Gridinsoft Logo

The 1203_1220_DOCU_FACT_OFX_POIU_7896523147.exe (Zoom Sharing Host) File Analysis

Updated 2 months ago
Checked by Malaware Check
1203_1220_DOCU_FACT_OFX_POIU_7896523147.exe

Technical Analysis

File Name 1203_1220_DOCU_FACT_OFX_POIU_7896523147.exe
File Type
PE32+ executable (GUI) x86-64, for MS Windows
Scanner Version 1.0.210.174
Database Version 2025-03-13 22:00:52 UTC
✓

Clean File

No threats detected by our scanner

0%
Detection Rate
1,162,512
File Size (bytes)
2025-03-13
Analysis Date

Scan Another File

File Identification

Hash Type Value Action
MD5
3e1f7529ae3a5534cfaec4a3aa8bb750
SHA1
21289a1ab17e98b8da77e9edb60a3260adeae0bf
SHA256
eb1b7b9339b349202ce8498202b995c61ffd1ba322a3ac4aa8b7b67fb666da16
SHA512
567ac94d95efa75c0a61356bc1b5b52acb9f5a9db73be8566a9cc6bdfc0f70eb6349d7c444fd5e1214766b32145948f4a7f7dcd31583a901f7445324f50a2bd7
ImpHash
57a29a9ff47c7bb3c7d918ea2ce4133f

PE Analysis

Basic Information

▼
Image Base 0x140000000
Entry Point 0x140096af0
Compilation Time 2025-02-13 09:31:44
Checksum 0x0011f655 (Actual: 0x0011f655)
OS Version 6.0
PEiD Signatures PE32+ executable (GUI) x86-64, for MS Windows
PDB Path C:\jenkins\workspace\Client\ZR\Win_ZR\release\bin\X64\Release\CptHost.pdb
Digital Signature OK
Imports 31 libraries
Exports 0 functions
Resources 4 Resources
Sections 7 Sections

Version Information

▼
Comments Zoom Video Meeting
CompanyName Zoom Video Communications, Inc.
FileDescription Zoom Sharing Host
FileVersion 6,3,10,5334
InternalName CptHost.exe
LegalCopyright Copyright ©2012-2025 Zoom Communications, Inc. All rights reserved.
OriginalFilename CptHost.exe
ProductName Zoom Video Call
ProductVersion 6,3,10,5334
Translation 0x0409 0x04b0

PE Sections

▼
Name Virtual Address Virtual Size Raw Size Entropy Characteristics MD5
.text 0x00001000 637,372 bytes 637,440 bytes 6.42 (Normal) IMAGE_SCN_CNT_CODE|IMAGE_SCN_MEM_EXECUTE|IMAGE_SCN_MEM_READ D189FA010146395F2BF4791B4A54D909
.rdata 0x0009d000 435,168 bytes 435,200 bytes 4.51 (Normal) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ 2CDDC1425EBB2CFB2B1DE1AEA24C0325
.data 0x00108000 36,552 bytes 28,160 bytes 2.83 (Normal) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ|IMAGE_SCN_MEM_WRITE 25DD764280E145C6514DE3D1BB4A3921
.pdata 0x00111000 28,032 bytes 28,160 bytes 5.89 (Normal) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ 74648C4E8CBC20B10779B353DC7A80F1
.didat 0x00118000 24 bytes 512 bytes 0.20 (Normal) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ|IMAGE_SCN_MEM_WRITE 933276C0BB99AFF65BB4A33241ADD71D
.rsrc 0x00119000 3,592 bytes 4,096 bytes 4.48 (Normal) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ 2E1D99114C5EDFC2E86D64FF406FA7E8
.reloc 0x0011a000 3,212 bytes 3,584 bytes 5.19 (Normal) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_DISCARDABLE|IMAGE_SCN_MEM_READ 3D7E127EE7CFE12FC3B375EE76B97D8F

Resource Analysis

▼
Total Resources: 4 (3,277 bytes)
Resource Type Count Total Size Percentage
RT_BITMAP 1 296 bytes
9%
RT_STRING 1 290 bytes
8.8%
RT_VERSION 1 932 bytes
28.4%
RT_MANIFEST 1 1,759 bytes
53.7%

