home

hbbatchencoderuisetup.exe

Pantaray Research Ltd.

This is a self-extracting archive and installer. The file has been seen being downloaded from dl.boxcloud.com and multiple other hosts.
Publisher:
Pantaray Research Ltd.

Description:
SFX Kernel

Version:
8.0.0.0

MD5:
da09c77cd8309a2d01260bcea94b84bc

SHA-1:
5213ca23b9daf5163602fc4249cfe9520f355b4f

SHA-256:
253bc424e1ffebec28a44f70c0500d22afef4de6ac040198023ac86a013ed1af

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
11/30/2024 3:28:21 PM UTC  (today)

File size:
7.8 MB (8,133,045 bytes)

Product version:
8.0.0.0

Copyright:
Copyright (C) 2002-2007, Pantaray Research Ltd.

Original file name:
Stub.exe

File type:
Executable application (Win32 EXE)

Language:
English (United States)

Common path:
C:\users\{user}\downloads\hbbatchencoderuisetup.exe

File PE Metadata
Compilation timestamp:
6/20/1992 1:22:17 AM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
2.25

CTPH (ssdeep):
196608:I0pgBVRDdHq3wnXFCrAL1Tgxbrqk8LVF4MMjOpr3:IZVxdrXFCccZrqkQF4nY

Entry address:
0x251C0

Entry point:
55, 8B, EC, 83, C4, F0, B8, B0, 50, 42, 00, E8, 80, 06, FE, FF, 66, B8, 02, 00, E8, 4F, 5F, FE, FF, E8, 92, FB, FF, FF, E8, B5, EE, FD, FF, 90, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 02, 8D, 40, 00, 00, 00, 00, 00, 00, 00, 00, 00, 32, 13, 8B, C0, 00, 8D, 40, 00, 00, 8D, 40, 00, 00, 8D, 40, 00, 01, 8D, 40, 00, 00, 00, 00, 00, 00, 00, 00, 00, 7C, 1F, 40, 00, 0C, 21, 40, 00, 8C, 24, 40, 00...
 
[+]

Entropy:
7.9966

Developed / compiled with:
Microsoft Visual C++

Code size:
144.5 KB (147,968 bytes)

The file hbbatchencoderuisetup.exe has been seen being distributed by the following 9 URLs.

https://dl.boxcloud.com/bc/2/9d726d0d22cbeb442178a3baa8f17520/oxsr6n5bVQhyic6N7TfrMf0sVTkQUOBIH0HsZBGRDI0si84Chpt_3ZjzaZYMPOwbyyATOQjCMtuz5i34lvwOPzn6vqjPIlTrSc5QsrWM9azon8_U4LjbzhWHmhk5Jz40E9L2kFWHtSdtuLT1BX4MbfVgUcmXL2YRkHmJrcahVWRGAjtgf0o__5FLKV_gDfTft8keVwOcSdb4DA3hcx7DHsomU-GxuVagmemtzpAm55dmfH4HLD6fHOLgTKYFaoCTloR89UT_CNhOsJxyPBpKbyAoYbOmIDXP9EtK9npqURi0B17u3Ay3kfBewv2jsXizVr9MhcDO6labZjeGRPbJPaqCas0he31U1e95RndwTWIw-DoXSlzsIViqXsVXCjZlsb9srn0ZX3wVQ_GwErlCdzv-f1d08x2a_wnFbWAdLYZ69stMM9tEzep3XtdlMW6-XXttPIFs8ePoL1_ByvxY8GFLif9qUFKB7nxdCZl0tbeoSA2uuNZIIPJHAiOWpTreeSr3PL7Xj0YUwvP6BCv2-zRTzh5pNphvE0CGW7sLdbPH7G_4K_JS9DmNauu9ycjSjZS4kuUByGmJ_qE3k1WHMOcXPii8VK72h5LuUSq_2s8ABbqR7ZpOn2XxuySC3qOad7s8r6vNpLycycFVUB2ls4uyrvkGjRdq_64ONmcaFHV4aL1AvJZlqF5CQ5PCikBFdcgNbDZtB7nU-Q6JvA4TnntBvF_xWpadwvRAUuqCKxL7NS1Gi2w1BYF-8mQCthev_6vwIH4I1HSvsc2q5HpjrG3TAmDJKAl2PGJuwLmHUfc,/.../

