» City Road labs (Extreme White Limited)
Digital Signature
Analysis
Files (5,763)
Related (19)

City Road labs (Extreme White Limited)

Publisher Information

City Road labs (Extreme White Limited) is a software publisher located in Nicosia, Agios Dometios in CY*. The company is a primary distributor of unwanted software.

Authority:

COMODO CA Limited

Valid from:

4/15/2015 7:00:00 AM

Valid to:

4/15/2016 6:59:59 AM

Subject:

CN=City Road labs (Extreme White Limited), O=City Road labs (Extreme White Limited), STREET=Tassou Papadopulu 6 (flat/office 22), L=Nicosia, S=Agios Dometios, PostalCode=2373, C=CY

Issuer:

CN=COMODO RSA Code Signing CA, O=COMODO CA Limited, L=Salford, S=Greater Manchester, C=GB

Serial number:

00ae3b988efe11afe67f31c19e83d194b6

Scanner detections:

Detections (100% detected)

Scan engine

Details

Detections

Reason Heuristics

PUP.ExtremeWhite (M), Adware.Crossrider (M), PUP.ExtremeWhite.Bundler (M)

100.00%

1 / 68 (Adware)

f1ace6f1-b9db-4304-bb49-83f5e095ccc4-1-7.exe (GoHD by InstallMoon) (59c2844d8189c33e1273bce459dc50cd)

1 / 68 (Adware)

tmp000000782ccaaee0802b64ab (6fa25b798645bc90339ae358f1cf3fea)

1 / 68 (Adware)

WebSocket4Net.dll (WebSocket4Net) (4e6fd51550639552d82d3aeced32eded)

1 / 68 (Adware)

Newtonsoft.Json.dll (Json.NET by Newtonsoft) (bd4f08ce8871032da3b9c640bcaa8b9f)

1 / 68 (Adware)

Interop.IWshRuntimeLibrary.dll (Assembly imported from type library 'IWshRuntimeLibrary'.) (a5d6e52fb89a7425b44cd685292bace4)

1 / 68 (Adware)

setup.exe (GoHD by InstallMoon) (2997347089c8c72bf2271309f4878754)

1 / 68 (Adware)

xkzikecjlkb.exe (GoHD by InstallMoon) (309a265e138e4a3389035865fe746167)

1 / 68 (Adware)

9832d138-d984-4e59-821f-ab340e0d7fb9-1-6.exe (GoHD by InstallMoon) (31920999f50b3b63afe48852cc7a55c9)

1 / 68 (Adware)

SuperSocket.ClientEngine.Core.dll (SuperSocket ClientEngine by SuperSocket) (42d9a58618fca2dcad9aca453887dd25)

1 / 68 (Adware)

SuperSocket.ClientEngine.Protocol.dll (SuperSocket ClientEngine by SuperSocket) (3ad8a6e32881c81e429ab4ce52c71594)

1 / 68 (Adware)

SuperSocket.ClientEngine.Common.dll (SuperSocket ClientEngine by SuperSocket) (4a944dcdc0832c4ae0d7884fec45404c)

1 / 68 (Adware)

WebSocket4Net.dll (WebSocket4Net) (da5a8838773f314997353d973e14236a)

1 / 68 (Adware)

Newtonsoft.Json.dll (Json.NET by Newtonsoft) (3946ab39b9e611c7bfc623690320a4ff)

1 / 68 (Adware)

Interop.IWshRuntimeLibrary.dll (Assembly imported from type library 'IWshRuntimeLibrary'.) (476ca141cc179f6f839fa4304d74c599)

1 / 68 (Adware)

040c97c2-40a2-47f8-a4c0-6128f161394a.exe (Torpedo) (b75cc0bbd91716853b16df86a4872d48)

1 / 68 (Adware)

SuperSocket.ClientEngine.Protocol.dll (SuperSocket ClientEngine by SuperSocket) (16454653f9348f0ca3f792ff955725f6)

1 / 68 (Adware)

SuperSocket.ClientEngine.Core.dll (SuperSocket ClientEngine by SuperSocket) (f6f45c225d554dde9b3b209ffc37c4da)

1 / 68 (Adware)

SuperSocket.ClientEngine.Common.dll (SuperSocket ClientEngine by SuperSocket) (6364417576b598e14d56d02a87221b34)

1 / 68 (Adware)

WebSocket4Net.dll (WebSocket4Net) (8a9d8f6120ffa707873d3eb50ce2d11c)

1 / 68 (Adware)

Newtonsoft.Json.dll (Json.NET by Newtonsoft) (ec7bc38274ffeededfb5342014db541b)

1 / 68 (Adware)

0a64febd-857f-4f0e-a446-e504e2753a28.exe (Torpedo) (810135c93d6b3d49cb08bb7184087d8a)

1 / 68 (Adware)

lkmsoytn.exe (GoHD by InstallMoon) (c9f4b5045debc385a0536cdb2ac3920e)

1 / 68 (Adware)

e640e68a-7ec8-4230-b960-cb42199344bc.exe (Torpedo) (c3634ae3165348acf7901bd066a4440f)

1 / 68 (Adware)

SuperSocket.ClientEngine.Common.dll (SuperSocket ClientEngine by SuperSocket) (4093016fa461bcffa3368ed842b5b570)

1 / 68 (Adware)

831e14e9-e849-4429-bf87-ba48d1cc6291.exe (Torpedo) (6ddddb9a0d38b2b4868a941c496fde92)

1 / 68 (Adware)

ayqonypvlzu.exe (GoHD by InstallMoon) (2be8e94c0d1f25e96753600a1ad3ea39)

1 / 68 (Adware)

Newtonsoft.Json.dll (Json.NET by Newtonsoft) (8633e90d68fe591f1859da40f3c28ab5)

1 / 68 (Adware)

Interop.IWshRuntimeLibrary.dll (Assembly imported from type library 'IWshRuntimeLibrary'.) (48c8f7df820c0b520506fd2456981fb9)

1 / 68 (Adware)

dwdjwubi.exe (GoHD by InstallMoon) (c3ce9e9a4d71ba46992ddb9d050dc63c)

1 / 68 (Adware)

d421ff97-203e-4ec3-860a-1db16a3f9387-64.exe (GoHD by InstallMoon) (c81a6cf07a7424fb8d8cfe84ae8ca3e2)

Latest 30 of 5,763 files

The following publishers (by Authenticode signature organization name) are related.

Digit Network (Extreme White Limited)

ColoColo Apps (Bright Circle Investments Ltd)

CR7 Team (Bright Circle Investments Ltd)

Clash Project (Bright Circle Investments Ltd)

Robokid Technologies

Titanium Great Minds

Winston Project

Aussie Labs (BrightCircle Investments Limited)

Laroste Apps

Blondie Project (Bright Circle Investments Ltd)

Space Battleship Creative

BadFinger Project (BrightCircle Investments Limited)

* Note, the details and description above are based on the code signing digital signature issued to City Road labs (Extreme White Limited) by COMODO CA Limited on April 15, 2015 with the serial number '00ae3b988efe11afe67f31c19e83d194b6'.

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.