DataExchange.dll

Description: Data exchange

Authors: © Microsoft Corporation. All rights reserved.

Version: 10.0.19041.5794

Architecture: 32-bit

Operating System: Windows NT

SHA256: 7dc623b5257046dc315a73badad2ca78

File Size: 177.0 KB

Uploaded At: Dec. 1, 2025, 7:54 a.m.

Views: 5

Security Warning

This file has been flagged as potentially dangerous.


Reason: Detected potentially dangerous functions used for process injection: OpenProcess

Exported Functions

  • DllCanUnloadNow (Ordinal: 1, Address: 0xcdc0)
  • DllGetActivationFactory (Ordinal: 2, Address: 0xd0d0)
  • DllGetClassObject (Ordinal: 3, Address: 0xe270)

Imported DLLs & Functions

api-ms-win-core-apiquery-l1-1-0.dll
  • ApiSetQueryApiSetPresence (Address: 0x1002a000)
api-ms-win-core-debug-l1-1-0.dll
  • DebugBreak (Address: 0x1002a008)
  • IsDebuggerPresent (Address: 0x1002a00c)
  • OutputDebugStringW (Address: 0x1002a010)
api-ms-win-core-delayload-l1-1-0.dll
  • DelayLoadFailureHook (Address: 0x1002a018)
api-ms-win-core-delayload-l1-1-1.dll
  • ResolveDelayLoadedAPI (Address: 0x1002a020)
api-ms-win-core-errorhandling-l1-1-0.dll
  • GetLastError (Address: 0x1002a028)
  • RaiseException (Address: 0x1002a038)
  • SetLastError (Address: 0x1002a02c)
  • SetUnhandledExceptionFilter (Address: 0x1002a030)
  • UnhandledExceptionFilter (Address: 0x1002a034)
api-ms-win-core-handle-l1-1-0.dll
  • CloseHandle (Address: 0x1002a040)
api-ms-win-core-heap-l1-1-0.dll
  • GetProcessHeap (Address: 0x1002a050)
  • HeapAlloc (Address: 0x1002a04c)
  • HeapFree (Address: 0x1002a048)
api-ms-win-core-heap-l2-1-0.dll
  • LocalAlloc (Address: 0x1002a058)
  • LocalFree (Address: 0x1002a05c)
api-ms-win-core-libraryloader-l1-2-0.dll
  • DisableThreadLibraryCalls (Address: 0x1002a070)
  • GetModuleFileNameA (Address: 0x1002a074)
  • GetModuleHandleExW (Address: 0x1002a07c)
  • GetModuleHandleW (Address: 0x1002a088)
  • GetProcAddress (Address: 0x1002a078)
  • LoadResource (Address: 0x1002a084)
  • LockResource (Address: 0x1002a06c)
  • SizeofResource (Address: 0x1002a080)
api-ms-win-core-libraryloader-l1-2-1.dll
  • FindResourceW (Address: 0x1002a090)
api-ms-win-core-localization-l1-2-0.dll
  • FormatMessageW (Address: 0x1002a098)
api-ms-win-core-processthreads-l1-1-0.dll
  • GetCurrentProcess (Address: 0x1002a0ac)
  • GetCurrentProcessId (Address: 0x1002a0b0)
  • GetCurrentThreadId (Address: 0x1002a0a4)
  • OpenProcessToken (Address: 0x1002a0a0)
  • TerminateProcess (Address: 0x1002a0a8)
api-ms-win-core-processthreads-l1-1-1.dll
  • OpenProcess (Address: 0x1002a0b8)
api-ms-win-core-profile-l1-1-0.dll
  • QueryPerformanceCounter (Address: 0x1002a0c0)
api-ms-win-core-registry-l1-1-0.dll
  • RegCloseKey (Address: 0x1002a0d8)
  • RegEnumKeyExW (Address: 0x1002a0c8)
  • RegGetValueW (Address: 0x1002a0d0)
  • RegOpenKeyExW (Address: 0x1002a0d4)
  • RegQueryInfoKeyW (Address: 0x1002a0cc)
api-ms-win-core-synch-l1-1-0.dll
  • AcquireSRWLockExclusive (Address: 0x1002a100)
  • AcquireSRWLockShared (Address: 0x1002a108)
  • CreateEventExW (Address: 0x1002a0e4)
  • CreateEventW (Address: 0x1002a118)
  • CreateMutexExW (Address: 0x1002a0e0)
  • CreateSemaphoreExW (Address: 0x1002a0f8)
