 31 Exported Function
ObjectStublessClient4 3 Exported Function
ObjectStublessClient29 28 Exported Function
ObjectStublessClient3 2 Exported Function
ObjectStublessClient30 29 Exported Function
ObjectStublessClient22 21 Exported Function
ObjectStublessClient13 12 Exported Function
ObjectStublessClient14 13 Exported Function
ObjectStublessClient15 14 Exported Function
ObjectStublessClient10 9 Exported Function
ObjectStublessClient11 10 Exported Function
ObjectStublessClient12 11 Exported Function
ObjectStublessClient19 18 Exported Function
ObjectStublessClient20 19 Exported Function
ObjectStublessClient21 20 Exported Function
ObjectStublessClient16 15 Exported Function
ObjectStublessClient17 16 Exported Function
ObjectStublessClient18 17 Exported Function
RoGetActivatableClassRegistration 458 Exported Function
RoGetActivationFactory 459 Exported Function
RoGetAgileReference 460 Exported Function
RoFailFastWithErrorContextInternal 77 Exported Function
RoFailFastWithErrorContextInternal2 76 Exported Function
RoFreeParameterizedTypeExtra 457 Exported Function
RoGetParameterizedTypeInstanceIID 464 Exported Function
RoGetServerActivatableClasses 465 Exported Function
RoInitialize 466 Exported Function
RoGetApartmentIdentifier 461 Exported Function
RoGetErrorReportingFlags 462 Exported Function
RoGetMatchingRestrictedErrorInfo 463 Exported Function
RoFailFastWithErrorContext 456 Exported Function
ObjectStublessClient8 7 Exported Function
ObjectStublessClient9 8 Exported Function
ProgIDFromCLSID 449 Exported Function
ObjectStublessClient5 4 Exported Function
ObjectStublessClient6 5 Exported Function
ObjectStublessClient7 6 Exported Function
RoActivateInstance 453 Exported Function
RoCaptureErrorContext 454 Exported Function
RoClearError 455 Exported Function
PropVariantClear 450 Exported Function
PropVariantCopy 451 Exported Function
ReleaseFuncDescs 452 Exported Function
HSTRING_UserUnmarshal 378 Exported Function
CoInitializeWOW 271 Exported Function
CoInvalidateRemoteMachineBindings 272 Exported Function
CoIsHandlerConnected 273 Exported Function
CoIncrementMTAUsage 268 Exported Function
CoInitializeEx 269 Exported Function
CoInitializeSecurity 270 Exported Function
CoMarshalInterThreadInterfaceInStream 276 Exported Function
CoPopServiceDomain 278 Exported Function
CoPushServiceDomain 279 Exported Function
CoLockObjectExternal 274 Exported Function
CoMarshalHresult 275 Exported Function
CoMarshalInterface 277 Exported Function
CoImpersonateClient 267 Exported Function
CoGetModuleArchitecture 258 Exported Function
CoGetModuleType 259 Exported Function
CoGetObjectContext 260 Exported Function
CoGetInterfaceAndReleaseStream 255 Exported Function
CoGetMalloc 256 Exported Function
CoGetMarshalSizeMax 257 Exported Function
CoGetStdMarshalEx 264 Exported Function
CoGetSystemSecurityPermissions 265 Exported Function
CoGetTreatAsClass 266 Exported Function
CoGetProcessIdentifier 262 Exported Function
CoGetPSClsid 261 Exported Function
CoGetStandardMarshal 263 Exported Function
CoReleaseServerProcess 296 Exported Function
CoResumeClassObjects 297 Exported Function
CoRetireServer 298 Exported Function
CoRegisterSurrogate 293 Exported Function
CoRegisterSurrogateEx 294 Exported Function
CoReleaseMarshalData 295 Exported Function
CoRevokeDeviceCatalog 302 Exported Function
CoRevokeInitializeSpy 303 Exported Function
CoRevokeMallocSpy 304 Exported Function
CoRevertToSelf 299 Exported Function
CoRevokeClassObject 300 Exported Function
CoRevokeConsoleHandles 301 Exported Function
CoRegisterRacActivationToken 292 Exported Function
CoReactivateObject 283 Exported Function
CoRegisterActivationFilter 284 Exported Function
CoRegisterClassObject 285 Exported Function
CoQueryAuthenticationServices 280 Exported Function
CoQueryClientBlanket 281 Exported Function
CoQueryProxyBlanket 282 Exported Function
CoRegisterMallocSpy 289 Exported Function
CoRegisterMessageFilter 290 Exported Function
CoRegisterPSClsid 291 Exported Function
CoRegisterConsoleHandles 286 Exported Function
CoRegisterDeviceCatalog 287 Exported Function
CoRegisterInitializeSpy 288 Exported Function
CoCopyProxy 221 Exported Function
CoCreateErrorInfo 222 Exported Function
CoCreateFreeThreadedMarshaler 223 Exported Function
CoAddRefServerProcess 218 Exported Function
CoAllowUnmarshalerCLSID 219 Exported Function
CoCancelCall 220 Exported Function
CoCreateInstanceFromApp 227 Exported Function
CoCreateObjectInContext 228 Exported Function
CoDeactivateObject 229 Exported Function
CoCreateGuid 224 Exported Function
CoCreateInstance 225 Exported Function
CoCreateInstanceEx 226 Exported Function
CLSIDFromString 105 Exported Function
CleanupTlsOleState 216 Exported Function
ClearCleanupFlag 217 Exported Function
CLIPFORMAT_UserFree 82 Exported Function
CleanupComl2StateInAllTls 213 Exported Function
CleanupOleStateInAllTls 214 Exported Function
CleanupTlsComl2State 215 Exported Function
CLSIDFromOle1Class 89 Exported Function
CLSIDFromProgID 91 Exported Function
CLSIDFromProgIDEx 94 Exported Function
CLIPFORMAT_UserMarshal 83 Exported Function
CLIPFORMAT_UserSize 84 Exported Function
CLIPFORMAT_UserUnmarshal 85 Exported Function
CoGetClassObject 246 Exported Function
CoGetClassVersion 247 Exported Function
