home

upd-ps-x32-6.0.0.18849.exe

Hewlett-Packard Company

This is a setup program which is used to install the application. The file has been seen being downloaded from fs2.download82.com and multiple other hosts.
Publisher:
Hewlett-Packard Company  (signed and verified)

MD5:
c33f01585c986a3235e72b4fd92f6335

SHA-1:
6921ecf9cc77d6e623c2fe1f2d03ceb0767198e8

SHA-256:
aba300b910a408a71c1af862f89f52306411b7995997c02f17a9165701a6a3a8

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
12/28/2024 5:40:45 PM UTC  (today)

File size:
17.7 MB (18,520,304 bytes)

File type:
Executable application (Win32 EXE)

Common path:
C:\users\{user}\downloads\upd-ps-x32-6.0.0.18849.exe

Digital Signature
Signed by:
Hewlett-Packard Company

Authority:
VeriSign, Inc.

Valid from:
6/24/2014 5:00:00 PM

Valid to:
7/24/2016 4:59:59 PM

Subject:
CN=Hewlett-Packard Company, O=Hewlett-Packard Company, L=Palo Alto, S=California, C=US

Issuer:
CN=VeriSign Class 3 Code Signing 2010 CA, OU=Terms of use at https://www.verisign.com/rpa (c)10, OU=VeriSign Trust Network, O="VeriSign, Inc.", C=US

Serial number:
3FD0E01189629482B464D5D9FD033B30

File PE Metadata
Compilation timestamp:
11/2/2009 12:23:03 PM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
8.0

CTPH (ssdeep):
393216:mS+GK+2nasoxtQ+hq5ja++fWyDXNAIG6N19y9qRg4IoyQVyck4:mS+GK+4ox5p7bXNAIG49gqR8oyL4

Entry address:
0xA79E

Entry point:
E8, 6E, 4A, 00, 00, E9, 16, FE, FF, FF, 55, 8B, EC, 81, EC, 28, 03, 00, 00, A3, 20, 3C, 42, 00, 89, 0D, 1C, 3C, 42, 00, 89, 15, 18, 3C, 42, 00, 89, 1D, 14, 3C, 42, 00, 89, 35, 10, 3C, 42, 00, 89, 3D, 0C, 3C, 42, 00, 66, 8C, 15, 38, 3C, 42, 00, 66, 8C, 0D, 2C, 3C, 42, 00, 66, 8C, 1D, 08, 3C, 42, 00, 66, 8C, 05, 04, 3C, 42, 00, 66, 8C, 25, 00, 3C, 42, 00, 66, 8C, 2D, FC, 3B, 42, 00, 9C, 8F, 05, 30, 3C, 42, 00, 8B, 45, 00, A3, 24, 3C, 42, 00, 8B, 45, 04, A3, 28, 3C, 42, 00, 8D, 45, 08, A3, 34, 3C, 42, 00, 8B...
 
[+]

Entropy:
7.9989  (probably packed)

Code size:
72 KB (73,728 bytes)

The file upd-ps-x32-6.0.0.18849.exe has been seen being distributed by the following 26 URLs.

http://fs2.download82.com/software/bbd8ff9dba17080c0c121804efbd61d5/.../upd-ps-x32-6.0.0.18849.exe

https://d3.driverscollection.com/4521f2ad859b1/829054a1a86f82f3c6426864b3b8a648536b0e375b6a40306d5d64492b33ecd9341b9c0a3bd53ccfc6f594e74c4197ee580d3364/4/80/10/.../upd-ps-x32-6.0.0.18849.exe

https://d3.driverscollection.com/4521f426fea7c/4e48db7c7b1d2af132c295485efc088b9db51fdd118fb43df55c3b754b1ca618645226adb704efe0a25c0f63baa15daf56447428/4/80/10/.../upd-ps-x32-6.0.0.18849.exe

https://d3.driverscollection.com/1d3f791eb64af2e/d5082bc4573c74f4b11269a14b271d215279e7a63a5f6f0f4993be7aa4ebf659c43dd8e655c820822985402439c1f0e756727751/4/80/10/.../upd-ps-x32-6.0.0.18849.exe

https://d3.driverscollection.com/1247ac9901053edb/587094c1bce33d4dc65ea874dc5b6070c35c742599a9feea55e1d07457ca7c20413f6a17a9152c1a2629c12a30bd629757f4580b/4/80/10/.../upd-ps-x32-6.0.0.18849.exe

https://d3.driverscollection.com/77b4c0c9b8b1/f60d2b5d14a5d6eeaa7cec587867ed8200214c4da34e43eba00022dadc149cc7107dcc42d5b4084280bcd22524b10fa15586b717/4/80/10/.../upd-ps-x32-6.0.0.18849.exe

https://d3.driverscollection.com/b0fac2e7892/ef78faaf601b60c467544f3de2fd7b35f5fdeb69f569169952cac92d1c975a96e43056064ce64a5ffc905630b564827957056347/4/80/10/.../upd-ps-x32-6.0.0.18849.exe

