home

CNESTY Co., Ltd.

Publisher Information

CNESTY Co., Ltd. is a software publisher located in Geumcheon-gu, Seoul in Korea*. Thre are 3 additional code signing certificates issued to this publisher.
Authority:
thawte, Inc.

Valid from:
3/17/2015 9:00:00 AM

Valid to:
4/16/2016 8:59:59 AM

Subject:
CN="CNESTY Co., Ltd.", O="CNESTY Co., Ltd.", L=Geumcheon-gu, S=SEOUL, C=KR

Issuer:
CN=thawte SHA256 Code Signing CA, O="thawte, Inc.", C=US

Serial number:
6a3925e9a65967dd2df6d47133de7797

Status:
Inconclusive detections from multiple engines

Scan engine
Details
Detections

Dr.Web
probably BACKDOOR.Trojan
66.67%

McAfee
Trojan.GenericR-DCW!079153C5FD1D
33.33%

AegisLab AV Signature
Troj.Spy.W32.Zbot.lGiY
33.33%

0 / 68
nhcuser.exe (ALZip by ESTsoft)  (d66adf85e2c61de39d0423163b79a699)

0 / 68
nhcuser.exe (ALZip by ESTsoft)  (c056a66ae07b4959ccf8f476351c0a0a)

0 / 68
nHcUser.exe (Cnesty)  (8f35212cceb03cc2f1a3e3ffbe3a326a)

0 / 68
nhcadmin.exe  (24be022e75af218b0e839c4ffbc8e150)

0 / 68
nhcuser.exe  (cbf2b2c32ca0d3b5e4017caffd8c7d8b)

0 / 68
nHcUser.exe (Cnesty)  (8028f7852f8dbe4df20a3c8153a115cc)

0 / 68
nhelpcompatcher.exe (TODO: <Product name> by TODO: <Company name>)  (bdc6d99f5def39ce3d58ce830cbd1a88)

0 / 68
nhcadmin.exe  (1a636d529f66d9681fdad268ae4a8992)

0 / 68
nhcuser_175_80.exe (ALZip by ESTsoft)  (c1ae48dba995ff4d2e1c93b8883369ff)

1 / 68      (inconclusive)
nhcuser.exe  (b0db459765a317dfd7381fcb854cf3e6)

0 / 68
helpcombasecontrol_auto.exe (by Pantaray Research)  (cf6cb22fef63ebda71c0c6c28616fc63)

0 / 68
nhcuser.exe  (5d72689c26ed90f18db5e03cbb0e5bdd)

0 / 68
nhcuser.exe  (d85c8884f34834877296bdf15c5aeeb6)

0 / 68
nHcService.exe (TODO: <Product name> by cnesty)  (62893c267f8b1f75b67a8ee8ffd54942)

1 / 68      (inconclusive)
nhcuserrun.exe (HelpCom by Cnesty)  (2a71126bc90e7cba24f0b4b855ba2780)

0 / 68
nHcUser.exe (Cnesty)  (bc288c1e03c92e27735b9451140d496d)

0 / 68
helpcom.exe (ALZip by ESTsoft)  (142c68b57fc8e7d071cab0a79a14eb0e)

0 / 68
nhcuser.exe  (75876ed7cb0abf9f19c4b1bd6b8077c0)

0 / 68
patcher.exe (TODO: <Product name> by Cnesty)  (2426b75ebe531ffca41b7ea3f8408679)

2 / 68
nhcuser.exe  (079153c5fd1d1d5df89ce4fb61398d3d)

0 / 68
nhcuser.exe (ALZip by ESTsoft)  (efc5b6a2e9c969ef7376e56989fe2d07)

0 / 68
nhcuser_v9_90.exe (ALZip by ESTsoft)  (5d3d8b84882b33ad4a27adcbce3076d6)

0 / 68
nhcuser.exe  (6b52131b1a0c25fe5cf443988707d763)

0 / 68
nHcAdmin.exe (Cnesty)  (19628ad72fc0fecd0352876faf327743)

0 / 68
nhcuser.exe  (c491ef683ba41a87569238e46898ede0)

0 / 68
helpcomuser.exe (ALZip by ESTsoft)  (51556ef76551d5412f125933ee15c1be)

0 / 68
nHcUser.exe (Cnesty)  (94983ddd7427860bc176c546bf59195f)

0 / 68
nhcuseripc.exe  (0fe0f216a94118f5aba868381e8de86f)

0 / 68
nhcuser.exe  (e9d8eaf36b9debbe40bf3d921768e7c6)

0 / 68
nhccad.exe  (99f470816d9f370b63ad7d3335b7b025)

 
Latest 30 of 34 files

Downloads URLs for files signed by CNESTY Co., Ltd..

0 / 68
http://180.80.46.221/nHcUser.exe  (c056a66ae07b4959ccf8f476351c0a0a)

0 / 68
http://www.nhis.or.kr/helpcom_new/.../patcher.exe  (2426b75ebe531ffca41b7ea3f8408679)

0 / 68
http://mydoctor.myasset.com/.../HelpComBaseControl_Auto.exe  (cf6cb22fef63ebda71c0c6c28616fc63)

0 / 68
http://211.173.34.146/nHcUser.exe  (efc5b6a2e9c969ef7376e56989fe2d07)

The following websites host and distribute files published by CNESTY Co., Ltd..

www.nhis.or.kr

mydoctor.myasset.com

The certificates below are also signed by CNESTY Co., Ltd..

6094CBBD2F03D98ECBC59EF61B752CC7  (Apr 08, 2016 to May 09, 2017)

2C966C5A93A4A29EDE438C6D8AD6175C  (Feb 10, 2014 to Mar 13, 2015)

0F8B0818A416DA9FFF1155EE86A66D6F  (Feb 04, 2013 to Feb 05, 2014)

* Note, the details and description above are based on the code signing digital signature issued to CNESTY Co., Ltd. by thawte, Inc. on March 17, 2015 with the serial number '6a3925e9a65967dd2df6d47133de7797'.
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.