home

rufus-1.4.12.exe

Rufus

Akeo Consulting

This is a setup program which is used to install the application. The file has been seen being downloaded from onedrive.live.com and multiple other hosts.
Publisher:
Akeo Consulting (http://akeo.ie)  (signed by Akeo Consulting)

Product:
Rufus

Version:
1.4.12.535

MD5:
b3d8190e1b90aa01904354bf82b248de

SHA-1:
1dd5e47a7d8c49131340f7d6fe006298f82850fb

SHA-256:
cf6ef948cb06222b8dfc78148adfe1b6b231c33bfda18611227b71cf0acda6f6

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
11/24/2024 3:11:28 AM UTC  (today)

File size:
625.4 KB (640,424 bytes)

Product version:
1.4.12.535

Copyright:
© 2011-2014 Pete Batard (GPL v3)

Trademarks:
http://www.gnu.org/copyleft/gpl.html

Original file name:
rufus.exe

File type:
Executable application (Win32 EXE)

Language:
Language Neutral

Common path:
C:\users\{user}\downloads\rufus-1.4.12.exe

Digital Signature
Signed by:
Akeo Consulting

Authority:
COMODO CA Limited

Valid from:
11/11/2012 4:00:00 PM

Valid to:
11/12/2017 3:59:59 PM

Subject:
CN=Akeo Consulting, O=Akeo Consulting, STREET="24, Grey Rock", L=Milford, S=Co. Donegal, PostalCode=Co. Donegal, C=IE

Issuer:
CN=COMODO Code Signing CA 2, O=COMODO CA Limited, L=Salford, S=Greater Manchester, C=GB

Serial number:
47D73D146614770CB3DAAF5502C48D9C

File PE Metadata
Compilation timestamp:
11/9/2014 12:05:31 PM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
2.23

CTPH (ssdeep):
12288:8EHFpW8T708AVyMuSDs9eBcbXZ6mRoajl3WeIEimzOAGQUTtSsRbGoS:LFM85AVyMuhDJ7RoQ3qczQzQsR

Entry address:
0x18B1C0

Entry point:
60, BE, 15, 70, 4F, 00, 8D, BE, EB, 9F, F0, FF, 57, 89, E5, 8D, 9C, 24, 80, C1, FF, FF, 31, C0, 50, 39, DC, 75, FB, 46, 46, 53, 68, D6, 95, 18, 00, 57, 83, C3, 04, 53, 68, A4, 41, 09, 00, 56, 83, C3, 04, 53, 50, C7, 03, 03, 00, 02, 00, 90, 90, 90, 90, 90, 55, 57, 56, 53, 83, EC, 7C, 8B, 94, 24, 90, 00, 00, 00, C7, 44, 24, 74, 00, 00, 00, 00, C6, 44, 24, 73, 00, 8B, AC, 24, 9C, 00, 00, 00, 8D, 42, 04, 89, 44, 24, 78, B8, 01, 00, 00, 00, 0F, B6, 4A, 02, 89, C3, D3, E3, 89, D9, 49, 89, 4C, 24, 6C, 0F, B6, 4A...
 
[+]

Entropy:
7.9600  (probably packed)

Code size:
596 KB (610,304 bytes)

The file rufus-1.4.12.exe has been seen being distributed by the following 50 URLs.

https://onedrive.live.com/download.aspx?cid=A73D1FDDA439F430&authKey=!ANVWIrye-3oMqwI&resid=A73D1FDDA439F430!188599&ithint=.exe

https://mega.nz/temporary/.../RIZyWDSR

http://download1127.mediafire.com/2xhl7fuqakdg/.../rufus-1.4.12.exe

http://download1438.mediafire.com/ri9h1rc6z4gg/.../rufus-1.4.12.exe

http://s7622.chomikuj.pl/File.aspx?e=srlh_Ro0NHGMtIoVtKtQVLOy25D_wE7GdLmlO7BOl271Jo7LtLgCXWwxbRqR99hX6daOFusqqu1Vd2-qMSPc15sWh_u-63KDiPk4Vns39qrv1s7LzNyXzBGnYnfUwYqKjxwBrhIBaf1RRMYtMHBAcA&pv=2

about:internet

ftp://hp:diagnostics@serviceftp.wxc.com/rufus-1.4.12.exe

http://download2035.mediafire.com/c4cyhfffgaag/.../rufus-1.4.12.exe

http://cdndownloadpls.com/dl/?z=1060&name=Rufus&file=http://rufus.akeo.ie/.../rufus-1.4.12.exe

https://docs.google.com/uc?id=0Bx4OkyT53TrSdGtLWkkzaU1SV28&export=download

https://doc-0c-7c-docs.googleusercontent.com/docs/securesc/2dobu61c0iqp9a80481qmbe3td36mqee/6bbreqke7lcb51s74u0rjjotp8fcgnp5/1432555200000/.../04712622603462908479/0BwhisA7TkYsbSFBVb1R6Z2kxVWM?e=download

