home

ljm1120-hb-pnp-win64-ru.exe

HP Webpack

Hewlett-Packard Company

This is a setup program which is used to install the application. The file has been seen being downloaded from d2.driver.ru and multiple other hosts.
Publisher:
Hewlett-Packard Company  (signed and verified)

Product:
HP Webpack

Version:
1.0

MD5:
b2774fc5ca925c18776179e47241ff3a

SHA-1:
2b82a045c2547302eabe3e28ba84d82fd485c56b

SHA-256:
80bc20e396e0ea33d7388ac580fc1e0d1d9e93fc2fae467242be5a232bc49c65

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
4/26/2024 5:02:56 AM UTC  (today)

File size:
14.2 MB (14,856,848 bytes)

Product version:
1.0

Copyright:
Hewlett-Packard Company

Original file name:
7zS.sfx

File type:
Executable application (Win32 EXE)

Common path:
C:\users\{user}\downloads\ljm1120-hb-pnp-win64-ru.exe

Digital Signature
Signed by:
Hewlett-Packard Company

Authority:
VeriSign, Inc.

Valid from:
12/18/2008 4:00:00 AM

Valid to:
12/19/2011 3:59:59 AM

Subject:
CN=Hewlett-Packard Company, OU=Hewlett-Packard Company, OU=Digital ID Class 3 - Microsoft Software Validation v2, O=Hewlett-Packard Company, L=Palo Alto, S=California, C=US

Issuer:
CN=VeriSign Class 3 Code Signing 2004 CA, OU=Terms of use at https://www.verisign.com/rpa (c)04, OU=VeriSign Trust Network, O="VeriSign, Inc.", C=US

Serial number:
08994531FDF1B2EBB8C7821BF650FDCF

File PE Metadata
Compilation timestamp:
4/14/2009 5:03:15 AM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
8.0

CTPH (ssdeep):
393216:v5b47EBKdH3t/AEH8i1IwtmB41jvsO0ztgifM8F610:PBKJt/T8i1PMMkRFzF61

Entry address:
0x242E5

Entry point:
E8, 2C, 9A, 00, 00, E9, 16, FE, FF, FF, 55, 8B, EC, 83, 7D, 08, 00, 74, 17, FF, 75, 1C, FF, 75, 18, FF, 75, 14, FF, 75, 10, FF, 75, 0C, E8, B6, EF, FF, FF, 83, C4, 14, 5D, C3, 6A, 0C, 68, E8, D4, 44, 00, E8, 9F, 36, 00, 00, 6A, 0E, E8, 6E, 26, 00, 00, 59, 83, 65, FC, 00, 8B, 75, 08, 8B, 4E, 04, 85, C9, 74, 2F, A1, 04, 29, 45, 00, BA, 00, 29, 45, 00, 89, 45, E4, 85, C0, 74, 11, 39, 08, 75, 2C, 8B, 48, 04, 89, 4A, 04, 50, E8, 1D, DF, FF, FF, 59, FF, 76, 04, E8, 14, DF, FF, FF, 59, 83, 66, 04, 00, C7, 45, FC...
 
[+]

Code size:
263 KB (269,312 bytes)

The file ljm1120-hb-pnp-win64-ru.exe has been seen being distributed by the following 11 URLs.

https://d2.driver.ru/6e9cd7ae2102/532a9ff86d598b6e399e70e7466c176532c3283c375ae0b4bef3745cc3ad524fbd32ee94490cc49cd3ece33aad42c22a57222f78/1/80/36/.../ljM1120-hb-pnp-win64-ru.exe

https://d2.driverscollection.com/1d3f79043e15805/bad5ad9cd2155ca43a3838d2fad3cf15b4322b60b8db14096b5c38e8706b5c3ac2ba8d2266f4ddb9146bdc089c61156f5802f807/1/80/36/.../ljM1120-hb-pnp-win64-ru.exe

http://ftp.hp.com/pub/softlib/software11/COL21537/.../ljM1120-hb-pnp-win64-ru.exe

https://d2.driver.ru/b0d51f18f2e/26e845404f66c94d7cd8a0238dc870769cefd9980a23fa7d598a5b45739840fbc9a9f6567741545f687f0d35ee38c15256cdd6db/1/80/36/.../ljM1120-hb-pnp-win64-ru.exe

https://d2.driverscollection.com/1247ac9adcd774c2/5e22b59c710f71fe95d383995ad658a3c2e9e2bea33bb45a536946f090494b2cb0d63504745252de8fc72065ab0c069a56011c91/1/80/36/.../ljM1120-hb-pnp-win64-ru.exe

http://d2.driverscollection.com/1d3f7919882682c/7553a2a3d3d54303f3844b40c6d02f06b0315374589509135912e759bdb7b80333a6fbae05d0c11ad8d998cd95bb0e445414639b/1/80/36/.../ljM1120-hb-pnp-win64-ru.exe

https://d2.driverscollection.com/4ad11d31c77db/ae1718781ed78d4b301c13d1388f9c07e1bb2cbfa3a3c90c91e105979ece2d6433de0684f9392f1665c197fad21c96c2572ad46a/1/80/36/.../ljM1120-hb-pnp-win64-ru.exe

https://d2.driver.ru/6e8590b0fac6/542c60c81857cf722ce768020524280181576ca0d9c7a0f4d7830d8e5d63038c53275ba6da6f4b6417630d8e175fbb0054f99a58/1/80/36/.../ljM1120-hb-pnp-win64-ru.exe

https://d2.driver.ru/77b4fa4a399e/5c6ecb40383dea052d64eea7d294e2ec4932043c5b627dd253c30fee5e15576e7354bcd305e5c7e866052e8068343ad15666ebaf/1/80/36/.../ljM1120-hb-pnp-win64-ru.exe

https://d2.driver.ru/1d3f7915c6cb1d4/19e371a63563b3e77c9a71979b21e832221ac4fb448ea9856a0760224b0f318fffdd745f9ac3497ac7d8aad9204115ea55bf9bb7/1/80/36/.../ljM1120-hb-pnp-win64-ru.exe

https://d2.driver.ru/4522024d9a586/f376a19fcca0b3c1a191d25e62dffd76fc751a30f8dd1b603af7ac5a3a5f465c1c826037c050da7fa1c892fa442db6e854912ada/1/80/36/.../ljM1120-hb-pnp-win64-ru.exe

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.