home

hfs.exe

Http File Server

rejetto

The executable hfs.exe has been detected as malware by 3 anti-virus scanners. This is a setup program which is used to install the application. The file has been seen being downloaded from www.download3k.com and multiple other hosts.
Publisher:
rejetto

Product:
Http File Server

Version:
2.3.0.0

MD5:
c019d10f80409fc4c7d45ebfa48b0076

SHA-1:
92149025980c28823fdbe7d5378c29606130ea03

SHA-256:
4a267f297eb61547ba6cc7faf0bbfaad2b61556dd7d6e381108db24fd6149ab5

Scanner detections:
3 / 68

Status:
Malware

Analysis date:
4/26/2024 12:28:04 PM UTC  (today)

Scan engine
Detection
Engine version

Baidu Antivirus
Hacktool.Win32.HFS
4.0.3.151019

ESET NOD32
Win32/Server-Web.HFS.A potentially unsafe (variant)
9.12426

Reason Heuristics
Threat.Win.Reputation.IMP
15.10.19.4

File size:
2.4 MB (2,500,096 bytes)

Product version:
2.3

Copyright:
Copyright (C) 2002-2010 Massimo Melina (www.rejetto.com)

Original file name:
hfs.exe

File type:
Executable application (Win32 EXE)

Language:
Italian (Italy)

Common path:
C:\users\{user}\downloads\hfs.exe

File PE Metadata
Compilation timestamp:
6/19/1992 5:22:17 PM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
2.25

CTPH (ssdeep):
49152:PxTpXZQmihIXHEvlTphplKhKr70LHTWkDqvy4ddxCce7SZs1:PZpamihIXEvlt76Ywu6B

Entry address:
0x172C70

Entry point:
55, 8B, EC, 83, C4, EC, 53, 33, C0, 89, 45, EC, B8, 70, FC, 56, 00, E8, 3E, 4C, E9, FF, 8B, 1D, B0, B5, 57, 00, 33, C0, 55, 68, C5, 2D, 57, 00, 64, FF, 30, 64, 89, 20, A1, 40, B2, 57, 00, 8B, 00, C7, 40, 14, CC, FA, 56, 00, 6A, 11, E8, 89, 58, E9, FF, 0F, BF, C0, F6, C4, 80, 75, 6C, A1, 40, B2, 57, 00, 8B, 00, BA, DC, 2D, 57, 00, E8, 1C, C1, F1, FF, 84, C0, 75, 30, A1, 40, B2, 57, 00, 8B, 00, 8B, 48, 0C, 8D, 45, EC, BA, F4, 2D, 57, 00, E8, 75, 2A, E9, FF, 8B, 45, EC, 33, C9, BA, 10, 00, 00, 00, E8, BA, 90...
 
[+]

Developed / compiled with:
Microsoft Visual C++

Code size:
1.4 MB (1,511,936 bytes)

The file hfs.exe has been seen being distributed by the following 8 URLs.

http://www.download3k.com/DownloadLink3-HFS-HTTP-File-Server.html

http://172.16.227.13/hfs.exe

http://172.26.29.1/downloads/.../hfs.exe

http://files.snapfiles.com/.../hfs.exe

http://hfs.kilobyte.cz/.../hfs.exe

http://turekuba.cz/.../hfs.exe

http://rejetto.webfactional.com/.../hfs.exe

http://www.rejetto.com/.../download

Remove hfs.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.