winhost file reports

winhost

winhost is a product name observed in ThreatInfo file telemetry. This page groups the latest 23 files that reference this product name, including their detection status and direct file reports.

Review the listed files before removing anything: legitimate software can share product names with unwanted or repacked installers, while malicious files often reuse familiar product metadata to appear trustworthy.

Scan files associated with winhost:

winhost.exe ac5c40539bfa1fbd1ae58b2dcd19698b PUP.FlySvr
winhost.exe aac9f116adef3883d05f0fdf76d257e3 Trojan.Agent
Windows Host.exe 5bd0dd6c8fc1c9463bb3c5073cf88e7d Ransom.Banker
Windows Host.exe 87747f1393bb45a23ce3293d57c06622 Trojan.Kryptik
Windows Host.exe 1bdd3ee74209de8dd84a2edd67447ee7 Ransom.Banker
Windows Host.exe 2f476a62dd3b65cf33119b0e67c364a2 Trojan.Agent
Windows Host.exe b76457dcba6349b27c2d373736f9d292 Ransom.Wacatac
Windows Host.exe 81c6fc6a7802d2f827c432483b2f02b3 Trojan.Agent
Windows Host.exe 51c6a991c66d10a6e8aa6cbfd4284e74 Trojan.Kryptik
Windows Host.exe afa33dfbdad73a4e12c1af34d73133f2 Trojan.Kryptik
Windows Host.exe a54ab79466b5e7bdb4047b904fa6e9e4 Trojan.Agent
Windows Host.exe 500ffdfd79a21ebb9398d3ea0c7fcb65 Trojan.Kryptik
265336.exe 3817b811a393947a3fd4a369562ba8da Ransom.Wacatac
Windows Host.exe 3fb71333ed0ab72565bab78db467a1fa Trojan.Agent
7732764.exe 2a0bfea24ef5a9e2575c2452aa45506f Ransom.Banker
WinHoster.exe bcc25c08b993d97de75b279b19a8f644 Suspicious Object
WinHoster.exe 235ed7f2feca4ddd51d32b6c7c6ccab2 Ransom.Sabsik
WinHoster.exe 3a6a0c884f89d7f8f05f8d0a6aa1c635 Ransom.Sabsik
68654.exe 2ce02cc45736bbd3032aa7b1b76cde42 Trojan.Agent
7987718.exe 0d97619c74b26c977d53627ab0c706b7 Ransom.Zbot
8901195289011952.exe affced32e6a49760a92a4f006f1d11dc Ransom.Sabsik
4600458.exe 435bda6a4a14f21beb1947bc378bdf65 Trojan.Agent
2000312.exe 045bc05c91685ba0e3bd4e5a4d6e99bc Trojan.Agent