hlpe.exe

The executable hlpe.exe has been detected as malware by 45 anti-virus scanners. According to AVG, this software downloads additional adware offers during setup.
Remove hlpe.exe - Powered by Reason Core Security
MD5:
908c3fe613258f475d400268375195b9

SHA-1:
e55236936ffb0c1176110dcb1ea45d4e8cc26a6b

SHA-256:
72989381174fd90f4dd495a01e233a94e79621485b340ca5c3830e2e4632d551

Scanner detections:
45 / 68

Status:
Malware

Analysis date:
12/9/2016 8:25:31 PM UTC  (today)

Scan engine
Detection
Engine version

Lavasoft Ad-Aware
Dropped:Trojan.Generic.8814907
969

Agnitum Outpost
Trojan.PWS.Agent
7.1.1

Avira AntiVirus
TR/Agent.194524
7.11.147.190

avast!
Win32:Malware-gen
2014.9-140610

AVG
Downloader.Generic13
2015.0.3447

Baidu Antivirus
Trojan.MSIL.PSW
4.0.3.14610

Bitdefender
Dropped:Trojan.Generic.8814907
1.0.20.805

Commtouch SDK
W32/PWS.UILP-0842
5.4.1.7

Comodo Security
Heur.Packed.Unknown
18226

Emsisoft Anti-Malware
Dropped:Trojan.Generic.8814907
8.14.06.10.04

ESET NOD32
MSIL/PSW.Agent.NHZ (variant)
8.9761

F-Secure
Trojan.Generic.8814907
11.2014-10-06_3

G Data
Dropped:Trojan.Generic.8814907
14.6.24

IKARUS anti.virus
Trojan.SuspectCRC
t3scan.1.6.1.0

K7 AntiVirus
Riskware
13.177.11984

K7 Gateway Antivirus
Riskware
13.177.11984

Malwarebytes
Trojan.MSIL
v2014.06.10.04

McAfee
RDN/Generic PWS.y!zb
5600.7103

McAfee Web Gateway
Heuristic.BehavesLike.Win32.Suspicious-PKR.K
7.7103

MicroWorld eScan
Dropped:Trojan.Generic.8814907
15.0.0.483

Norman
Suspicious_Gen2.VOIBC
11.20140610

Panda Antivirus
Trj/CI.A
14.06.10.04

Qihoo 360 Security
Win32/Trojan.Multi.daf
1.0.0.1015

Sophos
Mal/Generic-S
4.98

Trend Micro House Call
TROJ_SPNR.08FR13
7.2.161

Trend Micro
TROJ_SPNR.08FR13
10.465.10

VIPRE Antivirus
Trojan.Win32.Generic
28914

Remove hlpe.exe - Powered by Reason Core Security
File size:
190 KB (194,524 bytes)

File type:
Executable application (Win32 EXE)

Common path:
C:\Program Files\hlpe.exe

File PE Metadata
Compilation timestamp:
1/8/2007 9:38:52 PM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
5.0

CTPH (ssdeep):
3072:XD+hEyhY0q5Cgb/baLxbyNqYoAI+O+3pinf/sI/ZVnWd4G8e5zA5T3atIfWgTu4O:XD+hAqg7byRY9O+3pinf/sI/ZVnWd4G/

Entry address:
0x1000

Entry point:
E8, FF, 2A, 00, 00, 50, E8, CF, 30, 01, 00, 00, 00, 00, 00, 90, 55, 8B, EC, 53, 56, 57, 8B, 7D, 10, 8B, 5D, 0C, 8B, 75, 08, 8B, D3, FF, 75, 14, 68, E1, 50, 41, 00, 6A, 00, 6A, 00, 8B, C6, 8B, CF, E8, 4E, 47, 00, 00, 81, EB, 10, 01, 00, 00, 74, 05, 4B, 74, 14, EB, 57, FF, 75, 14, 6A, 66, 56, E8, 26, 33, 01, 00, B8, 01, 00, 00, 00, EB, 47, 66, 81, E7, FF, FF, 66, FF, CF, 74, 07, 66, FF, CF, 74, 23, EB, 30, 68, 80, 00, 00, 00, 68, A4, 69, 41, 00, 6A, 65, 56, E8, 6C, 32, 01, 00, 6A, 01, 56, E8, 46, 32, 01, 00...
 
[+]

Entropy:
6.9922

Code size:
80 KB (81,920 bytes)

Remove hlpe.exe - Powered by Reason Core Security