http://adf.ly/Z=DUJGoedlH5RiwMcxz4oCvNLu3EJT1LZznVVnzZL1mJF3rLZzWR8WuYavWxUmvbZ3G9

http://www14.uptobox.com/d/.../rufus-1.4.12.exe

http://s7622.chomikuj.pl/File.aspx?e=srlh_Ro0NHGMtIoVtKtQVLOy25D_wE7GdLmlO7BOl24JRsp2IEuDCJhpIi1OGXdS1nR-1arHjqJHrQtrYHDWdcAQHUUUexwZhzhlzUjfHsW9NI02SWFGQTcKBkk9mvYidl248IZWB0yoFokrc1mjnw&pv=2

http://www14.uptobox.com/d/.../rufus-1.4.12.exe

http://download1438.mediafire.com/tbqtdotdw6ug/.../rufus-1.4.12.exe

https://doc-04-c0-docs.googleusercontent.com/docs/securesc/ha0ro937gcuc7l7deffksulhg5h7mbp1/lodo67i0c10neoqaa3fe6f4c69kpcj5o/1476410400000/05039535581100507171/.../0B8TVqIVWOXolOEpMcTdJRllOSnc?e=download

https://doc-08-58-docs.googleusercontent.com/docs/securesc/ha0ro937gcuc7l7deffksulhg5h7mbp1/3gjj9ni6c1go8vfvo4bm8o7to10raic5/1472637600000/08734439194759869024/.../0Bx4OkyT53TrSdGtLWkkzaU1SV28?e=download

http://www.mysysadmintips.com/-downloads-/Windows/.../rufus-1.4.12.exe

http://s7622.chomikuj.pl/File.aspx?e=srlh_Ro0NHGMtIoVtKtQVLOy25D_wE7GdLmlO7BOl25AeuRPdl-02p9yAP7S0-LMrFvs9G-Mq0w2slx0u46v0Xg5ViwB9C9cvGWwATKJFgGdIIxyN4wp1AFO-HrjWZsmnlpKXZshTK2clJtMEGvxSQ&pv=2

https://docs.google.com/uc?authuser=0&id=0Bx4OkyT53TrSdGtLWkkzaU1SV28&export=download

http://www14.uptobox.com/d/.../rufus-1.4.12.exe

http://s7622.chomikuj.pl/File.aspx?e=srlh_Ro0NHGMtIoVtKtQVLOy25D_wE7GdLmlO7BOl24soohx1ZmU0gYz_RDnX1HMtz7vuIjDAieY3aGF2amynjlnb4oDjzmVLKKI98qKp-FPBfrSFKIC89EJb6ETE2gWGlLkf9FNSArfdlBHiqjx_g&pv=2

http://bayanbox.ir/download/.../rufus-1.4.12.exe

http://58.65.128.8:809/Softwares (R - Z)/Windows 7 Ultimate SP1 X86 X64 16in1 OEM ESD en-US Jan 2015/.../rufus-1.4.12.exe

http://s7622.chomikuj.pl/File.aspx?e=srlh_Ro0NHGMtIoVtKtQVLOy25D_wE7GdLmlO7BOl24sPqiVML-eatyIRWVh-MwNWIhPFMqokDZjUB2EwQQpk6crBgY9dgL2CYjgmRAtS4znc03cNgFo8t0M6msTyvXrJ43hM2mhalsBwbnrKDJPHQ&pv=2

http://s7622.chomikuj.pl/File.aspx?e=srlh_Ro0NHGMtIoVtKtQVLOy25D_wE7GdLmlO7BOl270dG3Co5paUwXs__FcrUW1vibpZKbVOaFbEGn8llMxK8zMDsJ5NpBk2jG_RVmLeZrG0TCV0tBeAFpWRKMcG7zfw1HJMpqELF6Ld3oN8tJuLA&pv=2

http://s7622.chomikuj.pl/File.aspx?e=srlh_Ro0NHGMtIoVtKtQVLOy25D_wE7GdLmlO7BOl25qMUpyULeXy4Acrl_B8vC1PYsrbXnl8z5qXZVmF0qq5zIZksmnJ6srUCJJgSm6dCKLkamqeKhpS6pUneTx_7mhI7XawifsuiRzShRPkYLGVA&pv=2

http://58.65.128.10:809/Softwares (R - Z)/Windows 7 Ultimate SP1 X86 X64 16in1 OEM ESD en-US Jan 2015/.../rufus-1.4.12.exe

https://mega.nz/temporary/.../GI9UDD4a

Latest 30 of 53 download URLs

Scan rufus-1.4.12.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.