CiscoWebExStart.exe
Cisco WebEx Meeting file version info
Program on Windows 2 known copies with hashes
Is it the real CiscoWebExStart.exe?
Installed in
C:\Program Files (x86)\Cisco Systems\Cisco Jabber\MeetingSDK\C:\ProgramData\WebEx\Signed byCisco WebEx LLC
ProductCisco WebEx Meeting, Cisco WebEx LLC
DescriptionCisco WebEx Meeting
2 known copies
10032,999,2018,614 · C:\ProgramData\WebEx\ciscowebexstart.exe · signed by Cisco WebEx LLC
615b095fc46bd3e08988b4799681473677bb4949ca7b736913bf428cc97e9e1b10032,11,2018,116 · C:\Program Files (x86)\Cisco Systems\Cisco Jabber\MeetingSDK\CiscoWebExStart.exe · signed by Cisco WebEx LLC
7795dc46cda97d2329d9c6c8f522ef673b8ac9245be1001d5f77c168e6fd9006From the file’s version info and the copies recorded by xCyclopedia (MIT). A copy in another folder, signed by someone else or with another hash is not necessarily malicious, but it is worth a closer look. In Ceplin, "<sha256>".whatis() says which known copy a hash is.