home

qtpweb_00078.exe

Hewlett-Packard Company

Publisher:
Hewlett-Packard Company  (signed and verified)

Description:
QTPWEB_00078 for HP QuickTest Professional 11.00 QFE

Version:
1,0,0,999

MD5:
da36a6f8fc67bcae2fb5cfbafe224118

SHA-1:
9d70ee51a2566ad2ddbd613da71e2978594a0957

SHA-256:
85626a301c29a41568b4fc876a62c0a70b236c35b5841288cbfe95638fb08132

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
4/26/2024 1:43:32 PM UTC  (today)

File size:
11.1 MB (11,643,704 bytes)

Copyright:
Copyright © Hewlett Packard 2007

File type:
Executable application (Win32 EXE)

Language:
English (United States)

Digital Signature
Signed by:
Hewlett-Packard Company

Authority:
VeriSign, Inc.

Valid from:
12/17/2008 6:00:00 PM

Valid to:
12/18/2011 5:59:59 PM

Subject:
CN=Hewlett-Packard Company, OU=Hewlett-Packard Company, OU=Digital ID Class 3 - Microsoft Software Validation v2, O=Hewlett-Packard Company, L=Palo Alto, S=California, C=US

Issuer:
CN=VeriSign Class 3 Code Signing 2004 CA, OU=Terms of use at https://www.verisign.com/rpa (c)04, OU=VeriSign Trust Network, O="VeriSign, Inc.", C=US

Serial number:
08994531FDF1B2EBB8C7821BF650FDCF

File PE Metadata
Compilation timestamp:
6/13/2011 1:48:48 AM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
8.0

CTPH (ssdeep):
196608:sayglBip7jlO5dVc5LMWgtt2hIhf2+lv+pVU:sayglBB5dVW8tOIJUpy

Entry address:
0xE1880

Entry point:
E9, 5B, E1, 13, 00, E9, 86, 78, 0A, 00, E9, B1, 9A, 02, 00, E9, 2C, 08, 1B, 00, E9, 27, 6A, 13, 00, E9, 22, 1B, 0B, 00, E9, CD, 22, 07, 00, E9, D8, 5F, 05, 00, E9, A3, EB, 03, 00, E9, 8E, 67, 03, 00, E9, B9, D6, 1B, 00, E9, B4, B5, 0C, 00, E9, FF, 42, 06, 00, E9, 8A, 25, 04, 00, E9, A5, 64, 05, 00, E9, A4, D0, 1A, 00, E9, 7B, 00, 16, 00, E9, 46, 58, 0D, 00, E9, 71, 1F, 0D, 00, E9, CC, F2, 01, 00, E9, C7, D6, 1B, 00, E9, 92, D7, 18, 00, E9, BD, B3, 0D, 00, E9, 88, 7B, 0C, 00, E9, 33, 72, 03, 00, E9, C6, C4...
 
[+]

Entropy:
7.0883

Developed / compiled with:
Microsoft Visual C++ 8.0 (Debug)

Code size:
1.8 MB (1,908,736 bytes)

The file qtpweb_00078.exe has been seen being distributed by the following 2 URLs.

http://h30359.www3.hp.com/.../QTPWEB_00078.EXE

http://support.openview.hp.com/downloadAPatch.jsp?patchName=QTPWEB_00078.EXE&prodName=qtp&prodRelease=11.0

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.