How to remove winhost.exe

winhost.exe

The module winhost.exe has been detected as Trojan.CoinMiner

winhost.exe
Product Name:

MS Windows Helper Utility

Company Name:

Microsoft Inc.

MD5: 28ce284d8dce7c77018b07aa048c980b
Size: 500 KB
First Published: 2018-03-27 14:22:11 (6 years ago)
Latest Published: 2018-04-20 16:07:56 (6 years ago)
Status: Trojan.CoinMiner (on last analysis)
Analysis Date: 2018-04-20 16:07:56 (6 years ago)
%commonappdata%
40.0%
40.0%
13.3%
6.7%
Windows 7 86.7%
Windows 10 13.3%
Subsystem: Windows GUI
PE Type: pe
OS Bitness: 32
Image Base: 0x00400000
Entry Address: 0x00009592

PE Sections:

Name Size of data MD5
.text 61440 7f3daddafe3cae0f2ced92b06259c1b9
.rdata 14848 e3a09ac8c1be3f103355a51fc99dfc18
.data 431616 ec02f5d4f281fb635f35aa02f953e59c
.rsrc 3072 07229b3fd334053159b782f846c2af11

More information:

Download GridinSoft Anti-Malware - Removal tool for winhost.exe