MD5 Hashes Not Matching for Certain Firmware Files

[MSVas]

I tried downloading the following firmware updates for HP ProBook 655 G1 from support.hp.com, but the MD5 hashes are not matching the release notes.

Hitachi Hard Drive Firmware Update
Version: 2.1 Rev.A
Release date: Aug 21, 2015
File name: sp72533.exe (62.1 MB)

From release notes:
SOFTPAQ FILE NAME: SP72533.exe
SOFTPAQ MD5: 177edac5c18b55b0c449473b9ac45c0d

Actual MD5 on downloaded file:  e1d772d63087000967a354f81c3f238f

HP lt4112 Gobi 4G Device Firmware Update
Version: 12.500.00.15.1803 Rev.A
Release date: Aug 13, 2015
File name: sp72435.exe (85.8 MB)

From release notes:
SOFTPAQ FILE NAME: SP72435.exe
SOFTPAQ MD5: 1cec450716d0f4301edb48c5ed3545ec

Actual MD5 on downloaded file: 508d1b00f4145694bbf749683165c7d9

I tried downloading them multiple times with the same result.

I have verified correct MD5 hashes for other files from support.hp.com, e.g. BIOS 01.47 Rev.A [sp91527.exe (11.0 MB) ] MD5: 383262f84032a7e5589b80a9cd85c15a. So I believe my hashes are calculating correctly.

Also,  Avira alerted on the file sp72533.exe, detecting a trojan (TR/Agent.guui)

Could someone please verify the above MD5 hashes? I obviously don't want to be installing corrupt or infected firmware. I am downloading from US-EN and located in Canada.

Thanks,

MSV

[MSVas]

Is anybody from HP or the community reading these? Nobody cares that the site is serving up potentially corrupted or infected firmware? What's going on at HP? Yes, this is serious. How many other files on the site are compromised?

Not to mention that MD5 hashes are woefully inadequate (really need a recent SHA or similar hash in order to be secure).

Could somebody help or comment please?