How to remove sihost64.exe

sihost64.exe

The module sihost64.exe has been detected as Ransom.Sabsik

sihost64.exe
Remove sihost64.exe

File Details

Product Name:

Process Explorer
Company Name:

Sysinternals - www.sysinternals.com
MD5: 469018603cc05ebfdde7060b6259b6c7
Size: 1 MB
First Published: 2023-04-07 23:51:00 (2 years ago)
Latest Published: 2023-04-14 23:52:51 (2 years ago)
Status: Ransom.Sabsik (on last analysis)
Analysis Date: 2023-04-14 23:52:51 (2 years ago)

Common Places:

%appdata%\internet explorer
%appdata%\internet explorer

Geography:

50.0%
50.0%

OS Version:

Windows 10 100.0%

Analysis

Subsystem: Windows GUI
PE Type: pe
OS Bitness: 64
Image Base: 0x0000000000400000
Entry Address: 0x0038e000

PE Sections:

Name Size of data MD5
57344 dfbb5df26285b8f1dd1ba028185c335b
.rsrc 3584 980584d8a6c1b76287d4d74839568b7a
.idata 512 5dccaba714633734b0bd6515c531d55d
512 bd0e1b3e6455a04be191f5f6a2a78376
cvlpjdnf 1344512 cee386513f3bed9d1a2be4cd24448888
lgmxlrlg 512 6f5a4ea6cde16540fbf0de0894213125

More information:

Search on Virustotal
Download GridinSoft Anti-Malware - Removal tool for sihost64.exe
copyright for information about sihost64.exe