Gridinsoft Logo
File Icon

The ConhostV1.dll (Console Window Host) File Analysis

Updated 2 minutes ago
Checked by Malware Check
ConhostV1.dll

Technical Analysis

File Name ConhostV1.dll
File Type
PE32+ executable (DLL) (GUI) x86-64, for MS Windows
Scanner Version 1.0.219.174
Database Version 2025-07-07 07:00:20 UTC
✓

Clean File

No threats detected by our scanner

0%
Detection Rate
327,168
File Size (bytes)
2025-07-07
Analysis Date

Scan Another File

File Identification

Hash Type Value Action
MD5
18d124a9ba66135af5e0fa9937f8da4b
SHA1
fb9a5466e2b1d75e619b182a50ddf9cca8514385
SHA256
e159de60ead16eb14db92d0187f39db7b94215c9fbbbc136df7e782a7ff5d4b3
SHA512
d5707f98312747a455c68704e8c82b851511fb60afbf7e13e3565d0381d3bfd47d9f9ae825ff59afb528734e5e6299d89205d63c2aed38c1e18bfaa8894f1e21
ImpHash
55534dddcbeed1c21b1e094bfed4b89f

PE Analysis

Basic Information

▼
Icon
Hash: 00d152c1523e56c619d25f6c96c21a41
Fuzzy: e55641fba39eaff4ee89e5fc0af8f337
dHash: a2ae7a370101a3c0
Image Base 0x180000000
Entry Point 0x18000db50
Compilation Time 1996-01-14 16:20:18
Checksum 0x000594fa (Actual: 0x000594fa)
OS Version 10.0
PEiD Signatures PE32+ executable (DLL) (GUI) x86-64, for MS Windows
PDB Path ConhostV1.pdb
Digital Signature No valid SignedData structure was found.
Imports 31 libraries
Exports 1 functions
Resources 15 Resources
Sections 8 Sections

Version Information

▼
CompanyName Microsoft Corporation
FileDescription Console Window Host
FileVersion 10.0.19041.3636 (WinBuild.160101.0800)
InternalName ConHost
LegalCopyright © Microsoft Corporation. All rights reserved.
OriginalFilename CONHOST.EXE
ProductName Microsoft® Windows® Operating System
ProductVersion 10.0.19041.3636
Translation 0x0409 0x04b0

PE Sections

▼
Name Virtual Address Virtual Size Raw Size Entropy Characteristics MD5
.text 0x00001000 222,429 bytes 222,720 bytes 6.41 (Normal) IMAGE_SCN_CNT_CODE|IMAGE_SCN_MEM_EXECUTE|IMAGE_SCN_MEM_READ 0AF5B0E9E24AF8B1BF45623A9C51ECDE
FE_TEXT 0x00038000 24,755 bytes 25,088 bytes 6.39 (Normal) IMAGE_SCN_CNT_CODE|IMAGE_SCN_MEM_EXECUTE|IMAGE_SCN_MEM_READ 94ECC53478F3FD970C245644218127DD
.rdata 0x0003f000 33,126 bytes 33,280 bytes 5.22 (Normal) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ 80B53EDDE6C028214AC901440B659E1B
.data 0x00048000 5,220 bytes 512 bytes 1.59 (Normal) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ|IMAGE_SCN_MEM_WRITE EEB03EEB8A5BFCB03A61413BD7CEDC7E
.pdata 0x0004a000 8,472 bytes 8,704 bytes 5.49 (Normal) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ 3402241FDD2BA0888D054F44F825297C
.didat 0x0004d000 16 bytes 512 bytes 0.08 (Normal) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ|IMAGE_SCN_MEM_WRITE 04D29F27337A5175F749E17EE3F361B3
.rsrc 0x0004e000 34,488 bytes 34,816 bytes 4.40 (Normal) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ FC6E55104E2386AE89D168E812749E13
.reloc 0x00057000 444 bytes 512 bytes 4.71 (Normal) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_DISCARDABLE|IMAGE_SCN_MEM_READ BF6D115060561B0534C42AE567AB09B8

Resource Analysis

▼
Total Resources: 15 (33,574 bytes)
Resource Type Count Total Size Percentage
MUI 1 216 bytes
0.6%
RT_ICON 10 30,854 bytes
91.9%
RT_GROUP_ICON 1 146 bytes
0.4%
RT_VERSION 1 908 bytes
2.7%
RT_MANIFEST 2 1,450 bytes
4.3%

Certificate Chain Analysis

▼
Certificate Information
Product Microsoft® Windows® Operating System
Description Console Window Host
File Version 10.0.19041.3636 (WinBuild.160101.0800)
Original Name CONHOST.EXE
Internal Name ConHost
Copyright © Microsoft Corporation. All rights reserved.

✓ This file has been digitally signed and the certificate chain has been verified

  • The signature ensures file integrity and authenticity from the publisher
  • Timestamping proves when the signature was applied
Certificate Verification Status

No valid SignedData structure was found.

Recommendation: Verify the file source and ensure it comes from a trusted publisher.

Remember: This is Result of Online Virus Scanner

Gridinsoft Anti-Malware has a much more powerful virus scanning engine. We recommend using it for a more precise diagnosis of infected systems. This brief guide will help you install our flagship product for more accurate diagnostics:

Download Anti-Malware

Keep Your System Protected

This file appears clean, but regular security maintenance is important

  1. Regular Scans: Run weekly system scans to detect new threats before they can cause damage.
  2. Keep Software Updated: Ensure your operating system and all applications have the latest security patches.
  3. Safe Browsing: Avoid suspicious websites and never download software from untrusted sources.
  4. Email Security: Be cautious with email attachments and links, even from known contacts.
Proactive Protection
This file passed all security checks, but stay vigilant. New malware variants appear daily that can evade detection. Always verify files come from official sources and check digital signatures when available.

Leave a Comment

Share your thoughts or insights about this file. Do you align with our conclusion?

* Your feedback could influence our rating, and rest assured, your email will remain confidential and will only be used to communicate with you if necessary.
Your Score for

Gridinsoft Anti-Malware

Cure your PC from any kind of malware

GridinSoft Anti-Malware will help you to protect your computer from spyware, trojans, backdoors, rootkits. It cleans your system from annoying advertisement modules and other malicious stuff developed by hackers.

Anti-Malware Download Now
Gridinsoft Anti-Malware