» hf.exe
Overview
Analysis
File Details

hf.exe

Hide Folders 2012

FSPro Labs

File name:

hf.exe

Publisher:

FSPro Labs (signed and verified)

Product:

Hide Folders 2012

Description:

Hide Folders 2012 Control Panel

Version:

4.0.6.775

MD5:

cf10e39081c3203d0d0067860d770ff5

SHA-1:

b2f09f94c4c46ab53e52a830bca4d97f17b8e260

SHA-256:

602f047ffe0afa09ee2fecb3e5358c97749898a350d2b240edd4cf6c52f8dc87

Scanner detections:

9 / 68

Status:

Inconclusive (not enough data for an accurate detection)

Analysis date:

4/16/2024 7:18:17 PM UTC (today)

Scan engine

Detection

Engine version

Agnitum Outpost

Suspicious

7.1.1

AVG

Win32/Heur

2015.0.3513

Bkav FE

W32.Clodd0f.Trojan

1.3.0.4562

K7 AntiVirus

Virus

13.174.10380

McAfee

Artemis!AED2D2CB2F1D

5600.7169

Trend Micro House Call

TROJ_GEN.R0CBH0AHV13

7.2.95

Trend Micro

PAK_Generic.023

10.465.05

Vba32 AntiVirus

suspected of Malware-Cryptor.FSP.gen

3.12.24.3

ViRobot

JS.A.Iframe.1707880

2011.4.7.4223

File size:

1.6 MB (1,707,880 bytes)

Product version:

4.0

Original file name:

hf2012.exe

File type:

Executable application (Win32 EXE)

Language:

English (United States)

Common path:

C:\Program Files\hide folders 2012\hf.exe

Digital Signature

Signed by:

FSPro Labs

Authority:

VeriSign, Inc.

Valid from:

12/6/2011 3:30:00 AM

Valid to:

12/30/2012 3:29:59 AM

Subject:

CN=FSPro Labs, OU=Digital ID Class 3 - Microsoft Software Validation v2, O=FSPro Labs, L=Taganrog, S=Rostov region, C=RU

Issuer:

CN=VeriSign Class 3 Code Signing 2010 CA, OU=Terms of use at https://www.verisign.com/rpa (c)10, OU=VeriSign Trust Network, O="VeriSign, Inc.", C=US

Serial number:

64EEE3FE6A6083ECAAE4714639B18EAE

File PE Metadata

Compilation timestamp:

6/20/1992 2:52:17 AM

OS version:

1.0

OS bitness:

Win32

Subsystem:

Windows GUI

Linker version:

2.25

CTPH (ssdeep):

24576:/U0rkmocnkGq8PuVHGLuWbm8N0ATJV1PcFkGIafCmvKSzQom4i2IW4Ds9x:s0rmcocWHRWbm8Nj2VtvKgFm4lv4i

Entry address:

0x1000

Entry point:

68, 01, 50, 6D, 00, E8, 01, 00, 00, 00, C3, C3, 72, 98, E3, 99, D1, DA, CE, 1A, 0C, E9, 89, C4, EE, 8F, 15, D9, 32, 67, 41, 71, C7, 75, 0A, 33, 9C, AC, 21, D3, 85, 9D, 45, B6, BB, 5D, 30, E3, 16, 08, AB, 0C, 03, F5, F9, DB, 73, 72, EF, A8, 27, 2D, D1, 02, 8F, C0, 77, 32, CD, 96, B2, F0, 64, A1, 4B, 42, 1D, 3D, 65, C2, D2, EC, 4D, 93, 5B, F3, A3, 45, 1A, AC, 44, 32, 0C, 2F, EF, AC, 34, 04, 00, 82, 47, 96, C4, B1, 6D, 55, 56, C5, 6D, E0, B7, 66, 16, DF, 0B, 50, 50, 21, 27, F7, 49, 35, 50, 3C, ED, E6, E9, 46... 
[+]

Entropy:

7.6700

Packer / compiler:

ASProtect v1.2x (New Strain)

Code size:

1.9 MB (1,989,632 bytes)

Scan hf.exe - Powered by Reason Core Security

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.