DataExchangeHost.exe

  • File Path: C:\WINDOWS\system32\DataExchangeHost.exe
  • Description: Data Exchange Host

Hashes

Type Hash
MD5 DA1914285BDAB1830DF0F5C5D4E4EF1B
SHA1 0D1FE9A1D9267631C03DAE4F736FA69A13634B2C
SHA256 D6E247623BBF769ECDE171B107B5E954835BD5E14E73A5745F1180C598827C13
SHA384 50A886CC4C9635CDA0B0022C52D922B7C3489C61CD62FF07FD4A3101F10840ED6848010E616846CBDBA68091DCB3E3DB
SHA512 5105F1AF642DF68F1DAFAB4ECEE6FE8E6842E85A2BBB9747EDC9295B97912190E3A0C8B4A184EE553B1905909DDF365D9314429EC2EDC6E80F52E25E0DC7675A
SSDEEP 6144:5T3Y3pGdP1Ala2fHatUAo4+DScBWXkYYZ:teIXAldHYUA4WXXe
IMP AE8F2C54C58C02628A131DA379B343BF
PESHA1 E000FC411E5DFDED730016B5F85E1C25C0C88EA1
PE256 B70C446C79C4A4C3C09B5F950C046024A2BEEFA7CD38EA684EA36AA6CBB4F7A5

Runtime Data

Loaded Modules:

Path
C:\WINDOWS\System32\combase.dll
C:\WINDOWS\system32\DataExchangeHost.exe
C:\WINDOWS\System32\KERNEL32.DLL
C:\WINDOWS\System32\KERNELBASE.dll
C:\WINDOWS\SYSTEM32\ntdll.dll
C:\WINDOWS\System32\ucrtbase.dll

Signature

  • Status: Signature verified.
  • Serial: 33000002ED2C45E4C145CF48440000000002ED
  • Thumbprint: 312860D2047EB81F8F58C29FF19ECDB4C634CF6A
  • Issuer: CN=Microsoft Windows Production PCA 2011, O=Microsoft Corporation, L=Redmond, S=Washington, C=US
  • Subject: CN=Microsoft Windows, O=Microsoft Corporation, L=Redmond, S=Washington, C=US

File Metadata

  • Original Filename: DataExchangeHost.exe.mui
  • Product Name: Microsoft Windows Operating System
  • Company Name: Microsoft Corporation
  • File Version: 10.0.22000.1 (WinBuild.160101.0800)
  • Product Version: 10.0.22000.1
  • Language: English (United States)
  • Legal Copyright: Microsoft Corporation. All rights reserved.
  • Machine Type: 64-bit

File Scan

  • VirusTotal Detections: 0/71
  • VirusTotal Link: https://www.virustotal.com/gui/file/d6e247623bbf769ecde171b107b5e954835bd5e14e73a5745f1180c598827c13/detection

MIT License. Copyright (c) 2020-2021 Strontic.