CoGetContextToken 248 Exported Function
CoGetCallerTID 244 Exported Function
CoGetCallState 243 Exported Function
CoGetCancelObject 245 Exported Function
CoGetErrorInfo 252 Exported Function
CoGetInstanceFromFile 253 Exported Function
CoGetInstanceFromIStorage 254 Exported Function
CoGetCurrentLogicalThreadId 249 Exported Function
CoGetCurrentProcess 250 Exported Function
CoGetDefaultContext 251 Exported Function
CoGetCallContext 242 Exported Function
CoDisconnectContext 233 Exported Function
CoDisconnectObject 234 Exported Function
CoEnableCallCancellation 235 Exported Function
CoDecodeProxy 230 Exported Function
CoDecrementMTAUsage 231 Exported Function
CoDisableCallCancellation 232 Exported Function
CoGetActivationState 239 Exported Function
CoGetApartmentID 240 Exported Function
CoGetApartmentType 241 Exported Function
CoFileTimeNow 236 Exported Function
CoFreeUnusedLibraries 237 Exported Function
CoFreeUnusedLibrariesEx 238 Exported Function
HBRUSH_UserSize 349 Exported Function
HBRUSH_UserUnmarshal 350 Exported Function
HDC_UserFree 351 Exported Function
HBITMAP_UserUnmarshal 346 Exported Function
HBRUSH_UserFree 347 Exported Function
HBRUSH_UserMarshal 348 Exported Function
HGLOBAL_UserFree 355 Exported Function
HGLOBAL_UserMarshal 356 Exported Function
HGLOBAL_UserSize 357 Exported Function
HDC_UserMarshal 352 Exported Function
HDC_UserSize 353 Exported Function
HDC_UserUnmarshal 354 Exported Function
HBITMAP_UserSize 345 Exported Function
GetHGlobalFromStream 336 Exported Function
GetHookInterface 337 Exported Function
GetRestrictedErrorInfo 338 Exported Function
GetCatalogHelper 333 Exported Function
GetErrorInfo 334 Exported Function
GetFuncDescs 335 Exported Function
HACCEL_UserUnmarshal 342 Exported Function
HBITMAP_UserFree 343 Exported Function
HBITMAP_UserMarshal 344 Exported Function
HACCEL_UserFree 339 Exported Function
HACCEL_UserMarshal 340 Exported Function
HACCEL_UserSize 341 Exported Function
HPALETTE_UserSize 373 Exported Function
HPALETTE_UserUnmarshal 374 Exported Function
HRGN_UserFree 62 Exported Function
HMONITOR_UserUnmarshal 370 Exported Function
HPALETTE_UserFree 371 Exported Function
HPALETTE_UserMarshal 372 Exported Function
HSTRING_UserFree 375 Exported Function
HSTRING_UserMarshal 376 Exported Function
HSTRING_UserSize 377 Exported Function
HRGN_UserMarshal 72 Exported Function
HRGN_UserSize 73 Exported Function
HRGN_UserUnmarshal 74 Exported Function
HMONITOR_UserSize 369 Exported Function
HICON_UserSize 361 Exported Function
HICON_UserUnmarshal 362 Exported Function
HkOleRegisterObject 383 Exported Function
HGLOBAL_UserUnmarshal 358 Exported Function
HICON_UserFree 359 Exported Function
HICON_UserMarshal 360 Exported Function
HMENU_UserUnmarshal 366 Exported Function
HMONITOR_UserFree 367 Exported Function
HMONITOR_UserMarshal 368 Exported Function
HMENU_UserFree 363 Exported Function
HMENU_UserMarshal 364 Exported Function
HMENU_UserSize 365 Exported Function
CoVrfReleaseThreadState 321 Exported Function
CoWaitForMultipleHandles 322 Exported Function
CoWaitForMultipleObjects 323 Exported Function
CoUnmarshalInterface 318 Exported Function
CoVrfCheckThreadState 319 Exported Function
CoVrfGetThreadState 320 Exported Function
CStdAsyncStubBuffer2_Disconnect 107 Exported Function
CStdAsyncStubBuffer2_Release 108 Exported Function
CStdAsyncStubBuffer_AddRef 109 Exported Function
CreateErrorInfo 324 Exported Function
CreateStreamOnHGlobal 325 Exported Function
CStdAsyncStubBuffer2_Connect 106 Exported Function
CoUnmarshalHresult 317 Exported Function
CoSetProxyBlanket 308 Exported Function
CoSuspendClassObjects 309 Exported Function
CoSwitchCallContext 310 Exported Function
CoRevokeRacActivationToken 305 Exported Function
CoSetCancelObject 306 Exported Function
CoSetErrorInfo 307 Exported Function
CoTestCancel 314 Exported Function
CoUninitialize 315 Exported Function
CoUnloadingWOW 316 Exported Function
CoTaskMemAlloc 311 Exported Function
CoTaskMemFree 312 Exported Function
CoTaskMemRealloc 313 Exported Function
CStdStubBuffer_IsIIDSupported 211 Exported Function
CStdStubBuffer_QueryInterface 212 Exported Function
DcomChannelSetHResult 326 Exported Function
CStdStubBuffer_DebugServerRelease 208 Exported Function
CStdStubBuffer_Disconnect 209 Exported Function
CStdStubBuffer_Invoke 210 Exported Function
EnableHookObject 330 Exported Function
FreePropVariantArray 331 Exported Function
FreePropVariantArrayWorker 332 Exported Function
DllDebugObjectRPCHook 327 Exported Function
DllGetActivationFactory 328 Exported Function
DllGetClassObject 329 Exported Function
CStdStubBuffer_DebugServerQueryInterface 207 Exported Function
CStdAsyncStubBuffer_QueryInterface 116 Exported Function
CStdAsyncStubBuffer_Release 117 Exported Function
CStdStubBuffer2_Connect 118 Exported Function
CStdAsyncStubBuffer_Connect 113 Exported Function
CStdAsyncStubBuffer_Disconnect 114 Exported Function
CStdAsyncStubBuffer_Invoke 115 Exported Function
CStdStubBuffer_AddRef 144 Exported Function
CStdStubBuffer_Connect 205 Exported Function
CStdStubBuffer_CountRefs 206 Exported Function
CStdStubBuffer2_CountRefs 119 Exported Function
CStdStubBuffer2_Disconnect 131 Exported Function
CStdStubBuffer2_QueryInterface 132 Exported Function

