National Tax Service

Publisher Information

National Tax Service is a software publisher located in Yeongdeungpo-gu, Seoul in Korea*. Thre are 8 additional code signing certificates issued to this publisher.
Authority:
Thawte, Inc.

Valid from:
1/24/2013 9:00:00 AM

Valid to:
3/26/2014 8:59:59 AM

Subject:
CN=National Tax Service, OU=IT Team, O=National Tax Service, L=Yeongdeungpo-gu, S=SEOUL, C=KR

Issuer:
CN=Thawte Code Signing CA - G2, O="Thawte, Inc.", C=US

Serial number:
1c346812662df6afa5f7b2d477a4112f

Status:
Inconclusive detections from multiple engines

Scan engine
Details
Detections

Trend Micro House Call
TROJ_GEN.F47V0403, TROJ_GEN.F47V0410
66.67%

MicroWorld eScan
Gen:Trojan.Downloader.OGY@ayzj0pnO
33.33%

F-Secure
Gen:Trojan.Downloader.OGY@ayzj0pnO
33.33%

VIPRE Antivirus
Trojan.Win32.Generic
33.33%

AVG
unknown virus Win32/DH
33.33%

F-Prot
W32/Trojan2.ODPU
33.33%

SUPERAntiSpyware
Trojan.Agent/Gen-Sisproc
33.33%

Commtouch SDK
W32/Trojan.GGSV-7919
33.33%

1 / 68
checkver_ocx.exe  (101a3a68bb6836e6d9ea80defeb5a0fc)

0 / 68
$ftax.exe  (aa72c347e7efbce019d805f5a97664e2)

0 / 68
$yetax.exe  (69323c987697af76e40492252e110a97)

0 / 68
$ftax.exe  (0331d06b196ce3644d2e40d37e64a251)

0 / 68
yesoneaplsetup_v1.4.exe  (7cb69ed6d49dcd017e82550bcbc7c5cd)

3 / 68      (inconclusive)
yesoneaplsetup_v1.3.exe  (0fe4efbbe09f81e5c124e0d02dd5a90b)

0 / 68
efile.exe  (008d4684611afba5c3756e096fab4505)

0 / 68
efile.exe  (cf9909b18dd048d19c1a63a25b65e10f)

5 / 68      (Malware)
checkver.exe  (b6989d53bc9a7d917f7530bb60b5e7d2)

0 / 68
checkver.ocx  (2be240742edae3f981f2ff3e3e84f9e6)

0 / 68
eitccheckver.ocx  (2c88926b2620fcd7fdb808267f36e71b)

0 / 68
checkver.ocx  (a52c7498982a2b2a9efb4850fa9a424e)

0 / 68
checkver.ocx  (ce015ed0e13a0f744925b3308ee78ddf)

0 / 68
checkver.ocx  (c26e0db0a415830f1e793518b146fc49)

Downloads URLs for files signed by National Tax Service.

5 / 68      (Malware)

The following websites host and distribute files published by National Tax Service.

The certificates below are also signed by National Tax Service.

2658FBC9E2DF822D97750B81D6799261  (Nov 12, 2014 to Feb 13, 2016)

2FE33AF777B6EDBC4992D2D438FCC7EC  (Jan 13, 2014 to Feb 13, 2016)

39B998D613ADD986444B18865083CFCE  (Oct 17, 2011 to Jan 16, 2014)

1501719B42978B998F7B743C88C6E883  (Sep 16, 2009 to Oct 17, 2011)

06639A7E719A8E99544823FC9D42EFD2  (Sep 05, 2008 to Sep 14, 2009)

298A0DAC8236D9EA8F92F44BCB528ED3  (Sep 15, 2006 to Sep 15, 2007)

21C8A3  (Sep 14, 2005 to Sep 15, 2006)

3E9A04  (Sep 15, 2004 to Sep 15, 2005)

The following publishers (by Authenticode signature organization name) are related.

* Note, the details and description above are based on the code signing digital signature issued to National Tax Service by Thawte, Inc. on January 24, 2013 with the serial number '1c346812662df6afa5f7b2d477a4112f'.