https://d3.driverscollection.com/4adfa6f98c669/dfa07d4a63e6fbb49a3d6a94bf5fb9ebb946e4c817a09b763f62eab1dd2d5499e02a2e89bacd7bdb0bfdb1b201deac0f58199d59/4/80/10/.../upd-ps-x32-6.0.0.18849.exe

https://d3.driverscollection.com/6e854c45b7fb/0e3ebdef6741496838337d4330f81de92082b05fcfcc006e612a3c2bfcd3bd004717707bd8c1cf72a37622b90bf1bf1255f9678f/4/80/10/.../upd-ps-x32-6.0.0.18849.exe

https://d3.driverscollection.com/_7_14182132182222272322a01e358b05f960cbaf8ef32773655/fa19e40e65524620e730cec35345b1eead063c0e2621282d28a09b8018f72371fb702a2198c6c12bac9ab00ddea7316957a644d7/4/80/10/.../upd-ps-x32-6.0.0.18849.exe

https://d3.driverscollection.com/6e855560972a/6713add3f7d9649949ab03760f87da38a8d09681a1ebe5e2e809a90ac973e8b629f86cf31b41b5b7d6a311fbf197857a570c9361/4/80/10/.../upd-ps-x32-6.0.0.18849.exe

https://d3.driverscollection.com/4ac28fe5fb1c2/769562f7114bf991687057d5b0a65470c9b3e217b8563e80cfdc41833044e84b69e86c2726261616c4babb1eaefa1b3256fd6f1d/4/80/10/.../upd-ps-x32-6.0.0.18849.exe

https://download77.files.attachmail.ru/17245067F953490AB3709F4866E65CBB/.../upd-ps-x32-6.0.0.18849.exe

http://h20566.www2.hp.com/hpsc/swd/.../obtainSoftware?url=687474703A2F2F6674702E68702E636F6D2F7075622F736F66746C69622F736F66747761726531322F434F4C34303834322F64732D39393337352D31302F7570642D70732D7833322D362E302E302E31383834392E657865

https://h20565.www2.hp.com/hpsc/swd/.../obtainSoftware?url=687474703A2F2F6674702E68702E636F6D2F7075622F736F66746C69622F736F66747761726531332F434F4C34303834322F64732D39393337352D31322F7570642D70732D7833322D362E302E302E31383834392E657865

https://d3.driverscollection.com/6e8535e32843/7ed75561dca5f9feb617413ea010867cd371c8cbfdfaa143f83b937af56b8b2a590368420a39c10aaa61c9fd2054bc8056767ecf/4/80/10/.../upd-ps-x32-6.0.0.18849.exe

https://d3.driverscollection.com/b0d5806f778/39c2deec006db3baf73b584983614104297ae7df517c37789ce5ed6d7cd7e37cb6f71b64f1626ce6f986e1d3b97431bf56d8919a/4/80/10/.../upd-ps-x32-6.0.0.18849.exe

https://d3.driverscollection.com/451365337ff3d/e609debab168a0dc86279fdfb2235fa125a4d7a40597cb7ca3bc71aa17eb13099bffe2d74bc24a54a97af8c40ba97ed756d6a410/4/80/10/.../upd-ps-x32-6.0.0.18849.exe

http://h20566.www2.hp.com/hpsc/swd/.../obtainSoftware?url=687474703A2F2F6674702E68702E636F6D2F7075622F736F66746C69622F736F66747761726531332F434F4C34303834322F64732D39393337352D31322F7570642D70732D7833322D362E302E302E31383834392E657865

http://h20565.www2.hp.com/hpsc/swd/.../obtainSoftware?url=687474703A2F2F6674702E68702E636F6D2F7075622F736F66746C69622F736F66747761726531332F434F4C34303834322F64732D39393337352D31322F7570642D70732D7833322D362E302E302E31383834392E657865

https://d3.driverscollection.com/451374eeecb26/a68b6f8e365401c08b3c781c1f369f71e07986dc2b627c88eb5b707469600a40854bfdbeb9ffcea9783595abe788bf7655d1a24c/4/80/10/.../upd-ps-x32-6.0.0.18849.exe

http://h20564.www2.hp.com/hpsc/swd/.../obtainSoftware?url=687474703A2F2F6674702E68702E636F6D2F7075622F736F66746C69622F736F66747761726531332F434F4C34303834322F64732D39393337352D31322F7570642D70732D7833322D362E302E302E31383834392E657865

http://ftp.hp.com/pub/softlib/software12/COL39348/.../upd-ps-x32-6.0.0.18849.exe

http://ftp.hp.com/pub/softlib/software12/COL40842/.../upd-ps-x32-6.0.0.18849.exe

http://h20565.www2.hp.com/hpsc/swd/.../obtainSoftware?url=687474703A2F2F6674702E68702E636F6D2F7075622F736F66746C69622F736F66747761726531322F434F4C34303834322F64732D39393337352D31302F7570642D70732D7833322D362E302E302E31383834392E657865

http://h20564.www2.hp.com/hpsc/swd/.../obtainSoftware?url=687474703A2F2F6674702E68702E636F6D2F7075622F736F66746C69622F736F66747761726531322F434F4C34303834322F64732D39393337352D31302F7570642D70732D7833322D362E302E302E31383834392E657865

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.