home

hmpalert.exe

HitmanPro.Alert

SurfRight B.V.

This is a setup program which is used to install the application. It runs as a separate (within the context of its own process) windows Service named “HitmanPro.Alert Service”. This is installed with HitmanPro.Alert. The file has been seen being downloaded from www.check-and-secure.com and multiple other hosts.
Publisher:
SurfRight B.V.  (signed and verified)

Product:
HitmanPro.Alert

Version:
2.0.9.34

MD5:
d67eef48b4fff38a89b07161832d0f1a

SHA-1:
95fe6323bb84f2e62a710cff81e9974a9ae86a4a

SHA-256:
114034e00bd739504f9b9f21aeecd7d99012c192555ce2e0610621154082bcc0

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

False Positives:
A number of engines detected this file but were erroneous detections (false positives).

Analysis date:
4/23/2024 9:35:11 AM UTC  (today)

File size:
1.7 MB (1,752,488 bytes)

Product version:
2.0.9.34

Copyright:
© 2013 SurfRight B.V.

Original file name:
hmpalert.exe

File type:
Executable application (Win32 EXE)

Common path:
C:\Program Files\hitmanpro.alert\hmpalert.exe

Digital Signature
Signed by:
SurfRight B.V.

Authority:
VeriSign, Inc.

Valid from:
11/6/2012 1:00:00 AM

Valid to:
1/6/2016 12:59:59 AM

Subject:
CN=SurfRight B.V., OU=Digital ID Class 3 - Microsoft Software Validation v2, O=SurfRight B.V., L=Hengelo, S=Overijssel, C=NL

Issuer:
CN=VeriSign Class 3 Code Signing 2010 CA, OU=Terms of use at https://www.verisign.com/rpa (c)10, OU=VeriSign Trust Network, O="VeriSign, Inc.", C=US

Serial number:
34A8B19DC8071E4182FB27F9B7EC722A

File PE Metadata
Compilation timestamp:
7/8/2013 2:18:46 PM

OS version:
5.1

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
11.0

CTPH (ssdeep):
24576:VNJm6uNUjcBF+5dsmY+RXXcBopmmmmmC9lm1DwiKqbDCpcBpkDd/:iijkmoQXXbpmmmmmalSwHkDCp2I/

Entry address:
0x2D7F8

Entry point:
E8, D8, 66, 00, 00, E9, 7F, FE, FF, FF, 55, 8B, EC, FF, 75, 0C, 6A, 00, FF, 75, 08, 68, 32, F9, 42, 00, E8, 1F, 00, 00, 00, 83, C4, 10, 5D, C3, 55, 8B, EC, FF, 75, 0C, 6A, 00, FF, 75, 08, 68, 0E, 2A, 43, 00, E8, 05, 00, 00, 00, 83, C4, 10, 5D, C3, 55, 8B, EC, 83, EC, 20, 57, 6A, 07, 33, D2, 59, 33, C0, 8D, 7D, E4, 89, 55, E0, F3, AB, 5F, 39, 45, 0C, 75, 15, E8, 5A, 3A, 00, 00, C7, 00, 16, 00, 00, 00, E8, F1, 1E, 00, 00, 83, C8, FF, C9, C3, FF, 75, 14, 8D, 45, E0, FF, 75, 10, C7, 45, E4, FF, FF, FF, 7F, FF...
 
[+]

Code size:
255 KB (261,120 bytes)

Service
Display name:
HitmanPro.Alert Service

Service name:
hmpalertsvc

Description:
Web browser intrusion detection, real-time and forensics-based, watching for banking trojans and Man-in-the-Browser attacks.

Type:
Win32OwnProcess


The file hmpalert.exe has been discovered within the following program.

HitmanPro.Alert  by SurfRight B.V.
Publisher's description - “HitmanPro.Alert is a free tool that checks the browser integrity and alerts users when secure online banking and shopping is no longer guaranteed. HitmanPro.Alert will instantly detect over 99% of all known and new banking Trojans.”
www.hitmanpro.com/alert
22% remove it
 
Powered by Should I Remove It?

The file hmpalert.exe has been seen being distributed by the following 5 URLs.

https://www.check-and-secure.com/.../cyscon.vaccination

https://www.check-and-secure.com/.../cyscon.impfstoff

http://get.hitmanpro.com/.../hmpalert.exe

http://files.surfright.nl/.../hmpalert.exe

http://www.check-and-secure.com/.../cyscon.impfstoff

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.