reflect.exe

Macrium Reflect

Paramount Software UK Ltd

It runs as a scheduled task under the Windows Task Scheduler. This is installed with multiple programs including Macrium Reflect Workstation Edition and Macrium Reflect Home Edition.
Publisher:
Paramount Software UK Ltd  (signed and verified)

Product:
Macrium Reflect

Description:
Macrium Reflect Disk Imaging and Backup

Version:
6, 1, 1081, 0

MD5:
9afa944c177b5146dbd96b97393edef1

SHA-1:
75edb1878dc87c316fac421d3694aa7184db8ea4

SHA-256:
887a15a2a2154e7c9aa4a9dc90aa25f6628a3ad003ee318c8e8c2f6715ccefd4

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
4/23/2024 12:17:29 PM UTC  (today)

File size:
39.4 MB (41,310,672 bytes)

Product version:
6, 1, 1081, 0

Copyright:
(c) Paramount Software. All rights reserved.

Original file name:
reflect.exe

File type:
Executable application (Win64 EXE)

Language:
Language Neutral

Common path:
C:\Program Files\macrium\reflect\reflect.exe

Digital Signature
Authority:
GlobalSign nv-sa

Valid from:
10/9/2013 5:48:06 PM

Valid to:
12/8/2016 5:36:10 PM

Subject:
CN=Paramount Software UK Ltd, O=Paramount Software UK Ltd, L=Manchester, S=Greater Manchester, C=GB

Issuer:
CN=GlobalSign CodeSigning CA - G2, O=GlobalSign nv-sa, C=BE

Serial number:
1121E1029D80AF7C432E8FB512C7DBA891AB

File PE Metadata
Compilation timestamp:
2/7/2016 6:38:25 AM

OS version:
5.2

OS bitness:
Win64

Subsystem:
Windows GUI

Linker version:
11.0

CTPH (ssdeep):
393216:Iu2oZ6CoraekjhcOEn3MUuEOgo0Isyy+VkbOesUaKi8:Iu2oYCor/znoSgVUOes8

Entry address:
0x815990

Entry point:
48, 83, EC, 28, E8, 07, 82, 01, 00, 48, 83, C4, 28, E9, EA, FD, FF, FF, CC, CC, 48, 8B, 0D, 95, 71, AF, 00, 48, FF, 25, 3E, 7F, BD, 00, CC, CC, 48, 83, EC, 28, 48, 8B, 0D, 81, 71, AF, 00, FF, 15, 2B, 7F, BD, 00, 48, 85, C0, 74, 02, FF, D0, B9, 19, 00, 00, 00, E8, 76, 77, 01, 00, BA, 01, 00, 00, 00, 33, C9, E8, 72, 4E, 01, 00, E8, 89, 4E, 01, 00, CC, 48, 89, 5C, 24, 08, 57, 48, 83, EC, 20, 48, 8B, F9, 48, 8B, 0D, 44, 71, AF, 00, FF, 15, EE, 7E, BD, 00, 48, 8B, CF, 48, 8B, D8, FF, 15, EA, 7E, BD, 00, 48, 89...
 
[+]

Entropy:
5.4787

Code size:
13.4 MB (14,075,904 bytes)

Scheduled Task
Task name:
Macrium-Backup-{4F41D38D-E0A8-4B58-8188-5744B7956A51}

Trigger:
Weekly (Runs weekly on Wednesdays at 9:00 AM)


The file reflect.exe has been discovered within the following programs.

Macrium Reflect Home Edition  by Paramount Software (UK) Ltd.
www.macrium.com/default.aspx
About 2% of users remove it
Macrium Reflect Workstation Edition  by Paramount Software (UK) Ltd.
About 1% of users remove it
 
Powered by Should I Remove It?

Scan reflect.exe - Powered by Reason Core Security