aomhost64.exe
- File Path:
C:\Program Files (x86)\Zoom\bin\aomhost\aomhost64.exe
- Description: Zoom
- Comments: Zoom
Hashes
Type |
Hash |
MD5 |
C7F4AC3A3A535919332EFD1C07378BEE |
SHA1 |
3CD15A7FB25BDCE6A0AF6ECC111F013D402F20B1 |
SHA256 |
2CAA4601957B7048AD98587035ED1E41501C5BA41F148DAEBA0BFDBC1C48B7CB |
SHA384 |
34422D8D07A4890C46A21CF8471E98A6964E83D87E46269D3BC4433A2975B4D07509E6F17A9D4590D8C988B814746550 |
SHA512 |
907E0262616942774970AA591559F0E0AF9311EDB7A6ED6FEA9F55DD91C7AB33445F782E7FB58F2364998CB1F2C5E0A4D2F35A2C9273FF34E02A6FF752DEED6B |
SSDEEP |
24576:sHZVPBLhSNmSxW6mfF9AogQNiXRUDSmVbg62kD7e:sHZVP1hSNB7w9AogMiCemVs6PDK |
IMP |
6E62E48C33AD9254213023822CF1BBA0 |
PESHA1 |
D21C27FE3702EEEC372A29F09266681E49E791D8 |
PE256 |
FD8FFE0A8CD89367AE0577D8F16F3862FA54D039EF03BE0F18ABEBDED53F50EA |
Runtime Data
Child Processes:
aomhost64.exe WerFault.exe
Open Handles:
Path |
Type |
(R-D) C:\Windows\System32\en-US\crypt32.dll.mui |
File |
(RW-) C:\Users\user\AppData\Roaming\Zoom\appsafecheck.txt |
File |
(RW-) C:\xCyclopedia |
File |
\BaseNamedObjects\NLS_CodePage_1252_3_2_0_0 |
Section |
\BaseNamedObjects\NLS_CodePage_437_3_2_0_0 |
Section |
\Sessions\1\BaseNamedObjects\windows_shell_global_counters |
Section |
Loaded Modules:
Path |
C:\Program Files (x86)\Zoom\bin\aomhost\aomhost64.exe |
C:\Program Files (x86)\Zoom\bin\aomhost\DllSafeCheck64.dll |
C:\Windows\System32\GDI32.dll |
C:\Windows\System32\gdi32full.dll |
C:\Windows\System32\KERNEL32.DLL |
C:\Windows\System32\KERNELBASE.dll |
C:\Windows\System32\msvcp_win.dll |
C:\Windows\SYSTEM32\ntdll.dll |
C:\Windows\System32\ucrtbase.dll |
C:\Windows\System32\USER32.dll |
C:\Windows\System32\win32u.dll |
Signature
- Status: Signature verified.
- Serial:
0510C6B2FF7AB71C786EF572239B1243
- Thumbprint:
0F9ADA46756C17EFFFD467D10654E2A766566CB3
- Issuer: CN=DigiCert EV Code Signing CA (SHA2), OU=www.digicert.com, O=DigiCert Inc, C=US
- Subject: CN=”Zoom Video Communications, Inc.”, O=”Zoom Video Communications, Inc.”, L=San Jose, S=California, C=US, SERIALNUMBER=4969967, OID.2.5.4.15=Private Organization, OID.1.3.6.1.4.1.311.60.2.1.2=Delaware, OID.1.3.6.1.4.1.311.60.2.1.3=US
- Original Filename: Zoom
- Product Name: Zoom
- Company Name: Zoom Video Communications, Inc.
- File Version: 5,3,52670,0921
- Product Version: 5,3,52670,0921
- Language: English (United States)
- Legal Copyright: Zoom Video Communications, Inc. All rights reserved.
- Machine Type: 64-bit
File Scan
- VirusTotal Detections: 0/70
- VirusTotal Link: https://www.virustotal.com/gui/file/2caa4601957b7048ad98587035ed1e41501c5ba41f148daeba0bfdbc1c48b7cb/detection/
MIT License. Copyright (c) 2020-2021 Strontic.