DevicePairingExperienceMEM.dll

Description: Device Pairing Experience contract implementation

Authors: © Microsoft Corporation. All rights reserved.

Version: 10.0.19041.6280

Architecture: 64-bit

Operating System: Windows NT

SHA256: 376f73f5d22341b073e2b86d0a3e95c7

File Size: 148.0 KB

Uploaded At: Dec. 1, 2025, 7:26 a.m.

Views: 9

Security Warning

This file has been flagged as potentially dangerous.


Reason: Detected potentially dangerous functions used for process injection: OpenProcess

Exported Functions

  • DllCanUnloadNow (Ordinal: 1, Address: 0x1ad0)
  • DllGetActivationFactory (Ordinal: 2, Address: 0x1800)
  • DllGetClassObject (Ordinal: 3, Address: 0x19e0)

Imported DLLs & Functions

api-ms-win-appmodel-runtime-l1-1-0.dll
  • GetPackagesByPackageFamily (Address: 0x18001c940)
api-ms-win-core-com-l1-1-0.dll
  • CoCreateFreeThreadedMarshaler (Address: 0x18001c990)
  • CoCreateInstance (Address: 0x18001c988)
  • CoGetMalloc (Address: 0x18001c950)
  • CoMarshalInterface (Address: 0x18001c978)
  • CoReleaseMarshalData (Address: 0x18001c968)
  • CoTaskMemAlloc (Address: 0x18001c960)
  • CoTaskMemFree (Address: 0x18001c980)
  • CreateStreamOnHGlobal (Address: 0x18001c970)
  • PropVariantClear (Address: 0x18001c958)
api-ms-win-core-com-l1-1-1.dll
  • RoGetAgileReference (Address: 0x18001c9a0)
api-ms-win-core-debug-l1-1-0.dll
  • DebugBreak (Address: 0x18001c9b8)
  • IsDebuggerPresent (Address: 0x18001c9c0)
  • OutputDebugStringW (Address: 0x18001c9b0)
api-ms-win-core-errorhandling-l1-1-0.dll
  • GetLastError (Address: 0x18001c9e0)
  • RaiseException (Address: 0x18001c9f0)
  • SetLastError (Address: 0x18001c9e8)
  • SetUnhandledExceptionFilter (Address: 0x18001c9d8)
  • UnhandledExceptionFilter (Address: 0x18001c9d0)
api-ms-win-core-handle-l1-1-0.dll
  • CloseHandle (Address: 0x18001ca00)
api-ms-win-core-heap-l1-1-0.dll
  • GetProcessHeap (Address: 0x18001ca20)
  • HeapAlloc (Address: 0x18001ca10)
  • HeapFree (Address: 0x18001ca18)
api-ms-win-core-heap-l2-1-0.dll
  • LocalAlloc (Address: 0x18001ca30)
api-ms-win-core-interlocked-l1-1-0.dll
  • InitializeSListHead (Address: 0x18001ca40)
api-ms-win-core-libraryloader-l1-2-0.dll
  • DisableThreadLibraryCalls (Address: 0x18001ca78)
  • GetModuleFileNameA (Address: 0x18001ca68)
  • GetModuleHandleExW (Address: 0x18001ca58)
  • GetModuleHandleW (Address: 0x18001ca70)
  • GetProcAddress (Address: 0x18001ca50)
  • LoadStringW (Address: 0x18001ca60)
api-ms-win-core-localization-l1-2-0.dll
  • FormatMessageW (Address: 0x18001ca88)
api-ms-win-core-processthreads-l1-1-0.dll
  • GetCurrentProcess (Address: 0x18001cab0)
  • GetCurrentProcessId (Address: 0x18001ca98)
  • GetCurrentThreadId (Address: 0x18001caa0)
  • OpenProcessToken (Address: 0x18001cab8)
  • TerminateProcess (Address: 0x18001caa8)
api-ms-win-core-processthreads-l1-1-1.dll
  • IsProcessorFeaturePresent (Address: 0x18001cac8)
  • OpenProcess (Address: 0x18001cad0)
api-ms-win-core-profile-l1-1-0.dll
  • QueryPerformanceCounter (Address: 0x18001cae0)
api-ms-win-core-rtlsupport-l1-1-0.dll
  • RtlCaptureContext (Address: 0x18001cb00)
  • RtlLookupFunctionEntry (Address: 0x18001caf8)
  • RtlVirtualUnwind (Address: 0x18001caf0)
api-ms-win-core-string-l1-1-0.dll
  • CompareStringOrdinal (Address: 0x18001cb10)
api-ms-win-core-synch-l1-1-0.dll
  • AcquireSRWLockExclusive (Address: 0x18001cb38)
  • AcquireSRWLockShared (Address: 0x18001cb40)
  • CreateMutexExW (Address: 0x18001cb80)
  • CreateSemaphoreExW (Address: 0x18001cb68)
  • DeleteCriticalSection (Address: 0x18001cb58)
  • EnterCriticalSection (Address: 0x18001cb50)
  • InitializeCriticalSection (Address: 0x18001cb30)
  • InitializeCriticalSectionEx (Address: 0x18001cb60)
  • LeaveCriticalSection (Address: 0x18001cb48)
  • OpenSemaphoreW (Address: 0x18001cb98)
  • ReleaseMutex (Address: 0x18001cb90)
  • ReleaseSemaphore (Address: 0x18001cb78)
  • ReleaseSRWLockExclusive (Address: 0x18001cb20)
  • ReleaseSRWLockShared (Address: 0x18001cb28)
  • WaitForSingleObject (Address: 0x18001cb70)
