» City Soft
Digital Signature
Analysis
Files (225)
Downloads (10)
Distribution (3)
Related (1)

City Soft

Publisher Information

City Soft is a software developer located in Moscow, Russia*.

Authority:

COMODO CA Limited

Valid from:

6/8/2016 3:00:00 AM

Valid to:

6/9/2017 2:59:59 AM

Subject:

CN=City Soft, O=City Soft, STREET=", STREET division HOUSE 4, office 6,", L=Moscow, S=Moscow, PostalCode=119027, C=RU

Issuer:

CN=COMODO RSA Code Signing CA, O=COMODO CA Limited, L=Salford, S=Greater Manchester, C=GB

Serial number:

49fd8cbfbbffbda218f5ef3a795a803f

Scanner detections:

Malware distribution (100% detected)

Scan engine

Details

Detections

Reason Heuristics

PUP.CitySoft (M), PUP (M)

100.00%

1 / 68 (Malware)

159dee1d-5981-b8fa-4d32-2f1832cfa6a6_1d1ce991d883036 (54fcc1aa0d9d4e3f0242a32f03a7b151)

1 / 68 (Malware)

jsm6ed3oq9jf.exe (35bbffcc547a1ba404f26fb34ae3a1fb)

1 / 68 (Malware)

kamccant61yz.exe (ad61dc41e63002b27cc66b6af6e74c00)

1 / 68 (Malware)

chromesetup.exe (562f514963459098b0d2f65ffab8633d)

1 / 68 (Malware)

fsdsjmzze7qo.exe (651e1dfcee27871fa50061ffda7f0bb7)

1 / 68 (Malware)

wq9hqkatcamx.exe (00ab72a6c0cb800ad417937031989fcf)

1 / 68 (Malware)

avast premier 2014 prosoft100 ru.exe (bdf6b3d244ecd68e8343296672d74620)

1 / 68 (Malware)

gta vice city.exe (b52487379696d69bdcfc1fe74e62825f)

1 / 68 (Malware)

breach clear - deadline fitgirl repack rutor.exe (25e0a140e95619f485e89642908bb58f)

1 / 68 (Malware)

chjzs3g5lul8.exe (1075a5bdb7b3cafe822a572a3c59b676)

1 / 68 (Malware)

gym heat 5 tfile ru avi torrent.exe (2604b4af14b2f1978b8396474a82ca9e)

1 / 68 (Malware)

ai1sxinpelvs.exe (fb82eae46550a83f50a43d1ca18ad2aa)

1 / 68 (Malware)

vatic 0 8.exe (748dbf39be6311ecf34a77ab3abc9ef5)

1 / 68 (Malware)

detstvo shatunov minusovka.exe (e3d04b94123038276abb6eed1620548e)

1 / 68 (Malware)

full driver puck for windows-7-ultimate.exe (2043e6fe0a1e98bc11eab663c7ba8480)

1 / 68 (Malware)

vsco-cam.exe (4ae3abb065d93e46a7a7425bfcaa9f2d)

1 / 68 (Malware)

torrent.exe (a26d95657afb4d7d0b289de1f76bee5b)

1 / 68 (Malware)

mod little blocks dlya minecraft 1 7.exe (c3b80f3391381119cfe7291d17bb82b0)

1 / 68 (Malware)

chit postala.exe (9bd42350472ffe8287be985111922555)

1 / 68 (Malware)

dark light client 1 8.exe (1511d247c899a5697f769e414a7cd8d6)

1 / 68 (Malware)

darksiders-2-deathinitive-edition-2015-repack-ot-rg-mehaniki-pc 1.exe (8b4d3a3037bf1a577f2a81a365b79df0)

1 / 68 (Malware)

geqwxhftko00.exe (86940f3ee475c4dc3e505b409ff43352)

1 / 68 (Malware)

2mhqvf2n4xau.exe (eb03345bd99dc9f4bc221885779181cf)

1 / 68 (Malware)

9cvgoukxocpk.exe (aa9eab009826ad269d223824a17d8cf7)

1 / 68 (PUP)

bs24.exe (deb6fc66721e4e1d595357a298f71784)

1 / 68 (Malware)

pb24.exe (e5a723839fed3918b12ba4457e2acef9)

1 / 68 (Malware)

23-25.exe (72f111797f5fab0528e56b76a9e490f4)

1 / 68 (Malware)

a3gpm6dmu4os.exe (58b3de4447ed974fb89092256af861d3)

1 / 68 (Malware)

navhwqduhhw0.exe (abf2aa4e336fbcbae62c78d1b0bfe5e0)

1 / 68 (Malware)

ouh1arp0mist.exe (46f18749a04337f1ba207d2ebaa886b4)

Latest 30 of 225 files

Downloads URLs for files signed by City Soft.

