Should I block it?

No, this file is 100% safe to run.

Additional versions

2.6.5.77	33.33%
2.0.10.45	66.67%

Relationships

Parent process

services.exe (Services and Controller app by Microsoft)

Related files

hmpalert.dll (HitmanPro.Alert by SurfRight B.V.)

hmpalert.exe

HitmanPro.Alert by SurfRight B.V. (Signed)

Remove hmpalert.exe

Version:	2.6.5.77
MD5:	2638395f6e61889d75c363a80a0e17f4
SHA1:	72194db5e2208e6b29a47aa0079b9211224386d1

Overview

hmpalert.exe runs as a service under the name HitmanPro.Alert Service (hmpalertsvc) with extensive SYSTEM privileges (full administrator access). It is installed with a couple of know programs including HitmanPro.Alert published by SurfRight B.V., HitmanPro.Alert from SurfRight B.V. and HitmanPro.Alert by SurfRight B.V.. The file is digitally signed by SurfRight B.V. which was issued by the VeriSign certificate authority (CA).

Details

File name:	hmpalert.exe
Publisher:	SurfRight B.V.
Product name:	HitmanPro.Alert
Typical file path:	C:\Program Files\hitmanpro.alert\hmpalert.exe
File version:	2.6.5.77
Size:	1.79 MB (1,876,816 bytes)
Build date:	4/8/2014 8:28 PM
Certificate
Issued to:	SurfRight B.V.
Authority (CA):	VeriSign
Effective date:	Monday, June 11, 2012
Expiration date:	Sunday, May 1, 2016
Digital DNA
File packed:	No
.NET CLR:	No

More details

Programs

The following programs will install this file

HitmanPro.Alert

SurfRight B.V.

22% remove

“HitmanPro.Alert is a free tool that checks the browser integrity and alerts users when secure online banking and shopping is no longer guaranteed. HitmanPro.Alert will instantly detect over 99% of all known and new banking Trojans. It automatically informs users when critical system functions are diverted to untrusted programs. It effectively reveals the presence of any so called Man-in-the-Browser malware and offers the user to automa...”

Behaviors

Services

Runs under 'SYSTEM\CurrentControlSet\Services' by the Service Controller (services.exe)

'hmpalertsvc' (HitmanPro.Alert Service)

Scheduled tasks

The task '{8F8CEFB7-E2CF-4A2C-B26E-FD82A0B60484}' runs on registration in the path '\{8F8CEFB7-E2CF-4A2C-B26E-FD82A0B60484}'

Resource utilization

(Note: statistics below are averages based on a minimum sample size of 200 unique participants)

Averages

CPU
Total CPU:	0.00018096%	0.028634%
Kernel CPU:	0.00008083%	0.013761%
User CPU:	0.00010013%	0.014873%
Kernel CPU time:	51,668 ms/min	100,923,805ms/min
CPU cycles:	2,643,593/sec	17,470,203/sec
Memory
Private memory:	6.51 MB	21.59 MB
Private (maximum):	9.71 MB
Private (minimum):	5.45 MB
Non-paged memory:	6.51 MB	21.59 MB
Virtual memory:	73.37 MB	140.96 MB
Virtual memory (peak):	85.62 MB	169.69 MB
Working set:	9.7 MB	18.61 MB
Working set (peak):	20.16 MB	37.95 MB
Page faults:	235,606/min	2,039/min
I/O
I/O read transfer:	27.67 KB/sec	1.02 MB/min
I/O read operations:	94/sec	343/min
I/O write transfer:	3.64 KB/sec	274.99 KB/min
I/O write operations:	93/sec	227/min
I/O other transfer:	9 Bytes/sec	448.09 KB/min
I/O other operations:	4/sec	1,671/min
Resource allocations
Threads:	19	12
Handles:	234	600

Process properties

Integrety level:	System
Platform:	64-bit
Command line:	"C:\Program Files\hitmanpro.alert\hmpalert.exe" /service
Owner:	SYSTEM
Windows Service
Service name:	hmpalertsvc
Display name:	HitmanPro.Alert Service
Description:	“Web browser intrusion detection, real-time and forensics-based, watching for banking trojans and Man-in-the-Browser attacks.”
Type:	Win32OwnProcess
Parent process:	services.exe (Services and Controller app by Microsoft)

Threads

Averages

ntdll.dll
Total CPU:	0.03191808%	0.272967%
Kernel CPU:	0.03191266%	0.107585%
User CPU:	0.00000542%	0.165382%
CPU cycles:	933,839/sec	5,741,424/sec
Memory:	1.66 MB	1.16 MB
hmpalert.exe (main module)
Total CPU:	0.00248228%
Kernel CPU:	0.00114963%
User CPU:	0.00133265%
CPU cycles:	108,725/sec
Context switches:	1/sec
Memory:	1.8 MB
wow64.dll
Total CPU:	0.00001627%
Kernel CPU:	0.00000000%
User CPU:	0.00001627%
CPU cycles:	201/sec
Memory:	252 KB