home

hl.exe

Half-Life Launcher

Valve

It runs as a scheduled task under the Windows Task Scheduler. The file has been seen being downloaded from d-cdn.gamejolt.net and multiple other hosts.
Publisher:
Valve

Product:
Half-Life Launcher

Version:
1, 1, 1, 1

MD5:
eb767e434413779f0c9260a9a2761b2a

SHA-1:
73927e9915f8bb15157011f8fe0a86bf0e4d971c

SHA-256:
aebc2327f2fb8c26340377b717eee79194d411e1ca6e4239c5c9c629dd6447c9

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
12/26/2024 3:19:05 PM UTC  (today)

File size:
80 KB (81,920 bytes)

Product version:
1, 1, 1, 1

Copyright:
Copyright (c) 1996-2003

Original file name:
hl.exe

File type:
Executable application (Win32 EXE)

Language:
English (United States)

File PE Metadata
Compilation timestamp:
12/6/2003 1:47:12 AM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
6.0

CTPH (ssdeep):
1536:R2lmwrbw9RSUOTS+u+mgTMKZTE6yStygIOqOwSC/Sfso4fvhgaS:R2lmwbeSUcHu6XvIkw9/SUo4fvhg

Entry address:
0x3811

Entry point:
55, 8B, EC, 6A, FF, 68, 20, C2, 40, 01, 68, B0, 6B, 40, 01, 64, A1, 00, 00, 00, 00, 50, 64, 89, 25, 00, 00, 00, 00, 83, EC, 58, 53, 56, 57, 89, 65, E8, FF, 15, 80, C0, 40, 01, 33, D2, 8A, D4, 89, 15, E0, 1E, 51, 03, 8B, C8, 81, E1, FF, 00, 00, 00, 89, 0D, DC, 1E, 51, 03, C1, E1, 08, 03, CA, 89, 0D, D8, 1E, 51, 03, C1, E8, 10, A3, D4, 1E, 51, 03, 6A, 01, E8, D8, 1F, 00, 00, 59, 85, C0, 75, 08, 6A, 1C, E8, C3, 00, 00, 00, 59, E8, FA, 41, 00, 00, 85, C0, 75, 08, 6A, 10, E8, B2, 00, 00, 00, 59, 33, F6, 89, 75...
 
[+]

Entropy:
5.1291

Developed / compiled with:
Microsoft Visual C++ v6.0

Code size:
44 KB (45,056 bytes)

Scheduled Task
Task name:
{626D7802-F40A-4570-A6DF-573E3AFF7C46}

Trigger:
Registration (Runs on registration)


2 Windows Firewall Allowed Programs
Name:
D:\Counter-Strike 1.6\hl.exe

Name:
D:\Program Files\Counter-Strike 1.6\hl.exe


The file hl.exe has been discovered within the following programs.

Counter-Strike 1.6 Bot Paketi 1.0  by Ultima-Strike
www.ultima-strike.com
About 4% of users remove it
CounterStrikev47  by setmaster.net
www.setmaster.net
About 9% of users remove it
Fusion Pack  by Fusion NET
www.games-fusion.net/products
About 1% of users remove it
Fusion Pack SE  by Fusion NET
About 1% of users remove it
Ghost Recon Advanced Warfighter  by Ubisoft
Publisher's description - “Combining the advantages of next-generation console technology with future military technologies, Tom Clancy's Ghost Recon Advanced Warfighter" includes many groundbreaking features, including the Cross-Com, a communication device powered by satellite technology, which will deliver complete battlefield awareness in the chaos of the Urban warfare.”
www.ubi.com/US/Games/Info.aspx?pId=3817
4% remove it
Half-Life  by KingSOFT DVD
Half-Life is a science fiction first-person shooter video game developed by Valve Corporation, the company's debut product and the first in the Half-Life series.
www.kingsoft.tk
About 1% of users remove it
Half-Life - Counter Strike Farsi  by V.N.V. Inc.
www.vnvsoft.ir
About 1% of users remove it
Half-Life: Opposing Force  by Gearbox Software
Publisher's description - “Return to the Black Mesa Research Facility as one of the military specialists assigned to eliminate Gordon Freeman. Experience an entirely new episode of single player action. Meet fierce alien opponents, and experiment with new weaponry.”
www.gearboxsoftware.com
5% remove it
iTunes  by Apple Inc.
Apple's iTunes is a proprietary media player computer program, used for playing and organizing digital music and video files on desktop computers. It can also manage contents on iPod, iPhone and iPad.
www.apple.com/itunes
9% remove it
NVIDIA E4  by NVIDIA Corporation
www.nvidia.com
8% remove it
 
Latest 20 of 17 programs
Powered by Should I Remove It?

The file hl.exe has been seen being distributed by the following 16 URLs.

https://d-cdn.gamejolt.net/data/games/1/188/124688/protected-files-cdn/.../hl.exe

http://vi.originaldll.com/.../19245.exe

http://s8415.chomikuj.pl/File.aspx?e=PSd7FWYi-XNJInOvmjow_me6XQ9KOo8VR6uHgHAUoVNtfmFZaFN4frrkZXKb4J8MNsra9CAKXfV7hYLxMtMNDs6cGVP4Y4RJi-MJjwZlt5Nejix6ZtNbq9EXo_eyZW6w&pv=2

https://www.edmodo.com/file?id=88f1287bf7186babf9c4b8ca30e2d555

http://dc121.4shared.com/download/.../hl_online.exe

http://es.originaldll.com/.../19245.exe

http://freecache23-free.uloz.to/Ps;Hs;fid=46554926;cid=1422936888;rid=1943273150;up=0;uip=89.103.60.19;tm=1454343162;ut=f;aff=ulozto.cz;did=ulozto-cz;He;ch=f4e9cd9cbeb8f97017bb8325f93b1358;Pe/.../canter-strike-1-6-exe?bD&c=1422936888&De&redirs=2

http://d-cdn.gamejolt.net/data/games/1/188/124688/protected-files-cdn/.../hl.exe

http://f2h.nana10.co.il/.../8006517547182|d5cdaf47a33648d064ffeac917e26bbf|.exe

https://mega.nz/temporary/.../MdZHDabJ

https://doc-08-34-docs.googleusercontent.com/docs/securesc/ihr5u2jscnkkbgmh8cmkvm6u5su9k3kg/h1to7f1mvdoaclg342b0ps012ei7d0pr/1464271200000/.../15120966136147090344/0BzJNygJOlKRBQmo1SnNBNTFTV00?e=download

http://originaldll.com/.../19245.exe

http://s2.pliki.info/.../hl.exe

temp:hl.exe

http://dc401.4shared.com/download/.../hl_online.exe

http://files01.arabsh.com/file/1391903786/.../hl.exe

Scan hl.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.