home

KTnespot.sys

KTNespot

Netcube Technologies Inc.

It runs as a Windows kernel mode device driver named “KT WIBRO NESPOT Protocol Driver”.
Publisher:
KT Co., Ltd.  (signed by Netcube Technologies Inc.)

Product:
KTNespot

Description:
KT Nespot EAPoL Driver

Version:
1.0.1.0

MD5:
c0c5cd5816024745faec092398e7b3b6

SHA-1:
e9a46d3dc47a970a43b3da4bc457a69bd917e465

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
4/25/2024 8:50:02 PM UTC  (today)

File size:
20.9 KB (21,360 bytes)

Product version:
2.0.0.1

Copyright:
(C)KT 2002-2003

Original file name:
KTnespot.sys

File type:
Driver (Win32 SYS)

Common path:
C:\Windows\System32\drivers\ktnespot.sys

Digital Signature
Signed by:
Netcube Technologies Inc.

Authority:
GlobalSign nv-sa

Valid from:
4/11/2007 11:40:51 AM

Valid to:
4/11/2008 11:40:51 AM

Subject:
E=info@netcube.com, CN=Netcube Technologies Inc., O=Netcube Technologies Inc., C=KR

Issuer:
CN=GlobalSign ObjectSign CA, OU=ObjectSign CA, O=GlobalSign nv-sa, C=BE

Serial number:
01000000000111E03B40DF

File PE Metadata
Compilation timestamp:
1/23/2008 4:43:04 AM

OS version:
5.0

OS bitness:
Win32

Subsystem:
Native (none required)

Linker version:
5.12

CTPH (ssdeep):
384:h+HlYqJZ/YucPE8Y/XxlqCkJalrw8YXIYF6SFqYJLFHJ0tD:AHl9nw1cL7LHOp48X1LwtD

Entry address:
0x29F4

Entry point:
55, 8B, EC, 83, EC, 78, 53, 56, 57, 68, 88, 25, 01, 00, FF, 15, 6C, 24, 01, 00, 6A, 1B, 33, C0, 59, 8D, 7D, 88, F3, AB, 8D, 45, F4, 33, DB, 68, E0, 29, 01, 00, 50, C6, 45, 88, 05, 88, 5D, 89, FF, 15, 70, 24, 01, 00, 8B, 45, F4, 8B, 4D, F8, 89, 45, B8, 89, 4D, BC, 0F, B7, C0, 83, C0, 6C, C7, 45, 90, C4, 0B, 01, 00, 50, 8D, 45, 88, 50, 8D, 45, FC, 68, 2C, 25, 01, 00, 50, C7, 45, 94, 9C, 0C, 01, 00, C7, 45, 98, 3A, 0D, 01, 00, C7, 45, 9C, A4, 0D, 01, 00, C7, 45, A0, B4, 0C, 01, 00, C7, 45, A4, B8, 0C, 01, 00...
 
[+]

Entropy:
6.6896

Developed / compiled with:
Microsoft Visual C++

Code size:
10.8 KB (11,040 bytes)

Driver
Display name:
KT WIBRO NESPOT Protocol Driver

Service name:
NespotPEx

Type:
Kernel device driver (KernelDriver)

Group:
PNP_TDI


Scan KTnespot.sys - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.