» CITY-M LLC
Digital Signature
Analysis
Files (111)
Downloads (4)
Distribution (1)
Related (7)

CITY-M LLC

Publisher Information

CITY-M LLC is a software publisher located in MOSCOW, Russia*.

Authority:

COMODO CA Limited

Valid from:

9/17/2014 3:00:00 AM

Valid to:

9/17/2017 2:59:59 AM

Subject:

CN=CITY-M LLC, O=CITY-M LLC, STREET="ul. Kosmonavtov,d.9,str. 2 , of. 1", L=MOSCOW, S=MOSCOW, PostalCode=129301, C=RU

Issuer:

CN=COMODO RSA Code Signing CA, O=COMODO CA Limited, L=Salford, S=Greater Manchester, C=GB

Serial number:

00919d58783055a934d88c1ff2b7d7cccb

Scanner detections:

Malware distribution (100% detected)

Scan engine

Details

Detections

Reason Heuristics

PUP (M), PUP.CITYM (M)

100.00%

1 / 68 (Malware)

downloader.exe (3fdf448ba6a96b5ff09f5c3b42669b35)

1 / 68 (Malware)

downloader.exe (67976b48680aefad3a8a8282db830bfa)

1 / 68 (Malware)

downloader.exe (a84a7ab1730e1716075d3aa2e60bad30)

1 / 68 (Malware)

downloader.exe (6e558712e878eb746d2983db602d396f)

1 / 68 (Malware)

downloader.exe (89fc2e5fa5a1c11f74dfe82ab9006f02)

1 / 68 (Malware)

downloader.exe (53399181574a4e571d2ff6f807f6f4c0)

1 / 68 (Malware)

downloader.exe (58359309ea6f2efba71a75472f0a664e)

1 / 68 (Malware)

downloader.exe (4fe8f3dacb240a5ecb8943f3658f2c10)

1 / 68 (Malware)

downloader.exe (4a7adca7de58e0e16ee755ffd34806f2)

1 / 68 (Malware)

downloader.exe (8ecacc51c67431b8758e023f930bb675)

1 / 68 (Malware)

downloader.exe (564c6da0cc750f274a9ce58eeb05cbe0)

1 / 68 (Malware)

downloader.exe (ba42e4de03779231493728e5906b9c1c)

1 / 68 (Malware)

downloader.exe (0628e2033308706ef1a8fcdaf567ef22)

1 / 68 (Malware)

downloader.exe (af277b2409904aa187f12bd8a3d4e33e)

1 / 68 (Malware)

downloader.exe (a1f6fcfacf261a5ef3e0d35562e5d0c7)

1 / 68 (Malware)

downloader.exe (3641f2a445fc9c5a21c32a32d99108e2)

1 / 68 (Malware)

downloader.exe (1c182f4ebd959b280420e493748c6e51)

1 / 68 (Malware)

downloader.exe (fe9ca80bf75d7c9c6fc610a610e1d378)

1 / 68 (Malware)

downloader.exe (e86ffb709f9c9f835c1dcec220063b9c)

1 / 68 (Malware)

downloader.exe (6ce87e81da145a3d89f80cf907d02556)

1 / 68 (Malware)

downloader.exe (dbfd7ccfdc1909110a81bb537f714c40)

1 / 68 (Malware)

downloader.exe (349532dd09e60d1c1f47ab42208da6ca)

1 / 68 (Malware)

downloader.exe (c35f20927e0b7424d45ef09c3951056b)

1 / 68 (Malware)

downloader.exe (25e53c455e2b597d048e978a122aa3d6)

1 / 68 (Malware)

downloader.exe (4f568fa783c3b1c8080309ef1e4cf886)

1 / 68 (Malware)

downloader.exe (1caabfff4d4bd5a77f2b1cae59e8b3aa)

1 / 68 (Malware)

downloader.exe (1e9a984a53b56c33aaa2ffde03b8a5e4)

1 / 68 (Malware)

downloader.exe (a87f8952eab421f708280e132e0aa170)

1 / 68 (Malware)

downloader.exe (f33cef4fa89d1ca8e23f1492c5722574)

1 / 68 (Malware)

downloader.exe (43f2432868753aad5e9fb061efb610be)

Latest 30 of 111 files

Downloads URLs for files signed by CITY-M LLC.

1 / 68 (Malware)

http://sub2.bubblesmedia.ru/go/?link=U4R82iDMxwaZmwlyMhdxZNRqTV04NXDCPhHqtdoXKmjipIlP17j6Jfl1a TpAWwt8F1OmcT3Sa0H0x9pZ47PMiMrTVNULZucA/Cnc/.../OemYwIsg6g==&param=Fa6RrS355RM=&rid=1490&cc=1 (downloader.exe)

1 / 68 (PUP)

http://sub2.bubblesmedia.ru/go/?link=MAcaApQkrZRlsEFN0b0BCHgTKn5GMcSFGbZcqyNjwqYhVjzi3k/5gEYCrFufe6mSWcGqkVvvqYJGGj/.../ToQZa3Uh WNTEhv T5Tpwajo4QXV 3UnSDCh0B6rOg==&param=30NOr60DUL8=&rid=142&s=&r=skachat-torrent.ru&f=&cs=UTF-8&u=&cc=2 (downloader.exe)

1 / 68 (Malware)

Distribution

The following websites host and distribute files published by CITY-M LLC.

sub2.bubblesmedia.ru

The following publishers (by Authenticode signature organization name) are related.

think-cell Software GmbH

YANDEX LLC

Smart Media Sistemz Ukraina, TOV

* Note, the details and description above are based on the code signing digital signature issued to CITY-M LLC by COMODO CA Limited on September 17, 2014 with the serial number '00919d58783055a934d88c1ff2b7d7cccb'.

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.