home

hmpalert.exe

HitmanPro.Alert

SurfRight B.V.

This is a setup program which is used to install the application. It runs as a separate (within the context of its own process) windows Service named “HitmanPro.Alert Service”. This is installed with HitmanPro.Alert. The file has been seen being downloaded from dl.surfright.nl and multiple other hosts.
Publisher:
SurfRight B.V.  (signed and verified)

Product:
HitmanPro.Alert

Version:
3.1.10.373

MD5:
d83c549b63bd6aafbb6823a1cfd999aa

SHA-1:
db2e7c52dc5d13954bc0daceaf86b734d0f09237

SHA-256:
936d62f57b664ccf7ffa6e4957d93bad97f088efdc631f642b7bba5d7737c3d7

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
4/26/2024 5:38:12 PM UTC  (today)

File size:
4.2 MB (4,397,896 bytes)

Product version:
3.1.10.373

Copyright:
© 2015 SurfRight B.V.

Original file name:
hmpalert.exe

File type:
Executable application (Win32 EXE)

Common path:
C:\Program Files\hitmanpro.alert\hmpalert.exe

Digital Signature
Signed by:
SurfRight B.V.

Authority:
VeriSign, Inc.

Valid from:
1/8/2016 1:00:00 AM

Valid to:
2/4/2017 12:59:59 AM

Subject:
CN=SurfRight B.V., O=SurfRight B.V., L=Hengelo, S=Overijssel, C=NL

Issuer:
CN=VeriSign Class 3 Code Signing 2010 CA, OU=Terms of use at https://www.verisign.com/rpa (c)10, OU=VeriSign Trust Network, O="VeriSign, Inc.", C=US

Serial number:
62C8976F3B1E76427F2D7F26FBE61C21

File PE Metadata
Compilation timestamp:
5/30/2016 11:57:46 AM

OS version:
5.1

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
14.0

CTPH (ssdeep):
98304:7Ha4aT59d0GnfRCCtVkNdjbm2/H56qOq/O+5Gke3qi:O59d0GftVuWCO+5Gker

Entry address:
0x209900

Entry point:
E8, 76, 06, 00, 00, E9, 78, FE, FF, FF, FF, 25, F0, E7, 64, 00, 8B, 4D, F4, 64, 89, 0D, 00, 00, 00, 00, 59, 5F, 5F, 5E, 5B, 8B, E5, 5D, 51, F2, C3, 8B, 4D, F0, 33, CD, F2, E8, 6D, F8, FF, FF, F2, E9, DA, FF, FF, FF, 8B, 4D, EC, 33, CD, F2, E8, 5C, F8, FF, FF, F2, E9, C9, FF, FF, FF, 50, 64, FF, 35, 00, 00, 00, 00, 8D, 44, 24, 0C, 2B, 64, 24, 0C, 53, 56, 57, 89, 28, 8B, E8, A1, 6C, 40, 6D, 00, 33, C5, 50, FF, 75, FC, C7, 45, FC, FF, FF, FF, FF, 8D, 45, F4, 64, A3, 00, 00, 00, 00, F2, C3, 50, 64, FF, 35, 00...
 
[+]

Code size:
2.3 MB (2,412,544 bytes)

Service
Display name:
HitmanPro.Alert Service

Service name:
hmpalertsvc

Description:
Exploit-Abwehr und Browser-Eindringlings Erkennung in Echtzeit sowie verhaltensbasiert.

Type:
Win32OwnProcess

Group:
Base

Depends on:
hmpalert


The file hmpalert.exe has been discovered within the following program.

HitmanPro.Alert  by SurfRight B.V.
Publisher's description - “HitmanPro.Alert is a free tool that checks the browser integrity and alerts users when secure online banking and shopping is no longer guaranteed. HitmanPro.Alert will instantly detect over 99% of all known and new banking Trojans.”
www.hitmanpro.com/alert
22% remove it
 
Powered by Should I Remove It?

The file hmpalert.exe has been seen being distributed by the following 3 URLs.

http://dl.surfright.nl/hmpalert31.exe

http://dl.surfright.nl/hmpalert3.exe

http://updates.hitmanpro.com/hmpalert364.exe

Scan hmpalert.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.