home

BTWorks, Inc.

Publisher Information

BTWorks, Inc. is a software developer located in Yuseong-gu, Daejeon in Korea*. Thre are 8 additional code signing certificates issued to this publisher.
Authority:
VeriSign, Inc.

Valid from:
10/29/2014 9:00:00 AM

Valid to:
12/29/2015 8:59:59 AM

Subject:
CN="BTWorks, Inc.", O="BTWorks, Inc.", L=Yuseong-gu, S=Daejeon, C=KR

Issuer:
CN=VeriSign Class 3 Code Signing 2010 CA, OU=Terms of use at https://www.verisign.com/rpa (c)10, OU=VeriSign Trust Network, O="VeriSign, Inc.", C=US

Serial number:
6c392994c70e8412a4f0609352d14d44

Status:
No known positive detections

Scan engine
Details
Detections

Bkav FE
HW32.Packed
100.00%

Dr.Web
BackDoor.Nuclear.305
100.00%

0 / 68
f74f332508770082148750980977d54f030a136f  (c6848088ae8dfdd52a0a610f8ddabe86)

0 / 68
certroamingopen.exe  (bf52bdcb1862e4b4fef3341a733ad1bd)

2 / 68      (inconclusive)
certroamingopen.exe  (876482618c14cfaae4411a306b144a5a)

0 / 68
certroaming.exe  (29c25d0b36f7ee38abf676b1c19b3c0a)

Downloads URLs for files signed by BTWorks, Inc..

0 / 68
http://www.hanabank.com/resource/download/.../CertRoaming.exe  (29c25d0b36f7ee38abf676b1c19b3c0a)

2 / 68      (inconclusive)
https://download.nonghyup.com/so/download/btworks/.../CertRoamingOpen.exe  (876482618c14cfaae4411a306b144a5a)

0 / 68
https://download.nonghyup.com/so/download/btworks/.../CertRoaming.exe  (29c25d0b36f7ee38abf676b1c19b3c0a)

The following websites host and distribute files published by BTWorks, Inc..

download.nonghyup.com

The certificates below are also signed by BTWorks, Inc..

5032660343816980D97146181FB2486C  (Dec 24, 2015 to Jan 23, 2017)

7C026FB6EB16F87E8D13EDD3E6A84C7E  (Nov 28, 2013 to Nov 29, 2014)

3896D6D32658363F28017DD1C76F5461  (Oct 10, 2012 to Nov 10, 2013)

017B3E0F46E8582D3798FE2D64FDAF2B  (Sep 16, 2011 to Oct 16, 2012)

162DE9454AC36F09B1A21B29769B4344  (Sep 14, 2010 to Sep 15, 2011)

590D80BD4AB64D412D4E05E5A176168F  (Aug 07, 2007 to Aug 07, 2008)

1E3F5659AC6EA72E901D09C72D5E72D5  (Aug 04, 2006 to Aug 05, 2007)

3FB95B  (Aug 05, 2005 to Aug 05, 2006)

* Note, the details and description above are based on the code signing digital signature issued to BTWorks, Inc. by VeriSign, Inc. on October 29, 2014 with the serial number '6c392994c70e8412a4f0609352d14d44'.
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.