home

sp26412.exe

SP26412

Hewlett-Packard Company

This is a setup program which is used to install the application. The file has been seen being downloaded from members.driverguide.com and multiple other hosts.
Publisher:
Hewlett Packard   (signed by Hewlett-Packard Company)

Product:
SP26412

Description:
Realtek AC97 Audio Driver Update

Version:
5.10.0.5730

MD5:
924febdee8f9e89876b5fc36c833aadf

SHA-1:
fed01b6f4ee1ec27a9cf86edbe8b3394084bed4c

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
5/3/2024 6:38:51 PM UTC  (today)

File size:
11 MB (11,491,352 bytes)

Product version:
5.10.0.5730

Original file name:
stub32i.exe

File type:
Executable application (Win32 EXE)

Language:
English (United States)

Common path:
C:\Documents and Settings\{user}\My documents\downloads\sp26412.exe

Digital Signature
Signed by:
Hewlett-Packard Company

Authority:
VeriSign, Inc.

Valid from:
1/30/2004 4:00:00 PM

Valid to:
1/30/2005 3:59:59 PM

Subject:
CN=Hewlett-Packard Company, OU=Hewlett-Packard Company, OU=Digital ID Class 3 - Microsoft Software Validation v2, O=Hewlett-Packard Company, L=Palo Alto, S=California, C=US

Issuer:
CN=VeriSign Class 3 Code Signing 2001 CA, OU=Terms of use at https://www.verisign.com/rpa (c)01, OU=VeriSign Trust Network, O="VeriSign, Inc."

Serial number:
360778B1BAD77E5BF4FDFB921491B5BB

File PE Metadata
Compilation timestamp:
6/29/2001 9:31:17 AM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
6.0

CTPH (ssdeep):
196608:cjXNbmTrIb7jpBmTPEuC0VXILjBN4EJyL5zEgbWbzBvWZMSUwuOWc2Vz3hp:crNbmIHjpQTPpCemN4EiJ0tvIMSUwghl

Entry address:
0x88F7

Entry point:
55, 8B, EC, 6A, FF, 68, 18, 33, 41, 00, 68, 30, BA, 40, 00, 64, A1, 00, 00, 00, 00, 50, 64, 89, 25, 00, 00, 00, 00, 83, EC, 58, 53, 56, 57, 89, 65, E8, FF, 15, E8, 31, 41, 00, 33, D2, 8A, D4, 89, 15, 5C, 63, 41, 00, 8B, C8, 81, E1, FF, 00, 00, 00, 89, 0D, 58, 63, 41, 00, C1, E1, 08, 03, CA, 89, 0D, 54, 63, 41, 00, C1, E8, 10, A3, 50, 63, 41, 00, 33, F6, 56, E8, E0, 00, 00, 00, 59, 85, C0, 75, 08, 6A, 1C, E8, B0, 00, 00, 00, 59, 89, 75, FC, E8, 11, 2F, 00, 00, FF, 15, EC, 31, 41, 00, A3, 24, 8A, 41, 00, E8...
 
[+]

Entropy:
7.9980

Developed / compiled with:
Microsoft Visual C++ v6.0

Code size:
72 KB (73,728 bytes)

The file sp26412.exe has been seen being distributed by the following 13 URLs.

http://members.driverguide.com/.../dispatch_cache_get.php?msl=924febdee8f9e89876b5fc36c833aadf,774919_1158325682&time=1458045894&auth=eb0578a33c37f50f9b301e34864eab85&file=sp26412.exe

http://members.driverguide.com/.../dispatch_cache_get.php?msl=924febdee8f9e89876b5fc36c833aadf,774919_1158325682&time=1474865525&auth=11f0a3aaad9e0bb824662ca9053f113e&file=sp26412.exe

http://members.driverguide.com/.../dispatch_cache_get.php?msl=924febdee8f9e89876b5fc36c833aadf,774919_1158325682&time=1482619272&auth=47ff1353435a6ac94557e1b8b8cb2177&file=sp26412.exe

http://members.driverguide.com/.../dispatch_cache_get.php?msl=924febdee8f9e89876b5fc36c833aadf,774919_1158325682&time=1469555279&auth=cae18bcbede3275323a9f2f779779d5c&file=sp26412.exe

http://static.letoltokozpont.hu/letoltokozpont.hu/driverek/.../sp26412.exe

http://members.driverguide.com/.../dispatch_cache_get.php?msl=924febdee8f9e89876b5fc36c833aadf,774919_1158325682&time=1463128693&auth=391f1ee4bfe0424f1e175a98eff34d7a&file=sp26412.exe

http://www.nodevice.com/download_file.html

http://members.driverguide.com/.../dispatch_cache_get.php?msl=924febdee8f9e89876b5fc36c833aadf,774919_1158325682&time=1461729728&auth=c1100cf489f21f03ae8afd9f0a6bc666&file=sp26412.exe

https://d2.driverscollection.com/2b355f9f78c6e9/0f7ec4815fd72475f2dff8beeb1b695d54a04528b4bf3726b0771a60a3253596cde2115bd9a05bab0e573802f6fa7b0757377190/3/80/90/.../sp26412.exe

http://members.driverguide.com/.../dispatch_cache_get.php?msl=924febdee8f9e89876b5fc36c833aadf,774919_1158325682&time=1460428403&auth=b670eabe5ca6d82ec6714d7e53ff12b4&file=sp26412.exe

http://whp-hou4.cold.extweb.hp.com/pub/softpaq/.../sp26412.exe

ftp://ftp.hp.com/pub/softpaq/.../sp26412.exe

http://ftp.hp.com/pub/softpaq/.../sp26412.exe

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.