Signature

  • Status: Signature verified.
  • Serial: 3300000266BD1580EFA75CD6D3000000000266
  • Thumbprint: A4341B9FD50FB9964283220A36A1EF6F6FAA7840
  • Issuer: CN=Microsoft Windows Production PCA 2011, O=Microsoft Corporation, L=Redmond, S=Washington, C=US
  • Subject: CN=Microsoft Windows, O=Microsoft Corporation, L=Redmond, S=Washington, C=US

File Metadata

  • Original Filename: COMBASE.DLL
  • Product Name: Microsoft Windows Operating System
  • Company Name: Microsoft Corporation
  • File Version: 10.0.19041.508 (WinBuild.160101.0800)
  • Product Version: 10.0.19041.508
  • Language: English (United States)
  • Legal Copyright: Microsoft Corporation. All rights reserved.
  • Machine Type: 32-bit

File Scan

  • VirusTotal Detections: 0/68
  • VirusTotal Link: https://www.virustotal.com/gui/file/5404dc05eb84abcab0d7e1e6fb6cd94479e74db6765aa3381d7a088c4bb8f381/detection/

Possible Misuse

The following table contains possible examples of combase.dll being misused. While combase.dll is not inherently malicious, its legitimate functionality can be abused for malicious purposes.

Source Source File Example License
sigma image_load_mimikatz_inmemory_detection.yml - 'combase.dll' DRL 1.0

MIT License. Copyright (c) 2020-2021 Strontic.