» ahr0chm6ly9zywjhd29yay5zywjhbwvldgluzy5jb20=_appsetup.exe
Overview
Analysis
File Details
Downloads (34)

ahr0chm6ly9zywjhd29yay5zywjhbwvldgluzy5jb20=_appsetup.exe

SabaMeetingInstallerLauncher.exe

Saba Software, Inc.

File name:

Publisher:

Saba Software, Inc. (signed and verified)

Product:

SabaMeetingInstallerLauncher.exe

Version:

8,5,0,078

MD5:

f4cb5bf14d69672116dd737247c6c59c

SHA-1:

4e5cb9e1e6662b839623a5c55e0b048278a5c657

SHA-256:

50932ce05ed0b6ad1875e80b8e062c866f216c83258dd7f97bfefe1d6e2ca9ae

Scanner detections:

0 / 68

Status:

Clean (as of last analysis)

Analysis date:

11/16/2024 9:48:14 AM UTC (today)

File size:

355 KB (363,512 bytes)

Product version:

8,5,0,078

c2010 Saba Software, Inc.

Original file name:

SabaMeetingInstallerLauncher.exe

File type:

Executable application (Win32 EXE)

Language:

English (United States)

Common path:

C:\users\{user}\downloads\ahr0chm6ly9zywjhd29yay5zywjhbwvldgluzy5jb20=_appsetup.exe

Digital Signature

Signed by:

Saba Software, Inc.

Authority:

COMODO CA Limited

Valid from:

2/7/2016 4:00:00 PM

Valid to:

2/7/2019 3:59:59 PM

Subject:

CN="Saba Software, Inc.", O="Saba Software, Inc.", STREET=2400 Bridge Parkway, L=Redwood City, S=CA, PostalCode=94065, C=US

Issuer:

CN=COMODO RSA Code Signing CA, O=COMODO CA Limited, L=Salford, S=Greater Manchester, C=GB

Serial number:

20B5A59861C4E3372853108D9F588CE0

File PE Metadata

Compilation timestamp:

7/13/2016 4:37:47 PM

OS version:

5.0

OS bitness:

Win32

Subsystem:

Windows GUI

Linker version:

9.0

CTPH (ssdeep):

6144:uS8cTB9XHkXrNJaHQm/RpLIGI8jZI5LaNicc1f256WYt8ju/:uS8cTrUBEpcGbZI5+Nicc1O56Ii

Entry address:

0x1F08D

Entry point:

E8, 3E, 71, 00, 00, E9, 79, FE, FF, FF, 3B, 0D, E0, B0, 44, 00, 75, 02, F3, C3, E9, C0, 71, 00, 00, 8B, FF, 55, 8B, EC, 56, 8B, 75, 14, 57, 33, FF, 3B, F7, 75, 04, 33, C0, EB, 65, 39, 7D, 08, 75, 1B, E8, D6, 33, 00, 00, 6A, 16, 5E, 89, 30, 57, 57, 57, 57, 57, E8, 61, 04, 00, 00, 83, C4, 14, 8B, C6, EB, 45, 39, 7D, 10, 74, 16, 39, 75, 0C, 72, 11, 56, FF, 75, 10, FF, 75, 08, E8, 80, 72, 00, 00, 83, C4, 0C, EB, C1, FF, 75, 0C, 57, FF, 75, 08, E8, 9F, 38, 00, 00, 83, C4, 0C, 39, 7D, 10, 74, B6, 39, 75, 0C, 73... 
[+]

Entropy:

6.3074

Code size:

237 KB (242,688 bytes)

The file ahr0chm6ly9zywjhd29yay5zywjhbwvldgluzy5jb20=_appsetup.exe has been seen being distributed by the following 34 URLs.

https://www3.sabameeting.com/handler/.../aHR0cHM6Ly93d3czLnNhYmFtZWV0aW5nLmNvbQ==_AppSetup.exe

https://mt202.sabameeting.com/handler/.../aHR0cHM6Ly9tdDIwMi5zYWJhbWVldGluZy5jb20=_AppSetup.exe

https://asp7.sabameeting.com/handler/.../aHR0cHM6Ly9hc3A3LnNhYmFtZWV0aW5nLmNvbQ==_AppSetup.exe

https://mt214.sabameeting.com/handler/.../aHR0cHM6Ly9tdDIxNC5zYWJhbWVldGluZy5jb20=_AppSetup.exe