ptools.msi

Cisco WebEx LLC

The program is a setup application that uses the Windows MSI installer. The file has been seen being downloaded from changepoint.webex.com and multiple other hosts.
Publisher:
Cisco WebEx LLC  (signed and verified)

MD5:
0b6d17344b4bc2dfffe4e161f06bc803

SHA-1:
8a1be66d46f9ff3e33eb702b6ada3f78064e4e02

SHA-256:
0ce15e9d0a0922b28af300ab18d2b2240e852e4f25185fa0566e1ec124867990

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
1/18/2018 6:50:34 PM UTC  (today)

File size:
9.7 MB (10,120,704 bytes)

File type:
Windows Installer (used for software installtaion and updates)

Installer:
Windows MSI

Common path:
C:\users\{user}\downloads\ptools.msi

Digital Signature
Signed by:

Authority:
VeriSign, Inc.

Valid from:
9/23/2014 5:00:00 PM

Valid to:
9/23/2017 4:59:59 PM

Subject:
CN=Cisco WebEx LLC, O=Cisco WebEx LLC, L=San Jose, S=California, C=US

Issuer:
CN=VeriSign Class 3 Code Signing 2010 CA, OU=Terms of use at https://www.verisign.com/rpa (c)10, OU=VeriSign Trust Network, O="VeriSign, Inc.", C=US

Serial number:
0BA1F6E718AE1F6A21DF2F0854E7EB70

The file ptools.msi has been seen being distributed by the following 5 URLs.

https://changepoint.webex.com/upgradeserver/client/ptool/2.5.0/.../ptools.msi

https://fticonsulting.webex.com/upgradeserver/client/ptool/2.5.0/.../ptools.msi