How to remove Windows Host.exe

Windows Host.exe

The module Windows Host.exe has been detected as Ransom.STOP

Windows Host.exe
Product Name:

WinHost

Company Name:

WinHost

MD5: 9c836256a50ecc6d5bd8acd8877077cb
Size: 117 KB
First Published: 2020-12-18 18:15:19 (3 years ago)
Latest Published: 2020-12-26 06:23:20 (3 years ago)
Status: Ransom.STOP (on last analysis)
Analysis Date: 2020-12-26 06:23:20 (3 years ago)
%commonappdata%
%commonappdata%
%commonappdata%
%commonappdata%
%appdata%
%commonappdata%
%commonappdata%
%commonappdata%
%commonappdata%
%commonappdata%
12.5%
12.5%
10.0%
7.5%
7.5%
7.5%
7.5%
7.5%
5.0%
5.0%
2.5%
2.5%
2.5%
2.5%
2.5%
2.5%
2.5%
Windows 10 67.5%
Windows 7 27.5%
Windows 8.1 5.0%
Subsystem: Windows GUI
PE Type: pe
OS Bitness: 32
Image Base: 0x00400000
Entry Address: 0x0001e8ee

.NET Info:

MVID: eafb4e0d-c58c-4bef-898f-090b082f0331
Typelib ID: fe203f74-fe79-4d71-8ecb-268f3d87bc98

PE Sections:

Name Size of data MD5
.text 117248 b471a27ec9365f5133230672d520ba8d
.rsrc 1536 c45bb5c52c8307599aa6468e42b12b73
.reloc 512 2c0766ee68dfaf3cba800e32b69d41ce

More information:

Download GridinSoft Anti-Malware - Removal tool for Windows Host.exe