home

rufus_v1.4.3.exe

Rufus

Akeo Consulting (http://akeo.ie)

This is a setup program which is used to install the application. The file has been seen being downloaded from www.cdrinfo.pl.
Publisher:
Akeo Consulting (http://akeo.ie)

Product:
Rufus

Version:
1.4.3.385

MD5:
fa8a021d954800f9d49945d1bf3dffe6

SHA-1:
a0d385431ac397ba4eca4c74a89c0eb3ddc5dc67

SHA-256:
777f7d9ddad9ac3ae152e4b35b19985aa30748a6cbeacdc00c55d598213ece32

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
12/26/2024 6:12:55 AM UTC  (today)

File size:
1.7 MB (1,769,904 bytes)

Product version:
1.4.3.385

Copyright:
© 2011-2014 Pete Batard (GPL v3)

Trademarks:
http://www.gnu.org/copyleft/gpl.html

Original file name:
rufus.exe

File type:
Executable application (Win32 EXE)

Common path:
C:\users\{user}\downloads\rufus_v1.4.3.exe

File PE Metadata
Compilation timestamp:
1/21/2014 11:53:09 AM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
2.23

CTPH (ssdeep):
12288:ua37hMRRCNvi5zuE8FV0voaE6/U3rkZmeWu2oHufZ6+9moS1pW:5cU1inQqvI2U3rqh92oHux6+9Y

Entry address:
0x1478A0

Entry point:
F2, 1C, E7, 80, D0, BF, 0F, AF, F6, 21, F6, 8D, 05, 4D, 34, 48, C0, 3B, CA, 72, 0A, FF, C3, F7, C2, 5D, AC, 68, 77, 8B, D3, EB, 07, C7, C5, 81, B2, 71, CC, 47, EB, 09, 69, F9, 10, 9C, 11, 18, F2, 85, EB, 8B, CD, E8, 23, 00, 00, 00, 2B, EA, 20, F9, 4F, 69, FB, 0D, 9F, 02, EF, 74, 0A, 8A, F6, 86, F0, C7, C0, 31, 52, BC, C7, 2B, DF, C7, C2, B4, BE, 70, 0A, 8A, D0, FF, C2, 0F, AF, CD, 87, C3, 86, D3, C7, C7, 18, 5F, FF, 69, F3, 8B, FD, 0F, AF, F9, 8D, 2D, 12, AE, 10, A5, FF, CF, 84, D6, 21, F2, 0F, AF, CE, 41...
 
[+]

Code size:
540 KB (552,960 bytes)

The file rufus_v1.4.3.exe has been seen being distributed by the following URL.

http://www.cdrinfo.pl/download.php?filename=rufus_v1.4.3.exe&id=2100144143&baza=soft

Scan rufus_v1.4.3.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.