home

rufus_v1.3.4.exe

Rufus

Akeo Consulting

This is a setup program which is used to install the application. The file has been seen being downloaded from download1404.mediafire.com and multiple other hosts.
Publisher:
Akeo Consulting (http://akeo.ie)  (signed by Akeo Consulting)

Product:
Rufus

Version:
1.3.4.270

MD5:
89cfcf547253fda647b6434dc6cfd9db

SHA-1:
56d0506dd558e91410cf196fd5d86c3946881741

SHA-256:
9d117aecb087465767720904fee847e5d0ce7f3d284ba20f3e95070582e743e8

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
11/23/2024 11:38:58 PM UTC  (a few moments ago)

File size:
458.9 KB (469,936 bytes)

Product version:
1.3.4.270

Copyright:
© 2011-2013 Pete Batard (GPL v3)

Trademarks:
http://www.gnu.org/copyleft/gpl.html

Original file name:
rufus.exe

File type:
Executable application (Win32 EXE)

Common path:
C:\users\{user}\downloads\rufus_v1.3.4.exe

Digital Signature
Signed by:
Akeo Consulting

Authority:
COMODO CA Limited

Valid from:
11/12/2012 1:00:00 AM

Valid to:
11/13/2017 12:59:59 AM

Subject:
CN=Akeo Consulting, O=Akeo Consulting, STREET="24, Grey Rock", L=Milford, S=Co. Donegal, PostalCode=Co. Donegal, C=IE

Issuer:
CN=COMODO Code Signing CA 2, O=COMODO CA Limited, L=Salford, S=Greater Manchester, C=GB

Serial number:
47D73D146614770CB3DAAF5502C48D9C

File PE Metadata
Compilation timestamp:
7/15/2013 8:05:26 PM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
2.23

CTPH (ssdeep):
6144:1UUg/P5Gm8ne/WnoQ1SG5PGmgOIZOMj7cgtLOkkmun3Oat6U/Zdyx6m637nRoSH:mUg/Rv6o9GPhg97cFkze+aQUKAm6RoSH

Entry address:
0xDC900

Entry point:
60, BE, 15, 20, 47, 00, 8D, BE, EB, EF, F8, FF, 57, 89, E5, 8D, 9C, 24, 80, C1, FF, FF, 31, C0, 50, 39, DC, 75, FB, 46, 46, 53, 68, 48, A2, 0D, 00, 57, 83, C3, 04, 53, 68, E5, A8, 06, 00, 56, 83, C3, 04, 53, 50, C7, 03, 03, 00, 02, 00, 90, 90, 90, 90, 90, 55, 57, 56, 53, 83, EC, 7C, 8B, 94, 24, 90, 00, 00, 00, C7, 44, 24, 74, 00, 00, 00, 00, C6, 44, 24, 73, 00, 8B, AC, 24, 9C, 00, 00, 00, 8D, 42, 04, 89, 44, 24, 78, B8, 01, 00, 00, 00, 0F, B6, 4A, 02, 89, C3, D3, E3, 89, D9, 49, 89, 4C, 24, 6C, 0F, B6, 4A...
 
[+]

Entropy:
7.9362  (probably packed)

Code size:
432 KB (442,368 bytes)

The file rufus_v1.3.4.exe has been discovered within the following program.

PE Builder 3.1.10a  by Bart Lagerweij
Publisher's description - “PE Builder helps you build Bart Preinstalled Environment bootable Windows CD-Rom or DVD from the original Windows XP or Windows Server 2003 installation/setup CD, very suitable for PC maintenance tasks.”
www.nu2.nu/pebuilder
About 1% of users remove it
 
Powered by Should I Remove It?

The file rufus_v1.3.4.exe has been seen being distributed by the following 31 URLs.

http://download1404.mediafire.com/ahlnyy57co6g/.../rufus_v1.3.4.exe

http://dosen.gufron.com/dl.php?dig.4

http://download1080.mediafire.com/26i01c1043yg/.../rufus_v1.3.4.exe

http://download1066.mediafire.com/e12k12ceaalg/.../rufus_v1.3.4.exe

temp:rufus_v1.3.4(1).exe

http://www.filehorse.com/download/file/.../

http://download1129.mediafire.com/zgw9tv7qbpug/.../rufus_v1.3.4.exe

http://download1129.mediafire.com/5hpp5c9lx3mg/.../rufus_v1.3.4.exe

http://dosen.gufron.com/files/.../rufus_v1.3.4.exe

http://u.to/SFhxBQ

http://www.filehorse.com/download/file/.../

http://download1129.mediafire.com/pvn8c8c80g8g/.../rufus_v1.3.4.exe

http://download1080.mediafire.com/igrkc3yoc1pg/.../rufus_v1.3.4.exe

http://download1129.mediafire.com/xdan7sbodscg/.../rufus_v1.3.4.exe

https://rufus.akeo.ie/.../rufus_v1.3.4.exe

http://download1419.mediafire.com/9kl4u8b99wxg/.../rufus_v1.3.4.exe

http://download1003.mediafire.com/zvzw4cbsxnmg/.../rufus_v1.3.4.exe

http://download953.mediafire.com/vc5h26x3ytfg/.../rufus_v1.3.4.exe

http://download1096.mediafire.com/98jarh0a09og/.../rufus_v1.3.4.exe

http://www.filehorse.com/download/file/.../

http://download2024.mediafire.com/wynm6gd0m0zg/.../rufus_v1.3.4.exe

temp:rufus_v1.3.4.exe

http://download1096.mediafire.com/kq1bs6cifdgg/.../rufus_v1.3.4.exe

http://download1096.mediafire.com/m52gc9agc1fg/.../rufus_v1.3.4.exe

http://download1us.softpedia.com/dl/9e47f86e6d08119fb7794d39d072fc32/52265d36/100208582/software/.../rufus_v1.3.4.exe

https://akeo.googlecode.com/.../rufus_v1.3.4.exe

http://download1us.softpedia.com/dl/b3988b93ce46c0bd41b4bc4e3f97ce96/525996a4/100208582/software/.../rufus_v1.3.4.exe

http://reboot.pro/files/download/.../

http://download1us.softpedia.com/dl/6c7b3a5da42d475f480d01b33a89a971/5227a5b6/100208582/software/.../rufus_v1.3.4.exe

http://download1us.softpedia.com/dl/652561afc104f0d47e447c3912b4ec84/5278d701/100208582/software/.../rufus_v1.3.4.exe

Latest 30 of 31 download URLs

Scan rufus_v1.3.4.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.