home

oculuscompatcheck.exe

Oculus VR, LLC

This is a setup program which is used to install the application. The file has been seen being downloaded from oculus.us5.list-manage.com and multiple other hosts.
Publisher:
Oculus VR, LLC  (signed and verified)

MD5:
89d9f88dfb89caaeda8ae1684e425528

SHA-1:
4b64fbec7a0208d872965b469164e944b91030d8

SHA-256:
a424c1b68ff74d4b1ecfab2cfa0fd4990d8cb02e20fc723eb1ae5a2fe58ce19c

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
11/15/2024 3:25:17 PM UTC  (today)

File size:
4.9 MB (5,131,688 bytes)

File type:
Executable application (Win32 EXE)

Language:
English (United States)

Common path:
C:\users\{user}\downloads\oculuscompatcheck.exe

Digital Signature
Signed by:
Oculus VR, LLC

Authority:
DigiCert Inc

Valid from:
5/20/2015 7:00:00 PM

Valid to:
3/7/2018 6:00:00 AM

Subject:
CN="Oculus VR, LLC", O="Oculus VR, LLC", L=Menlo Park, S=California, C=US

Issuer:
CN=DigiCert SHA2 Assured ID Code Signing CA, OU=www.digicert.com, O=DigiCert Inc, C=US

Serial number:
04176FD7B052E62F80EB9A520409C401

File PE Metadata
Compilation timestamp:
12/29/2015 5:29:55 PM

OS version:
5.1

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
12.0

CTPH (ssdeep):
98304:0ZRT7jmVs4w/buAOJnrWGsrgHB/2VdslrRaGujgf1rhHigm6U3g:UZjmGJOVDd2VOpMRkiVU

Entry address:
0xD15DB0

Entry point:
60, BE, 00, D0, C4, 00, 8D, BE, 00, 40, 7B, FF, 57, 83, CD, FF, EB, 10, 90, 90, 90, 90, 90, 90, 8A, 06, 46, 88, 07, 47, 01, DB, 75, 07, 8B, 1E, 83, EE, FC, 11, DB, 72, ED, B8, 01, 00, 00, 00, 01, DB, 75, 07, 8B, 1E, 83, EE, FC, 11, DB, 11, C0, 01, DB, 73, 0B, 75, 28, 8B, 1E, 83, EE, FC, 11, DB, 72, 1F, 48, 01, DB, 75, 07, 8B, 1E, 83, EE, FC, 11, DB, 11, C0, EB, D4, 01, DB, 75, 07, 8B, 1E, 83, EE, FC, 11, DB, 11, C9, EB, 52, 31, C9, 83, E8, 03, 72, 11, C1, E0, 08, 8A, 06, 46, 83, F0, FF, 74, 75, D1, F8, 89...
 
[+]

Entropy:
7.8804

Packer / compiler:
UPX 2.90LZMA

Code size:
4.8 MB (5,017,600 bytes)

The file oculuscompatcheck.exe has been seen being distributed by the following 20 URLs.

http://oculus.us5.list-manage.com/.../click?u=88dbd06829e35d5cbf84bbc2e&id=b436d0da47&e=0f9e5841f6

q=http://ocul.us/compat-tool&redir_token=p1Vs1jz7diCLnJqcTmbixi0umU18MTQ1MjQ1MDUxN0AxNDUyMzY0MTE3

q=http://ocul.us/compat-tool&redir_token=7GvFFtx7DwSagI8YAqRpPSXUCUF8MTQ1MjM4NDYyMkAxNDUyMjk4MjIy

q=http://ocul.us/compat-tool&redir_token=wlbwl0tHzGTCWbCiiVb9790CL5p8MTQ1MjcxNjQzM0AxNDUyNjMwMDMz

q=http://ocul.us/compat-tool&redir_token=s-KUIpMkA_C2ZARQIHwvvZi0nLd8MTQ1MjQzNDI1MUAxNDUyMzQ3ODUx

q=http://ocul.us/compat-tool&redir_token=QaceIpxYsdJA_JLi_qurgWE7vWt8MTQ1MjUwNTA3M0AxNDUyNDE4Njcz

q=http://ocul.us/compat-tool&redir_token=LNUA3PK4Uzb-1C-lYlsNDC_V1aN8MTQ1MjQ2Mjg1OUAxNDUyMzc2NDU5

q=http://ocul.us/compat-tool&redir_token=Uw6Lw9gHF1rHrzOblKXcceWGFrV8MTQ1MjUwOTQ4OUAxNDUyNDIzMDg5

http://download.pcgameshardware.de/asset/binaries/2016/.../OculusCompatCheck.exe

http://lb.cdn.m6web.fr/d/c/a/b90b9b457d5950922642ede93dc2481c/568e9d60/soft/.../oculus-rift-compatibility-check_1-0-0-150206_fr_432705.exe

https://ocul.us/compat-tool

q=http://ocul.us/compat-tool&redir_token=vWkWevPm9h8r0sK9r2cDOf9-JBR8MTQ1Mjk2NzY4OEAxNDUyODgxMjg4

https://securecdn.oculus.com/binaries/.../?id=924364547647758&access_token=OC|1196467420370658|

http://lb.cdn.m6web.fr/d/c/a/3cf44f5c4d490397660a31ea84c4fc9a/569bb2bc/soft/.../oculus-rift-compatibility-check_1-0-0-150206_fr_432705.exe

q=http://ocul.us/compat-tool&redir_token=YpD8RCWOblxeOZvP3viqIlDKQEt8MTQ1MzMzODE5NEAxNDUzMjUxNzk0

http://oculus.us5.list-manage.com/.../click?u=88dbd06829e35d5cbf84bbc2e&id=b436d0da47&e=0c7c2fd13d

http://oculus.us5.list-manage.com/.../click?u=88dbd06829e35d5cbf84bbc2e&id=b436d0da47&e=bfd2b22634

http://ocul.us/compat-tool

https://www2.oculus.com/download_app?id=890809851008541

http://dl.cdn.chip.de/downloads/.../OculusCompatCheck.exe

Scan oculuscompatcheck.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.