1 / 68 (Malware)

http://memory-explain.ru/files/.../get (chromesetup.exe)

1 / 68 (Malware)

http://waitress-cave.ru/.../tehnika-kumite-wkf-rafael-agaev-rafael-aghayev-55259 (torrent.exe)

1 / 68 (PUP)

http://commander-unlock.ru/MTExNTk7aHR0cCUzQSUyRiUyRm1lZGlhLWFuZHJvaWQucnUlMkYlMjEyNTU2NTRhMzJjYWE4NzZlZDViNGM3MDIwYzZjNjY3MjQxODVkYWFkOWM3MGQwNjdhODE3ZDAzYjEzZjZhOTcxO25hbWU9JUQwJUE3JUQwJTk4JUQwJUEyKyVEMCU5RCVEMCU5MCtWSU1FV09STEQuemlwO3NpemU9MzI1NjQ1O3R5cGU9YXJjaGl2ZTt1dG09ZXlKemIzVnlZMlVpT2lJeE56VXdNaUlzSW0xbFpHbDFiU0k2SWlJc0ltTmhiWEJoYVdkdUlqb2lJaXdpZEdWeWJTSTZJaUlzSW1OdmJuUmxiblFpT2lJaWZRPT07cmVhbF9yZWZlcmVyPTtmb3JjZV9maWxlPXRydWU= (chit na vimeworld.exe)

1 / 68 (PUP)

http://commander-unlock.ru/MTExNTk7aHR0cCUzQSUyRiUyRm1lZGlhLWFuZHJvaWQucnUlMkYlMjEzNTgzMTU5NzZlNTcwM2M0YjE5MTE2OWE4MmU2NjEwMjU5YjQ0YjYzMjg4N2M4N2IwMjk1ZWMxMzg3MDgxODRkO25hbWU9TkVXK0NIRUFUK1ZJTUVXT1JMRCtCWStGTEFTSERJUlJFQ1QuZXhlO3NpemU9MzI1NjQ1O3R5cGU9YXJjaGl2ZTt1dG09ZXlKemIzVnlZMlVpT2lJeE56VXdNaUlzSW0xbFpHbDFiU0k2SWlJc0ltTmhiWEJoYVdkdUlqb2lJaXdpZEdWeWJTSTZJaUlzSW1OdmJuUmxiblFpT2lJaWZRPT07cmVhbF9yZWZlcmVyPTtmb3JjZV9maWxlPXRydWU= (new cheat vimeworld by flashdirrect.exe)

1 / 68 (PUP)

http://commander-unlock.ru/MTExNTk7aHR0cCUzQSUyRiUyRm1lZGlhLWFuZHJvaWQucnUlMkYlMjE5ZmE4NjFmODJmZjNlNWQ5ZjU2ZDQ3ZGQ2YzY2OTgzZDNhMDIzNzkwMzQ5ODExZDJjY2I0ZGE4M2I2Yzc1Y2QyO25hbWU9JUQwJUE3JUQwJTk4JUQwJUEyKyVEMCU5RCVEMCU5MCtWSU1FV09STEQuemlwO3NpemU9MzI1NjQ1O3R5cGU9YXJjaGl2ZTt1dG09ZXlKemIzVnlZMlVpT2lJeE56VXdNaUlzSW0xbFpHbDFiU0k2SWlJc0ltTmhiWEJoYVdkdUlqb2lJaXdpZEdWeWJTSTZJaUlzSW1OdmJuUmxiblFpT2lJaWZRPT07cmVhbF9yZWZlcmVyPTtmb3JjZV9maWxlPXRydWU= (chit na vimeworld.exe)

1 / 68 (PUP)

http://commander-unlock.ru/MTExNTk7aHR0cCUzQSUyRiUyRm1lZGlhLWFuZHJvaWQucnUlMkYlMjFkMTExZTBlNzc2NDViOTA3YjUwMWE2NjQ0YmJlZmMyODI1OTgxMWFkZDFkY2EyZmUxZTQwYTc1MWFiMGZkYmJkO25hbWU9TkVXK0NIRUFUK1ZJTUVXT1JMRCtCWStGTEFTSERJUlJFQ1QuZXhlO3NpemU9MzI1NjQ1O3R5cGU9YXJjaGl2ZTt1dG09ZXlKemIzVnlZMlVpT2lJeE56VXdNaUlzSW0xbFpHbDFiU0k2SWlJc0ltTmhiWEJoYVdkdUlqb2lJaXdpZEdWeWJTSTZJaUlzSW1OdmJuUmxiblFpT2lJaWZRPT07cmVhbF9yZWZlcmVyPTtmb3JjZV9maWxlPXRydWU= (new cheat vimeworld by flashdirrect.exe)

