furmark_1.9.2.exe

FurMark

Geeks3D.com

The program is a setup application that uses the Inno Setup installer. The file has been seen being downloaded from gsf-cf.softonic.com and multiple other hosts.
Publisher:
Geeks3D.com

Product:
FurMark

Description:
FurMark Setup

Version:
1.9.2.0

MD5:
1d06be2f876b2d08bca8e402493b80c3

SHA-1:
70882e9638014ad3f19e5c50e54d971672b11757

SHA-256:
00246b09ca4764bd467a01f0d6e584f2112fbf620a633321b697faa7b573303c

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
4/25/2024 12:20:41 PM UTC  (today)

File size:
3.7 MB (3,931,189 bytes)

Product version:
1.9.2.0

File type:
Executable application (Win32 EXE)

Installer:
Inno Setup

Common path:
C:\users\{user}\downloads\furmark_1.9.2.exe

File PE Metadata
Compilation timestamp:
6/20/1992 12:22:17 AM

OS version:
1.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
2.25

CTPH (ssdeep):
98304:Q5KihI5l2toJZVkrF793NKU0glwG5P6W7/crvQKh8kiRgJ:2I50QZVkrF53NhlnPLsvdGkygJ

Entry address:
0x9C40

Entry point:
55, 8B, EC, 83, C4, C4, 53, 56, 57, 33, C0, 89, 45, F0, 89, 45, DC, E8, 86, 94, FF, FF, E8, 8D, A6, FF, FF, E8, 1C, A9, FF, FF, E8, 53, C9, FF, FF, E8, 9A, C9, FF, FF, E8, C9, F2, FF, FF, E8, 30, F4, FF, FF, 33, C0, 55, 68, FC, A2, 40, 00, 64, FF, 30, 64, 89, 20, 33, D2, 55, 68, C5, A2, 40, 00, 64, FF, 32, 64, 89, 22, A1, 14, C0, 40, 00, E8, 96, FE, FF, FF, E8, C9, FA, FF, FF, 8D, 55, F0, 33, C0, E8, 83, CF, FF, FF, 8B, 55, F0, B8, E8, CD, 40, 00, E8, 32, 95, FF, FF, 6A, 02, 6A, 00, 6A, 01, 8B, 0D, E8, CD...
 
[+]

Packer / compiler:
Inno Setup v5.x - Installer Maker

Code size:
37 KB (37,888 bytes)

The file furmark_1.9.2.exe has been seen being distributed by the following 6 URLs.

http://gsf-cf.softonic.com/708/82e/.../file?SD_used=0&channel=WEB&fdh=no&id_file=81976&instance=softonic_de&type=PROGRAM&Expires=1477616057&Signature=Pqp5RWhXUFM6QIziny8fzAwdvzS1iH-DgOxy3J2tbn39B1E2m2q1MwuwLKV34PehqSCBabNxD00hDMZ8~8TEH9adtNZAbTEtvYOK5q4LOp8oxAXLJ7ySjRqrfDRPYnkWrE~e0unyd6s3E7FBQ1wLnEGbEhrZjg3mKnOs3NJqA70_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=FurMark_1.9.2.exe

http://furmark.de.softonic.com/download-tracker?th=1/6CH9aeXedl4L8u BHNJXWTW LP1LFlnGQpxqjlxANuQlqo9r4vkHI6iLIuhAJNGh5g1/mY4UPrVVzv8/sWZ4M9wmA4Jmf1VVY0s1LMo7/rmpTVP2qKN/9m pvjxCc1ZejUGNmBzfeLkW0/miCZK2yiGYpUoOM4yFa9QqJe14QQrRGvwoA u6SSIxI98ZjcBB4OQwbvmIY3TQWGtVvbt2 19Iec2lTqqOCL5mzd/Eb/E0uNSwmkCNU7F6MLlVFJT93 mMtVOjhvS2U4trvd2e 88Qhwwctn8Hxfe9c1sFi9rYRfKA7RYtLkfRd06/7KMMoZWApSE4fO76iQuwuFJ6CrdUFJKn7o6SHxXrJNW07RXnLSScmpsNenmxU3spm93TOKK7PYAxJ6KZfx9TmzH5YonVMbzrhtMxnvLBcEwxDM zRmEWusgzx2if1b/.../73QnHm7tHDjUYVHNw6wCEooSmeFaasj0Y3qJIGcwoN YaPFhxq4E kHamtIRo6HAwQMs8CeaBHB7aRJnpPxp5O4D7w3PSLRcFqSNcUNGUU5M7nvTYOzY85h6mM6MpYE4WVia29Mzlmuhy3z7cyWGS1jHJXyBCUOQKMfdenA2cT5gEYtHPxxame5udlGA

Scan furmark_1.9.2.exe - Powered by Reason Core Security