How to remove conhost.exe

conhost.exe

The module conhost.exe has been detected as Ransom.Sabsik

conhost.exe
Product Name:

WinRAR

Company Name:

Alexander Roshalov

MD5: 68d6e0cf602d1fd21d66bf429488a831
Size: 2 MB
First Published: 2024-01-10 23:32:14 (2 years ago)
Latest Published: 2024-01-10 23:32:14 (2 years ago)
Status: Ransom.Sabsik (on last analysis)
Analysis Date: 2024-01-10 23:32:14 (2 years ago)
Signed By: ESET NOD32
Status: Valid
%temp%
100.0%
Windows 10 100.0%
Subsystem: Windows GUI
PE Type: pe
OS Bitness:
Image Base: 0x00400000
Entry Address: 0x0001945f

PE Sections:

Name Size of data MD5
.text 102400 ed872fd7021807873ce7bd5260112481
.rdata 15360 d084871adc0cd9263e4a1811b8fc40fa
.data 2560 8c42b68006a121b1b9ebd199e2e59ca5
.rsrc 20992 f214ca5df666539562168ec3dbe52b0c

More information:

Download GridinSoft Anti-Malware - Removal tool for conhost.exe