  • WaitForSingleObjectEx (Address: 0x18001cb88)
api-ms-win-core-synch-l1-2-0.dll
  • InitOnceExecuteOnce (Address: 0x18001cbc0)
  • Sleep (Address: 0x18001cbb8)
  • WaitOnAddress (Address: 0x18001cbb0)
  • WakeByAddressSingle (Address: 0x18001cba8)
api-ms-win-core-sysinfo-l1-1-0.dll
  • GetSystemTimeAsFileTime (Address: 0x18001cbd8)
  • GetTickCount (Address: 0x18001cbd0)
api-ms-win-core-threadpool-l1-2-0.dll
  • CloseThreadpoolTimer (Address: 0x18001cc00)
  • CreateThreadpoolTimer (Address: 0x18001cbf0)
  • SetThreadpoolTimer (Address: 0x18001cbe8)
  • WaitForThreadpoolTimerCallbacks (Address: 0x18001cbf8)
api-ms-win-core-util-l1-1-0.dll
  • DecodePointer (Address: 0x18001cc18)
  • EncodePointer (Address: 0x18001cc10)
api-ms-win-core-winrt-error-l1-1-0.dll
  • GetRestrictedErrorInfo (Address: 0x18001cc48)
  • RoOriginateError (Address: 0x18001cc30)
  • RoOriginateErrorW (Address: 0x18001cc28)
  • RoTransformError (Address: 0x18001cc38)
  • SetRestrictedErrorInfo (Address: 0x18001cc40)
api-ms-win-core-winrt-error-l1-1-1.dll
  • IsErrorPropagationEnabled (Address: 0x18001cc68)
  • RoGetMatchingRestrictedErrorInfo (Address: 0x18001cc58)
  • RoReportFailedDelegate (Address: 0x18001cc60)
api-ms-win-core-winrt-l1-1-0.dll
  • RoActivateInstance (Address: 0x18001cc80)
  • RoGetActivationFactory (Address: 0x18001cc78)
api-ms-win-core-winrt-string-l1-1-0.dll
  • WindowsCreateString (Address: 0x18001ccc0)
  • WindowsCreateStringReference (Address: 0x18001cc90)
  • WindowsDeleteString (Address: 0x18001cca0)
  • WindowsDuplicateString (Address: 0x18001cca8)
  • WindowsGetStringRawBuffer (Address: 0x18001cc98)
  • WindowsIsStringEmpty (Address: 0x18001ccb0)
  • WindowsStringHasEmbeddedNull (Address: 0x18001ccb8)
  • WindowsSubstringWithSpecifiedLength (Address: 0x18001ccc8)
api-ms-win-crt-private-l1-1-0.dll
  • __C_specific_handler (Address: 0x18001cd48)
  • __CxxFrameHandler3 (Address: 0x18001cd70)
  • __CxxFrameHandler4 (Address: 0x18001cdb8)
  • __std_terminate (Address: 0x18001cdb0)
  • _CxxThrowException (Address: 0x18001cd78)
  • _o___std_exception_copy (Address: 0x18001cd98)
  • _o___std_exception_destroy (Address: 0x18001cd90)
  • _o___std_type_info_destroy_list (Address: 0x18001cd88)
  • _o___stdio_common_vsnprintf_s (Address: 0x18001cd68)
  • _o___stdio_common_vswprintf (Address: 0x18001cd50)
  • _o__callnewh (Address: 0x18001cda8)
  • _o__cexit (Address: 0x18001cda0)
  • _o__configure_narrow_argv (Address: 0x18001cd80)
  • _o__crt_atexit (Address: 0x18001cd60)
  • _o__errno (Address: 0x18001cd58)
  • _o__execute_onexit_table (Address: 0x18001ccd8)
  • _o__initialize_narrow_environment (Address: 0x18001cce0)
  • _o__initialize_onexit_table (Address: 0x18001cce8)
  • _o__invalid_parameter_noinfo (Address: 0x18001ccf0)
  • _o__purecall (Address: 0x18001ccf8)
  • _o__register_onexit_function (Address: 0x18001cd00)
  • _o__seh_filter_dll (Address: 0x18001cd08)
  • _o__wcsicmp (Address: 0x18001cd18)
  • _o_free (Address: 0x18001cd20)
  • _o_malloc (Address: 0x18001cd28)
  • _o_pow (Address: 0x18001cd30)
  • _o_terminate (Address: 0x18001cd38)
  • _o_toupper (Address: 0x18001cd40)
  • memcmp (Address: 0x18001cdc0)
  • memcpy (Address: 0x18001cdc8)
  • memmove (Address: 0x18001cd10)
api-ms-win-crt-runtime-l1-1-0.dll
  • _initterm (Address: 0x18001cdd8)
  • _initterm_e (Address: 0x18001cde0)
api-ms-win-crt-string-l1-1-0.dll
  • memset (Address: 0x18001cdf0)
  • wcscspn (Address: 0x18001cdf8)
api-ms-win-eventing-provider-l1-1-0.dll
  • EventProviderEnabled (Address: 0x18001ce08)
  • EventRegister (Address: 0x18001ce18)
  • EventSetInformation (Address: 0x18001ce20)
  • EventUnregister (Address: 0x18001ce10)
  • EventWriteTransfer (Address: 0x18001ce28)
api-ms-win-security-base-l1-1-0.dll
  • GetTokenInformation (Address: 0x18001ce38)
api-ms-win-shcore-taskpool-l1-1-0.dll
  • SHTaskPoolAllowThreadReuse (Address: 0x18001ce50)
  • SHTaskPoolQueueTask (Address: 0x18001ce48)
api-ms-win-shcore-thread-l1-1-0.dll
  • SHGetThreadRef (Address: 0x18001ce60)