home

HBUALauncher.exe

HB User Agent Launcher

Haedenbridge Co.,LTD

It is set to automatically execute when any user logs into Windows (through the local user run registry setting) with the name ‘HB UA Launcher’.
Publisher:
Haeden Bridge Co., Ltd.  (signed by Haedenbridge Co.,LTD)

Product:
HB User Agent Launcher

Version:
5, 1, 1, 12121

MD5:
fc3a5f97750cfa0b926bbc1ada47924e

SHA-1:
7e0b087f7f74b4f3f72b6f2e13ddf8705ef5ec89

SHA-256:
8fa9676f2d5098193570fd75c9c656e172025171ad5d229ec30db73a833ab2e0

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
1/10/2025 9:04:07 AM UTC  (today)

File size:
2.4 MB (2,502,240 bytes)

Product version:
5, 1, 1, 12121

Copyright:
Copyright (c) 2002-2012 Haeden Bridge Co., Ltd. All rights reserved.

Original file name:
HBUALauncher.exe

File type:
Executable application (Win32 EXE)

Common path:
C:\Program Files\haedenbridge\hbuseragent\hbualauncher.exe

Digital Signature
Signed by:
Haedenbridge Co.,LTD

Authority:
thawte, Inc.

Valid from:
1/4/2017 9:00:00 AM

Valid to:
3/6/2019 8:59:59 AM

Subject:
CN="Haedenbridge Co.,LTD", O="Haedenbridge Co.,LTD", L=Seongdong-gu, S=SEOUL, C=KR

Issuer:
CN=thawte SHA256 Code Signing CA, O="thawte, Inc.", C=US

Serial number:
59F32EB21290763D6C01258D483D91ED

File PE Metadata
Compilation timestamp:
1/26/2017 1:34:48 PM

OS version:
5.1

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
11.0

Entry address:
0x140334

Entry point:
E8, B2, EF, 00, 00, E9, 7B, FE, FF, FF, 55, 8B, EC, 5D, E9, 00, 00, 00, 00, 55, 8B, EC, 6A, 0A, 6A, 00, FF, 75, 08, E8, D6, F2, 00, 00, 83, C4, 0C, 5D, C3, 55, 8B, EC, 83, EC, 10, FF, 75, 0C, 8D, 4D, F0, E8, 3A, E4, FF, FF, 8B, 4D, F0, 83, 79, 74, 01, 7E, 15, 8D, 45, F0, 50, 6A, 04, FF, 75, 08, E8, 06, DB, 00, 00, 83, C4, 0C, 8B, C8, EB, 10, 8B, 89, 90, 00, 00, 00, 8B, 45, 08, 0F, B7, 0C, 41, 83, E1, 04, 80, 7D, FC, 00, 74, 07, 8B, 45, F8, 83, 60, 70, FD, 8B, C1, C9, C3, 55, 8B, EC, 83, EC, 10, FF, 75, 0C...
 
[+]

Entropy:
5.9145

Code size:
1.5 MB (1,541,632 bytes)

Startup File (All Users Run)
Registry location:
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run

Name:
HB UA Launcher

Command:
C:\Program Files\haedenbridge\hbuseragent\hbualauncher.exe


Scan HBUALauncher.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.