conhost.exe
v10.0.26100.7705
64-bit
Windows NT
Analyzed
Security warning
This file has been flagged as potentially dangerous, and downloads are disabled.
Reason: Detected potentially dangerous functions used for process injection: OpenProcess
Exported functions 0
No exported functions.
No function matches your filter.
Imported DLLs & functions 264
ApiSetQueryApiSetPresence
0x1400b9640
CommandLineToArgvW
0x1400b9650
DebugBreak
0x1400b9670
IsDebuggerPresent
0x1400b9668
OutputDebugStringW
0x1400b9660
DelayLoadFailureHook
0x1400b9680
ResolveDelayLoadedAPI
0x1400b9690
GetLastError
0x1400b96b0
SetLastError
0x1400b96a8
SetUnhandledExceptionFilter
0x1400b96b8
UnhandledExceptionFilter
0x1400b96a0
GetProcessHeap
0x1400b9708
HeapAlloc
0x1400b9700
HeapFree
0x1400b96f8
GlobalAlloc
0x1400b9718
GlobalFree
0x1400b9720
LocalFree
0x1400b9728
GlobalLock
0x1400b9748
GlobalSize
0x1400b9740
GlobalUnlock
0x1400b9738
InitializeSListHead
0x1400b9758
DeviceIoControl
0x1400b9768
CancelSynchronousIo
0x1400b9778
MulDiv
0x1400b9788
FindResourceExW
0x1400b97e8
FreeLibrary
0x1400b97a0
GetModuleFileNameA
0x1400b97c8
GetModuleFileNameW
0x1400b97a8
GetModuleHandleExW
0x1400b9798
GetModuleHandleW
0x1400b97e0
GetProcAddress
0x1400b97d8
LoadLibraryExW
0x1400b97c0
LoadResource
0x1400b97b8
LoadStringW
0x1400b97d0
LockResource
0x1400b97b0
LoadLibraryW
0x1400b97f8
FormatMessageW
0x1400b9818
GetACP
0x1400b9828
GetCPInfo
0x1400b9808
GetOEMCP
0x1400b9820
IsValidCodePage
0x1400b9810
CreatePipe
0x1400b9850
PathCchRemoveExtension
0x1400b9860
ExpandEnvironmentStringsW
0x1400b9880
GetCommandLineW
0x1400b9878
GetEnvironmentVariableW
0x1400b9870
GetStdHandle
0x1400b9898
SearchPathW
0x1400b9888
SetEnvironmentVariableW
0x1400b9890
CreateProcessW
0x1400b9910
CreateThread
0x1400b98a8
DeleteProcThreadAttributeList
0x1400b9900
ExitProcess
0x1400b98b0
ExitThread
0x1400b98c8
GetCurrentProcess
0x1400b98d0
GetCurrentProcessId
0x1400b98b8
GetCurrentThread
0x1400b9918
GetCurrentThreadId
0x1400b98f0
GetProcessTimes
0x1400b98d8
GetStartupInfoW
0x1400b98e8
InitializeProcThreadAttributeList
0x1400b9920
OpenProcessToken
0x1400b9928
ProcessIdToSessionId
0x1400b98f8
SetProcessShutdownParameters
0x1400b98c0
TerminateProcess
0x1400b98e0
UpdateProcThreadAttribute
0x1400b9908
IsProcessorFeaturePresent
0x1400b9938
OpenProcess
0x1400b9940
SetThreadDescription
0x1400b9950
QueryPerformanceCounter
0x1400b9960
K32GetModuleFileNameExW
0x1400b9978
QueryFullProcessImageNameW
0x1400b9970
QueryUnbiasedInterruptTime
0x1400b9988
RegCloseKey
0x1400b9998
RegEnumValueW
0x1400b99b0
RegGetValueW
0x1400b99a8
RegOpenCurrentUser
0x1400b99a0
RegOpenKeyExW
0x1400b99c0
RegQueryValueExW
0x1400b99b8
RtlCaptureContext
0x1400b99e0
RtlLookupFunctionEntry
0x1400b99d8
RtlVirtualUnwind
0x1400b99d0
PathFileExistsW
0x1400b9a00
PathFindFileNameW
0x1400b99f0
PathIsSameRootW
0x1400b99f8
CreateActCtxW
0x1400b9a10
CompareStringOrdinal
0x1400b9a28
GetStringTypeW
0x1400b9a38
MultiByteToWideChar
0x1400b9a30
WideCharToMultiByte
0x1400b9a20
AcquireSRWLockExclusive
0x1400b9ae0
AcquireSRWLockShared
0x1400b9ad0
CreateEventExW
0x1400b9a70
CreateEventW
0x1400b9a60
CreateMutexExW
0x1400b9aa0
CreateSemaphoreExW
0x1400b9ab0
DeleteCriticalSection
0x1400b9a50
EnterCriticalSection
0x1400b9ab8
InitializeCriticalSectionAndSpinCount
0x1400b9a68
InitializeCriticalSectionEx
0x1400b9aa8
LeaveCriticalSection
0x1400b9ac0
OpenSemaphoreW
0x1400b9a98
