» ljp2035(driverchest).exe
Overview
Analysis
File Details
Downloads (14)

ljp2035(driverchest).exe

HP Webpack

HP

This is a setup program which is used to install the application. The file has been seen being downloaded from www.hpdriver.net and multiple other hosts.

File name:

Publisher:

Hewlett-Packard Company (signed by HP)

Product:

HP Webpack

Version:

1.0

MD5:

2fb29a256454ddf788e427f75973ee46

SHA-1:

94c1bd1aebbbaf47219f8198b22bd18230d4ba71

SHA-256:

9832d46286a9fed8426f32822dcf4b29d57c18bfc9e3495d3253e795a15c0bd1

Scanner detections:

0 / 68

Status:

Clean (as of last analysis)

Analysis date:

5/13/2024 5:57:45 AM UTC (today)

File size:

5.1 MB (5,330,048 bytes)

Product version:

1.0

Hewlett-Packard Company

Original file name:

7zS.sfx

File type:

Executable application (Win32 EXE)

Language:

English (United States)

Digital Signature

Signed by:

Authority:

VeriSign, Inc.

Valid from:

2/21/2008 3:30:00 AM

Valid to:

3/1/2009 3:29:59 AM

Subject:

CN=HP, OU=IPG, OU=Digital ID Class 3 - Microsoft Software Validation v2, O=HP, L=Boise, S=idaho, C=US

Issuer:

CN=VeriSign Class 3 Code Signing 2004 CA, OU=Terms of use at https://www.verisign.com/rpa (c)04, OU=VeriSign Trust Network, O="VeriSign, Inc.", C=US

Serial number:

798D76F77E7BEBE8020279C10996C752

File PE Metadata

Compilation timestamp:

7/18/2008 4:09:50 AM

OS version:

4.0

OS bitness:

Win32

Subsystem:

Windows GUI

Linker version:

8.0

CTPH (ssdeep):

98304:SY+f/PiH/dHnL2PuyFkgWJduv5if/pMKgfcQD8gbXNaDc/o7r2:SnPadr2PuyFsYEMKgfcIPaYQ/2

Entry address:

0x1A534

Entry point:

E8, 35, 47, 00, 00, E9, 16, FE, FF, FF, 6A, 0C, 68, A0, CC, 42, 00, E8, 4E, 27, 00, 00, 6A, 0E, E8, 15, 1C, 00, 00, 59, 83, 65, FC, 00, 8B, 75, 08, 8B, 4E, 04, 85, C9, 74, 2F, A1, 64, 07, 43, 00, BA, 60, 07, 43, 00, 89, 45, E4, 85, C0, 74, 11, 39, 08, 75, 2C, 8B, 48, 04, 89, 4A, 04, 50, E8, DB, EC, FF, FF, 59, FF, 76, 04, E8, D2, EC, FF, FF, 59, 83, 66, 04, 00, C7, 45, FC, FE, FF, FF, FF, E8, 0A, 00, 00, 00, E8, 3D, 27, 00, 00, C3, 8B, D0, EB, C5, 6A, 0E, E8, E2, 1A, 00, 00, 59, C3, CC, CC, 8B, 54, 24, 04... 
[+]

Entropy:

7.9871 (probably packed)

Code size:

143.5 KB (146,944 bytes)

The file ljp2035(driverchest).exe has been seen being distributed by the following 14 URLs.

http://www.hpdriver.net/goto/http://ftp.hp.com/pub/softlib/software10/COL25599/.../ljP2035-gdi-pnp-win32-en.exe

http://whp-aus1.cold.extweb.hp.com/pub/softlib/software10/COL25599/.../ljP2035-gdi-pnp-win32-en.exe

http://whp-aus2.cold.extweb.hp.com/pub/softlib/software10/COL25599/.../ljP2035-gdi-pnp-win32-en.exe

http://h20566.www2.hp.com/portal/site/hpsc/template.PAGE/action.process/public/psi/.../?sp4ts.oid=3662049&javax.portlet.action=true&spf_p.tpst=swdMain&javax.portlet.begCacheTok=com.vignette.cachetoken&spf_p.prp_swdMain=wsrp-interactionState=entitleKey=1872243|source=listDriver|swItem=|swEnvOID=228|target=687474703A2F2F6674702E68702E636F6D2F7075622F736F66746C69622F736F66747761726531302F434F4C32353539392F6C6A2D36353832322D312F6C6A50323033352D6764692D706E702D77696E33322D656E2E657865|itemLocale=|swLang=|action=driverDownload&javax.portlet.endCacheTok=com.vignette.cachetoken

http://www.ar-drivers.com/download/ftp://ftp.hp.com/pub/softlib/software10/COL25599/.../ljP2035-gdi-pnp-win32-en.exe

http://ftp.hp.com/pub/softlib/software12/COL30860/.../ljP2035-gdi-pnp-win32-en.exe

http://www.panasonic-hp.com/index.php?option=com_zoo&Itemid=638&args[0]=0.0&args[1]=48dd83aef735205169cf82f2efa0f040&element=2aea7f37-38d9-4f66-95d7-a93e8eaf42b5&format=raw&item_id=659&method=download&task=callelement

http://h20565.www2.hp.com/hpsc/swd/.../obtainSoftware?url=687474703A2F2F6674702E68702E636F6D2F7075622F736F66746C69622F736F66747761726531302F434F4C32353539392F6C6A2D36353832322D312F6C6A50323033352D6764692D706E702D77696E33322D656E2E657865

http://h20564.www2.hp.com/hpsc/swd/.../obtainSoftware?url=687474703A2F2F6674702E68702E636F6D2F7075622F736F66746C69622F736F66747761726531302F434F4C32353539392F6C6A2D36353832322D312F6C6A50323033352D6764692D706E702D77696E33322D656E2E657865

http://ftp.hp.com/pub/softlib/software10/COL25599/.../ljP2035-gdi-pnp-win32-en.exe

http://h20000.www2.hp.com/bizsupport/TechSupport/SoftwareDownloadEventHandler.jsp?redirectReason=SWD_FTP_Request&swItem=lj-65822-1&prodSeriesId=3662025&prodLine=8A&targetPage=ftp://ftp.hp.com/pub/softlib/software10/COL25599/.../ljP2035-gdi-pnp-win32-en.exe&filesize=5330048

http://h20566.www2.hp.com/hpsc/swd/.../obtainSoftware?url=687474703A2F2F6674702E68702E636F6D2F7075622F736F66746C69622F736F66747761726531302F434F4C32353539392F6C6A2D36353832322D312F6C6A50323033352D6764692D706E702D77696E33322D656E2E657865

http://h20565.www2.hp.com/portal/site/hpsc/template.PAGE/action.process/public/psi/.../?sp4ts.oid=3662026&javax.portlet.action=true&spf_p.tpst=swdMain&javax.portlet.begCacheTok=com.vignette.cachetoken&spf_p.prp_swdMain=wsrp-interactionState=entitleKey=1872243|source=listDriver|swItem=|swEnvOID=228|target=687474703A2F2F6674702E68702E636F6D2F7075622F736F66746C69622F736F66747761726531302F434F4C32353539392F6C6A2D36353832322D312F6C6A50323033352D6764692D706E702D77696E33322D656E2E657865|itemLocale=|swLang=8|action=driverDownload&javax.portlet.endCacheTok=com.vignette.cachetoken

ftp://ftp.hp.com/pub/softlib/software10/COL25599/.../ljP2035-gdi-pnp-win32-en.exe

Scan ljp2035(driverchest).exe - Powered by Reason Core Security

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.