home

HControlUser.exe

ATK Hotkey

ASUSTeK Computer Inc.

It is set to automatically execute when any user logs into Windows (through the local user run registry setting) with the name ‘HControlUser’.
Publisher:
ASUS  (signed by ASUSTeK Computer Inc.)

Product:
ATK Hotkey

Description:
HControlUser

Version:
1, 0, 50, 1

MD5:
3ef6ef11e535af5d3b43fabfd837e338

SHA-1:
b9b60de9fb3038b0fedf7bd96b84573da7c7f997

SHA-256:
ae9b339cffba15a5bbf78d790423e741f8cc7e59f495e11698b90d257cf05132

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
11/8/2025 2:14:49 PM UTC  (today)

File size:
179 KB (183,295 bytes)

Product version:
1, 0, 50, 0

Copyright:
Copyright (c) 2009

Original file name:
HControlUser.exe

File type:
Executable application (Win32 EXE)

Language:
Chinese (Traditional, Taiwan)

Common path:
C:\Program Files\asus\atk package\atk hotkey\hcontroluser.exe

Digital Signature
Signed by:
ASUSTeK Computer Inc.

Authority:
VeriSign, Inc.

Valid from:
7/22/2008 7:00:00 AM

Valid to:
8/1/2009 6:59:59 AM

Subject:
CN=ASUSTeK Computer Inc., OU=Quality Testing Department, OU=Digital ID Class 3 - Microsoft Software Validation v2, O=ASUSTeK Computer Inc., L=Taipei / Peitou, S=Taiwan, C=TW

Issuer:
CN=VeriSign Class 3 Code Signing 2004 CA, OU=Terms of use at https://www.verisign.com/rpa (c)04, OU=VeriSign Trust Network, O="VeriSign, Inc.", C=US

Serial number:
37ED9092BDD1DCCF58D2AFA47F961448

File PE Metadata
Compilation timestamp:
4/1/2009 8:05:33 PM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
8.0

Entry address:
0x142B

Entry point:
E9, 37, 26, 00, 00, E9, 17, FE, FF, FF, 55, 8B, EC, 81, EC, 28, 03, 00, 00, A3, D8, AD, 40, 00, 89, 0D, D4, AD, 40, 00, 89, 15, D0, AD, 40, 00, 89, 1D, CC, AD, 40, 00, 89, 35, C8, AD, 40, 00, 89, 3D, C4, AD, 40, 00, 66, 8C, 15, F0, AD, 40, 00, 66, 8C, 0D, E4, AD, 40, 00, 66, 8C, 1D, C0, AD, 40, 00, 66, 8C, 05, BC, AD, 40, 00, 66, 8C, 25, B8, AD, 40, 00, 66, 8C, 2D, B4, AD, 40, 00, 9C, 8F, 05, E8, AD, 40, 00, 8B, 45, 00, A3, DC, AD, 40, 00, 8B, 45, 04, A3, E0, AD, 40, 00, 8D, 45, 08, A3, EC, AD, 40, 00, 8B...
 
[+]

Packer / compiler:
Xtreme-Protector v1.05

Code size:
28 KB (28,672 bytes)

Startup File (All Users Run)
Registry location:
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run

Name:
HControlUser

Command:
C:\Program Files\asus\atk package\atk hotkey\hcontroluser.exe


Scan HControlUser.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.