home

hicloudBoxD.dll

Chunghwa Telecom hicloud Box(e)

中華電信股份有限公司

Publisher:
Chunghwa Telecom Co., Ltd.  (signed by 中華電信股份有限公司)

Product:
Chunghwa Telecom hicloud Box(e)

Description:
hicloud Box(e) Daemon

Version:
5.1.1.1006

MD5:
1b16a027b47594c17b4674dd2b79e4c5

SHA-1:
f80e6e5828faad4a603678ab4611d19d6ef2b7da

SHA-256:
acbdd50fafd2bc0afb6180ad58791cffdaa998bcaab30fe4dc2d295feaf55f47

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
12/26/2024 1:44:00 PM UTC  (today)

File size:
1.7 MB (1,796,440 bytes)

Product version:
5.1.1.1005

Copyright:
Copyright (C) 2014 Chunghwa Telecom Co., Ltd.

Original file name:
hicloudBoxD.dll

File type:
Dynamic link library (Win32 DLL)

Common path:
C:\Program Files\hicloud box(e)\hicloudboxd.dll

Digital Signature
Signed by:
中華電信股份有限公司

Authority:
Chunghwa Telecom Co., Ltd.

Valid from:
12/18/2015 2:28:41 PM

Valid to:
12/18/2020 2:28:41 PM

Subject:
SERIALNUMBER=0002101020015931, CN=數據通信分公司雲端系統處, OU=數據通信分公司雲端系統處, O=中華電信股份有限公司, C=TW

Issuer:
OU=Public Certification Authority - G2, O="Chunghwa Telecom Co., Ltd.", C=TW

Serial number:
5A94639AC8E13F997404E3C5DA4CF468

Registration
CLSIDs:
{5CBAE1F4-93D4-4BF2-9AA3-66B9A3A615AB}, {97173199-65FA-4e09-8DA8-034CDF0F668D}, {A5FAE46C-B23A-43db-9576-8837B8992D14}, {AC94EA49-17E3-49d7-B85F-37CD431BB31F}, {BD80FCF0-1E56-4791-8D86-0E30025FF163}, {C1FE74CF-BD11-4a8e-B45C-75D742ED7FB1}

ProgIDs:
hicloudBoxD.OverlayHandlerUnavailable.1, hicloudBoxD.OverlayHandlerSyncing.1, hicloudBoxD.OverlayHandlerProblem.1, hicloudBoxD.OverlayHandlerPriority.1, hicloudBoxD.OverlayHandlerSynced.1, hicloudBoxD.ShellExtension.1, hicloudBoxD.OverlayHandlerPaired.1

COM registered:
Yes

File PE Metadata
Compilation timestamp:
12/31/2015 10:56:25 AM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
8.0

CTPH (ssdeep):
24576:cqePJ/gpsSQSC89uJ8lrwpqx+/NWS5MIKZ2pTcNC01xkZ2Vwtg3L1y4:gJ/Y3l0pqWMSOITpTh01qtg3L1y

Entry address:
0xC67D1

Entry point:
83, 7C, 24, 08, 01, 75, 05, E8, 7C, 08, 01, 00, FF, 74, 24, 04, 8B, 4C, 24, 10, 8B, 54, 24, 0C, E8, ED, FE, FF, FF, 59, C2, 0C, 00, 55, 8B, EC, 83, EC, 20, 8B, 45, 08, 56, 57, 6A, 08, 59, BE, B0, F8, 12, 10, 8D, 7D, E0, F3, A5, 89, 45, F8, 8B, 45, 0C, 85, C0, 5F, 89, 45, FC, 5E, 74, 0C, F6, 00, 08, 74, 07, C7, 45, F4, 00, 40, 99, 01, 8D, 45, F4, 50, FF, 75, F0, FF, 75, E4, FF, 75, E0, FF, 15, 1C, E2, 10, 10, C9, C2, 08, 00, 55, 8B, EC, 51, 53, 8B, 45, 0C, 83, C0, 0C, 89, 45, FC, 64, 8B, 1D, 00, 00, 00, 00...
 
[+]

Entropy:
6.6280

Code size:
1.1 MB (1,101,824 bytes)

Approved Shell Extension
Name:
hicloudBoxD

CLSID:
{D1A96C88-A382-4862-85A0-B44CCCE203D3}

CLSID name:
ShellExtension Class


Scan hicloudBoxD.dll - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.