| 文件名 | ConhostV1.dll |
| 文件类型 |
PE32+ executable (DLL) (GUI) x86-64, for MS Windows
|
| 扫描器版本 | 1.0.219.174 |
| 数据库版本 | 2025-07-07 07:00:20 UTC |
我们的扫描器未检测到威胁
| 哈希类型 | 值 | 操作 |
|---|---|---|
| MD5 |
18d124a9ba66135af5e0fa9937f8da4b
|
|
| SHA1 |
fb9a5466e2b1d75e619b182a50ddf9cca8514385
|
|
| SHA256 |
e159de60ead16eb14db92d0187f39db7b94215c9fbbbc136df7e782a7ff5d4b3
|
|
| SHA512 |
d5707f98312747a455c68704e8c82b851511fb60afbf7e13e3565d0381d3bfd47d9f9ae825ff59afb528734e5e6299d89205d63c2aed38c1e18bfaa8894f1e21
|
|
| ImpHash |
55534dddcbeed1c21b1e094bfed4b89f
|
| 图标 |
哈希: 00d152c1523e56c619d25f6c96c21a41
模糊: e55641fba39eaff4ee89e5fc0af8f337 dHash: a2ae7a370101a3c0 |
| 映像基址 | 0x180000000 |
| 入口点 | 0x18000db50 |
| 编译时间 | 1996-01-14 16:20:18 |
| 校验和 | 0x000594fa (实际: 0x000594fa) |
| 操作系统版本 | 10.0 |
| PEiD 签名 |
PE32+ executable (DLL) (GUI) x86-64, for MS Windows
|
| PDB 路径 | ConhostV1.pdb |
| 数字签名 | No valid SignedData structure was found. |
| 导入 | 31 库 |
| 导出 | 1 函数 |
| 资源 | 15 资源 |
| 节 | 8 节 |
| CompanyName | Microsoft Corporation |
| FileDescription | Console Window Host |
| FileVersion | 10.0.19041.3636 (WinBuild.160101.0800) |
| InternalName | ConHost |
| LegalCopyright | © Microsoft Corporation. All rights reserved. |
| OriginalFilename | CONHOST.EXE |
| ProductName | Microsoft® Windows® Operating System |
| ProductVersion | 10.0.19041.3636 |
| Translation | 0x0409 0x04b0 |
| 名称 | 虚拟地址 | 虚拟大小 | 原始大小 | 熵 | 特征 | MD5 |
|---|---|---|---|---|---|---|
.text |
0x00001000 |
222,429 bytes | 222,720 bytes | 6.41 (正常) |
IMAGE_SCN_CNT_CODE|IMAGE_SCN_MEM_EXECUTE|IMAGE_SCN_MEM_READ
|
0AF5B0E9E24AF8B1BF45623A9C51ECDE |
FE_TEXT |
0x00038000 |
24,755 bytes | 25,088 bytes | 6.39 (正常) |
IMAGE_SCN_CNT_CODE|IMAGE_SCN_MEM_EXECUTE|IMAGE_SCN_MEM_READ
|
94ECC53478F3FD970C245644218127DD |
.rdata |
0x0003f000 |
33,126 bytes | 33,280 bytes | 5.22 (正常) |
IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ
|
80B53EDDE6C028214AC901440B659E1B |
.data |
0x00048000 |
5,220 bytes | 512 bytes | 1.59 (正常) |
IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ|IMAGE_SCN_MEM_WRITE
|
EEB03EEB8A5BFCB03A61413BD7CEDC7E |
.pdata |
0x0004a000 |
8,472 bytes | 8,704 bytes | 5.49 (正常) |
IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ
|
3402241FDD2BA0888D054F44F825297C |
.didat |
0x0004d000 |
16 bytes | 512 bytes | 0.08 (正常) |
IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ|IMAGE_SCN_MEM_WRITE
|
04D29F27337A5175F749E17EE3F361B3 |
.rsrc |
0x0004e000 |
34,488 bytes | 34,816 bytes | 4.40 (正常) |
IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ
|
FC6E55104E2386AE89D168E812749E13 |
.reloc |
0x00057000 |
444 bytes | 512 bytes | 4.71 (正常) |
IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_DISCARDABLE|IMAGE_SCN_MEM_READ
|
BF6D115060561B0534C42AE567AB09B8 |
| 资源类型 | 数量 | 总大小 | 百分比 |
|---|---|---|---|
| MUI | 1 | 216 字节 | |
| RT_ICON | 10 | 30,854 字节 | |
| RT_GROUP_ICON | 1 | 146 字节 | |
| RT_VERSION | 1 | 908 字节 | |
| RT_MANIFEST | 2 | 1,450 字节 |
| 产品 | Microsoft® Windows® Operating System |
| 描述 | Console Window Host |
| 文件版本 | 10.0.19041.3636 (WinBuild.160101.0800) |
| 原始名称 | CONHOST.EXE |
| 内部名称 | ConHost |
| 版权 | © Microsoft Corporation. All rights reserved. |
✓ 此文件已进行数字签名，证书链已验证。
No valid SignedData structure was found.
建议: 验证文件来源并确保它来自可信的发布者.
Gridinsoft Anti-Malware 拥有更强大的病毒扫描引擎。我们建议使用它来更准确地诊断受感染的系统。这个简短的指南将帮助您安装我们的旗舰产品以进行更准确的诊断：
下载反恶意软件此文件看起来是干净的，但定期的安全维护很重要
