» CHTBoxD.dll
Overview
Analysis
File Details
Behaviors (1)
Programs (1)

CHTBoxD.dll

Chunghwa Telecom CHT Box

中華電信股份有限公司

File name:

CHTBoxD.dll

Publisher:

Chunghwa Telecom Co., Ltd. (signed by 中華電信股份有限公司)

Product:

Chunghwa Telecom CHT Box

Description:

CHT Box Daemon

Version:

5.1.2.1001

MD5:

b6b05471abb5340881397d4ddff7b2a6

SHA-1:

9b00a3d7867eb634414da15bc2493737ad5d69b9

SHA-256:

8b4c9c6ca7468c2993b44928263f789e2326052e968f1aa3b6736468e44a43f7

Scanner detections:

0 / 68

Status:

Clean (as of last analysis)

Analysis date:

5/14/2024 6:34:16 AM UTC (today)

File size:

2.6 MB (2,758,976 bytes)

Product version:

5.1.2.1000

Original file name:

CHTBoxD.dll

File type:

Dynamic link library (Win64 DLL)

Common path:

C:\Program Files\cht box\chtboxd.dll

Digital Signature

Signed by:

中華電信股份有限公司

Authority:

Chunghwa Telecom Co., Ltd.

Valid from:

12/18/2015 2:28:41 PM

Valid to:

12/18/2020 2:28:41 PM

Subject:

SERIALNUMBER=0002101020015931, CN=數據通信分公司雲端系統處, OU=數據通信分公司雲端系統處, O=中華電信股份有限公司, C=TW

Issuer:

OU=Public Certification Authority - G2, O="Chunghwa Telecom Co., Ltd.", C=TW

Serial number:

5A94639AC8E13F997404E3C5DA4CF468

Registration

CLSIDs:

{15F85C6F-64BB-4322-8492-172F9565F968}, {4CF5CEAC-903A-49d8-86A5-C81F266B86D3}, {5A0ACC83-A4C1-4694-8AE6-88FEE0152C5F}, {5E1B16A4-86E3-4671-8B8A-577128200CCD}, {89F6230A-16EB-444d-8CCB-2E063D5689ED}, {AB177F2F-112E-4F5A-82C2-4DE273506783}

ProgIDs:

CHTBoxD.OverlayHandlerSynced.1, CHTBoxD.OverlayHandlerPaired.1, CHTBoxD.ShellExtension.1, CHTBoxD.OverlayHandlerSyncing.1, CHTBoxD.OverlayHandlerPriority.1, CHTBoxD.OverlayHandlerUnavailable.1, CHTBoxD.OverlayHandlerProblem.1

COM registered:

Yes

File PE Metadata

Compilation timestamp:

12/2/2016 3:48:54 PM

OS version:

4.0

OS bitness:

Win64

Subsystem:

Windows GUI

Linker version:

8.0

Entry address:

0x167930

Entry point:

48, 89, 5C, 24, 08, 48, 89, 74, 24, 10, 57, 48, 83, EC, 20, 83, FA, 01, 49, 8B, F8, 8B, DA, 48, 8B, F1, 75, 05, E8, 4F, 68, 01, 00, 4C, 8B, C7, 8B, D3, 48, 8B, CE, 48, 8B, 5C, 24, 30, 48, 8B, 74, 24, 38, 48, 83, C4, 20, 5F, E9, 83, FE, FF, FF, CC, CC, CC, 40, 53, 48, 83, EC, 20, 41, 8B, 00, 48, 8B, DA, 4C, 8B, C9, 44, 8B, D8, 4C, 8B, D1, 41, 83, E3, F8, A8, 04, 74, 13, 41, 8B, 40, 08, 4D, 63, 50, 04, F7, D8, 4C, 03, D1, 48, 63, C8, 4C, 23, D1, 49, 63, C3, 4A, 8B, 14, 10, 48, 8B, 43, 10, 8B, 48, 08, 48, 03... 
[+]

Entropy:

6.3312

Code size:

1.7 MB (1,751,040 bytes)

Approved Shell Extension

Name:

CHTBoxD

CLSID:

{5A0ACC83-A4C1-4694-8AE6-88FEE0152C5F}

CLSID name:

ShellExtension Class

The file CHTBoxD.dll has been discovered within the following program.

CHT Box by CHT Box

www.boxe.cht.com.tw

About 7% of users remove it

Scan CHTBoxD.dll - Powered by Reason Core Security

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.