home

moneymanagement.exe

MoneyManagment

This is a setup program which is used to install the application. The file has been seen being downloaded from forumbettingexchange.com.
Product:
MoneyManagment

Version:
1.0.0.0

MD5:
0fe1144dd395e5f2aea13c50738d9a94

SHA-1:
7084190559c2477c579fc3304497594d6c3f4fd3

Scanner detections:
1 / 68

Status:
Clean  (1 probable false positive detection)

Explanation:
This is mosty likely a false positive detection, the file is probably clean.

Analysis date:
12/26/2024 1:41:57 AM UTC  (today)

Scan engine
Detection
Engine version

Qihoo 360 Security
QVM03.0.Malware.Gen
1.0.0.1077

File size:
35 KB (35,840 bytes)

Product version:
1.0.0.0

Copyright:
Copyright © 2014

Original file name:
MoneyManagment.exe

File type:
Executable application (Win32 EXE)

Common path:
C:\documents and settings\principale\documenti\downloads\moneymanagement.exe

File PE Metadata
Compilation timestamp:
6/26/2014 2:57:56 PM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
8.0

.NET CLR dependent:
Yes

CTPH (ssdeep):
384:Tfk9oESOrBKcalFfaxAYT/x7kaEqaaVdwA+SDhuNurYE3/JEaBeLk24jXPl9va3l:I97/EqaaVdiOuNu0EvJfa2XPO+K

Entry address:
0x97CE

Entry point:
FF, 25, 00, 20, 40, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, D4, 18, AC, 53, 00, 00, 00, 00, 02, 00, 00, 00, 7C, 00, 00, 00, 1C, A0, 00, 00, 1C, 7C, 00, 00, 52, 53, 44, 53, 73, 24, 9E, EC, D4, 82, DC, 46, BB, 05, D3, 15, 9B, 85, F5, 77, 01, 00, 00, 00, 43, 3A, 5C, 55, 73, 65, 72, 73, 5C, 46, 45, 44, 45, 52, 49, 43, 4F, 5C, 44, 65, 73, 6B, 74, 6F, 70, 5C...
 
[+]

Developed / compiled with:
Microsoft Visual C# / Basic .NET

Code size:
30 KB (30,720 bytes)

The file moneymanagement.exe has been seen being distributed by the following URL.

http://forumbettingexchange.com/strategie-betting-exchange/.../?action=dlattach;attach=93

Scan moneymanagement.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.