home

bwvldc5sys1uzxr3b3jrcy5jb20vic8xmji4mc8tmzy0otsznjq5l09nqy8wfdavwei0nlpln1hrovridmv6nnb0ngnwempecdnq

Cisco WebEx Meeting Dowload

Cisco WebEx LLC

Publisher:
Cisco WebEx LLC  (signed and verified)

Product:
Cisco WebEx Meeting Dowload

Version:
3001.0.1508.0700

MD5:
d35b0134ba659c03ac2adba365aa9229

SHA-1:
a7329859ca8281600167712d4a8a4dcd632a490a

SHA-256:
2c6d6a6e36691b910622da22a8724383785021cd5bd06bc02c85396a4f1d25e2

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
5/6/2024 6:14:50 AM UTC  (today)

File size:
320.2 KB (327,928 bytes)

Product version:
3001.0.1508.0700

Copyright:
© 2009-2015 Cisco and/or its affiliates. All rights reserved.

Original file name:
webex.exe

Language:
English (United States)

Common path:
C:\users\{user}\downloads\bwvldc5sys1uzxr3b3jrcy5jb20vic8xmji4mc8tmzy0otsznjq5l09nqy8wfdavwei0nlpln1hrovridmv6nnb0ngnwempecdnqvv9qq051munpyjhkywdxaz0vmq==_webex.exe

Digital Signature
Signed by:
Cisco WebEx LLC

Authority:
VeriSign, Inc.

Valid from:
9/23/2014 5:00:00 PM

Valid to:
9/23/2017 4:59:59 PM

Subject:
CN=Cisco WebEx LLC, O=Cisco WebEx LLC, L=San Jose, S=California, C=US

Issuer:
CN=VeriSign Class 3 Code Signing 2010 CA, OU=Terms of use at https://www.verisign.com/rpa (c)10, OU=VeriSign Trust Network, O="VeriSign, Inc.", C=US

Serial number:
0BA1F6E718AE1F6A21DF2F0854E7EB70

File PE Metadata
Compilation timestamp:
9/14/2015 1:39:49 AM

OS version:
5.1

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
12.0

CTPH (ssdeep):
3072:Ff0p7cqAd25Z91d4K9AAoAUCjqpWpdNAd4F5O/5dFzufe62eWE+zrBw/446tzzxt:Ff0Wap6ALjquW0beOrGJz27reVVIDc

Entry address:
0x1C3E3

Entry point:
E8, 3C, C2, 00, 00, E9, 00, 00, 00, 00, 6A, 14, 68, 90, 01, 44, 00, E8, 47, 55, 00, 00, E8, 26, 2C, 00, 00, 0F, B7, F0, 6A, 02, E8, CF, C1, 00, 00, 59, B8, 4D, 5A, 00, 00, 66, 39, 05, 00, 00, 40, 00, 74, 04, 33, DB, EB, 33, A1, 3C, 00, 40, 00, 81, B8, 00, 00, 40, 00, 50, 45, 00, 00, 75, EB, B9, 0B, 01, 00, 00, 66, 39, 88, 18, 00, 40, 00, 75, DD, 33, DB, 83, B8, 74, 00, 40, 00, 0E, 76, 09, 39, 98, E8, 00, 40, 00, 0F, 95, C3, 89, 5D, E4, E8, 8A, 8B, 00, 00, 85, C0, 75, 08, 6A, 1C, E8, DC, 00, 00, 00, 59, E8...
 
