home

sapgui_730.exe

SAP Front-End Setup for the Windows Environment

SAP AG

This is a setup and installation application. The file has been seen being downloaded from sap.degroote.mcmaster.ca and multiple other hosts.
Publisher:
SAP AG

Product:
SAP Front-End Setup for the Windows(R) Environment

Description:
SAP Self-Extractor

Version:
9, 0, 45, 0

MD5:
296709ccc67db067dc46de2f04123d85

SHA-1:
edf34b8c232f6da88e55a6be31a3f5c23efa2a62

SHA-256:
e8b958149fb4edfa32a558c3369d9ccf9322999f2315542b8132176d4c2c5820

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
11/24/2024 1:35:16 PM UTC  (today)

File size:
278.1 MB (291,595,070 bytes)

Product version:
9, 0, 45, 0

Copyright:
Copyright (C)2001-2007 SAP AG

Original file name:
SapSx.exe

File type:
Executable application (Win32 EXE)

Language:
English (United States)

Common path:
C:\users\{user}\downloads\sapgui_730.exe

File PE Metadata
Compilation timestamp:
4/6/2014 11:10:18 PM

OS version:
5.1

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
10.0

CTPH (ssdeep):
6291456:FuCUy6C9pCQnQmjpwpb5GACjQ6Z8WN7XVS4EFC6AzJdU7DZL:uBQQAwLGVjQ/WpoC6wG

Entry address:
0x3E71A

Entry point:
E8, 4D, AB, 00, 00, E9, 89, FE, FF, FF, 8B, FF, 55, 8B, EC, 51, 8B, 45, 0C, 53, 33, DB, 56, 57, 3B, C3, 0F, 84, D3, 00, 00, 00, 66, 39, 18, 0F, 84, CA, 00, 00, 00, 8B, 35, 78, 42, 46, 00, 39, 5D, 08, 75, 5D, 53, 53, 53, 50, FF, D6, 3B, C3, 75, 13, FF, 15, 24, 41, 46, 00, 50, E8, 1A, 55, 00, 00, 33, C0, E9, AE, 00, 00, 00, 8B, 7D, 10, 3B, F8, 77, 02, 8B, F8, 81, FF, FF, FF, FF, 7F, 76, 12, E8, D7, 54, 00, 00, C7, 00, 16, 00, 00, 00, 33, C0, E9, 8C, 00, 00, 00, 6A, 02, 57, E8, B8, EA, FF, FF, 8B, D8, 59, 59...
 
[+]

Entropy:
7.9973  (probably packed)

Code size:
395 KB (404,480 bytes)

The file sapgui_730.exe has been seen being distributed by the following 5 URLs.

http://sap.degroote.mcmaster.ca/SAPGUI_INST_730.exe

https://doc-0o-44-docs.googleusercontent.com/docs/securesc/ge7gsi9r5jthg3opa13f6otke0jht6gs/q09ocd9prdfh8dnhpqbjn0m9l96d37as/1435629600000/.../09406407469173017567/0B62j85sMERCfZjJ5MGhHV2pLa0k?e=download

http://ecourses.pvamu.edu/mod/.../view.php?id=517670

http://ucc.uwm.edu/.../SAPGUI_730.exe

http://findlay.learninghouse.com/pluginfile.php/58793/mod_folder/content/0/SAP GUI Files and Instructions/.../SAPGUI_730.exe

Scan sapgui_730.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.