https://dl.boxcloud.com/bc/2/ac155a61a2821a92a0f03a746c305505/oxsr6n5bVQhyic6N7TfrMf0sVTkQUOBIH0HsZBGRDI0si84Chpt_3ZjzaZYMPOwbyyATOQjCMtuz5i34lvwOPzn6vqjPIlTrSc5QsrWM9azon8_U4LjbzhWHmhk5Jz40E9L2kFWHtSdtuLT1BX4MbfVgUcmXL2YRkHmJrcahVWRGAjtgf0o__5FLKV_gDfTft8keVwOcSdb4DA3hcx7DHsomU-GxuVagmemtzpAm55dmfH4HLD6fHOLgTKYFaoCTloR89UT_CNhOsJxyPBpKbyAoYbOmIDXP9EtK9npqURi0B17u3Ay3kfBewv2jsXizVr9MhcDO6labZjeGRPbJPaqCas0he31U1e95RndwTWIw-DoXSlzsIViqXsVXCjZlsb9srn0ZX3wVQ_GwErlCdzv-f1d08x2a_wnFbWAdLYZ69stMM9tEzep3XtdlMW6-XXttPIFs8ePoL1_ByvxY8GFLif9qUFKB7nxdCZl0tbeoSA2uuNZIIPJHAiOWpTreeSr3PL7Xj0YUwvP6BCv2-zRTzh5pNphvE0CGW7sLdbPH7G_4K_JS9DmNauu9ycjSjZS4kuUByGmJ_qE3k1WHMOcXPii8VK72h5LuUSq_2s8ABbqR7ZpOn2XxuySC3qOad7s8r6vNpLycycFVUB2ls4uyrvkGjRdq_64ONmcaFHV4aL1AvJZlqF5CQ5PCikBFdcgNbDZtB7nU-Q6JvA4TnntBvF_xWpadwvRAUuqCKxL7NS1Gi2w1BYF-8mQCthevuZ0jB6huMpvefLGzOrAgYBLp-G9PSmHPFviPGJQG7v0,/.../

https://dl.boxcloud.com/bc/4/d3537b882e66535d5adc1707e205e675/.../

https://dl.boxcloud.com/bc/2/41a86c8a6610741a55c08aa5957cf673/oxsr6n5bVQhyic6N7TfrMf0sVTkQUOBIH0HsZBGRDI0si84Chpt_3ZjzaZYMPOwbyyATOQjCMtuz5i34lvwOPzn6vqjPIlTrSc5QsrWM9azon8_U4LjbzhWHmhk5Jz40E9L2kFWHtSdtuLT1BX4MbfVgUcmXL2YRkHmJrcahVWRGAjtgf0o__5FLKV_gDfTft8keVwOcSdb4DA3hcx7DHsomU-GxuVagmemtzpAm55dmfH4HLD6fHOLgTKYFaoCTloR89UT_CNhOsJxyPBpKbyAoYbOmIDXP9EtK9npqURi0B17u3Ay3kfBewv2jsXizVr9MhcDO6labZjeGRPbJPaqCas0he31U1e95RndwTWIw-DoXSlzsIViqXsVXCjZlsb9srn0ZX3wVQ_GwErlCdzv-f1d08x2a_wnFbWAdLYZ69stMM9tEzep3XtdlMW6-XXttPIFs8ePoL1_ByvxY8GFLif9qUFKB7nxdCZl0tbeoSA2uuNZIIPJHAiOWpTreeSr3PL7Xj0YUwvP6BCv2-zRTzh5pNphvE0CGW7sLdbPH7G_4K_JS9DmNauu9ycjSjZS4kuUByGmJ_qE3k1WHMOcXPii8VK72h5LuUSq_2s8ABbqR7ZpOn2XxuySC3qOad7s8r6vNpLycycFVUB2ls4uyrvkGjRdq_64ONmcaFHV4aL1AvJZlqF5CQ5PCikBFdcgNbDZtB7nU-Q6JvA4TnntBvF_xWpadwvRAUuqCKxL7NS1Gi2w1BYF-8mQCthevspGQPHChKjQ_0ss6X1utgG4a2NrjVSF6c6FRqA-WavE,/.../

https://www.boxcloud.com/bc/2/b9a30575e969659f115512eb71056b6d/oxsr6n5bVQhyic6N7TfrMf0sVTkQUOBIH0HsZBGRDI0si84Chpt_3ZjzaZYMPOwbyyATOQjCMtuz5i34lvwOPzn6vqjPIlTrSc5QsrWM9azon8_U4LjbzhWHmhk5Jz40E9L2kFWHtSdtuLT1BX4MbfVgUcmXL2YRkHmJrcahVWRGAjtgf0o__5FLKV_gDfTft8keVwOcSdb4DA3hcx7DHsomU-GxuVagmemtzpAm55dmfH4HLD6fHOLgTKYFaoCTloR89UT_CNhOsJxyPBpKbyAoYbOmIDXP9EtK9npqURg8xaGj0W5mB47pmaGxxqz8XJzsVz3U9YlUmIBIuAQlBdbW3bsxO_jIpkPN2QW2Ho7ejPGFFYzC34P89esXIAZIRcbkWkg-39tQzID8zLLjibYrWdON16vBVcYTUAYDfi_V615-iZBvfyHbb0JiMlKf0YVYXXzn2WX3jV1xDTytex-ixcP1weMBvXX8oaU4WzRNKD0LRkXL3O4kOzudhoAwtk_Bj0r9gO9rJCj2M6-ZsVaLdsIMXdewuuuUfzxYIS4J2stWkZgspd-BOhkS6vPWjN_JbGVkiEQkXQed9y43goKr0jnJGcqL2zRYvLtaCabh562oK-aFws9IQ_maKhDB3-D1zlxj_GOjWG3cNURrq9l-YX8SU8IT_Dc74jj72mK4nM8MjkvrVebyNFrwEjhsemAURJL62YzjPRlfNqi_7VAY6f_fhzwae04fkYzTmpQa_UtCJ5xkP8WRT9zn82NQPg8RSXGA2HZnnE7wVQBrm6XAqGv5b-xriqFb6rhSOZQXNH0NYOmTsgmQilmjJUsvILcjJbcN5PsXIPSP1_l2MQ,,/.../

