CashCloudsInformer.exe

CashCloudsInformer

The executable CashCloudsInformer.exe has been detected as malware by 6 anti-virus scanners.
Remove CashCloudsInformer.exe - Powered by Reason Core Security
Product:
CashCloudsInformer

Version:
1.0.0.0

MD5:
b7f0313c4f110079a56556ec45e2b781

SHA-1:
f05c02b777ce45a0f93716496d1b517c3afe713b

SHA-256:
f8f949fdf54af1a6e9228f4560ab6235769292333610019ead05100beb2682ea

Scanner detections:
6 / 68

Status:
Malware

Analysis date:
12/3/2016 11:00:39 PM UTC  (today)

Scan engine
Detection
Engine version

Lavasoft Ad-Aware
Gen:Heur.MSIL.Krypt.4
969

Bitdefender
Gen:Heur.MSIL.Krypt.4
1.0.20.805

Emsisoft Anti-Malware
Gen:Heur.MSIL.Krypt
8.14.06.10.01

F-Secure
Gen:Heur.MSIL.Krypt.4
11.2014-10-06_3

G Data
Gen:Heur.MSIL.Krypt
14.6.24

MicroWorld eScan
Gen:Heur.MSIL.Krypt.4
15.0.0.483

Remove CashCloudsInformer.exe - Powered by Reason Core Security
File size:
371 KB (379,904 bytes)

Product version:
1.0.0.0

Copyright:
Copyright © 2014

Original file name:
CashCloudsInformer.exe

File type:
Executable application (Win32 EXE)

Common path:
C:\users\{user}\appdata\local\apps\2.0\ahrk1dj9.dbb\9x8l1w67.r4a\cash..tion_ffc2816857f35aa9_0001.0000_95a57a98e6303f37\informer\cashcloudsinformer.exe

File PE Metadata
Compilation timestamp:
5/15/2014 12:35:57 PM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
11.0

.NET CLR dependent:
Yes

CTPH (ssdeep):
768:HPnrgc7YkUqP3IIIIbNtNVHNVN2yVrTVvVNq0VWV+VSVxVRREFVMV4VYVPMH27LD:HPnxWqPTvvljH27amYBFrDs

Entry address:
0x5E1BE

Entry point:
FF, 25, 00, 20, 40, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 02, 00, 10, 00, 00, 00, 20, 00, 00, 80, 18, 00, 00, 00, 38, 00, 00, 80, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 01, 00, 01, 00, 00, 00, 50, 00, 00, 80, 00, 00, 00, 00, 00, 00...
 
[+]

Developed / compiled with:
Microsoft Visual C# / Basic .NET

Code size:
368.5 KB (377,344 bytes)

Remove CashCloudsInformer.exe - Powered by Reason Core Security