» CHTBoxC.exe
Overview
Analysis
File Details
Behaviors (1)
Programs (1)

CHTBoxC.exe

Chunghwa Telecom CHT Box

中華電信股份有限公司

It runs as a separate (within the context of its own process) windows Service named “CHTBoxService”.

File name:

CHTBoxC.exe

Publisher:

Chunghwa Telecom Co., Ltd. (signed by 中華電信股份有限公司)

Product:

Chunghwa Telecom CHT Box

Description:

CHT Box Sync Service

Version:

5.1.2.1000

MD5:

cc94aec0ebec912fbe2121207c2622b7

SHA-1:

a66ce2de6fb496977349449727184db728a32343

SHA-256:

03d9ad69485823045c860830f0845bf38bceb18f2ea59bd6e1f17fd11a3d3bed

Scanner detections:

0 / 68

Status:

Clean (as of last analysis)

Analysis date:

12/26/2024 1:42:56 PM UTC (today)

File size:

7.8 MB (8,129,856 bytes)

Product version:

5.1.2.1000

Original file name:

CHTBoxC.exe

File type:

Executable application (Win64 EXE)

Common path:

C:\Program Files\cht box\chtboxc.exe

Digital Signature

Signed by:

中華電信股份有限公司

Authority:

Chunghwa Telecom Co., Ltd.

Valid from:

12/18/2015 2:28:41 PM

Valid to:

12/18/2020 2:28:41 PM

Subject:

SERIALNUMBER=0002101020015931, CN=數據通信分公司雲端系統處, OU=數據通信分公司雲端系統處, O=中華電信股份有限公司, C=TW

Issuer:

OU=Public Certification Authority - G2, O="Chunghwa Telecom Co., Ltd.", C=TW

Serial number:

5A94639AC8E13F997404E3C5DA4CF468

File PE Metadata

Compilation timestamp:

12/2/2016 3:47:29 PM

OS version:

4.0

OS bitness:

Win64

Subsystem:

Windows GUI

Linker version:

8.0

CTPH (ssdeep):

49152:fTN3QihkXVQhVU4SdHW9rkOYH6nqWIE9DxeQ5mIm2WoPj5O+dH0oGGj9IF7Us7Yt:KwmtMjJu0t+CNO2t3UU2bLr6

Entry address:

0x4BE2C0

Entry point:

48, 83, EC, 28, E8, 97, 7C, 01, 00, 48, 83, C4, 28, E9, 0E, FD, FF, FF, CC, CC, CC, CC, CC, CC, CC, CC, CC, CC, CC, CC, CC, CC, 40, 53, 48, 83, EC, 20, 41, 8B, 00, 48, 8B, DA, 4C, 8B, C9, 44, 8B, D8, 4C, 8B, D1, 41, 83, E3, F8, A8, 04, 74, 13, 41, 8B, 40, 08, 4D, 63, 50, 04, F7, D8, 4C, 03, D1, 48, 63, C8, 4C, 23, D1, 49, 63, C3, 4A, 8B, 14, 10, 48, 8B, 43, 10, 8B, 48, 08, 48, 03, 4B, 08, 0F, B6, 41, 03, A8, 0F, 74, 0B, 0F, B6, C0, 83, E0, F0, 48, 98, 4C, 03, C8, 4C, 33, CA, 49, 8B, C9, 48, 83, C4, 20, 5B... 
[+]

Entropy:

6.0923

Code size:

5.2 MB (5,434,880 bytes)

Service

Display name:

CHTBoxService

Type:

Win32OwnProcess

Depends on:

RPCSS

The file CHTBoxC.exe has been discovered within the following program.

CHT Box by CHT Box

www.boxe.cht.com.tw

About 7% of users remove it

Scan CHTBoxC.exe - Powered by Reason Core Security

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.