DataExchange.dll

Description: Data exchange

Version: 10.0.19041.5794

Architecture: 64-bit

Operating System: Windows NT

SHA256: aebc2d9acb0dad59d704531b629a7153

File Size: 230.5 KB

Uploaded At: Dec. 1, 2025, 7:25 a.m.

Views: 11

Security Warning

This file has been flagged as potentially dangerous.

Reason: Detected potentially dangerous functions used for process injection: OpenProcess

Exported Functions

DllCanUnloadNow (Ordinal: 1, Address: 0x6c10)
DllGetActivationFactory (Ordinal: 2, Address: 0x7910)
DllGetClassObject (Ordinal: 3, Address: 0x6100)

Imported DLLs & Functions

api-ms-win-core-apiquery-l1-1-0.dll

ApiSetQueryApiSetPresence (Address: 0x18002d480)

api-ms-win-core-debug-l1-1-0.dll

DebugBreak (Address: 0x18002d490)
IsDebuggerPresent (Address: 0x18002d498)
OutputDebugStringW (Address: 0x18002d4a0)

api-ms-win-core-delayload-l1-1-0.dll

DelayLoadFailureHook (Address: 0x18002d4b0)

api-ms-win-core-delayload-l1-1-1.dll

ResolveDelayLoadedAPI (Address: 0x18002d4c0)

api-ms-win-core-errorhandling-l1-1-0.dll

GetLastError (Address: 0x18002d4e0)
RaiseException (Address: 0x18002d4d0)
SetLastError (Address: 0x18002d4e8)
SetUnhandledExceptionFilter (Address: 0x18002d4f0)
UnhandledExceptionFilter (Address: 0x18002d4d8)

api-ms-win-core-handle-l1-1-0.dll

CloseHandle (Address: 0x18002d500)

api-ms-win-core-heap-l1-1-0.dll

GetProcessHeap (Address: 0x18002d518)
HeapAlloc (Address: 0x18002d520)
HeapFree (Address: 0x18002d510)

api-ms-win-core-heap-l2-1-0.dll

LocalAlloc (Address: 0x18002d530)
LocalFree (Address: 0x18002d538)

api-ms-win-core-kernel32-legacy-l1-1-0.dll

MulDiv (Address: 0x18002d548)

api-ms-win-core-libraryloader-l1-2-0.dll

DisableThreadLibraryCalls (Address: 0x18002d590)
GetModuleFileNameA (Address: 0x18002d578)
GetModuleHandleExW (Address: 0x18002d580)
GetModuleHandleW (Address: 0x18002d568)
GetProcAddress (Address: 0x18002d588)
LoadResource (Address: 0x18002d570)
LockResource (Address: 0x18002d558)
SizeofResource (Address: 0x18002d560)

api-ms-win-core-libraryloader-l1-2-1.dll

FindResourceW (Address: 0x18002d5a0)

api-ms-win-core-localization-l1-2-0.dll

FormatMessageW (Address: 0x18002d5b0)

api-ms-win-core-processthreads-l1-1-0.dll

GetCurrentProcess (Address: 0x18002d5e0)
GetCurrentProcessId (Address: 0x18002d5c0)
GetCurrentThreadId (Address: 0x18002d5d8)
OpenProcessToken (Address: 0x18002d5d0)
TerminateProcess (Address: 0x18002d5c8)

api-ms-win-core-processthreads-l1-1-1.dll

OpenProcess (Address: 0x18002d5f0)

api-ms-win-core-profile-l1-1-0.dll

QueryPerformanceCounter (Address: 0x18002d600)

api-ms-win-core-registry-l1-1-0.dll

RegCloseKey (Address: 0x18002d628)
RegEnumKeyExW (Address: 0x18002d610)
RegGetValueW (Address: 0x18002d630)
RegOpenKeyExW (Address: 0x18002d620)
RegQueryInfoKeyW (Address: 0x18002d618)

api-ms-win-core-rtlsupport-l1-1-0.dll

RtlCaptureContext (Address: 0x18002d648)
RtlLookupFunctionEntry (Address: 0x18002d650)
RtlVirtualUnwind (Address: 0x18002d640)

