CloudNotifications.exe
- File Path:
C:\WINDOWS\system32\CloudNotifications.exe - Description: Cloud notifications
Hashes
| Type | Hash |
|---|---|
| MD5 | 994B7DE0DC2FA74A629825849149689C |
| SHA1 | B5CFFC4428577748EFCE8ACDFBA5D6540864E081 |
| SHA256 | 574257F2AB4DC9FB7FD62AD21FD3F011E03666099F55670363F7C83B9E099FC6 |
| SHA384 | AB6B0D95682FECFB049324205A43B1F33F8CE63F730BB167352612AEDFF873E0D1A17992B3A191AD22E0893715743D43 |
| SHA512 | BE7AFC1D122EB077000D877DEE2EC1E264122867374821A5D14F16F3F9335F930319C255CC431650A4219C57B2B6B667D33F6D0CFA7433C2D6A6DCE4F16261C2 |
| SSDEEP | 1536:/s3G8igQg2fpClbKaJg/joCAx9Rn54HB+FbXDXlyUX2yI8/ahIPyO:E3abp4KaJg/joCWRnmB+NhBXjIm2Ib |
| IMP | C13A3107762BED7326A694C86A5D6FCB |
| PESHA1 | 59EA843641CCEF2DB28DFCFA27D1B7A16B55F7E0 |
| PE256 | 711B2F22F6FAC579B30768F1E555531356F31012CE244EA93B3C02F13517B961 |
Runtime Data
Window Title:
Low disk space
Open Handles:
| Path | Type |
|---|---|
| (R-D) C:\Windows\System32\en-US\CloudNotifications.exe.mui | File |
| (R-D) C:\Windows\System32\en-US\dui70.dll.mui | File |
| (R-D) C:\Windows\System32\en-US\Windows.UI.Immersive.dll.mui | File |
| (R-D) C:\Windows\SystemResources\Windows.UI.Immersive.dll.mun | File |
| (RW-) C:\Windows\System32 | File |
| (RW-) C:\Windows\WinSxS\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.22000.120_none_9d947278b86cc467 | File |
| (RWD) C:\Windows\Fonts\segoeuisl.ttf | File |
| (RWD) C:\Windows\Fonts\seguisb.ttf | File |
| (RWD) C:\Windows\Fonts\seguisym.ttf | File |
| \BaseNamedObjects__ComCatalogCache__ | Section |
| \BaseNamedObjects\C:*ProgramData*Microsoft*Windows*Caches*{6AF0698E-D558-4F6E-9B3C-3716689AF493}.2.ver0x0000000000000001.db | Section |
| \BaseNamedObjects\C:*ProgramData*Microsoft*Windows*Caches*{DDF571F2-BE98-426D-8288-1A9A39C3FDA2}.2.ver0x0000000000000001.db | Section |
| \BaseNamedObjects\C:*ProgramData*Microsoft*Windows*Caches*cversions.2.ro | Section |
| \Sessions\2\BaseNamedObjects\NLS_CodePage_1252_3_2_0_0 | Section |
| \Sessions\2\BaseNamedObjects\NLS_CodePage_437_3_2_0_0 | Section |
| \Sessions\2\BaseNamedObjects\SessionImmersiveColorPreference | Section |
Loaded Modules:
| Path |
|---|
| C:\WINDOWS\System32\ADVAPI32.dll |
| C:\WINDOWS\System32\bcryptPrimitives.dll |
| C:\WINDOWS\System32\clbcatq.dll |
| C:\WINDOWS\system32\CloudNotifications.exe |
| C:\WINDOWS\System32\combase.dll |
| C:\Windows\System32\DUI70.dll |
| C:\Windows\System32\DUser.dll |
| C:\WINDOWS\System32\GDI32.dll |
| C:\WINDOWS\System32\gdi32full.dll |
| C:\WINDOWS\System32\IMM32.DLL |
| C:\WINDOWS\SYSTEM32\kernel.appcore.dll |
| C:\WINDOWS\System32\KERNEL32.DLL |
| C:\WINDOWS\System32\KERNELBASE.dll |
| C:\WINDOWS\System32\msvcp_win.dll |
| C:\WINDOWS\System32\msvcrt.dll |
| C:\WINDOWS\SYSTEM32\ntdll.dll |
| C:\WINDOWS\System32\RPCRT4.dll |
| C:\WINDOWS\System32\sechost.dll |
| C:\WINDOWS\System32\shcore.dll |
| C:\WINDOWS\System32\SHLWAPI.dll |
| C:\WINDOWS\System32\ucrtbase.dll |
| C:\WINDOWS\System32\USER32.dll |
| C:\WINDOWS\system32\UxTheme.dll |
| C:\WINDOWS\System32\win32u.dll |
| C:\Windows\System32\Windows.UI.Immersive.dll |
| C:\WINDOWS\WinSxS\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.22000.120_none_9d947278b86cc467\Comctl32.dll |
Signature
- Status: Signature verified.
- Serial:
33000002ED2C45E4C145CF48440000000002ED - Thumbprint:
312860D2047EB81F8F58C29FF19ECDB4C634CF6A - Issuer: CN=Microsoft Windows Production PCA 2011, O=Microsoft Corporation, L=Redmond, S=Washington, C=US
- Subject: CN=Microsoft Windows, O=Microsoft Corporation, L=Redmond, S=Washington, C=US
File Metadata
- Original Filename: CloudNotifications.exe.mui
- Product Name: Microsoft Windows Operating System
- Company Name: Microsoft Corporation
- File Version: 10.0.22000.1 (WinBuild.160101.0800)
- Product Version: 10.0.22000.1
- Language: English (United States)
- Legal Copyright: Microsoft Corporation. All rights reserved.
- Machine Type: 64-bit
File Scan
- VirusTotal Detections: 0/73
- VirusTotal Link: https://www.virustotal.com/gui/file/574257f2ab4dc9fb7fd62ad21fd3f011e03666099f55670363f7c83b9e099fc6/detection
MIT License. Copyright (c) 2020-2021 Strontic.