The court administration office

Publisher Information

The court administration office is a software developer located in Seocho-gu, Seoul in Korea*. Thre are 2 additional code signing certificates issued to this publisher.
Authority:
Thawte, Inc.

Valid from:
12/11/2013 9:00:00 AM

Valid to:
2/10/2016 8:59:59 AM

Subject:
CN=The court administration office, OU=IT Team, O=The court administration office, L=Seocho-gu, S=SEOUL, C=KR

Issuer:
CN=Thawte Code Signing CA - G2, O="Thawte, Inc.", C=US

Serial number:
63cea1b9be141f20d6d3cb0fef3d0af1

Status:
Inconclusive detections from multiple engines

Scan engine
Details
Detections

NANO AntiVirus
Virus.Win32.Gen.ccmw
84.62%

Dr.Web
Trojan.Siggen6.12958, infected with Trojan.Siggen6.12958
46.15%

Trend Micro House Call
Suspicious_GEN.F47V1215, Suspicious_GEN.F47V0612, Suspicious_GEN.F47V0324, Suspicious_GEN.F47V1224
30.77%

Qihoo 360 Security
Trojan.Generic, HEUR/QVM39.1.Malware.Gen
30.77%

Jiangmin
TrojanDownloader.IstBar.anm, Malware.Heur.g
23.08%

CMC Antivirus
Heur.Win32.Obfuscated.1!O
23.08%

McAfee Web Gateway
Artemis, BehavesLike.Win32.Tool.vc
23.08%

Avira AntiVirus
TR/Rogue.10395850, TR/Patched.Gen
15.38%

McAfee
Artemis!39CEA2A78AC8, Artemis!B37D44BD7F4E
15.38%

Sophos
Mal/Generic-S
7.69%

0 / 68
installsafer.exe  (eb5da95e441f0446c95e81da8b9c9875)

0 / 68
RPRTRegisterX.ocx (by TODO: LGcns)  (916c444e7953617dc7bfa61d1a3eb6ea)

0 / 68
IPRTCrsIgmPrintX.ocx (TODO: LgCNS)  (915c298b924549ffa7d835496e8c53a2)

0 / 68
FPRTFixDateX.ocx  (ca6c59515d563a157a9257791a5719e6)

0 / 68
DPRTRegisterX.ocx  (c53a95736460e8bbc775389a78e639f2)

0 / 68
RPRTRegisterX.OCX (RPRTRegisterX ActiveX Control Module)  (554805318c7f40edb86768dae685cb2f)

1 / 68
FPRTFixDateX.OCX (FPRTFixDateX ActiveX Control Module)  (70501e96bb7ee20c1162cffaaec67f81)

5 / 68      (Malware)
installsafer.exe  (e32c7c4fec301e05aee3f72f1f6c622d)

0 / 68
installsafer.exe  (cf0fbbb5873d2d443af5fa65f2f25afa)

0 / 68
AxBee.exe (AxBee by Seworks)  (6c07aab8e9abd6cdc134ec84d5d61b5e)

0 / 68
axbeelauncher64.dll (AxBee by Seowkrs)  (abce7016fcee63dc158076c3975b60b4)

2 / 68
FPRTFixDateX.OCX (FPRTFixDateX ActiveX Control Module)  (bf8faf956f486f25b27a76160626cc49)

5 / 68      (inconclusive)
installsafer.exe  (b37d44bd7f4e83867c5d7d50d2502196)

4 / 68      (inconclusive)
installsafer.exe  (273e889d4f6407fb3d969072dc7cd4d8)

0 / 68
installsafer.exe  (f6af6b18b152f9df93dee2daefeefb74)

0 / 68
installsafer.exe  (49c89755c4fdd0da62c1c456c15cd2f8)

0 / 68
installsafer.exe  (9b23140965f72126b049c6f6fb22e6f2)

0 / 68
installsafer.exe  (6a49d728e441703d36203efce1bd14de)

2 / 68
installsafer.exe  (daf00860b689f70f5306ec1fb7fe0829)

3 / 68
installsafer.exe  (422516e97da2030469dd572a16db319a)

0 / 68
installsafer.exe  (e68fb9d7f14f32a465c2e2462e9dbcd8)

3 / 68
installsafer.exe  (ba01f820678376754882bcf290804e3d)

0 / 68
axbeelauncher64.dll (AxBee by Seowkrs)  (b9472dbacf986c71a2e1096fe069378e)

0 / 68
AxBee.exe (AxBee by Seworks)  (3ba8a2f28c646e7501d0eb2ec9e3c22e)

0 / 68
TrustedZoneSet.dll (TrustedZoneSet by LG CNS Co)  (814fd413bd5fa1d20309f8dcf68f7d79)

6 / 68      (Malware)
installsafer.exe  (39cea2a78ac8c2ed66ace7fcc1ec57c9)

1 / 68
installsafer.exe  (7efc36a8cb754ba27d873609282c619a)

4 / 68      (inconclusive)
installsafer.exe  (29fbf83df2cd69055f7225e07bc612ec)

2 / 68      (inconclusive)
installsafer.exe  (6b92df6c31c6c97de4aa22815133e95d)

 
Latest 30 of 42 files

The certificates below are also signed by The court administration office.

64AFCE463CB84B28EE471EF486C5C051  (Jan 07, 2016 to Mar 08, 2018)

65D325E5E8EC6C22B70E144C93D78672  (Jan 06, 2012 to Jan 06, 2014)

* Note, the details and description above are based on the code signing digital signature issued to The court administration office by Thawte, Inc. on December 11, 2013 with the serial number '63cea1b9be141f20d6d3cb0fef3d0af1'.