aomhost64.exe

  • File Path: C:\Program Files (x86)\Zoom\bin\aomhost\aomhost64.exe
  • Description: Zoom
  • Comments: Zoom

Hashes

Type Hash
MD5 C7F4AC3A3A535919332EFD1C07378BEE
SHA1 3CD15A7FB25BDCE6A0AF6ECC111F013D402F20B1
SHA256 2CAA4601957B7048AD98587035ED1E41501C5BA41F148DAEBA0BFDBC1C48B7CB
SHA384 34422D8D07A4890C46A21CF8471E98A6964E83D87E46269D3BC4433A2975B4D07509E6F17A9D4590D8C988B814746550
SHA512 907E0262616942774970AA591559F0E0AF9311EDB7A6ED6FEA9F55DD91C7AB33445F782E7FB58F2364998CB1F2C5E0A4D2F35A2C9273FF34E02A6FF752DEED6B
SSDEEP 24576:sHZVPBLhSNmSxW6mfF9AogQNiXRUDSmVbg62kD7e:sHZVP1hSNB7w9AogMiCemVs6PDK
IMP 6E62E48C33AD9254213023822CF1BBA0
PESHA1 D21C27FE3702EEEC372A29F09266681E49E791D8
PE256 FD8FFE0A8CD89367AE0577D8F16F3862FA54D039EF03BE0F18ABEBDED53F50EA

Runtime Data

Child Processes:

aomhost64.exe WerFault.exe

Open Handles:

Path Type
(R-D) C:\Windows\System32\en-US\crypt32.dll.mui File
(RW-) C:\Users\user\AppData\Roaming\Zoom\appsafecheck.txt File
(RW-) C:\xCyclopedia File
\BaseNamedObjects\NLS_CodePage_1252_3_2_0_0 Section
\BaseNamedObjects\NLS_CodePage_437_3_2_0_0 Section
\Sessions\1\BaseNamedObjects\windows_shell_global_counters Section

Loaded Modules:

Path
C:\Program Files (x86)\Zoom\bin\aomhost\aomhost64.exe
C:\Program Files (x86)\Zoom\bin\aomhost\DllSafeCheck64.dll
C:\Windows\System32\GDI32.dll
C:\Windows\System32\gdi32full.dll
C:\Windows\System32\KERNEL32.DLL
C:\Windows\System32\KERNELBASE.dll
C:\Windows\System32\msvcp_win.dll
C:\Windows\SYSTEM32\ntdll.dll
C:\Windows\System32\ucrtbase.dll
C:\Windows\System32\USER32.dll
C:\Windows\System32\win32u.dll

Signature

  • Status: Signature verified.
  • Serial: 0510C6B2FF7AB71C786EF572239B1243
  • Thumbprint: 0F9ADA46756C17EFFFD467D10654E2A766566CB3
  • Issuer: CN=DigiCert EV Code Signing CA (SHA2), OU=www.digicert.com, O=DigiCert Inc, C=US
  • Subject: CN=”Zoom Video Communications, Inc.”, O=”Zoom Video Communications, Inc.”, L=San Jose, S=California, C=US, SERIALNUMBER=4969967, OID.2.5.4.15=Private Organization, OID.1.3.6.1.4.1.311.60.2.1.2=Delaware, OID.1.3.6.1.4.1.311.60.2.1.3=US

File Metadata

  • Original Filename: Zoom
  • Product Name: Zoom
  • Company Name: Zoom Video Communications, Inc.
  • File Version: 5,3,52670,0921
  • Product Version: 5,3,52670,0921
  • Language: English (United States)
  • Legal Copyright: Zoom Video Communications, Inc. All rights reserved.
  • Machine Type: 64-bit

File Scan

  • VirusTotal Detections: 0/70
  • VirusTotal Link: https://www.virustotal.com/gui/file/2caa4601957b7048ad98587035ed1e41501c5ba41f148daeba0bfdbc1c48b7cb/detection/

MIT License. Copyright (c) 2020-2021 Strontic.