ReleaseMutex
0x1400b9a88
ReleaseSemaphore
0x1400b9a48
ReleaseSRWLockExclusive
0x1400b9ad8
ReleaseSRWLockShared
0x1400b9ac8
ResetEvent
0x1400b9a80
SetEvent
0x1400b9a78
WaitForSingleObject
0x1400b9a58
WaitForSingleObjectEx
0x1400b9a90
InitOnceBeginInitialize
0x1400b9af0
InitOnceComplete
0x1400b9af8
SignalObjectAndWait
0x1400b9b08
Sleep
0x1400b9b18
WaitOnAddress
0x1400b9b10
WakeByAddressAll
0x1400b9b00
GetSystemDirectoryW
0x1400b9b28
GetSystemTimeAsFileTime
0x1400b9b30
GetWindowsDirectoryW
0x1400b9b38
CloseThreadpoolTimer
0x1400b9b70
CloseThreadpoolWait
0x1400b9b48
CreateThreadpoolTimer
0x1400b9b60
SetThreadpoolTimer
0x1400b9b78
SetThreadpoolWait
0x1400b9b50
WaitForThreadpoolTimerCallbacks
0x1400b9b68
WaitForThreadpoolWaitCallbacks
0x1400b9b58
Beep
0x1400b9b88
__C_specific_handler
0x1400b9c88
__current_exception
0x1400b9c90
__current_exception_context
0x1400b9c98
__CxxFrameHandler3
0x1400b9ca8
__CxxFrameHandler4
0x1400b9d30
__std_terminate
0x1400b9d28
_CxxThrowException
0x1400b9ca0
_o___p__commode
0x1400b9d20
_o___std_exception_copy
0x1400b9d00
_o___std_exception_destroy
0x1400b9cf8
_o___stdio_common_vsprintf_s
0x1400b9ce0
_o___stdio_common_vswprintf
0x1400b9cd8
_o___stdio_common_vswprintf_s
0x1400b9cd0
_o__aligned_free
0x1400b9cb8
_o__aligned_malloc
0x1400b9cb0
_o__callnewh
0x1400b9d08
_o__cexit
0x1400b9cf0
_o__configthreadlocale
0x1400b9d18
_o__configure_wide_argv
0x1400b9d10
_o__crt_atexit
0x1400b9ce8
_o__errno
0x1400b9cc8
_o__exit
0x1400b9cc0
_o__get_wide_winmain_command_line
0x1400b9b98
_o__initialize_onexit_table
0x1400b9ba0
_o__initialize_wide_environment
0x1400b9ba8
_o__invalid_parameter_noinfo
0x1400b9bb0
_o__invalid_parameter_noinfo_noreturn
0x1400b9bb8
_o__purecall
0x1400b9bc0
_o__register_onexit_function
0x1400b9bc8
_o__seh_filter_exe
0x1400b9bd0
_o__set_app_type
0x1400b9bd8
_o__set_fmode
0x1400b9be0
_o__set_new_mode
0x1400b9be8
_o__wcsicmp
0x1400b9bf0
_o__wcsnicmp
0x1400b9d38
_o_calloc
0x1400b9bf8
_o_ceilf
0x1400b9c00
_o_exit
0x1400b9c08
_o_floorf
0x1400b9c10
_o_free
0x1400b9c18
_o_log10
0x1400b9c20
_o_lround
0x1400b9c28
_o_lroundf
0x1400b9c30
_o_malloc
0x1400b9c38
_o_pow
0x1400b9c40
_o_roundf
0x1400b9c48
_o_strcpy_s
0x1400b9c50
_o_terminate
0x1400b9c58
_o_towlower
0x1400b9c60
_o_towupper
0x1400b9c68
_o_wcscpy_s
0x1400b9c70
_o_wcstol
0x1400b9c78
_o_wcstoul
0x1400b9c80
memcmp
0x1400b9d40
memcpy
0x1400b9d48
memmove
0x1400b9d50
_c_exit
0x1400b9d78
_initterm
0x1400b9d68
_initterm_e
0x1400b9d70
_register_thread_local_exe_atexit_callback
0x1400b9d60
_time64
0x1400b9da0
EventActivityIdControl
0x1400b9db8
EventRegister
0x1400b9dc0
EventSetInformation
0x1400b9dc8
EventUnregister
0x1400b9db0
EventWriteTransfer
0x1400b9dd0
GetSidSubAuthority
0x1400b9df0
GetSidSubAuthorityCount
0x1400b9de8
GetTokenInformation
0x1400b9de0
SHCoCreateInstance
0x1400b9e00
_Query_perf_counter
0x1400b9eb8
_Query_perf_frequency
0x1400b9f68
?_Lock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UEAAXXZ
0x1400b9ed8
?_Osfx@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAXXZ
0x1400b9e40
?_Pninc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAPEADXZ
0x1400b9ee8
?_Unlock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UEAAXXZ
0x1400b9ee0
?_Xbad_alloc@std@@YAXXZ
0x1400b9e88
?_Xbad_function_call@std@@YAXXZ
0x1400b9f98
?_Xinvalid_argument@std@@YAXPEBD@Z
0x1400b9fa0
?_Xlength_error@std@@YAXPEBD@Z
0x1400b9f88
?_Xout_of_range@std@@YAXPEBD@Z