[+]

Entropy:
6.4023

Code size:
207 KB (211,968 bytes)

The file bwvldc5sys1uzxr3b3jrcy5jb20vic8xmji4mc8tmzy0otsznjq5l09nqy8wfdavwei0nlpln1hrovridmv6nnb0ngnwempecdnq has been seen being distributed by the following 20 URLs.

https://webinar.nak-mci.ir/exe/T27LD/.../d2ViaW5hci5uYWstbWNpLmlyLyAvMTA4MjQvLTExNjM7MTE2My9PTUMvMHwwLzY1SHdhTXB5QUtTVXY0SzFpSGwtY1lJVjl2NGlRRnJwTEFrakFYNjE5cUk9LzE=_webex.exe

https://webconf.caf.fr/exe/T27LD/.../d2ViY29uZi5jYWYuZnIvIC82NzQ5NC8tMTA3Mzg2OzEwNzM4Ni9PTUMvMHwwLy1DejBBcEFjS2tNbFhGdXM1UllzTUVaLUM4OHRmR21oMGEtQ1BNMXBvTTA9LzA=_webex.exe

https://conference.teletech.com/exe/T27LD/.../Y29uZmVyZW5jZS50ZWxldGVjaC5jb20vIC85NTQ0OTEvLTE1NzI2MDc7MTU3MjYwNy9PTUMvMHwwL21Fc2RmNGFRdUg4aWR1NVpfMl9wbGtaSG4yaGIxVUZFY09INExDWmNlMXM9LzE=_webex.exe

https://meet.lds.org/exe/T27LD/.../bWVldC5sZHMub3JnLyAvOTE5MzIwLy0xNDcxNDA0OzE0NzE0MDQvT01DLzB8MC9mOWlBR2tKaFVDWXlrUjRkX2dWek0yMzhmWFdMbkhLSDhxVWs2WHZlS3FBPS8x_webex.exe

https://meetings.conexant.com/exe/T27LD/.../bWVldGluZ3MuY29uZXhhbnQuY29tLyAvMjU5OTcvLTE0MjcwOzE0MjcwL09NQy8wfDAvZ0xsMU5mU2FSU3ZWRWwzcU1jQ3NvMmtvTTZ1NHN0bmFfVG1SdWdaY3lYWT0vMQ==_webex.exe

https://meeting.zakq8.com/exe/T27LD/.../bWVldGluZy56YWtxOC5jb20vIC8xMjU0Ny8yMzk7NDYzOS9PTUMvMHwwL0xESEpZM1VXQ05vQUxiR2F2aHUyeVFBQlVydmFoLThvSmhndU1rQlBER0k9LzE=_webex.exe

https://meet.lds.org/exe/T27LD/.../bWVldC5sZHMub3JnLyAvODgwNTQxLy0xMzg4MDI2OzEzODgwMjYvT01DLzB8MC9TZ1FTbktlcGZybWVyVEF1WG91d0RveUgwOXJLekFudkR3enBYSXNKbzBNPS8x_webex.exe

https://conference.teletech.com/exe/T27LD/.../Y29uZmVyZW5jZS50ZWxldGVjaC5jb20vIC84OTg0NDAvLTE0NjU0NTY7MTQ2NTQ1Ni9PTUMvMHwwL0ctYVFyejJuYWthXzhlTzlVckxQZkVtZ0FYOTJMTnVqcXZVSk9PaktlWHM9LzE=_webex.exe

https://conference.teletech.com/exe/T27LD/.../Y29uZmVyZW5jZS50ZWxldGVjaC5jb20vIC84NTYwMjEvLTEzODE5Njk7MTM4MTk2OS9PTUMvMHwwL3hCc0RXeG9HbVFnSS0ySHd6aVNzNG9vRE9nWnA2NF9Pa2psTGs2U0JFWTg9LzE=_webex.exe

https://meeting.zakq8.com/exe/T27LD/.../bWVldGluZy56YWtxOC5jb20vIC8xMjMyNS8zNTE7NDIwMC9PTUMvMHwwLzhfOEFLWVpOT3NNczFnRGVpcjlzOGVTNlVOa2k3ZDVMX3QzMnhkblZCN009LzE=_webex.exe

