aomhost64.exe
Zoom file version info
Program on Windows 4 known copies with hashes
Is it the real aomhost64.exe?
Zoom in the file’s header: a renamed copy still carries itC:\Program Files (x86)\Zoom\bin\aomhost\4 known copies
5,8,3,1581 · C:\Program Files (x86)\Zoom\bin\aomhost\aomhost64.exe · signed by Zoom Video Communications
955d3136cb90e83137817648c22b71fab5f9155c9b538959fecee4a6ed0918bf5,3,52670,0921 · C:\Program Files (x86)\Zoom\bin\aomhost\aomhost64.exe · signed by Zoom Video Communications
2caa4601957b7048ad98587035ed1e41501c5ba41f148daeba0bfdbc1c48b7cb5,2,44052,0816 · C:\program files (x86)\Zoom\bin\aomhost\aomhost64.exe · signed by Zoom Video Communications
508276e3d5f6bae482f3064dbb2d727d748441012285803f2e7b17bbe44c11015,2,42619,0804 · C:\Program Files (x86)\Zoom\bin\aomhost\aomhost64.exe · signed by Zoom Video Communications
963c8bf0b19a3d41d80c13c86e133c7cd5302dd0145c85733e4d7c34599ec1eeFrom the file’s version info and the copies recorded by xCyclopedia (MIT). A copy in another folder, signed by someone else or with another hash is not necessarily malicious, but it is worth a closer look. In Ceplin, "<sha256>".whatis() says which known copy a hash is.