0x1400b9f90
??0?$basic_ios@DU?$char_traits@D@std@@@std@@IEAA@XZ
0x1400b9e18
??0?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAA@PEAV?$basic_streambuf@DU?$char_traits@D@std@@@1@_N@Z
0x1400b9e10
??0?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAA@XZ
0x1400b9e50
??1?$basic_ios@DU?$char_traits@D@std@@@std@@UEAA@XZ
0x1400b9f80
??1?$basic_ostream@DU?$char_traits@D@std@@@std@@UEAA@XZ
0x1400b9ec8
??1?$basic_streambuf@DU?$char_traits@D@std@@@std@@UEAA@XZ
0x1400b9f40
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@_K@Z
0x1400b9ea8
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@H@Z
0x1400b9e70
?eback@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEBAPEADXZ
0x1400b9f60
?egptr@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEBAPEADXZ
0x1400b9f58
?epptr@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEBAPEADXZ
0x1400b9f50
?fill@?$basic_ios@DU?$char_traits@D@std@@@std@@QEAADD@Z
0x1400b9e60
?fill@?$basic_ios@DU?$char_traits@D@std@@@std@@QEBADXZ
0x1400b9e20
?flags@ios_base@std@@QEBAHXZ
0x1400b9ea0
?flush@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@XZ
0x1400b9e38
?gbump@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAXH@Z
0x1400b9ef8
?good@ios_base@std@@QEBA_NXZ
0x1400b9e90
?gptr@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEBAPEADXZ
0x1400b9f18
?imbue@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAXAEBVlocale@2@@Z
0x1400b9f38
?pbase@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEBAPEADXZ
0x1400b9e58
?pptr@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEBAPEADXZ
0x1400b9f48
?rdbuf@?$basic_ios@DU?$char_traits@D@std@@@std@@QEBAPEAV?$basic_streambuf@DU?$char_traits@D@std@@@2@XZ
0x1400b9e28
?setbuf@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAPEAV12@PEAD_J@Z
0x1400b9f28
?setg@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAXPEAD00@Z
0x1400b9f70
?setp@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAXPEAD0@Z
0x1400b9f78
?setp@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAXPEAD00@Z
0x1400b9f20
?setstate@?$basic_ios@DU?$char_traits@D@std@@@std@@QEAAXH_N@Z
0x1400b9e30
?setw@std@@YA?AU?$_Smanip@_J@1@_J@Z
0x1400b9ec0
?showmanyc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JXZ
0x1400b9ef0
?sputc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAAHD@Z
0x1400b9e80
?sputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAA_JPEBD_J@Z
0x1400b9e68
?sync@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAHXZ
0x1400b9f30
?tellp@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAA?AV?$fpos@U_Mbstatet@@@2@XZ
0x1400b9eb0
?tie@?$basic_ios@DU?$char_traits@D@std@@@std@@QEBAPEAV?$basic_ostream@DU?$char_traits@D@std@@@2@XZ
0x1400b9e48
?uflow@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAHXZ
0x1400b9f00
?uncaught_exceptions@std@@YAHXZ
0x1400b9e98
?width@ios_base@std@@QEAA_J_J@Z
0x1400b9e78
?width@ios_base@std@@QEBA_JXZ
0x1400b9ed0
?xsgetn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JPEAD_J@Z
0x1400b9f08
?xsputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JPEBD_J@Z
0x1400b9f10
AlpcGetMessageAttribute
0x1400b9fd8
AlpcInitializeMessageAttribute
0x1400b9fe8
CsrClientCallServer
0x1400b9fc0
NtAlpcConnectPort
0x1400b9fe0
NtAlpcQueryInformationMessage
0x1400b9fb0
NtAlpcSendWaitReceivePort
0x1400b9fd0
NtQueryVolumeInformationFile
0x1400b9fc8
RtlQueryPackageClaims
0x1400b9fb8
No function matches your filter.