home

sp37950.exe

Broadcom

Hewlett-Packard Company

This is a setup program which is used to install the application. The file has been seen being downloaded from whp-aus2.cold.extweb.hp.com and multiple other hosts.
Publisher:
Hewlett-Packard Company   (signed by Hewlett-Packard Company)

Product:
Broadcom

MD5:
476b6fd5f7bb9f4127fb388421684a7c

SHA-1:
99c39c1b06e08352b5667a134fb9f60e40a82757

SHA-256:
66070ede14af380f2966f53c95735fce323d574abda6d630cce3c0c66e4a71ad

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
12/25/2024 12:37:23 AM UTC  (today)

File size:
6.9 MB (7,253,304 bytes)

Original file name:
stub32i.exe

File type:
Executable application (Win32 EXE)

Language:
English (United States)

Common path:
C:\users\{user}\downloads\sp37950.exe

Digital Signature
Signed by:
Hewlett-Packard Company

Authority:
VeriSign, Inc.

Valid from:
2/5/2007 1:00:00 AM

Valid to:
2/10/2008 12:59:59 AM

Subject:
CN=Hewlett-Packard Company, OU=Hewlett-Packard Company, OU=Digital ID Class 3 - Microsoft Software Validation v2, O=Hewlett-Packard Company, L=Palo Alto, S=California, C=US

Issuer:
CN=VeriSign Class 3 Code Signing 2004 CA, OU=Terms of use at https://www.verisign.com/rpa (c)04, OU=VeriSign Trust Network, O="VeriSign, Inc.", C=US

Serial number:
7ADE0C565B1D729B61C6DF9195897E03

File PE Metadata
Compilation timestamp:
8/29/2001 11:22:49 PM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
6.0

CTPH (ssdeep):
196608:nObcybAJEuftAtQkYo0zSuV2N8PZ6by8ktUGiml7MwfmDTxUmemavF21lv:59AtQkMU1XQMlv

Entry address:
0x8927

Entry point:
55, 8B, EC, 6A, FF, 68, 18, 33, 41, 00, 68, 60, BA, 40, 00, 64, A1, 00, 00, 00, 00, 50, 64, 89, 25, 00, 00, 00, 00, 83, EC, 58, 53, 56, 57, 89, 65, E8, FF, 15, E8, 31, 41, 00, 33, D2, 8A, D4, 89, 15, 5C, 63, 41, 00, 8B, C8, 81, E1, FF, 00, 00, 00, 89, 0D, 58, 63, 41, 00, C1, E1, 08, 03, CA, 89, 0D, 54, 63, 41, 00, C1, E8, 10, A3, 50, 63, 41, 00, 33, F6, 56, E8, E0, 00, 00, 00, 59, 85, C0, 75, 08, 6A, 1C, E8, B0, 00, 00, 00, 59, 89, 75, FC, E8, 11, 2F, 00, 00, FF, 15, EC, 31, 41, 00, A3, 24, 8A, 41, 00, E8...
 
[+]

Developed / compiled with:
Microsoft Visual C++ v6.0

Code size:
72 KB (73,728 bytes)

The file sp37950.exe has been seen being distributed by the following 9 URLs.

http://whp-aus2.cold.extweb.hp.com/pub/softpaq/.../sp37950.exe

http://h20566.www2.hp.com/hpsc/swd/.../obtainSoftware?url=687474703A2F2F6674702E68702E636F6D2F7075622F736F66747061712F737033373530312D33383030302F737033373935302E657865

https://d2.driverscollection.com/4ad11cc7a64ee/ac61857b0f5d9d362aaaeedf708c1f713b00fa9be0f7a25081e22b176050176becc99c700087ac96042a0bbe9205135d54a07c6c/0/40/43/.../sp37950.exe

ftp://ftp.hp.com/pub/softpaq/.../sp37950.exe

https://d2.driverscollection.com/2ec2dc9e2fcd89/cedb64fb7c6270120a018b567ca68828443c9d307c66e8ff158cfbcb974497c390ad7c13dca7de696603364ec723222b57a5c9df/0/40/43/.../sp37950.exe

https://d2.driverscollection.com/1d3f7916e731eb4/09e3064a0e805efed0a2a2e30116531aa90385b0227e42c2ff3ec2d6088937094c4459cb849978eff7e677fadc9940655768bb19/0/40/43/.../sp37950.exe

http://ftp.hp.com/pub/softpaq/.../sp37950.exe

https://d2.driverscollection.com/4adfa7add8a8e/f9fb46afce2d7cc36890b280835d6eda93138f786af30402e23c29c76663d0b2a84d5888d1bdfdfab04f6fd46547933e56e2b219/0/40/43/.../sp37950.exe

http://h20564.www2.hp.com/hpsc/swd/.../obtainSoftware?url=687474703A2F2F6674702E68702E636F6D2F7075622F736F66747061712F737033373530312D33383030302F737033373935302E657865

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.