home

hp-laserjet-1300-driver-utility.exe

HP LASERJET 1300 Driver Utility

Lavians Inc.

The application hp-laserjet-1300-driver-utility.exe, “HP LASERJET 1300 Driver Utility Setup ” has been detected as a potentially unwanted program by 2 anti-malware scanners. The program is a setup application that uses the Inno Setup installer, however the file is not signed with an authenticode signature from a trusted source. The setup program uses the InstallCore engine which may bundle additional software offers including toolbars and browser extensions. The file has been seen being downloaded from www.hptreiber.com and multiple other hosts.
Publisher:
Lavians Inc.

Product:
HP LASERJET 1300 Driver Utility

Description:
HP LASERJET 1300 Driver Utility Setup

MD5:
c6c5661a5179846e64ade75317a35b76

SHA-1:
9391d35655eb7ea8c585807750daffe3874b641e

SHA-256:
9f7da3a0b6ca0bd76dc34a5d986f3823f5167ccce6c9a066987f97907b0ff5ed

Scanner detections:
2 / 68

Status:
Potentially unwanted

Explanation:
Uses the InstallCore download manager to install additional potentially unwanted software which may include extensions such as DealPly and various toolbars.

Analysis date:
4/19/2024 5:30:23 AM UTC  (today)

Scan engine
Detection
Engine version

ESET NOD32
Win32/Adware.DGTSoft
9.12516

Malwarebytes
PUP.Optional.InstallCore
v2015.11.09.05

File size:
3 MB (3,145,749 bytes)

File type:
Executable application (Win32 EXE)

Installer:
Inno Setup

Language:
Language Neutral

Common path:
C:\users\{user}\downloads\hp-laserjet-1300-driver-utility.exe

File PE Metadata
Compilation timestamp:
6/20/1992 1:22:17 AM

OS version:
1.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
2.25

CTPH (ssdeep):
98304:Q5J5/SVnMO5aCJTJGxnNl+Ycg6NY+rVLWH294tQA93:+/6OO5a7xnNl+Yj5goWON93

Entry address:
0x9C40

Entry point:
55, 8B, EC, 83, C4, C4, 53, 56, 57, 33, C0, 89, 45, F0, 89, 45, DC, E8, 86, 94, FF, FF, E8, 8D, A6, FF, FF, E8, 1C, A9, FF, FF, E8, 53, C9, FF, FF, E8, 9A, C9, FF, FF, E8, C9, F2, FF, FF, E8, 30, F4, FF, FF, 33, C0, 55, 68, FC, A2, 40, 00, 64, FF, 30, 64, 89, 20, 33, D2, 55, 68, C5, A2, 40, 00, 64, FF, 32, 64, 89, 22, A1, 14, C0, 40, 00, E8, 96, FE, FF, FF, E8, C9, FA, FF, FF, 8D, 55, F0, 33, C0, E8, 83, CF, FF, FF, 8B, 55, F0, B8, E8, CD, 40, 00, E8, 32, 95, FF, FF, 6A, 02, 6A, 00, 6A, 01, 8B, 0D, E8, CD...
 
[+]

Entropy:
7.9973

Packer / compiler:
Inno Setup v5.x - Installer Maker

Code size:
37 KB (37,888 bytes)

The file hp-laserjet-1300-driver-utility.exe has been seen being distributed by the following 2 URLs.

http://www.hptreiber.com/hp-laserjet-1300-driver-utility.exe

http://rss2search.com/protect/ignore2.php?match=hptreiber.com/&site=http://.../hp-laserjet-1300-driver-utility.exe

Remove hp-laserjet-1300-driver-utility.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.