home

CNESTY Co., Ltd.

Publisher Information

CNESTY Co., Ltd. is a software publisher located in Geumcheon-gu, Seoul in Korea*. Thre are 3 additional code signing certificates issued to this publisher.
Authority:
Thawte, Inc.

Valid from:
2/10/2014 9:00:00 AM

Valid to:
3/13/2015 8:59:59 AM

Subject:
CN="CNESTY Co., Ltd.", O="CNESTY Co., Ltd.", L=Geumcheon-gu, S=SEOUL, C=KR

Issuer:
CN=Thawte Code Signing CA - G2, O="Thawte, Inc.", C=US

Serial number:
2c966c5a93a4a29ede438c6d8ad6175c

Status:
Inconclusive detections from multiple engines

Scan engine
Details
Detections

McAfee
GenericR-DCW!995283963DA2
33.33%

Trend Micro House Call
Suspicious_GEN.F47V0313
33.33%

avast!
Win32:Evo-gen [Susp]
33.33%

IKARUS anti.virus
Backdoor.Agent
33.33%

F-Prot
W32/Zbot.QB.gen
33.33%

NANO AntiVirus
Trojan.Win32.Genome.brkhbz
33.33%

0 / 68
nhcuseripc.exe  (723e291a639cff313259b5deb33cd563)

0 / 68
nhcadmin.exe  (b9ef6cf094458efb4ba734825d37ffdc)

0 / 68
nhcuser.exe (ALZip by ESTsoft)  (0b79da96372ea1c481b27387c5775709)

0 / 68
nhcuser.exe  (4729ab06d8dbcc1f3a66c59e2c75e474)

0 / 68
nhcuser.exe  (2d46df86929deeac53a433769b96435f)

0 / 68
patcher.exe (TODO: <Product name> by Cnesty)  (d94b19feaeff09f9a50e01d42c04ae93)

0 / 68
nhcuser.exe  (aa32ff252bb051afde092fdd163d6f72)

0 / 68
nhcuser.exe (ALZip by ESTsoft)  (cb909c3bc16902831c73cfa3fd25dca4)

0 / 68
helpcom.exe (ALZip by ESTsoft)  (a449511151106ff82b981aaaae9b242a)

0 / 68
nhcservice.exe (TODO: <Product name> by TODO: <Company name>)  (a3240f813ea26a671851f99066014945)

0 / 68
nhcservice.exe (TODO: <Product name> by TODO: <Company name>)  (c77cf2528b4ff209111eddc2492d7f05)

0 / 68
nhcdelete.exe  (ac98f065820be5a21ac59332620ab281)

0 / 68
ivieweragent.msi  (ccbcfd8dcbd9d8c1e2966c1c45e44c26)

1 / 68
nhcuser_v9_90.exe (ALZip by ESTsoft)  (05e47d434593655b345ed108e8716333)

1 / 68
nhcuseripc.exe  (e8055454fb7b15be54ba093a6e4894fc)

4 / 68      (inconclusive)
nhcuser.exe  (995283963da27fcdda8c323ce0b86070)

0 / 68
nhcservice.exe (TODO: <Product name> by TODO: <Company name>)  (f730d7c0bb34d653a5ec3bfdcfd0043c)

0 / 68
nhccad.exe  (8ff1fab28badeb8fd305cbfea68b448c)

Downloads URLs for files signed by CNESTY Co., Ltd..

0 / 68
http://211.47.66.172/nHcUser.exe  (cb909c3bc16902831c73cfa3fd25dca4)

1 / 68
http://www.hc119.com/nHcUser_V9_90.exe  (05e47d434593655b345ed108e8716333)

The following websites host and distribute files published by CNESTY Co., Ltd..

www.hc119.com

The certificates below are also signed by CNESTY Co., Ltd..

6094CBBD2F03D98ECBC59EF61B752CC7  (Apr 08, 2016 to May 09, 2017)

6A3925E9A65967DD2DF6D47133DE7797  (Mar 16, 2015 to Apr 15, 2016)

0F8B0818A416DA9FFF1155EE86A66D6F  (Feb 04, 2013 to Feb 05, 2014)

* Note, the details and description above are based on the code signing digital signature issued to CNESTY Co., Ltd. by Thawte, Inc. on February 10, 2014 with the serial number '2c966c5a93a4a29ede438c6d8ad6175c'.
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.