home

HBUALauncher.exe

HB User Agent Launcher

Haedenbridge Co.,LTD

It is set to automatically execute when any user logs into Windows (through the local user run registry setting) with the name ‘HB UA Launcher’.
Publisher:
Haeden Bridge Co., Ltd.  (signed by Haedenbridge Co.,LTD)

Product:
HB User Agent Launcher

Version:
5, 1, 1, 12101

MD5:
0a7dfca3c16b29ffc710c646dec2e192

SHA-1:
760d4c886efeae03a175520ca1e9fe6930b5af10

SHA-256:
5732315acdda8facdf8ba2c7965140268b3c5346a9025a128221abc10cd2c660

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
11/15/2024 11:23:14 AM UTC  (today)

File size:
2.4 MB (2,501,456 bytes)

Product version:
5, 1, 1, 12101

Copyright:
Copyright (c) 2002-2012 Haeden Bridge Co., Ltd. All rights reserved.

Original file name:
HBUALauncher.exe

File type:
Executable application (Win32 EXE)

Language:
English (United States)

Common path:
C:\Program Files\haedenbridge\hbuseragent\hbualauncher.exe

Digital Signature
Signed by:
Haedenbridge Co.,LTD

Authority:
thawte, Inc.

Valid from:
2/29/2016 5:30:00 AM

Valid to:
1/20/2017 5:29:59 AM

Subject:
CN="Haedenbridge Co.,LTD", OU=Engine Development, O="Haedenbridge Co.,LTD", L=Seongdong-gu, S=SEOUL, C=KR

Issuer:
CN=thawte SHA256 Code Signing CA, O="thawte, Inc.", C=US

Serial number:
1388AE29F3569B05C9E5D51B1327BBAC

File PE Metadata
Compilation timestamp:
11/9/2016 8:40:06 AM

OS version:
5.1

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
11.0

Entry address:
0x140334

Entry point:
E8, B2, EF, 00, 00, E9, 7B, FE, FF, FF, 55, 8B, EC, 5D, E9, 00, 00, 00, 00, 55, 8B, EC, 6A, 0A, 6A, 00, FF, 75, 08, E8, D6, F2, 00, 00, 83, C4, 0C, 5D, C3, 55, 8B, EC, 83, EC, 10, FF, 75, 0C, 8D, 4D, F0, E8, 3A, E4, FF, FF, 8B, 4D, F0, 83, 79, 74, 01, 7E, 15, 8D, 45, F0, 50, 6A, 04, FF, 75, 08, E8, 06, DB, 00, 00, 83, C4, 0C, 8B, C8, EB, 10, 8B, 89, 90, 00, 00, 00, 8B, 45, 08, 0F, B7, 0C, 41, 83, E1, 04, 80, 7D, FC, 00, 74, 07, 8B, 45, F8, 83, 60, 70, FD, 8B, C1, C9, C3, 55, 8B, EC, 83, EC, 10, FF, 75, 0C...
 
[+]

Entropy:
5.9137

Code size:
1.5 MB (1,541,632 bytes)

Startup File (All Users Run)
Registry location:
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run

Name:
HB UA Launcher

Command:
C:\Program Files\haedenbridge\hbuseragent\hbualauncher.exe


Scan HBUALauncher.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.