home

sapgui_740.exe

SAP Front-End Setup for the Windows Environment

SAP SE

This is a self-extracting archive and installer. The file has been seen being downloaded from uofi.app.box.com.
Publisher:
SAP SE

Product:
SAP Front-End Setup for the Windows(R) Environment

Description:
SAP Self-Extractor

Version:
9, 0, 61, 0

MD5:
630dda1a5188d48923eecd0919fd6a27

SHA-1:
7ffd69ca2bb59cf48b2abab7106b228f5dfb29aa

SHA-256:
311f124462963bd73d25c07fb65ec4f7643d7c2544fcf76b315f54c2b6ac0199

Scanner detections:
1 / 68

Status:
Inconclusive  (not enough data for an accurate detection)

Analysis date:
11/24/2024 2:36:00 PM UTC  (today)

Scan engine
Detection
Engine version

ESET NOD32
Detection.Undefined
7.0.302.0

File size:
1.2 MB (1,216,141 bytes)

Product version:
9, 0, 61, 0

Copyright:
Copyright (C)2001-2015 SAP SE

Original file name:
SapSx.exe

File type:
Executable application (Win32 EXE)

Language:
English (United States)

File PE Metadata
Compilation timestamp:
5/12/2015 1:10:51 PM

OS version:
5.1

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
10.0

CTPH (ssdeep):
24576:+HbtP4xESFMggkrMQTca50slJ8kpmPxTfiX+ldAPyg53uWutYlSe:+HbCxESFMggkrMQTd5DJ8kpuzu+ng53N

Entry address:
0x3E84A

Entry point:
E8, 3D, AB, 00, 00, E9, 89, FE, FF, FF, 8B, FF, 55, 8B, EC, 51, 8B, 45, 0C, 53, 33, DB, 56, 57, 3B, C3, 0F, 84, D3, 00, 00, 00, 66, 39, 18, 0F, 84, CA, 00, 00, 00, 8B, 35, 78, 42, 46, 00, 39, 5D, 08, 75, 5D, 53, 53, 53, 50, FF, D6, 3B, C3, 75, 13, FF, 15, 24, 41, 46, 00, 50, E8, 1A, 55, 00, 00, 33, C0, E9, AE, 00, 00, 00, 8B, 7D, 10, 3B, F8, 77, 02, 8B, F8, 81, FF, FF, FF, FF, 7F, 76, 12, E8, D7, 54, 00, 00, C7, 00, 16, 00, 00, 00, 33, C0, E9, 8C, 00, 00, 00, 6A, 02, 57, E8, B8, EA, FF, FF, 8B, D8, 59, 59...
 
[+]

Entropy:
7.2729

Code size:
395 KB (404,480 bytes)

The file sapgui_740.exe has been seen being distributed by the following URL.

https://uofi.app.box.com/index.php?rm=box_download_shared_file&shared_name=z9reg38gmbn6a5430u2rq0u4d0crlbpq&file_id=f_34435085267

Scan sapgui_740.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.