How to remove Windows Host.exe
- File Details
- Overview
- Analysis
Windows Host.exe
The module Windows Host.exe has been detected as Ransom.STOP
File Details
Product Name: |
|
Company Name: |
|
MD5: |
9c836256a50ecc6d5bd8acd8877077cb |
Size: |
117 KB |
First Published: |
2020-12-18 18:15:19 (3 years ago) |
Latest Published: |
2020-12-26 06:23:20 (3 years ago) |
Status: |
Ransom.STOP (on last analysis) |
|
Analysis Date: |
2020-12-26 06:23:20 (3 years ago) |
%commonappdata% |
%commonappdata% |
%commonappdata% |
%commonappdata% |
%appdata% |
%commonappdata% |
%commonappdata% |
%commonappdata% |
%commonappdata% |
%commonappdata% |
|
12.5% |
|
|
12.5% |
|
|
10.0% |
|
|
7.5% |
|
|
7.5% |
|
|
7.5% |
|
|
7.5% |
|
|
7.5% |
|
|
5.0% |
|
|
5.0% |
|
|
2.5% |
|
|
2.5% |
|
|
2.5% |
|
|
2.5% |
|
|
2.5% |
|
|
2.5% |
|
|
2.5% |
|
Windows 10 |
67.5% |
|
Windows 7 |
27.5% |
|
Windows 8.1 |
5.0% |
|
Analysis
Subsystem: |
Windows GUI |
PE Type: |
pe |
OS Bitness: |
32 |
Image Base: |
0x00400000 |
Entry Address: |
0x0001e8ee |
MVID: |
eafb4e0d-c58c-4bef-898f-090b082f0331 |
Typelib ID: |
fe203f74-fe79-4d71-8ecb-268f3d87bc98 |
Name |
Size of data |
MD5 |
.text |
117248 |
b471a27ec9365f5133230672d520ba8d |
.rsrc |
1536 |
c45bb5c52c8307599aa6468e42b12b73 |
.reloc |
512 |
2c0766ee68dfaf3cba800e32b69d41ce |