home

fixmsi.exe

FixMSI

Checho's Blog - http//geeks.ms/blogs/checho

Publisher:
Checho's Blog - http//geeks.ms/blogs/checho

Product:
FixMSI

Description:
Fix Windows Installer Service

Version:
1.0.0.0

MD5:
c34c4de7b0e52631faa6eaa8d2674ee9

SHA-1:
232612465707aa0cf0d2d6dd8870f7d0abd71837

SHA-256:
c120c173b791f3f1232e06a569d7e0be3bb59c43d3467a28b3235f9d50f6fa13

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
5/17/2024 1:29:36 AM UTC  (today)

File size:
571.5 KB (585,216 bytes)

Product version:
1.0.0.0

Copyright:
Copyright © 2011 Sergio Calderón (Checho)

Original file name:
FixMSI

File type:
Executable application (Win32 EXE)

Language:
Spanish (Colombia)

Common path:
C:\users\{user}\downloads\anterior\dns\programas\windows\fixmsi.exe

File PE Metadata
Compilation timestamp:
9/3/2011 10:29:25 PM

OS version:
5.1

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
10.0

CTPH (ssdeep):
12288:QzrPdvdRT4fdCB8ejJNzZgSVVwS+CG61rTXqhz2:QfPdvdRUl7IzSSVxXM

Entry address:
0x2D0A9

Entry point:
E9, D2, BB, 00, 00, E9, AD, 32, 00, 00, E9, 88, B7, 01, 00, E9, D7, 3F, 00, 00, E9, DE, 2A, 00, 00, E9, A9, B7, 04, 00, E9, 64, 15, 03, 00, E9, 0F, 51, 05, 00, E9, 3A, A2, 04, 00, E9, 75, 59, 04, 00, E9, 70, 3B, 00, 00, E9, 45, 6F, 05, 00, E9, 96, 38, 01, 00, E9, 11, C9, 00, 00, E9, FC, 83, 01, 00, E9, A7, A1, 04, 00, E9, 52, 69, 04, 00, E9, 4D, 70, 05, 00, E9, 38, 03, 05, 00, E9, 53, 15, 03, 00, E9, 1E, 82, 03, 00, E9, 59, 76, 00, 00, E9, 16, 70, 05, 00, E9, 2F, 1C, 01, 00, E9, 3A, 62, 04, 00, E9, A5, 60...
 
[+]

Entropy:
5.8177

Developed / compiled with:
Microsoft Visual C++ 8.0 (Debug)

Code size:
369 KB (377,856 bytes)

The file fixmsi.exe has been seen being distributed by the following 4 URLs.

http://download846.mediafire.com/qost8758keug/.../FixMSI.exe

https://mega.nz/temporary/.../70dxFDbD

http://download728.mediafire.com/6j5nmgyacxtg/.../FixMSI.exe

http://download1042.mediafire.com/idi176uzs3vg/.../FixMSI.exe

Scan fixmsi.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.