| 28% | %WINDIR% \ Microsoft.NET \ Framework \ 1032 \ winhost.exe | | | | 22820689 |
| 8% | %WINDIR% \ Microsoft.NET \ Framework \ 1032 \ winhost.exe | | | | 22503916 |
| 8% | %SystemDiskRoot% \ Users \ Default \ AppData \ Local \ Temp \ WinUpdate \ winhost.exe | | | | 27537308 |
| 8% | %APPDATA% \ hawphtl \ winhost.exe | Microsoft ® Windows Script Host | Microsoft Corporation | 5.8.7601.18283 | 32245693 |
| 4% | %SYSDIR% \ winhost.exe | | | | 22104131 |
| 4% | %APPDATA% \ lrvoyn \ winhost.exe | Microsoft ® Windows Script Host | Microsoft Corporation | 5.8.9600.16384 | 30137723 |
| 4% | %APPDATA% \ 0RnzG \ xerUv \ winhost.exe | | | | 31152918 |
| 4% | %APPDATA% \ winhost \ winhost.exe | | Microsoft | 1.0.0.0 | 25070523 |
| 4% | %SystemDiskRoot% \ Users \ 17543 \ AppData \ Roaming \ hawphtl \ winhost.exe | Microsoft ® Windows Script Host | Microsoft Corporation | 5.8.7601.18283 | 32246245 |
| 4% | %APPDATA% \ yyeaqct \ winhost.exe | Microsoft ® Windows Script Host | Microsoft Corporation | 5.8.7600.16385 | 28901098 |
| 4% | %WINDIR% \ winsys \ winhost.exe | Punto Switcher | ООО Яндекс | 3.0.0.67 | 30670182 |
| 4% | %APPDATA% \ MGaRp \ Iy \ winhost.exe | | | | 31195798 |
| 4% | %APPDATA% \ rphomfrs \ winhost.exe | Microsoft ® Windows Script Host | Microsoft Corporation | 5.8.7601.18283 | 33122830 |
| 4% | %APPDATA% \ kxcymsd \ winhost.exe | Microsoft ® Windows Script Host | Microsoft Corporation | 5.8.7600.16385 | 29698258 |
| 4% | %APPDATA% \ B66WE \ WqsMG \ winhost.exe | | | | 30886029 |
| 4% | %APPDATA% \ jfhye \ winhost.exe | Microsoft ® Windows Script Host | Microsoft Corporation | 5.8.7601.18283 | 27933025 |