home

end_user_-_wingui_7.3_pl_4.2_20130626_1454.exe

SAP Front-End Setup for the Windows Environment

SAP AG

This is a self-extracting archive and installer. The file has been seen being downloaded from www.us.army.mil and multiple other hosts.
Publisher:
SAP AG

Product:
SAP Front-End Setup for the Windows(R) Environment

Description:
SAP Self-Extractor

Version:
9, 0, 35, 0

MD5:
1d5fa1893bdf10cc2c1e35a979502ae7

SHA-1:
340fdf4e20cd157ecf5b2cfb85a023c03679a914

SHA-256:
d4c026da46740995e16dbd236a617152b72e17a254aa2322205c0585937ca3d1

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
2/25/2025 4:04:37 AM UTC  (today)

File size:
114.6 MB (120,209,124 bytes)

Product version:
9, 0, 35, 0

Copyright:
Copyright (C)2001-2007 SAP AG

Original file name:
SapSx.exe

File type:
Executable application (Win32 EXE)

Language:
English (United States)

Common path:
C:\users\{user}\downloads\end_user_-_wingui_7.3_pl_4.2_20130626_1454.exe

File PE Metadata
Compilation timestamp:
6/3/2013 3:37:42 AM

OS version:
5.1

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
10.0

CTPH (ssdeep):
3145728:AuEZNBuNyceZyJ/XnUwLO14V7JuTG4hSstNWwcK:AuE6UkfTETG40stNWwcK

Entry address:
0x3DC8A

Entry point:
E8, 3D, AB, 00, 00, E9, 89, FE, FF, FF, 8B, FF, 55, 8B, EC, 51, 8B, 45, 0C, 53, 33, DB, 56, 57, 3B, C3, 0F, 84, D3, 00, 00, 00, 66, 39, 18, 0F, 84, CA, 00, 00, 00, 8B, 35, 78, 32, 46, 00, 39, 5D, 08, 75, 5D, 53, 53, 53, 50, FF, D6, 3B, C3, 75, 13, FF, 15, 24, 31, 46, 00, 50, E8, 17, 55, 00, 00, 33, C0, E9, AE, 00, 00, 00, 8B, 7D, 10, 3B, F8, 77, 02, 8B, F8, 81, FF, FF, FF, FF, 7F, 76, 12, E8, D4, 54, 00, 00, C7, 00, 16, 00, 00, 00, 33, C0, E9, 8C, 00, 00, 00, 6A, 02, 57, E8, B8, EA, FF, FF, 8B, D8, 59, 59...
 
[+]

Entropy:
7.9971  (probably packed)

Code size:
391.5 KB (400,896 bytes)

The file end_user_-_wingui_7.3_pl_4.2_20130626_1454.exe has been seen being distributed by the following 2 URLs.

https://www.us.army.mil/suite/.../41338596

https://www.us.army.mil/suite/.../44354974

Scan end_user_-_wingui_7.3_pl_4.2_20130626_1454.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.