Certificate Chain Analysis

▼
Certificate Information
Product Zoom Video Call
Description Zoom Sharing Host
File Version 6,3,10,5334
Original Name CptHost.exe
Signing Date 09:55 AM 02/13/2025 (114 days ago)
Verification Status Signed
Signers Zoom Video Communications, Inc.; DigiCert Trusted G4 Code Signing RSA4096 SHA256 2021 CA1; DigiCert Trusted Root G4; DigiCert
Counter Signers DigiCert Timestamp 2024; DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA; DigiCert Trusted Root G4; DigiCert
Internal Name CptHost.exe
Copyright Copyright ©2012-2025 Zoom Communications, Inc. All rights reserved.
Certificate Chain Summary
DigiCert Trusted Root G4 #1 Primary
Validity Period: 2022-01-13 00:00:00 → 2031-11-09 23:59:59
Signature Algorithm: sha256RSA
Serial Number: 0F D1 BB CA 79 6B D7 F8 DD 4C 82 E1 0A 9A 96 31
DigiCert Trusted G4 Code Signing RSA4096 SHA256 2021 CA1 #2 Chain
Validity Period: 2021-07-28 00:00:00 → 2036-07-27 23:59:59
Signature Algorithm: sha256RSA
Serial Number: 0E 4D 67 F6 43 16 C9 2A 3B 7A 17 CC 46 97 6A 8F
Zoom Video Communications, Inc. #3 Chain
Validity Period: 2025-01-21 00:00:00 → 2025-06-14 23:59:59
Signature Algorithm: sha256RSA
Serial Number: 0A B8 23 13 9C C5 CD 91 E9 7A 64 91 87 6F 2D 6F
DigiCert Timestamp 2024 #4 Chain
Validity Period: 2024-09-26 00:00:00 → 2035-11-25 23:59:59
Signature Algorithm: sha256RSA
Serial Number: 0B AE 66 BC 5A BA 7F 95 87 C6 F9 E9 04 E3 33 04
DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA #5 Chain
Validity Period: 2022-03-23 00:00:00 → 2037-03-22 23:59:59
Signature Algorithm: sha256RSA
Serial Number: 07 36 37 B7 24 54 7C D8 47 AC FD 28 66 2A 5E 5B
DigiCert Trusted Root G4 #6 Chain
Validity Period: 2022-08-01 00:00:00 → 2031-11-09 23:59:59
Signature Algorithm: sha384RSA
Serial Number: 0E 9B 18 8E F9 D0 2D E7 EF DB 50 E2 08 40 18 5A

✓ This file has been digitally signed and the certificate chain has been verified

  • The signature ensures file integrity and authenticity from the publisher
  • Timestamping proves when the signature was applied
Certificate Verification Status

OK

Remember: This is Result of Online Virus Scanner

Gridinsoft Anti-Malware has a much more powerful virus scanning engine. We recommend using it for a more precise diagnosis of infected systems. This brief guide will help you install our flagship product for more accurate diagnostics:

Download Anti-Malware

Keep Your System Protected

This file appears clean, but regular security maintenance is important

  1. Regular Scans: Run weekly system scans to detect new threats before they can cause damage.
  2. Keep Software Updated: Ensure your operating system and all applications have the latest security patches.
  3. Safe Browsing: Avoid suspicious websites and never download software from untrusted sources.
  4. Email Security: Be cautious with email attachments and links, even from known contacts.
Proactive Protection
This file passed all security checks, but stay vigilant. New malware variants appear daily that can evade detection. Always verify files come from official sources and check digital signatures when available.

Leave a Comment

Share your thoughts or insights about this file. Do you align with our conclusion?

* Your feedback could influence our rating, and rest assured, your email will remain confidential and will only be used to communicate with you if necessary.
Your Score for

Gridinsoft Anti-Malware

Cure your PC from any kind of malware

GridinSoft Anti-Malware will help you to protect your computer from spyware, trojans, backdoors, rootkits. It cleans your system from annoying advertisement modules and other malicious stuff developed by hackers.

Anti-Malware Download Now
Gridinsoft Anti-Malware