home

furmark_v1.8.2.exe

oZone3D.Net FurMark

oZone3D.Net

The program is a setup application that uses the Inno Setup installer. The file has been seen being downloaded from dw.uptodown.com and multiple other hosts.
Publisher:
oZone3D.Net

Product:
oZone3D.Net FurMark

Description:
oZone3D.Net FurMark Setup

Version:
1.8.2.0

MD5:
b1d2fedfaffa4765b16cf7b0e6668b8d

SHA-1:
7bc1fbc6e453e07707cffc83ff2c13eedff9cd31

SHA-256:
e280486131035eed2d48f8f32eb0aaf53bfe3648edb2a3b3d53d2cd0b9de8faf

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
11/23/2024 10:22:22 AM UTC  (today)

File size:
2.2 MB (2,313,768 bytes)

Product version:
1.8.2.0

File type:
Executable application (Win32 EXE)

Installer:
Inno Setup

File PE Metadata
Compilation timestamp:
6/19/1992 5:22:17 PM

OS version:
1.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
2.25

CTPH (ssdeep):
49152:/2sbpVOuX01ZcyPtpxSSxvePGP9MZTzbYKUK04cLK/V+YXM:esdVrk1ZcyPtpxSSx++SHf5KKV+Yc

Entry address:
0x9B24

Entry point:
55, 8B, EC, 83, C4, C4, 53, 56, 57, 33, C0, 89, 45, F0, 89, 45, DC, E8, A2, 95, FF, FF, E8, A9, A7, FF, FF, E8, D4, C9, FF, FF, E8, 1B, CA, FF, FF, E8, 0E, F3, FF, FF, E8, 75, F4, FF, FF, 33, C0, 55, 68, DB, A1, 40, 00, 64, FF, 30, 64, 89, 20, 33, D2, 55, 68, A4, A1, 40, 00, 64, FF, 32, 64, 89, 22, A1, 14, C0, 40, 00, E8, 9B, FE, FF, FF, E8, 02, FA, FF, FF, 8D, 55, F0, 33, C0, E8, 04, D0, FF, FF, 8B, 55, F0, B8, EC, CD, 40, 00, E8, 53, 96, FF, FF, 6A, 02, 6A, 00, 6A, 01, 8B, 0D, EC, CD, 40, 00, B2, 01, B8...
 
[+]

Packer / compiler:
Inno Setup v5.x - Installer Maker

Code size:
37 KB (37,888 bytes)

The file furmark_v1.8.2.exe has been seen being distributed by the following 12 URLs.

https://dw.uptodown.com/dwn/YQDftrERRxafQ4lBmuf6R1xBkUqVkA-I4mo84KA0v_Zg8stuWOD4vszlt1rr-rfjRTGdDTiGc3xnv7-C5yBVkqSLKfRgJjweLk6L-5mG1Z0dDoey98TXbd_U_F4LnyjR/0nWA7299RVkt_u2-jFre6MiQXKtqWVmwNe5rI1ggLKhM58W9Nak94ND866ROlzeQHr8aLQ1nmPrffJDwzkzbpjT4a6pAkkMIvzJhpqv7eVlQJ8M-fSQWVmcjKC_qag0y/_wK4UYLBlS_f5I5mKPc3gA4l_vU8T14n8DPy9OHLjvIwCREX8r91Vb1gKP_A9lbMKEQRvfxInq90_9K1NsSnS_3w23tFKuLnOIONufJJC5irqc8BEDr7YTqBMnQmi6Oi/.../

http://www.ex.ua/.../4493487

http://gsf-cf.softonic.com/7bc/1fb/.../file?SD_used=0&channel=WEB&fdh=no&id_file=81976&instance=softonic_es&type=PROGRAM&Expires=1446153320&Signature=ALKWSF2x-ICx0vBr7ILF8gD2J6PyCMDs6SoUUkoK61~kdao86TFc~hDGnvsAsH1S4bYl2G32ssKasdpeGBa8cHK-PUxjFhVAzv-cYHCUOLirW0DN-cmB6J613kTZq-u2fQ3Ei8eQ-qfGuBlhEVOVrIqDs~Q11mgf3isp4jESkqE_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=FurMark_v1.8.2.exe

http://gsf-cf.softonic.com/7bc/1fb/.../file?SD_used=0&channel=WEB&fdh=no&id_file=81976&instance=softonic_es&type=PROGRAM&Expires=1473871470&Signature=DmW9NTxVnTCtnVJYYZyqrf9H6d3JfIpmsa3r-r1TBgZ3ECKwqusbDsUgosATpZNGUlALyN1sarGP2WtBAxOs1nW3LDaMy4QleR2IhbQJRVGWAnBGXN4j55p4mGEonH5Y79F7~etD462WHIu1tV26sQDYEP1Zfu6Q7XahU9SX-Lw_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=FurMark_v1.8.2.exe

http://www.geeks3d.com/.../134

http://gsf-cf.softonic.com/7bc/1fb/.../file?SD_used=0&channel=WEB&fdh=no&id_file=81976&instance=softonic_en&type=PROGRAM&Expires=1462111775&Signature=KIKYH7UipWdFa100cmI7lhi2VkJCPQaWOH6aQIIwSLujIbL0WCz~1LOU4UrWVzkciS7jMidggi~0M4ANhiAUmgOd9tMobN0vNce-0ka2E7JAwRQMAw3-WmwziP6~p3pnl57pIIgaI9Qmww~7H0dzHhcCrQgxmfqb2rBcMouRKgk_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=FurMark_v1.8.2.exe

http://www.ex.ua/.../4493487

http://furmark.softonic.com/download-tracker?th=8yS3 KGEYLiw7GKMHzA/trmsvRChbxdrflJq3ZIylWsYf7BWCwPvlSeXCxPflmA7Vhj3/h 9789Qm5ppUOrXoH hCYO/.../Fs5GpTMzPz5Sjt3m3pKTkpTZfcFH80=

http://download2170.mediafire.com/32d235hh4mwg/.../FurMark_v1.8.2.exe

http://downloads.guru3d.com/downloadget.php?id=2523&file=4&evp=baed6e879fbd9b331b409109ea65622b

http://www.geeks3d.com/wp-content/plugins/.../download.php?id=134

http://www.geeks3d.com/downloads/.../FurMark_v1.8.2.exe

Scan furmark_v1.8.2.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.