https://www.box.com/index.php?rm=box_download_shared_file&shared_name=i6exaxr438&file_id=f_543296424

https://www.boxcloud.com/bc/2/7a93555a91cdeaf4f9635b45acf7c3d9/oxsr6n5bVQhyic6N7TfrMf0sVTkQUOBIH0HsZBGRDI0si84Chpt_3ZjzaZYMPOwbyyATOQjCMtuz5i34lvwOPzn6vqjPIlTrSc5QsrWM9azon8_U4LjbzhWHmhk5Jz40E9L2kFWHtSdtuLT1BX4MbfVgUcmXL2YRkHmJrcahVWRGAjtgf0o__5FLKV_gDfTft8keVwOcSdb4DA3hcx7DHsomU-GxuVagmemtzpAm55dmfH4HLD6fHOLgTKYFaoCTloR89UT_CNhOsJxyPBpKbyAoYbOmIDXP9EtK9npqURg8xaGj0W5mB47pmaGxxqz8XJzsVz3U9YlUmIBIuAQlBdbW3bsxO_jIpkPN2QW2Ho7ejPGFFYzC34P89esXIAZIRcbkWkg-39tQzID8zLLjibYrWdON16vBVcYTUAYDfi_V615-iZBvfyHbb0JiMlKf0YVYXXzn2WX3jV1xDTytex-ixcP1weMBvXX8oaU4WzRNKD0LRkXL3O4kOzudhoAwtk_Bj0r9gO9rJCj2M6-ZsVaLdsIMXdewuuuUfzxYIS4J2stWkZgspd-BOhkS6vPWjN_JbGVkiEQkXQed9y43goKr0jnJGcqL2zRYvLtaCabh562oK-aFws9IQ_maKhDB3-D1zlxj_GOjWG3cNURrq9l-YX8SU8IT_Dc74jj72mK4nM8MjkvrVebyNFrwEjhsemAURJL62YzjPRlfNqi_7VAY6f_fhzwae04fkYzTmpQa_UtCJ5xkP8WRT9zn82NQPg8RSXGA2HZnnE7wVQBrm6XAqGv5b-xriqFb6rhSOZRG9wkSYgmxlUrBiH2yfVbzzaVy93ogLpJHqgWvNOVDTQ,,/.../

https://dl.boxcloud.com/bc/2/20eeffb2eeecdfb58173e9c2232a22e4/oxsr6n5bVQhyic6N7TfrMf0sVTkQUOBIH0HsZBGRDI0si84Chpt_3ZjzaZYMPOwbyyATOQjCMtuz5i34lvwOPzn6vqjPIlTrSc5QsrWM9azon8_U4LjbzhWHmhk5Jz40E9L2kFWHtSdtuLT1BX4MbfVgUcmXL2YRkHmJrcahVWRGAjtgf0o__5FLKV_gDfTft8keVwOcSdb4DA3hcx7DHsomU-GxuVagmemtzpAm55dmfH4HLD6fHOLgTKYFaoCTloR89UT_CNhOsJxyPBpKbyAoYbOmIDXP9EtK9npqURg8xaGj0W5mB47pmaGxxqz8XJzsVz3U9YlUmIBIuAQlBdbW3bsxO_jIpkPN2QW2Ho7ejPGFFYzC34P89esXIAZIRcbkWkg-39tQzID8zLLjibYrWdON16vBVcYTUAYDfi_V615-iZBvfyHbb0JiMlKf0YVYXXzn2WX3jV1xDTytex-ixcP1weMBvXX8oaU4WzRNKD0LRkXL3O4kOzudhoAwtk_Bj0r9gO9rJCj2M6-ZsVaLdsIMXdewuuuUfzxYIS4J2stWkZgspd-BOhkS6vPWjN_JbGVkiEQkXQed9y43goKr0jnJGcqL2zRYvLtaCabh562oK-aFws9IQ_maKhDB3-D1zlxj_GOjWG3cNURrq9l-YX8SU8IT_Dc74jj72mK4nM8MjkvrVebyNFrwEjhsemAURJL62YzjPRlfNqi_7VAY6f_fhzwae04fkYzTmpQa_UtCJ5xkP8WRT9zn82NQPg8RSXGA2HZnnE7wVQBrm6XAqGv5b-xriqFb6rhSOZThQC9SoxeNZC9C2oM8cifF1O857Uj6_LELidEqY1-pDA,,/.../

https://app.box.com/index.php?rm=box_download_shared_file&shared_name=i6exaxr438&file_id=f_543296424

Scan hbbatchencoderuisetup.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.