CloudNotifications.exe

  • File Path: C:\WINDOWS\system32\CloudNotifications.exe
  • Description: Cloud notifications

Hashes

Type Hash
MD5 994B7DE0DC2FA74A629825849149689C
SHA1 B5CFFC4428577748EFCE8ACDFBA5D6540864E081
SHA256 574257F2AB4DC9FB7FD62AD21FD3F011E03666099F55670363F7C83B9E099FC6
SHA384 AB6B0D95682FECFB049324205A43B1F33F8CE63F730BB167352612AEDFF873E0D1A17992B3A191AD22E0893715743D43
SHA512 BE7AFC1D122EB077000D877DEE2EC1E264122867374821A5D14F16F3F9335F930319C255CC431650A4219C57B2B6B667D33F6D0CFA7433C2D6A6DCE4F16261C2
SSDEEP 1536:/s3G8igQg2fpClbKaJg/joCAx9Rn54HB+FbXDXlyUX2yI8/ahIPyO:E3abp4KaJg/joCWRnmB+NhBXjIm2Ib
IMP C13A3107762BED7326A694C86A5D6FCB
PESHA1 59EA843641CCEF2DB28DFCFA27D1B7A16B55F7E0
PE256 711B2F22F6FAC579B30768F1E555531356F31012CE244EA93B3C02F13517B961

Runtime Data

Window Title:

Low disk space

Open Handles:

Path Type
(R-D) C:\Windows\System32\en-US\CloudNotifications.exe.mui File
(R-D) C:\Windows\System32\en-US\dui70.dll.mui File
(R-D) C:\Windows\System32\en-US\Windows.UI.Immersive.dll.mui File
(R-D) C:\Windows\SystemResources\Windows.UI.Immersive.dll.mun File
(RW-) C:\Windows\System32 File
(RW-) C:\Windows\WinSxS\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.22000.120_none_9d947278b86cc467 File
(RWD) C:\Windows\Fonts\segoeuisl.ttf File
(RWD) C:\Windows\Fonts\seguisb.ttf File
(RWD) C:\Windows\Fonts\seguisym.ttf File
\BaseNamedObjects__ComCatalogCache__ Section
\BaseNamedObjects\C:*ProgramData*Microsoft*Windows*Caches*{6AF0698E-D558-4F6E-9B3C-3716689AF493}.2.ver0x0000000000000001.db Section
\BaseNamedObjects\C:*ProgramData*Microsoft*Windows*Caches*{DDF571F2-BE98-426D-8288-1A9A39C3FDA2}.2.ver0x0000000000000001.db Section
\BaseNamedObjects\C:*ProgramData*Microsoft*Windows*Caches*cversions.2.ro Section
\Sessions\2\BaseNamedObjects\NLS_CodePage_1252_3_2_0_0 Section
\Sessions\2\BaseNamedObjects\NLS_CodePage_437_3_2_0_0 Section
\Sessions\2\BaseNamedObjects\SessionImmersiveColorPreference Section

Loaded Modules:

Path
C:\WINDOWS\System32\ADVAPI32.dll
C:\WINDOWS\System32\bcryptPrimitives.dll
C:\WINDOWS\System32\clbcatq.dll
C:\WINDOWS\system32\CloudNotifications.exe
C:\WINDOWS\System32\combase.dll
C:\Windows\System32\DUI70.dll
C:\Windows\System32\DUser.dll
C:\WINDOWS\System32\GDI32.dll
C:\WINDOWS\System32\gdi32full.dll
C:\WINDOWS\System32\IMM32.DLL
C:\WINDOWS\SYSTEM32\kernel.appcore.dll
C:\WINDOWS\System32\KERNEL32.DLL
C:\WINDOWS\System32\KERNELBASE.dll
C:\WINDOWS\System32\msvcp_win.dll
C:\WINDOWS\System32\msvcrt.dll
C:\WINDOWS\SYSTEM32\ntdll.dll
C:\WINDOWS\System32\RPCRT4.dll
C:\WINDOWS\System32\sechost.dll
C:\WINDOWS\System32\shcore.dll
C:\WINDOWS\System32\SHLWAPI.dll
C:\WINDOWS\System32\ucrtbase.dll
C:\WINDOWS\System32\USER32.dll
C:\WINDOWS\system32\UxTheme.dll
C:\WINDOWS\System32\win32u.dll
C:\Windows\System32\Windows.UI.Immersive.dll
C:\WINDOWS\WinSxS\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.22000.120_none_9d947278b86cc467\Comctl32.dll

Signature

  • Status: Signature verified.
  • Serial: 33000002ED2C45E4C145CF48440000000002ED
  • Thumbprint: 312860D2047EB81F8F58C29FF19ECDB4C634CF6A
  • Issuer: CN=Microsoft Windows Production PCA 2011, O=Microsoft Corporation, L=Redmond, S=Washington, C=US
  • Subject: CN=Microsoft Windows, O=Microsoft Corporation, L=Redmond, S=Washington, C=US

File Metadata

  • Original Filename: CloudNotifications.exe.mui
  • Product Name: Microsoft Windows Operating System
  • Company Name: Microsoft Corporation
  • File Version: 10.0.22000.1 (WinBuild.160101.0800)
  • Product Version: 10.0.22000.1
  • Language: English (United States)
  • Legal Copyright: Microsoft Corporation. All rights reserved.
  • Machine Type: 64-bit

File Scan

  • VirusTotal Detections: 0/73
  • VirusTotal Link: https://www.virustotal.com/gui/file/574257f2ab4dc9fb7fd62ad21fd3f011e03666099f55670363f7c83b9e099fc6/detection

MIT License. Copyright (c) 2020-2021 Strontic.