home

rufus-2.2p.exe

Rufus

Akeo Consulting

This is a setup program which is used to install the application. The file has been seen being downloaded from cdn1.eba.gov.tr and multiple other hosts.
Publisher:
Akeo Consulting (http://akeo.ie)  (signed by Akeo Consulting)

Product:
Rufus

Version:
2.2.668

MD5:
6f64037d9c58c856d8bc34ba587e0d21

SHA-1:
3a070ada41b73d6a60fb4f618b73999a867c1adb

SHA-256:
a3420dc71d25c2494b98599dfaa117e5f4519bed6c59b6832547a558c5f40161

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
11/16/2024 11:56:47 AM UTC  (today)

File size:
808.4 KB (827,816 bytes)

Product version:
2.2.668

Copyright:
© 2011-2015 Pete Batard (GPL v3)

Trademarks:
http://www.gnu.org/copyleft/gpl.html

Original file name:
rufus.exe

File type:
Executable application (Win32 EXE)

Language:
Language Neutral

Digital Signature
Signed by:
Akeo Consulting

Authority:
COMODO CA Limited

Valid from:
11/12/2012 2:00:00 AM

Valid to:
11/13/2017 1:59:59 AM

Subject:
CN=Akeo Consulting, O=Akeo Consulting, STREET="24, Grey Rock", L=Milford, S=Co. Donegal, PostalCode=Co. Donegal, C=IE

Issuer:
CN=COMODO Code Signing CA 2, O=COMODO CA Limited, L=Salford, S=Greater Manchester, C=GB

Serial number:
47D73D146614770CB3DAAF5502C48D9C

File PE Metadata
OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
2.25

CTPH (ssdeep):
24576:sweokO7ORvJf0yrK6fW4lKcqmg7eZc/M5+b:9PqfHrKB7ekM54

Entry address:
0x2105E0

Entry point:
60, BE, 15, 30, 55, 00, 8D, BE, EB, DF, EA, FF, 57, 89, E5, 8D, 9C, 24, 80, C1, FF, FF, 31, C0, 50, 39, DC, 75, FB, 46, 46, 53, 68, 8A, E7, 20, 00, 57, 83, C3, 04, 53, 68, C4, D5, 0B, 00, 56, 83, C3, 04, 53, 50, C7, 03, 03, 00, 02, 00, 90, 90, 90, 90, 90, 55, 57, 56, 53, 83, EC, 7C, 8B, 94, 24, 90, 00, 00, 00, C7, 44, 24, 74, 00, 00, 00, 00, C6, 44, 24, 73, 00, 8B, AC, 24, 9C, 00, 00, 00, 8D, 42, 04, 89, 44, 24, 78, B8, 01, 00, 00, 00, 0F, B6, 4A, 02, 89, C3, D3, E3, 89, D9, 49, 89, 4C, 24, 6C, 0F, B6, 4A...
 
[+]

Code size:
764 KB (782,336 bytes)

The file rufus-2.2p.exe has been seen being distributed by the following 46 URLs.

http://cdn1.eba.gov.tr/.../rufus-2.2.exe

http://blogattach.naver.net/8f1a9324340405b2957e192512f284fd5201fb73/20151103_111_blogfile/.../rufus-2.2p.exe

ftp://support.ptsap.co.id/.../rufus-2.2.exe

http://10.109.109.3/main.php/.../2310

https://downloader.disk.yandex.ru/disk/38fabbc805938cd1386bc32b0ba385112333447199098c81316ea303b9e4900f/568fa514/2vn0oKzmbKhZ3GQ4ocBjdCf_dQJtVhYx3aOJWef1ZL38znP8XFPg4BfXwroncGvs9i0GJrRO3ccrd81N9UokhQ==?uid=0&filename=Rufus.exe&disposition=attachment&hash=mDA/.../x-msdownload&fsize=827816&hid=b74cbe92cc623c3e99c1cdf0304a350d&media_type=executable&tknv=v2

https://mega.nz/temporary/.../qIZWxLZZ

https://doc-10-2g-docs.googleusercontent.com/docs/securesc/5giflni3c3bh1dosg85jju6d95b5fk0e/ve3n9clr85cinm8802idf1pd2pbemdvr/1475301600000/.../06448827308977322541/0ByVhTcKWB9XCVnpoS1JIbU95OXc?e=download

https://doc-08-b4-docs.googleusercontent.com/docs/securesc/h2d8jlaj2urdgqjfmrd2grf5qaed8ctu/8a8jf03qvir73g8e7u5qlbfrm4d5di05/1441648800000/16510584031996879901/.../0Bzp0Og2sIJCNWUxwb0RSS1JqclE?e=download

http://uukoon.tistory.com/.../cfile6.uf@262E2D3455BAA10623318E.exe

http://www.eba.gov.tr/out.php?u=http://cdn1.eba.gov.tr/.../rufus-2.2.exe

http://freeroute.tistory.com/.../cfile10.uf@265E293B563A0B46111C6C.exe

http://download003.fshare.vn/dl/.../rufus-2.2p.exe

http://download003.fshare.vn/dl/.../rufus-2.2p.exe

http://dc743.4shared.com/download/.../rufus-22.exe

http://cdn.dobreprogramypldownloadfiles.com/c?x=3xDnoVcz4Nc44T/ryGDwn64hUAwHL9nSHNhF1RTFbW8=&c= dIYjvEzuMqMmozBPgA6On1KMS5JAW0b/ blO2wQg9b74GVs0u3/ZwY6 BJ4Nhkf65JdAjgQIUHdPHlMtGiUAUQCn ejevrg/Oj 2VPfG7I1Jc/7jCCh4iLrpYwPtgj60fTTvX0flet fbGebhjS1g==&fallback_url=http://rufus.akeo.ie/.../rufus-2.2.exe&downloadAs=Rufus(41921)-dp.exe

https://mega.nz/persistent/.../4cNzXIhD

http://download003.fshare.vn/dl/.../rufus-2.2p.exe

https://mega.nz/persistent/.../flJyBYaL

https://docs.google.com/uc?authuser=0&id=0B029-f_vig2lSTlXMzcxTFMydjA&export=download

https://ams1.justbeamit.com:8443/download?token=ze2wp

http://www.techspot.com/downloads/downloadnow/.../?evp=3589aea352ea3d647eb267168f709d7b&file=1

temp:rufus-2.2.exe

https://mega.nz/temporary/.../4cNzXIhD

http://software.thaiware.com/download_url.php?id=1999

http://blogattach.naver.net/8f1a9324340405b2987c1d2f16f08ff35d02fa90/20151103_111_blogfile/.../rufus-2.2p.exe

https://downloader.disk.yandex.ua/disk/0d734963729561b5c3d14a60cc6f47614d459b962f3417a5f5bb18df86b4681c/56ea1241/2vn0oKzmbKhZ3GQ4ocBjdCf_dQJtVhYx3aOJWef1ZL38znP8XFPg4BfXwroncGvs9i0GJrRO3ccrd81N9UokhQ==?uid=0&filename=Rufus.exe&disposition=attachment&hash=mDA/.../x-msdownload&fsize=827816&hid=b74cbe92cc623c3e99c1cdf0304a350d&media_type=executable&tknv=v2

http://www.filehorse.com/download/file/.../

http://www.programosy.pl/.../pobierz,rufus,2.html

temp:rufus-2.2p.exe

http://www.techspot.com/downloads/downloadnow/.../?evp=e49b810a8ed42d6ca9a56614938d6c8c&file=1

Latest 30 of 46 download URLs

Scan rufus-2.2p.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.