  • DeleteCriticalSection (Address: 0x1002a124)
  • EnterCriticalSection (Address: 0x1002a10c)
  • InitializeCriticalSection (Address: 0x1002a128)
  • InitializeCriticalSectionEx (Address: 0x1002a120)
  • InitializeSRWLock (Address: 0x1002a0ec)
  • LeaveCriticalSection (Address: 0x1002a0f0)
  • OpenSemaphoreW (Address: 0x1002a0f4)
  • ReleaseMutex (Address: 0x1002a110)
  • ReleaseSemaphore (Address: 0x1002a11c)
  • ReleaseSRWLockExclusive (Address: 0x1002a0fc)
  • ReleaseSRWLockShared (Address: 0x1002a104)
  • WaitForSingleObject (Address: 0x1002a114)
  • WaitForSingleObjectEx (Address: 0x1002a0e8)
api-ms-win-core-synch-l1-2-0.dll
  • InitOnceBeginInitialize (Address: 0x1002a13c)
  • InitOnceComplete (Address: 0x1002a138)
  • InitOnceExecuteOnce (Address: 0x1002a130)
  • Sleep (Address: 0x1002a134)
api-ms-win-core-sysinfo-l1-1-0.dll
  • GetSystemTimeAsFileTime (Address: 0x1002a148)
  • GetTickCount (Address: 0x1002a144)
api-ms-win-core-threadpool-l1-2-0.dll
  • CloseThreadpoolTimer (Address: 0x1002a158)
  • CreateThreadpoolTimer (Address: 0x1002a154)
  • SetThreadpoolTimer (Address: 0x1002a150)
  • WaitForThreadpoolTimerCallbacks (Address: 0x1002a15c)
api-ms-win-core-util-l1-1-0.dll
  • DecodePointer (Address: 0x1002a168)
  • EncodePointer (Address: 0x1002a164)
api-ms-win-eventing-provider-l1-1-0.dll
  • EventActivityIdControl (Address: 0x1002a174)
  • EventRegister (Address: 0x1002a17c)
  • EventSetInformation (Address: 0x1002a180)
  • EventUnregister (Address: 0x1002a178)
  • EventWriteTransfer (Address: 0x1002a170)
api-ms-win-security-base-l1-1-0.dll
  • GetTokenInformation (Address: 0x1002a188)
d3d11.dll
  • D3D11CreateDevice (Address: 0x1002a190)
dcomp.dll
  • DCompositionCreateDevice2 (Address: 0x1002a198)
msvcrt.dll
  • __CxxFrameHandler3 (Address: 0x1002a1c0)
  • __dllonexit (Address: 0x1002a1c4)
  • _amsg_exit (Address: 0x1002a1dc)
  • _callnewh (Address: 0x1002a1fc)
  • _CxxThrowException (Address: 0x1002a1f8)
  • _except_handler4_common (Address: 0x1002a1e4)
  • _ftol2_sse (Address: 0x1002a1a0)
  • _initterm (Address: 0x1002a1d0)
  • _lock (Address: 0x1002a1cc)
  • _onexit (Address: 0x1002a1a8)
  • _purecall (Address: 0x1002a1b0)
  • _unlock (Address: 0x1002a1c8)
  • _vsnprintf_s (Address: 0x1002a1b8)
  • _vsnwprintf (Address: 0x1002a1ac)
  • _XcptFilter (Address: 0x1002a1e0)
  • ??0exception@@QAE@ABQBD@Z (Address: 0x1002a200)
  • ??0exception@@QAE@ABQBDH@Z (Address: 0x1002a204)
  • ??0exception@@QAE@ABV0@@Z (Address: 0x1002a208)
  • ??1exception@@UAE@XZ (Address: 0x1002a20c)
  • ??1type_info@@UAE@XZ (Address: 0x1002a1a4)
  • ??3@YAXPAX@Z (Address: 0x1002a1ec)
  • ?what@exception@@UBEPBDXZ (Address: 0x1002a210)
  • free (Address: 0x1002a1d8)
  • malloc (Address: 0x1002a1d4)
  • memcmp (Address: 0x1002a1e8)
  • memcpy (Address: 0x1002a1f4)
  • memcpy_s (Address: 0x1002a1b4)
  • memmove (Address: 0x1002a1f0)
  • memmove_s (Address: 0x1002a1bc)
  • memset (Address: 0x1002a214)
ntdll.dll
  • RtlGetDeviceFamilyInfoEnum (Address: 0x1002a220)
  • RtlIsMultiSessionSku (Address: 0x1002a21c)
  • RtlNtStatusToDosError (Address: 0x1002a228)
  • ZwQueryWnfStateData (Address: 0x1002a224)