home

National Tax Service

Publisher Information

National Tax Service is a software publisher located in Yeongdeungpo-gu, Seoul in Korea*. Thre are 11 additional code signing certificates issued to this publisher.
Authority:
Thawte, Inc.

Valid from:
1/24/2013 9:00:00 AM

Valid to:
3/26/2014 8:59:59 AM

Subject:
CN=National Tax Service, OU=IT Team, O=National Tax Service, L=Yeongdeungpo-gu, S=SEOUL, C=KR

Issuer:
CN=Thawte Code Signing CA - G2, O="Thawte, Inc.", C=US

Serial number:
1c346812662df6afa5f7b2d477a4112f

Status:
Inconclusive detections from multiple engines

Scan engine
Details
Detections

Trend Micro House Call
TROJ_GEN.F47V0403, TROJ_GEN.F47V0410
75.00%

VIPRE Antivirus
Trojan.Win32.Generic
50.00%

MicroWorld eScan
Gen:Trojan.Downloader.OGY@ayzj0pnO
25.00%

F-Secure
Gen:Trojan.Downloader.OGY@ayzj0pnO
25.00%

AVG
unknown virus Win32/DH
25.00%

F-Prot
W32/Trojan2.ODPU
25.00%

SUPERAntiSpyware
Trojan.Agent/Gen-Sisproc
25.00%

McAfee
Artemis!A5A2EADE4414
25.00%

Bitdefender
Gen:Trojan.Downloader.NGX@ayzj0pnO
25.00%

Emsisoft Anti-Malware
Gen:Trojan.Downloader.NGX@ayzj0pnO
25.00%

0 / 68
install_efile_coin_images.exe  (d671838fb045707d87a197f7ce72e46b)

0 / 68
install_efile_coin_db.exe  (804f5ad12c0e747d42f45a2d45f6efc9)

0 / 68
install_efile_coin.exe  (bbbc2872abc8037c8b47e78154c22a8b)

0 / 68
efile_coin_9.exe  (11bacca5c1069eca88b26101e1fb261a)

0 / 68
efile.exe  (907611042f49095fb1617e9d06a28633)

0 / 68
escid001f1p.exe  (bd6a492dae1e6f102f0be5a9b28d3402)

0 / 68
escad004f1p.exe  (f734500da47676cab0bc1dc675f2b8de)

0 / 68
checkver.dll  (c2f33b14cd03ea707bc2569e46560e02)

0 / 68
f_000096  (fc4ee6c5cfbd00070b838faa6458db82)

0 / 68
2f33c49fdd8d5134c104904960ae7b6a96914735.ico (InstallShield by Acresso Software)  (26a4564e57b93b4549f0a3527db6e8c2)

0 / 68
$ftax.exe  (44fb04104db8f441de9ab8658bc046a5)

0 / 68
$ftax.exe  (4920fc746d32640d6356068cfa2126d2)

0 / 68
44e05cc30544b7a52e081b75a8e23c1a26cfd12a.ico (InstallShield by Acresso Software)  (bce5c922fb141f2e9620d714bb36bf0d)

7 / 68      (inconclusive)
setup.exe  (a5a2eade44141391baaf1fa1726ecd5b)

0 / 68
efile_bus.exe  (d32817cfcff4e69ca73623493f6aaf8b)

0 / 68
npc_s2.alp  (ceed536b1c115e4ca61cfd02f5aaefbf)

0 / 68
insteitc.exe  (05d7872593806cc5ca2b5dbb76716dea)

0 / 68
eossetup_10.exe  (6634c92df816461eb0154520a51b07d7)

0 / 68
efile.exe  (edd1a4398f3532e54daebc21a4c6725c)

0 / 68
checkver_ocx.exe  (8b31e3873b4783cf7701a4c3dc1bc60c)

0 / 68
ers_acc_setup_2010.exe  (7a3b03fe14fc6c83e33c56b7c26567c9)

0 / 68
iclcheckver.ocx  (6276627cd7e611a0aa5f39884b83782a)

0 / 68
efile.exe  (df014448cf796229a7e1f2bd149d83b2)

0 / 68
insteitc.exe  (7ea8d7ffa66cbd458c731c6dc1dda0e4)

0 / 68
install_efile_v136.exe  (e230c83845195940791e35314d6bd43b)

0 / 68
ftax_setup.exe  (bd05fd3fdf7ec1f6e38b32a676f4d937)

0 / 68
eitccheckver.ocx  (ff17f073dd7800f9f44f005829ac8e71)

0 / 68
eossetup_day_v9.exe  (c1a88813b641635635d43cdb2df01b68)

1 / 68
checkver_ocx.exe  (101a3a68bb6836e6d9ea80defeb5a0fc)

0 / 68
$ftax.exe  (aa72c347e7efbce019d805f5a97664e2)

 
Latest 30 of 42 files

Downloads URLs for files signed by National Tax Service.

5 / 68      (Malware)
http://download.hometax.go.kr.krweb.nefficient.com/hts1/wmagic/.../checkver.exe  (b6989d53bc9a7d917f7530bb60b5e7d2)

The following websites host and distribute files published by National Tax Service.

download.hometax.go.kr.krweb.nefficient.com

The certificates below are also signed by National Tax Service.

1AD6EC4FCA54FF09CBDD4ACFB4B92B36  (Oct 12, 2016 to Oct 13, 2017)

2C7B6D46D99F012322EC6298A162C19A  (Jan 28, 2016 to Apr 29, 2017)

2658FBC9E2DF822D97750B81D6799261  (Nov 12, 2014 to Feb 13, 2016)

2FE33AF777B6EDBC4992D2D438FCC7EC  (Jan 13, 2014 to Feb 13, 2016)

39B998D613ADD986444B18865083CFCE  (Oct 17, 2011 to Jan 16, 2014)

1501719B42978B998F7B743C88C6E883  (Sep 16, 2009 to Oct 17, 2011)

06639A7E719A8E99544823FC9D42EFD2  (Sep 05, 2008 to Sep 14, 2009)

0F8D93480C2384C04AE1A33255CA9A6D  (Sep 07, 2007 to Sep 14, 2008)

298A0DAC8236D9EA8F92F44BCB528ED3  (Sep 15, 2006 to Sep 15, 2007)

21C8A3  (Sep 14, 2005 to Sep 15, 2006)

10 of 11 code signing certificates issued

The following publishers (by Authenticode signature organization name) are related.

Dreamsecurity Co., Ltd.

* Note, the details and description above are based on the code signing digital signature issued to National Tax Service by Thawte, Inc. on January 24, 2013 with the serial number '1c346812662df6afa5f7b2d477a4112f'.
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.