1 / 68 (PUP)

http://commander-unlock.ru/MTExNTk7aHR0cCUzQSUyRiUyRm1lZGlhLWFuZHJvaWQucnUlMkYlMjFiNDIwNzk3ZmYxYTVmNzk4ZjY2MjI2NTExNDU5YTg3Y2E5OWFiNTQ3M2Q0ZDgyYTc4MjIwZTA5ZmY1ZTM1MjM0O25hbWU9JUQwJTlBJUQwJUEwJUQwJUFGJUQwJTlBJUQwJTlEJUQwJUEzJUQwJUEyJUQwJUFCJUQwJTk5KyVEMCVBNyVEMCU5OCVEMCVBMislRDAlOUUlRDAlQTIrRkxFU0glMjEuemlwO3NpemU9MzI1NjQ1O3R5cGU9YXJjaGl2ZTt1dG09ZXlKemIzVnlZMlVpT2lJeE5qRTNPQ0lzSW0xbFpHbDFiU0k2SWlJc0ltTmhiWEJoYVdkdUlqb2lJaXdpZEdWeWJTSTZJaUlzSW1OdmJuUmxiblFpT2lJaWZRPT07cmVhbF9yZWZlcmVyPTtmb3JjZV9maWxlPXRydWU= (kryaknutyy chit ot flesh.exe)

1 / 68 (PUP)

http://spread-front.ru/MTExNTk7aHR0cCUzQSUyRiUyRm1lZGlhLWFuZHJvaWQucnUlMkYlMjE3Y2U1ZTFhMDJlMzFjZTMxNmU0YjQ1MjQyZGY4MTE3NDk0NGMyY2RiM2M0ZjQ1ZjdlOTI1ZTI2ZDlmNzY3MTY2O25hbWU9QlMyNC5yYXI7c2l6ZT0zMjU2NDU7dHlwZT1hcmNoaXZlO3V0bT1leUp6YjNWeVkyVWlPaUl4TVRVeE5TSXNJbTFsWkdsMWJTSTZJaUlzSW1OaGJYQmhhV2R1SWpvaUlpd2lkR1Z5YlNJNklpSXNJbU52Ym5SbGJuUWlPaUlpZlE9PTtyZWFsX3JlZmVyZXI9O2ZvcmNlX2ZpbGU9dHJ1ZQ== (bs24.exe)

1 / 68 (Malware)

http://darken-possess.ru/NTY7aHR0cCUzQSUyRiUyRnMyLmZpbGUtc3BhY2Uub3JnJTJGZG93biUyRnRDS0syOHVQc3ElMkYxNDY2NzMyNzU1JTJGODctSy1HRVBJSGM0ZjdwOC1Wci1CdyUyRjI3NzMlMkYwJTJGMjc3MyUyRmRhZW1vbl90b29sc19saXRlXzEwLjQuMC4xOTAucmFyO25hbWU9ZGFlbW9uX3Rvb2xzX2xpdGVfMTAuNC4wLjE5MC5yYXI7c2l6ZT0wO3R5cGU9MTY2OTE0MjQ7dXRtPWV5SnpiM1Z5WTJVaU9pSXlOemN6SWl3aWJXVmthWFZ0SWpvaUlpd2lZMjl0Y0dGcFoyNGlPaUlpTENKMFpYSnRJam9pSWl3aVkyOXVkR1Z1ZENJNklpSjk7cmVhbF9yZWZlcmVyPTtmb3JjZV9maWxlPXRydWU= (daemon tools lite 10 4 0 190.exe)

1 / 68 (PUP)

http://clingpistol99.ru/download658/.../file (zona.exe)

Distribution

The following websites host and distribute files published by City Soft.

clingpistol99.ru

darken-possess.ru

spread-front.ru

The following publishers (by Authenticode signature organization name) are related.

Smart Union

* Note, the details and description above are based on the code signing digital signature issued to City Soft by COMODO CA Limited on June 08, 2016 with the serial number '49fd8cbfbbffbda218f5ef3a795a803f'.

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.