Curious case of the conhost.exe and condrv.sys
April 1, 2018 in Puzzles, Reversing
Update After I posted the question to Twitter, Alex Ionescu (god of NT kernel internals, for those who don’t know) suggested that it could be an export by ordinal from […]