api-ms-win-core-synch-l1-1-0.dll

AcquireSRWLockExclusive (Address: 0x18002d680)
AcquireSRWLockShared (Address: 0x18002d6a8)
CreateEventExW (Address: 0x18002d6b8)
CreateEventW (Address: 0x18002d6c8)
CreateMutexExW (Address: 0x18002d660)
CreateSemaphoreExW (Address: 0x18002d668)
DeleteCriticalSection (Address: 0x18002d6e8)
EnterCriticalSection (Address: 0x18002d6b0)
InitializeCriticalSection (Address: 0x18002d670)
InitializeCriticalSectionEx (Address: 0x18002d698)
InitializeSRWLock (Address: 0x18002d678)
LeaveCriticalSection (Address: 0x18002d6c0)
OpenSemaphoreW (Address: 0x18002d690)
ReleaseMutex (Address: 0x18002d6f0)
ReleaseSemaphore (Address: 0x18002d6e0)
ReleaseSRWLockExclusive (Address: 0x18002d6d0)
ReleaseSRWLockShared (Address: 0x18002d688)
WaitForSingleObject (Address: 0x18002d6d8)
WaitForSingleObjectEx (Address: 0x18002d6a0)

api-ms-win-core-synch-l1-2-0.dll

InitOnceBeginInitialize (Address: 0x18002d710)
InitOnceComplete (Address: 0x18002d708)
InitOnceExecuteOnce (Address: 0x18002d700)
Sleep (Address: 0x18002d718)

api-ms-win-core-sysinfo-l1-1-0.dll

GetSystemTimeAsFileTime (Address: 0x18002d730)
GetTickCount (Address: 0x18002d728)

api-ms-win-core-threadpool-l1-2-0.dll

CloseThreadpoolTimer (Address: 0x18002d758)
CreateThreadpoolTimer (Address: 0x18002d748)
SetThreadpoolTimer (Address: 0x18002d750)
WaitForThreadpoolTimerCallbacks (Address: 0x18002d740)

api-ms-win-core-util-l1-1-0.dll

DecodePointer (Address: 0x18002d770)
EncodePointer (Address: 0x18002d768)

api-ms-win-eventing-provider-l1-1-0.dll

EventActivityIdControl (Address: 0x18002d788)
EventRegister (Address: 0x18002d798)
EventSetInformation (Address: 0x18002d7a0)
EventUnregister (Address: 0x18002d790)
EventWriteTransfer (Address: 0x18002d780)

api-ms-win-security-base-l1-1-0.dll

GetTokenInformation (Address: 0x18002d7b0)

d3d11.dll

D3D11CreateDevice (Address: 0x18002d7c0)

dcomp.dll

DCompositionCreateDevice2 (Address: 0x18002d7d0)

msvcrt.dll

__C_specific_handler (Address: 0x18002d838)
__CxxFrameHandler3 (Address: 0x18002d820)
__dllonexit (Address: 0x18002d7f0)
_amsg_exit (Address: 0x18002d858)
_callnewh (Address: 0x18002d898)
_CxxThrowException (Address: 0x18002d888)
_initterm (Address: 0x18002d840)
_lock (Address: 0x18002d830)
_onexit (Address: 0x18002d868)
_purecall (Address: 0x18002d800)
_unlock (Address: 0x18002d828)
_vsnprintf_s (Address: 0x18002d810)
_vsnwprintf (Address: 0x18002d7f8)
_XcptFilter (Address: 0x18002d860)
??0exception@@QEAA@AEBQEBD@Z (Address: 0x18002d8a0)
??0exception@@QEAA@AEBQEBDH@Z (Address: 0x18002d8a8)
??0exception@@QEAA@AEBV0@@Z (Address: 0x18002d8b0)
??1exception@@UEAA@XZ (Address: 0x18002d8b8)
??1type_info@@UEAA@XZ (Address: 0x18002d7e0)
??3@YAXPEAX@Z (Address: 0x18002d878)
?what@exception@@UEBAPEBDXZ (Address: 0x18002d890)
free (Address: 0x18002d850)
malloc (Address: 0x18002d848)
memcmp (Address: 0x18002d870)
memcpy (Address: 0x18002d880)
memcpy_s (Address: 0x18002d808)
memmove (Address: 0x18002d7e8)
memmove_s (Address: 0x18002d818)
memset (Address: 0x18002d8c0)

ntdll.dll

RtlGetDeviceFamilyInfoEnum (Address: 0x18002d8d8)
RtlIsMultiSessionSku (Address: 0x18002d8d0)
RtlNtStatusToDosError (Address: 0x18002d8e8)
ZwQueryWnfStateData (Address: 0x18002d8e0)