home

workingsoftware.exe

CaptchaTypersProgram V 1.0.0.0

CaptchaTypers.com

This is a setup program which is used to install the application. The file has been seen being downloaded from email.mg.upwork.com and multiple other hosts.
Publisher:
CaptchaTypers.com

Product:
CaptchaTypersProgram V 1.0.0.0

Description:
CaptchaTypersProgram

Version:
1.0.0.0

MD5:
4c70cf86989d5dfff8ef2d61e8ff0466

SHA-1:
12e10449b53a0e4edfb42eec139acbac5cdf00ac

SHA-256:
3709ceafb01c78b3c901de1028d55981c29ef8467ca683b82f990cc211d363c3

Scanner detections:
1 / 68

Status:
Clean  (1 probable false positive detection)

Explanation:
This is mosty likely a false positive detection, the file is probably clean.

Analysis date:
12/25/2024 5:10:47 AM UTC  (today)

Scan engine
Detection
Engine version

Qihoo 360 Security
Malware.QVM03.Gen
1.0.0.1015

File size:
263.5 KB (269,824 bytes)

Product version:
1.0.0.0

Copyright:
Copyright © CaptchaTypers.com

Original file name:
CaptchaTypersProgram.exe

File type:
Executable application (Win32 EXE)

Language:
Language Neutral

Common path:
C:\users\{user}\downloads\workingsoftware.exe

File PE Metadata
Compilation timestamp:
8/29/2012 8:21:09 PM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
8.0

.NET CLR dependent:
Yes

CTPH (ssdeep):
6144:eEKCiuDxhlghLaV4VrAvc5PGgGKGmmr8juQIQ7J:eMWDH8gGE37J

Entry address:
0x4336E

Entry point:
FF, 25, 00, 20, 40, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00...
 
[+]

Developed / compiled with:
Microsoft Visual C# / Basic .NET

Code size:
261 KB (267,264 bytes)

The file workingsoftware.exe has been seen being distributed by the following 50 URLs.

http://email.mg.upwork.com/.../eJwdTk1PwzAM_TXpjSofbZMecmAa4wQCiUnAZXJjr61omypJGfDrySZZftbze_ZDywUHpYuZYoSe7mLygSzTOyZlv42Ygan73FuDhKJ2hjeqlqZSojkrEC0p3WnkGjRpJNJXg94Xg0VE6DhHkCilqNsmo1CVwEaTPJMrJjuktMbb-UMu9C6Wvff9RKXzc2Y2x9QBtjRskQJTe85kkyPlYafkc2eMrPXj3wfHz9dj_eIejuLt_Slr6Gf1IWUd-ssyecBitJKLWnBphBatbEpZGaPLumpbzio-9-W2Xnz4uj4ugoUVem7yop9hnG5ksonmdYJEOTBCHHK-xafx_HtyfvmmECGNfjmtENLoxhWWFP8BauVq7A

http://www91.zippyshare.com/d/3DQt6MBb/.../WorkingSoftware.exe

http://www113.zippyshare.com/d/AhVdSYiR/.../WorkingSoftware.exe

http://download1995.mediafire.com/178ope0gbjug/.../WorkingSoftware.exe

http://www109.zippyshare.com/d/3sHxulEA/.../WorkingSoftware.exe

http://www82.zippyshare.com/d/wlol06lV/.../WorkingSoftware.exe

http://www67.zippyshare.com/d/H7SMrGP7/.../WorkingSoftware.exe

http://www67.zippyshare.com/d/H7SMrGP7/.../WorkingSoftware.exe

http://www82.zippyshare.com/d/wlol06lV/.../WorkingSoftware.exe

http://www109.zippyshare.com/d/3sHxulEA/.../WorkingSoftware.exe

http://www109.zippyshare.com/d/3sHxulEA/.../WorkingSoftware.exe

http://www113.zippyshare.com/d/AhVdSYiR/.../WorkingSoftware.exe

http://www109.zippyshare.com/d/3sHxulEA/.../WorkingSoftware.exe

http://www14.zippyshare.com/d/c88pUgZR/.../WorkingSoftware.exe

http://www65.zippyshare.com/d/AkK8IMTI/.../WorkingSoftware.exe

http://www82.zippyshare.com/d/wlol06lV/.../WorkingSoftware.exe

http://www105.zippyshare.com/d/lR91d1IK/.../WorkingSoftware.exe

http://www65.zippyshare.com/d/AkK8IMTI/.../WorkingSoftware.exe

http://www82.zippyshare.com/d/wlol06lV/.../WorkingSoftware.exe

http://www67.zippyshare.com/d/H7SMrGP7/.../WorkingSoftware.exe

http://www65.zippyshare.com/d/AkK8IMTI/.../WorkingSoftware.exe

http://www82.zippyshare.com/d/wlol06lV/.../WorkingSoftware.exe

https://storage.jumpshare.com/.../Knk-GGhEVgyNwfX_JRQGyLSaqFdks6M3Y_KSEScTAOnma9cbAlOmVYhGFgC0_qnYKVMgLRkcAJ8v4dEMD_M7aQ

http://www65.zippyshare.com/d/AkK8IMTI/.../WorkingSoftware.exe

http://www82.zippyshare.com/d/wlol06lV/.../WorkingSoftware.exe

http://www82.zippyshare.com/d/wlol06lV/.../WorkingSoftware.exe

http://www105.zippyshare.com/d/lR91d1IK/.../WorkingSoftware.exe

http://www65.zippyshare.com/d/AkK8IMTI/.../WorkingSoftware.exe

http://www14.zippyshare.com/d/c88pUgZR/.../WorkingSoftware.exe

https://storage.jumpshare.com/.../yjyNR1CmyLybxJz6U3jbm9ijnantTi_2IQ_9wMEMnGJHSlPKXF0vLUT7mAba8RiOmiRPIc_2dTqeibVyOKP7eA

Latest 30 of 74 download URLs

Scan workingsoftware.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.