home

KTWIBROCM.EXE

KT WIBRO CM 응용 프로그램

Netcube Technologies Inc.

It is set to automatically execute when any user logs into Windows (through the local user run registry setting) with the name ‘KT WIBRO CM’.
Publisher:
Netcube Technologies Inc.  (signed and verified)

Product:
KT WIBRO CM 응용 프로그램

Version:
2, 0, 0, 1

MD5:
eb3b40e01dc72f4da93e10b27176e964

SHA-1:
3842646d8210112a664ac70345774bc08924026d

SHA-256:
9cb8623ee7a9614e13c74d85583afe655df7a7af01323bd183c5879fa7eaff64

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
7/5/2025 12:47:56 PM UTC  (today)

File size:
1.6 MB (1,628,848 bytes)

Product version:
2, 0, 0, 1

Copyright:
Copyright (C) 2006 KT Corporation. All Rights Reserved.

Original file name:
KTWIBROCM.EXE

File type:
Executable application (Win32 EXE)

Language:
Korean (Korea)

Common path:
C:\Program Files\kt wibro\kwd-u1300\ktwibrocm.exe

Digital Signature
Signed by:
Netcube Technologies Inc.

Authority:
GlobalSign nv-sa

Valid from:
4/21/2008 11:58:53 AM

Valid to:
4/21/2009 11:58:53 AM

Subject:
E=info@netcube.com, CN=Netcube Technologies Inc., O=Netcube Technologies Inc., C=KR

Issuer:
CN=GlobalSign ObjectSign CA, OU=ObjectSign CA, O=GlobalSign nv-sa, C=BE

Serial number:
01000000000119706C13ED

File PE Metadata
Compilation timestamp:
7/4/2008 10:29:56 AM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
8.0

CTPH (ssdeep):
24576:HJUcQk57RBRMcNbHk2sqzs7JXKcqi1Hrsm5qCQoZoXmAHuZK6:Htpzs7Jsi1HrB5Zp6WAHuZL

Entry address:
0xFD19F

Entry point:
E8, A4, 47, 01, 00, E9, 16, FE, FF, FF, 50, 64, FF, 35, 00, 00, 00, 00, 8D, 44, 24, 0C, 2B, 64, 24, 0C, 53, 56, 57, 89, 28, 8B, E8, A1, 04, 8E, 57, 00, 33, C5, 50, FF, 75, FC, C7, 45, FC, FF, FF, FF, FF, 8D, 45, F4, 64, A3, 00, 00, 00, 00, C3, 50, 64, FF, 35, 00, 00, 00, 00, 8D, 44, 24, 0C, 2B, 64, 24, 0C, 53, 56, 57, 89, 28, 8B, E8, A1, 04, 8E, 57, 00, 33, C5, 50, 89, 65, F0, FF, 75, FC, C7, 45, FC, FF, FF, FF, FF, 8D, 45, F4, 64, A3, 00, 00, 00, 00, C3, 50, 64, FF, 35, 00, 00, 00, 00, 8D, 44, 24, 0C, 2B...
 
[+]

Entropy:
6.4350

Code size:
1.2 MB (1,282,048 bytes)

Startup File (All Users Run)
Registry location:
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run

Name:
KT WIBRO CM

Command:
"C:\Program Files\kt wibro\kwd-u1300\ktwibrocm.exe"


Scan KTWIBROCM.EXE - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.