home

bru_setup_winntx86.exe

Bulk Rename Utility

TGRMN Software

The program is a setup application that uses the Inno Setup installer. This is installed with Bulk Rename Utility 2.7.1.2. The file has been seen being downloaded from gsf-cf.softonic.com and multiple other hosts.
Publisher:
TGRMN Software   (signed by TGRMN Software)

Product:
Bulk Rename Utility

Description:
Bulk Rename Utility Setup

Version:
Bulk Rename Utility

MD5:
65495b5a939ca88a8522dc000f6aba05

SHA-1:
8e64699ff7e312682115c6a9f87ba92e16366b8d

SHA-256:
3f803aaa8bb1a59231a9fb1801aa9fee013a55c957f788f44196857b3bc2b0e4

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
11/27/2024 7:32:03 AM UTC  (today)

File size:
957 KB (979,992 bytes)

Product version:
2.7.1.1

Copyright:
TGRMN Software

File type:
Executable application (Win32 EXE)

Installer:
Inno Setup

Language:
Language Neutral

Common path:
C:\users\{user}\downloads\bulk rename\bru_setup_winntx86.exe

Digital Signature
Signed by:
TGRMN Software

Authority:
The USERTRUST Network

Valid from:
10/30/2008 2:00:00 AM

Valid to:
10/31/2010 1:59:59 AM

Subject:
CN=TGRMN Software, O=TGRMN Software, STREET=-, L=Fullarton, S=SA, PostalCode=-, C=AU

Issuer:
CN=UTN-USERFirst-Object, OU=http://www.usertrust.com, O=The USERTRUST Network, L=Salt Lake City, S=UT, C=US

Serial number:
7826E045820C0B86BA43147BC40F94BD

File PE Metadata
Compilation timestamp:
6/20/1992 1:22:17 AM

OS version:
1.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
2.25

CTPH (ssdeep):
24576:w2UmlTRJvaoBPBalPZZn73jomVW3WHQYp8YaXat:w2ZlTRJiwwlb73jomVgWbaI

Entry address:
0x9A58

Entry point:
55, 8B, EC, 83, C4, C4, 53, 56, 57, 33, C0, 89, 45, F0, 89, 45, DC, E8, 6E, 96, FF, FF, E8, 75, A8, FF, FF, E8, A0, CA, FF, FF, E8, E7, CA, FF, FF, E8, 0E, F3, FF, FF, E8, 75, F4, FF, FF, 33, C0, 55, 68, 0B, A1, 40, 00, 64, FF, 30, 64, 89, 20, 33, D2, 55, 68, D4, A0, 40, 00, 64, FF, 32, 64, 89, 22, A1, 14, C0, 40, 00, E8, 9B, FE, FF, FF, E8, 02, FA, FF, FF, 8D, 55, F0, 33, C0, E8, AC, D0, FF, FF, 8B, 55, F0, B8, E4, CD, 40, 00, E8, 1F, 97, FF, FF, 6A, 02, 6A, 00, 6A, 01, 8B, 0D, E4, CD, 40, 00, B2, 01, B8...
 
[+]

Entropy:
7.9804

Packer / compiler:
Inno Setup v5.x - Installer Maker

Code size:
36.5 KB (37,376 bytes)

The file bru_setup_winntx86.exe has been discovered within the following program.

Bulk Rename Utility 2.7.1.2  by TGRMN Software
Publisher's description - “Bulk Rename Utility is a free file renaming software for Windows. Bulk Rename Utility allows you to easily rename files and entire folders based upon extremely flexible criteria. Bulk Rename Utility is an easy to use file rename program (a.k.a. file renamer).”
www.bulkrenameutility.co.uk
2% remove it
 
Powered by Should I Remove It?

The file bru_setup_winntx86.exe has been seen being distributed by the following 5 URLs.

http://gsf-cf.softonic.com/8e6/469/.../file?SD_used=0&channel=WEB&fdh=no&id_file=20381&instance=softonic_en&type=PROGRAM&Expires=1442301409&Signature=PnvcYubISYgLE6Pwq37qEegFUVq-OARwwa~b0er2aI9keozD9s7VDjF8W-HYDxGOMMkMHb~CEBLa59PBQbsiPerfOaK6WmovZ8~Sl6iCRuAkYNlRMiviK615T4Lpe4QRdJOV6Mj0AyUELEQUJ6coXhYwADxbYbd9PESRMxocHGc_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=BRU_Setup_WinNTx86.exe

http://gsf-cf.softonic.com/8e6/469/.../file?SD_used=0&channel=WEB&fdh=no&id_file=20381&instance=softonic_en&type=PROGRAM&Expires=1463689070&Signature=FsAp~ZepsXfRXEVAtrXB4DTJaT-thkHZjO~o0FTlx4oKVu9I8gJilJ4ra-OOS3mTpTdH9SWAmeMujp6nvy~U~UILYDRVdZCM70RVKv3nTmXflgVB8vAx1wuJNWcMk~riYAjTsNqIwxss7IA7xT9Pmb~hhyLqQvvoRqwnByz6Mr8_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=BRU_Setup_WinNTx86.exe

http://gsf-cf.softonic.com/8e6/469/.../file?SD_used=0&channel=WEB&fdh=no&id_file=20381&instance=softonic_en&type=PROGRAM&Expires=1461184850&Signature=DLBN3YQHYGGZ6555gF5j-HTRgBDeqrITqoT4YmRq3w6-ATdgzjpxpi0jTfm-joJOZKtbc24rO2Ltw4N7HNAzoPiuWbCgDgmmgcM1qwn4oob-6pxqb9WZ-TS1I7co0gXL7uV5zjTNUpd75keqCIiyH7AtZfj91SJRC1Z1~1R572w_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=BRU_Setup_WinNTx86.exe

http://gsf-cf.softonic.com/8e6/469/.../file?SD_used=0&channel=WEB&fdh=no&id_file=20381&instance=softonic_en&type=PROGRAM&Expires=1461451160&Signature=Ew5QLDO~GeYQW7uAaOgc~2ej~HulIrA6~RXX5mgpg9DxVtl-I4nWSX14aAHItVa~k-IJ~dA35D-yJ~-W7Lia0a89PR6JNhwK1801ibD~vQoQD5DxaA-8lS1lFjqOzhSkMKMOM0c1iBgAnoxW1mSZBFs71Rz6iGIdFD07UguL9Rs_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=BRU_Setup_WinNTx86.exe

http://gsf-cf.softonic.com/8e6/469/.../file?SD_used=0&channel=WEB&fdh=no&id_file=20381&instance=softonic_en&type=PROGRAM&Expires=1443719125&Signature=MY-cvkZ~ms~dFYOjTkygzeV5u-zqPrjYILuKyHUhIfkiRXzg4WuOfkYmP0ai4sYOm1ZPyojUohqad0U4zk-vAokD5yCalV8z1~MBdP7VA1qKFg1WHGIvj-rvyp4NtlVwMjZBi40mHBdOLm9HnkTfNdEiN4we4x-jAFhziz4Wy48_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=BRU_Setup_WinNTx86.exe

Scan bru_setup_winntx86.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.