home

turbo_meeting.exe

RHUB Communications Inc

This is installed with multiple programs including MXmeeting and TurboMeeting.
Publisher:
RHUB Communications Inc  (signed and verified)

MD5:
d63b4ece92e205a5cac9a593728aacc8

SHA-1:
9870f5982c82209776731621df12985b1dc55651

SHA-256:
737d2bcb587cc73df37364b8731aedee26d0387161ed9612a0981842046ef7b2

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
11/28/2024 9:43:57 AM UTC  (today)

File size:
2.9 MB (3,056,368 bytes)

File type:
Executable application (Win32 EXE)

Common path:
C:\users\{user}\appdata\local\microsoft\windows\inetcache\ie\{random}\turbo_meeting.exe

Digital Signature
Signed by:
RHUB Communications Inc

Authority:
Thawte Consulting (Pty) Ltd.

Valid from:
5/31/2010 4:00:00 PM

Valid to:
6/1/2011 3:59:59 PM

Subject:
CN=RHUB Communications Inc, OU=IT, O=RHUB Communications Inc, L=San Jose, S=California, C=US

Issuer:
CN=Thawte Code Signing CA, O=Thawte Consulting (Pty) Ltd., C=ZA

Serial number:
294732F1CB58465E68B6E886F3D8FADB

File PE Metadata
Compilation timestamp:
10/24/2009 2:14:56 AM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
7.10

CTPH (ssdeep):
49152:zEE4fsP44Ee6lvxbL+9ELLLISPKIrjxJf5TIBog8ce2hQpPN7UrbPSe8wmwm:AE4fsP4peCRLp/8SreBog8KOpPNgzSe8

Entry address:
0x4729

Entry point:
6A, 60, 68, 88, E8, 40, 00, E8, 13, 25, 00, 00, BF, 94, 00, 00, 00, 8B, C7, E8, CF, 0D, 00, 00, 89, 65, E8, 8B, F4, 89, 3E, 56, FF, 15, 6C, E0, 40, 00, 8B, 4E, 10, 89, 0D, 54, 2E, 41, 00, 8B, 46, 04, A3, 60, 2E, 41, 00, 8B, 56, 08, 89, 15, 64, 2E, 41, 00, 8B, 76, 0C, 81, E6, FF, 7F, 00, 00, 89, 35, 58, 2E, 41, 00, 83, F9, 02, 74, 0C, 81, CE, 00, 80, 00, 00, 89, 35, 58, 2E, 41, 00, C1, E0, 08, 03, C2, A3, 5C, 2E, 41, 00, 33, F6, 56, 8B, 3D, 64, E0, 40, 00, FF, D7, 66, 81, 38, 4D, 5A, 75, 1F, 8B, 48, 3C, 03...
 
[+]

Entropy:
7.9906

Developed / compiled with:
Microsoft Visual C++ v7.0

Code size:
52 KB (53,248 bytes)

The file turbo_meeting.exe has been discovered within the following programs.

MXmeeting  by RHUB Communications, Inc.
www.rhubcom.com
About 1% of users remove it
TurboMeeting  by RHUB Communications, Inc.
Publisher's description - “The support agent can change to the online training mode anytime during a support session. Many support issues come from customers' lack of product knowledge. An instant training session helps to prevent many issues from happening in the future and saves in support costs.”
About 3% of users remove it
 
Powered by Should I Remove It?

Scan turbo_meeting.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.