CptHost.exe
Zoom Sharing Host file version info
Program on Windows 4 known copies with hashes
Is it the real CptHost.exe?
C:\Program Files (x86)\Zoom\bin\4 known copies
5,8,3,1581 · C:\Program Files (x86)\Zoom\bin\CptHost.exe · signed by Zoom Video Communications
735690d6afc1034b4ed256fe8eb7b6228649fe057231eaf0de45f5de5fd8e2315,3,52670,0921 · C:\Program Files (x86)\Zoom\bin\CptHost.exe · signed by Zoom Video Communications
958dc514627ad2fbc30b8ed9ef03d73553f65778c67375caf2dfc1fc31ea3ca65,2,44052,0816 · C:\program files (x86)\Zoom\bin\CptHost.exe · signed by Zoom Video Communications
01e020edfda44d1cf42543b15172c0ccbe136cb74370363cca538f4bae59ab355,2,42619,0804 · C:\Program Files (x86)\Zoom\bin\CptHost.exe · signed by Zoom Video Communications
780c834126eeb22bf3b4f694567e93b62936a7d41fa71de4c91b617820435e6aFrom the file’s version info and the copies recorded by xCyclopedia (MIT). A copy in another folder, signed by someone else or with another hash is not necessarily malicious, but it is worth a closer look. In Ceplin, "<sha256>".whatis() says which known copy a hash is.