home

HYOSUNG ITX co., LTD.

Publisher Information

HYOSUNG ITX co., LTD. is a software developer located in Yeongdeungpo-gu, Seoul in Korea*. Thre are 3 additional code signing certificates issued to this publisher.
Authority:
thawte, Inc.

Valid from:
2/2/2015 9:00:00 AM

Valid to:
5/4/2017 8:59:59 AM

Subject:
CN="HYOSUNG ITX co., LTD.", O="HYOSUNG ITX co., LTD.", L=Yeongdeungpo-gu, S=Seoul, C=KR

Issuer:
CN=thawte SHA256 Code Signing CA, O="thawte, Inc.", C=US

Serial number:
5fcec1e6cc7f87ec83373a1c7fcd4532

Status:
No known positive detections

Scan engine
Details
Detections

Vba32 AntiVirus
suspected of Trojan.Downloader.gen.h
100.00%

0 / 68
icarus_mgame download.exe (TODO: <Down Loader> by TODO: <HyoSungITX>)  (2f90b8f592bb995bd8a2be7fe33eb375)

1 / 68
final_fantasy_xiv_nexon.exe (TODO: <Down Loader> by TODO: <HyoSungITX>)  (644219156bd7c084c8390c3127dfaef5)

0 / 68
icarus_hangame download.exe (TODO: <Down Loader> by TODO: <HyoSungITX>)  (3f08a39b0d93eb003d564e78153d8d5a)

0 / 68
icarus_nexon download.exe (TODO: <Down Loader> by TODO: <HyoSungITX>)  (99567031a77665d20704ae8869f9248d)

0 / 68
laghaim downloader_fgt.exe  (88108125da4b22b2c1beb8378a95af7d)

0 / 68
icarus_nexon download.exe (TODO: <Down Loader> by TODO: <HyoSungITX>)  (c8224a37df985786e31b557a0909e49e)

0 / 68
rohan online downloader.exe  (cf4abfefbba94db9fd8a9907137b4199)

0 / 68
laghaim downloader.exe  (9a7ef1c73cf602452f5d11a31e71897a)

0 / 68
final_fantasy_xiv.exe  (365106a01f29ee88aeacc382b3322862)

1 / 68
final_fantasy_xiv.exe (TODO: <Down Loader> by TODO: <HyoSungITX>)  (07b67ab7861434d971fc0fba0a30d082)

1 / 68
final_fantasy_xiv_naver.exe (TODO: <Down Loader> by TODO: <HyoSungITX>)  (b63744996f2027fa2ca8b09d2ccb4741)

0 / 68
icarus_nhn download.exe  (57fd35e9ada9aa50e7c7ac2833f2929d)

0 / 68
icarus_daum download.exe (TODO: <Down Loader> by TODO: <HyoSungITX>)  (bf71265aa2142a008d9255b2bb2d5443)

0 / 68
icarus_real download.exe  (7d2f1813b039deae63e12edab591d228)

0 / 68
hs_elevation_2k8.dll  (832723d285ea9a755a4dc626069bd0c5)

Downloads URLs for files signed by HYOSUNG ITX co., LTD..

1 / 68
http://static.ff14.co.kr/Downloader/.../FINAL_FANTASY_XIV_NEXON.exe  (644219156bd7c084c8390c3127dfaef5)

1 / 68
http://static.ff14.co.kr/Downloader/.../FINAL_FANTASY_XIV_NAVER.exe  (b63744996f2027fa2ca8b09d2ccb4741)

1 / 68
http://static.ff14.co.kr/Downloader/.../FINAL_FANTASY_XIV.exe  (07b67ab7861434d971fc0fba0a30d082)

0 / 68
http://downloader.hyosungcdn.com/download/.../ICARUS_REAL Download.exe  (7d2f1813b039deae63e12edab591d228)

0 / 68
http://downloader.hyosungcdn.com/download/.../ICARUS_NEXON Download.exe  (c8224a37df985786e31b557a0909e49e)

0 / 68
http://downloader.hyosungcdn.com/download/.../ICARUS_NHN Download.exe  (57fd35e9ada9aa50e7c7ac2833f2929d)

The following websites host and distribute files published by HYOSUNG ITX co., LTD..

downloader.hyosungcdn.com

The certificates below are also signed by HYOSUNG ITX co., LTD..

1FE5809AB4C07031FCC046E23D003181  (Jan 21, 2013 to Mar 23, 2015)

3C9AB2E05B24C712BB6B3F38BC69463B  (Dec 06, 2010 to Feb 04, 2013)

67FDEB75DC4833DBA807F5A14FA7E86E  (Jan 02, 2009 to Jan 02, 2011)

* Note, the details and description above are based on the code signing digital signature issued to HYOSUNG ITX co., LTD. by thawte, Inc. on February 02, 2015 with the serial number '5fcec1e6cc7f87ec83373a1c7fcd4532'.
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.