https://conference.teletech.com/exe/T27LD/.../Y29uZmVyZW5jZS50ZWxldGVjaC5jb20vIC83ODg2MTkvLTEyNTM2NDg7MTI1MzY0OC9PTUMvMHwwLzhrLWMzdlZjQkRCZnNpSEZVN0J6Q2llNFo3NkJMd3VsUnZyREFrdTFVVkE9LzE=_webex.exe

https://conference.teletech.com/exe/T27LD/.../Y29uZmVyZW5jZS50ZWxldGVjaC5jb20vIC84OTc1MTEvLTE0NjM1MTY7MTQ2MzUxNi9PTUMvMHwwLzdMZ0dhTGxkYzh1NmVZT25kOEJvZExWTXhXWkVWbURkaWpTQW80VFI0UXM9LzE=_webex.exe

https://conference.teletech.com/exe/T27LD/.../Y29uZmVyZW5jZS50ZWxldGVjaC5jb20vIC83NzU4OTQvLTEyMjk5Mzk7MTIyOTkzOS9PTUMvMHwwLzFlYlM3Sk40dFlzZWprYkhjU1FQcF81Ym1YVlU4eW1IZjA2NjJ1ZzhVRGc9LzE=_webex.exe

https://conference.teletech.com/exe/T27LD/.../Y29uZmVyZW5jZS50ZWxldGVjaC5jb20vIC85Mjg5ODQvLTE1MjM5NzI7MTUyMzk3Mi9PTUMvMHwwL1F1UnNVeC1ldEhlRjNPZkN1UFJXU2ZXeV9BYUF4aExyRkRaYUpMelhKX289LzE=_webex.exe

https://conference.teletech.com/exe/T27LD/.../Y29uZmVyZW5jZS50ZWxldGVjaC5jb20vIC84NTk4ODMvLTEzOTA5Njk7MTM5MDk2OS9PTUMvMHwwLzhGb3RYbzhWQU4tRmNMbzVCVndzaXc0NXByXzVqeDZIYWVOeTZhSTZoOG89LzE=_webex.exe

https://sitewebex.cnt.gob.ec/exe/T27LD/.../c2l0ZXdlYmV4LmNudC5nb2IuZWMvIC8xMTU4NS8tMzM5NjszMzk2L09NQy8wfDAvYlFwUUZvci1HcURFUU1qQWl1eE9IYzA5WTBiYnRFbHFKbmZGVlFOSmR5bz0vMQ==_webex.exe

https://conference.teletech.com/exe/T27LD/.../Y29uZmVyZW5jZS50ZWxldGVjaC5jb20vIC84MTc3MTYvLTEzMTc5MDI7MTMxNzkwMi9PTUMvMHwwL1IwRVo0M2xFOE0wdGNPTXZrVkZsWTZKSVFTenB0Sy1EdlJteXI1dkc0Y0U9LzE=_webex.exe

https://meet.lds.org/exe/T27LD/.../bWVldC5sZHMub3JnLyAvODYyMjYwLzIzNTUyOzE0MTM0ODAvT01DLzB8MC9zSzZwZHFJS18ydk5Na0R6SkNFRGFVbjNwUEtpQkZlcEVNc1IwNDBGZmhRPS8x_webex.exe

https://meet.liberty.edu/exe/T27LD/.../bWVldC5saWJlcnR5LmVkdS8gLzIxODUwLzM4OTU7Mjk5MzQvT01DLzF8MS9oNi1UZDBPZVBRcl9KR1ZLdWNhMDNvajlTandNTzhkSklvaS14ZmdqT2l3PS8x_webex.exe

https://conference.teletech.com/exe/T27LD/.../Y29uZmVyZW5jZS50ZWxldGVjaC5jb20vIC84ODcwNDQvLTE0NDAwOTc7MTQ0MDA5Ny9PTUMvMHwwL1V4d1M3ektzLVdOTkN3S21uUWlYYXdCeFV2U2xqX3VDNGV5RlBEck54aW89LzE=_webex.exe

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.