How to remove AppHost.exe
- File Details
- Overview
- Analysis
AppHost.exe
The module AppHost.exe has been detected as Ransom.Wacatac
File Details
| Product Name: |
|
| Company Name: |
|
| MD5: |
7d85bfb28dd45f743c697d4c030c7c76 |
| Size: |
303 KB |
| First Published: |
2024-05-08 23:01:28 (5 months ago) |
| Latest Published: |
2024-10-03 23:01:55 (2 days ago) |
| Status: |
Ransom.Wacatac (on last analysis) |
|
| Analysis Date: |
2024-10-03 23:01:55 (2 days ago) |
| %commonappdata% |
| %commonappdata% |
| %commonappdata% |
| %commonappdata% |
| %commonappdata% |
| %commonappdata% |
| %sysdrive%\windows.old\programdata |
| %sysdrive%\$recycle.bin |
| %sysdrive%\$recycle.bin\s-1-5-21-1164634071-2670574271-1157188808-1000 |
| %commonappdata% |
|
50.0% |
|
|
29.2% |
|
|
8.3% |
|
|
4.2% |
|
|
4.2% |
|
|
4.2% |
|
| Windows 10 |
83.3% |
|
| Windows 7 |
16.7% |
|
Analysis
| Subsystem: |
Windows CUI |
| PE Type: |
pe |
| OS Bitness: |
64 |
| Image Base: |
0x0000000140000000 |
| Entry Address: |
0x00006c20 |
| Name |
Size of data |
MD5 |
| .text |
155648 |
8e512c64799677a42260b518d9a26982 |
| .rdata |
73216 |
74a781d27035c7f9a165704405783b0b |
| .data |
4608 |
da5064a519018cecc7caff5c0e4a7efa |
| .pdata |
8704 |
48fda377b65514a905a6dab77f8db96a |
| _RDATA |
512 |
3bb9fa4881d3d67a2bbdd6fac8998962 |
| .rsrc |
64000 |
12353786692854731b2db4cf73bdf9cb |
| .reloc |
2560 |
6c038a5eb01866fc9723b1f0afe3a12f |
