home

sapcar_617-80000938.exe

SAP NetWeaver

SAP SE

Publisher:
SAP AG  (signed by SAP SE)

Product:
SAP NetWeaver

Version:
7210, 618, 24, 60958

MD5:
0d5569e3a3bc17306601f2e6761382b1

SHA-1:
1e54893516389a159bc7b46f9eb22f960a8a9713

SHA-256:
d3f1a54ca6272e03437988e4e4ba28de972d01e4fcbec2679edd98a280364ce0

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
11/15/2024 1:20:20 AM UTC  (today)

File size:
4.3 MB (4,480,208 bytes)

Product version:
721, patch 618, changelist 1633822

Copyright:
Copyright (c) SAP AG 1992 - 2015

File type:
Executable application (Win64 EXE)

Language:
German (Germany)

Digital Signature
Signed by:
SAP SE

Authority:
Symantec Corporation

Valid from:
1/30/2015 7:00:00 AM

Valid to:
1/30/2018 6:59:59 AM

Subject:
CN=SAP SE, OU=SAP Production CSA2015, O=SAP SE, L=Walldorf/Baden, S=Baden-Wuerttemberg, C=DE

Issuer:
CN=Symantec Class 3 SHA256 Code Signing CA, OU=Symantec Trust Network, O=Symantec Corporation, C=US

Serial number:
09E035A69DF1F83FB9032CD91905914F

File PE Metadata
Compilation timestamp:
12/11/2015 11:37:27 AM

OS version:
4.0

OS bitness:
Win64

Subsystem:
Windows Console

Linker version:
8.0

CTPH (ssdeep):
49152:iFATni0IfhTTObhtVcpGQyKvgL+4acg+Q2rALwQk6t7BV0mvV1na5m:PtKscfyKn50ia5m

Entry address:
0xFDFB0

Entry point:
48, 83, EC, 28, E8, 67, 04, 00, 00, 48, 83, C4, 28, E9, 4E, FD, FF, FF, FF, 25, 40, C5, 04, 00, FF, 25, 2A, C5, 04, 00, FF, 25, FC, C4, 04, 00, FF, 25, EE, C4, 04, 00, CC, CC, CC, CC, CC, CC, 48, 89, 5C, 24, 20, 4C, 89, 44, 24, 18, 48, 89, 4C, 24, 08, 56, 57, 41, 54, 41, 55, 41, 56, 48, 83, EC, 30, 45, 8B, E9, 4D, 8B, E0, 48, 8B, F2, 48, 8B, F9, 33, DB, 89, 5C, 24, 20, 89, 5C, 24, 24, 4C, 8B, B4, 24, 80, 00, 00, 00, 66, 66, 90, 66, 66, 66, 90, 41, 3B, DD, 7D, 22, 48, 8B, D6, 48, 8B, CF, 41, FF, D6, 49, 03...
 
[+]

Entropy:
6.0744

Code size:
1.3 MB (1,346,560 bytes)

The file sapcar_617-80000938.exe has been seen being distributed by the following 2 URLs.

https://websmp230.sap-ag.de/sap/bc/bsp/spn/.../download.htm?objid=002007974700000749662015D&userid=S0008725591&action=DL_DIRECT

https://websmp130.sap-ag.de/sap/bc/bsp/spn/.../download.htm?objid=002007974700000749662015D&userid=I071939&action=DL_DIRECT

Scan sapcar_617-80000938.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.