» ahr0chm6ly9zcgnuyteuc2fiyw1lzxrpbmcuy29t_appsetup.exe
Overview
Analysis
File Details
Downloads (22)

ahr0chm6ly9zcgnuyteuc2fiyw1lzxrpbmcuy29t_appsetup.exe

SabaMeetingInstallerLauncher.exe

Saba Software, Inc.

This is a setup and installation application. The file has been seen being downloaded from asp7.sabameeting.com and multiple other hosts.

File name:

Publisher:

Saba Software, Inc. (signed and verified)

Product:

SabaMeetingInstallerLauncher.exe

Version:

8,4,5,074

MD5:

e29153a6ef6e8e0332b1a33466be2146

SHA-1:

cfe8cc0b2aef3624da74b2a64e670d53b91658e2

SHA-256:

77505a54bf958008daf99d9e9128aa2393277fa7f6e50a11a7cade59266bbbfa

Scanner detections:

0 / 68

Status:

Clean (as of last analysis)

Analysis date:

11/16/2024 9:38:04 AM UTC (today)

File size:

353.2 KB (361,712 bytes)

Product version:

8,4,5,074

c2010 Saba Software, Inc.

Original file name:

SabaMeetingInstallerLauncher.exe

File type:

Executable application (Win32 EXE)

Language:

English (United States)

Common path:

C:\users\{user}\downloads\ahr0chm6ly9zcgnuyteuc2fiyw1lzxrpbmcuy29t_appsetup.exe

Digital Signature

Signed by:

Saba Software, Inc.

Authority:

COMODO CA Limited

Valid from:

2/7/2016 10:00:00 PM

Valid to:

2/7/2019 9:59:59 PM

Subject:

CN="Saba Software, Inc.", O="Saba Software, Inc.", STREET=2400 Bridge Parkway, L=Redwood City, S=CA, PostalCode=94065, C=US

Issuer:

CN=COMODO RSA Code Signing CA, O=COMODO CA Limited, L=Salford, S=Greater Manchester, C=GB

Serial number:

20B5A59861C4E3372853108D9F588CE0

File PE Metadata

Compilation timestamp:

4/1/2016 12:27:04 PM

OS version:

5.0

OS bitness:

Win32

Subsystem:

Windows GUI

Linker version:

9.0

CTPH (ssdeep):

6144:oS8cTB9XHkXrNJaHQm/RpLIGI8jZI5LaNicc1f256Wbt8zu8:oS8cTrUBEpcGbZI5+Nicc1O56l5

Entry address:

0x1F08D

Entry point:

E8, 3E, 71, 00, 00, E9, 79, FE, FF, FF, 3B, 0D, E0, B0, 44, 00, 75, 02, F3, C3, E9, C0, 71, 00, 00, 8B, FF, 55, 8B, EC, 56, 8B, 75, 14, 57, 33, FF, 3B, F7, 75, 04, 33, C0, EB, 65, 39, 7D, 08, 75, 1B, E8, D6, 33, 00, 00, 6A, 16, 5E, 89, 30, 57, 57, 57, 57, 57, E8, 61, 04, 00, 00, 83, C4, 14, 8B, C6, EB, 45, 39, 7D, 10, 74, 16, 39, 75, 0C, 72, 11, 56, FF, 75, 10, FF, 75, 08, E8, 80, 72, 00, 00, 83, C4, 0C, EB, C1, FF, 75, 0C, 57, FF, 75, 08, E8, 9F, 38, 00, 00, 83, C4, 0C, 39, 7D, 10, 74, B6, 39, 75, 0C, 73... 
[+]

Code size:

237 KB (242,688 bytes)

The file ahr0chm6ly9zcgnuyteuc2fiyw1lzxrpbmcuy29t_appsetup.exe has been seen being distributed by the following 22 URLs.

https://asp7.sabameeting.com/handler/.../aHR0cHM6Ly9hc3A3LnNhYmFtZWV0aW5nLmNvbQ==_AppSetup.exe

https://asp8.sabameeting.com/handler/.../aHR0cHM6Ly9hc3A4LnNhYmFtZWV0aW5nLmNvbQ==_AppSetup.exe

https://spcna1.sabameeting.com/handler/.../aHR0cHM6Ly9zcGNuYTEuc2FiYW1lZXRpbmcuY29t_AppSetup.exe

https://host3.sabameeting.com/handler/.../aHR0cHM6Ly9ob3N0My5zYWJhbWVldGluZy5jb20=_AppSetup.exe

https://mt209.sabameeting.com/handler/.../aHR0cHM6Ly9tdDIwOS5zYWJhbWVldGluZy5jb20=_AppSetup.exe

https://mts210.sabameeting.com/handler/.../aHR0cHM6Ly9tdHMyMTAuc2FiYW1lZXRpbmcuY29t_AppSetup.exe