Should I block it?

No, this file is 100% safe to run.

Relationships


PE structurePE file structure

Show functions
Import table
advapi32.dll
AdjustTokenPrivileges, RegSetValueExA, RegCreateKeyExA, RegQueryValueExA, OpenProcessToken, LookupPrivilegeValueA, StartServiceCtrlDispatcherA, DuplicateTokenEx, CreateProcessAsUserA, RegOpenKeyExA, ControlService, DeleteService, CreateServiceA, ChangeServiceConfig2A, OpenSCManagerA, OpenServiceA, StartServiceA, QueryServiceStatus, CloseServiceHandle, RegisterServiceCtrlHandlerA, SetServiceStatus, RegCloseKey
dhcpcsvc.dll
DhcpCApiCleanup, DhcpCApiInitialize, DhcpRemoveDNSRegistrations
eaplib.dll
TLSGetMSKHND, TLSGetNotificationDataHND, TLSNewSessionHND, TLSSetPCAPInfo, TLSSetDebugInfo, TLSGetFailReasonHND, TLSSetParametersHND, TLSDeleteSessionHND, TLSDealEAPPayloadHND, TLSGetAuthErrorMsgHND, TLSGetVersion
iphlpapi.dll
GetAdaptersInfo, IpRenewAddress, IpReleaseAddress, GetAdaptersAddresses, GetInterfaceInfo
kernel32.dll
FormatMessageA, ReadFile, SetFilePointer, WriteFile, ResetEvent, LoadLibraryA, GetExitCodeThread, SetEnvironmentVariableA, CompareStringW, WideCharToMultiByte, GetOverlappedResult, CreateFileA, DeviceIoControl, LocalFree, LocalAlloc, Sleep, GetTickCount, SetThreadPriority, PulseEvent, GetCurrentDirectoryA, GetLastError, DeleteFileA, CreateThread, SetEvent, CreateEventA, GetModuleHandleA, GetProcAddress, GetCurrentProcess, GetModuleFileNameA, WaitForSingleObject, ReleaseMutex, OutputDebugStringA, CompareStringA, GetLocaleInfoW, GetTimeZoneInformation, LCMapStringW, LCMapStringA, SetEndOfFile, GetOEMCP, GetACP, GetUserDefaultLCID, EnumSystemLocalesA, GetLocaleInfoA, IsValidCodePage, IsValidLocale, GetCPInfo, GetStringTypeW, GetStringTypeA, MultiByteToWideChar, SetStdHandle, SetConsoleCtrlHandler, GetEnvironmentStringsW, GetEnvironmentStrings, FreeEnvironmentStringsW, FreeEnvironmentStringsA, UnhandledExceptionFilter, TerminateProcess, HeapCreate, HeapDestroy, GetVersionExA, GetEnvironmentVariableA, VirtualAlloc, VirtualFree, HeapFree, HeapReAlloc, CreateDirectoryA, HeapAlloc, GetStartupInfoA, GetFileType, SetHandleCount, GetCurrentThread, TlsGetValue, SetLastError, TlsFree, TlsAlloc, TlsSetValue, GetCurrentThreadId, FatalAppExitA, DeleteCriticalSection, FlushFileBuffers, InitializeCriticalSection, CloseHandle, CreateMutexA, GetLocalTime, GetPrivateProfileStringA, LeaveCriticalSection, EnterCriticalSection, GetStdHandle, DebugBreak, ExitProcess, GetVersion, GetCommandLineA, GetSystemTimeAsFileTime, IsBadWritePtr, IsBadReadPtr, HeapValidate, GetFileAttributesA, InterlockedDecrement, InterlockedIncrement, RtlUnwind
user32.dll
wsprintfA
userenv.dll
DestroyEnvironmentBlock, CreateEnvironmentBlock
version.dll
GetFileVersionInfoA, GetFileVersionInfoSizeA, VerQueryValueA
winscard.dll
g_rgSCardT0Pci, SCardEstablishContext, SCardReleaseContext, SCardDisconnect, SCardConnectA, SCardFreeMemory, SCardStatusA, SCardListReadersA, SCardTransmit, SCardCancel, SCardListReaderGroupsA, SCardGetStatusChangeA
zlib1.dll
gzread, gzerror, gzwrite, gzclose, gzopen

GCTWiMaxServiceD.exe

Seowonintech CO.Ltd GCTWiMaxServiceD by seowonintech (Signed)

Remove GCTWiMaxServiceD.exe
Version:   1, 28, 0, 10
MD5:   9d16692e185117ec50101db3e16c7dbd
SHA1:   bfc7d1f0905d8b53250bedbc50ef11f028691bc9

Overview

gctwimaxserviced.exe runs as a service under the name GCT WiMAX Service (GCTWiMAXService) with extensive SYSTEM privileges (full administrator access). The file is digitally signed by seowonintech which was issued by the VeriSign certificate authority (CA). This particular version is usually found on Microsoft Windows XP (5.1.2600.131072).

DetailsDetails

File name:gctwimaxserviced.exe
Publisher:Seowonintech CO.Ltd
Product name:Seowonintech CO.Ltd GCTWiMaxServiceD
Description:GCT WiMAX Service Daemon for Seowon Product
Typical file path:C:\Windows\System32\gctwimaxserviced.exe
File version:1, 28, 0, 10
Size:527.82 KB (540,488 bytes)
Build date:7/1/2011 10:37 AM
Certificate
Issued to:seowonintech
Authority (CA):VeriSign
Digital DNA
PE subsystem:Windows Console
File packed:No
.NET CLR:No
More details

BehaviorsBehaviors

Service
Runs under 'SYSTEM\CurrentControlSet\Services' by the Service Controller (services.exe)
  • 'GCTWiMAXService' (GCT WiMAX Service)

ResourcesResource utilization

(Note: statistics below are averages based on a minimum sample size of 200 unique participants)
Averages
 
CPU
Total CPU:0.00385868%
0.028634%
Kernel CPU:0.00255903%
0.013761%
User CPU:0.00129965%
0.014873%
Kernel CPU time:2,969 ms/min
100,923,805ms/min
Memory
Private memory:2.04 MB
21.59 MB
Private (maximum):4.51 MB
Private (minimum):500 KB
Non-paged memory:2.04 MB
21.59 MB
Virtual memory:26.83 MB
140.96 MB
Virtual memory (peak):34.97 MB
169.69 MB
Working set:520 KB
18.61 MB
Working set (peak):4.52 MB
37.95 MB
Resource allocations
Threads:10
12
Handles:167
600
GUI GDI count:4
103
GUI USER count:4
49

BehaviorsProcess properties

Integrety level:Undefined
Platform:32-bit
Command line:C:\Windows\System32\gctwimaxserviced.exe
Owner:SYSTEM
Windows Service
Service name:GCTWiMAXService
Display name:GCT WiMAX Service
Description:“GCT WiMAX Background Process”
Type:Win32OwnProcess
Parent process:services.exe (Services and Controller app by Microsoft)

Windows OS versionsDistribution by Windows OS

OS versiondistribution
Microsoft Windows XP 100.00%
Should I remove It? Clean your PC of unwanted adware, toolbars and bloatware.

Download it for FREE