home

vssfix.exe

ComFix

Paramount Software UK Ltd

This is installed with Macrium Reflect Home Edition. The file has been seen being downloaded from files.check-ict.nl and multiple other hosts.
Publisher:
Paramount Software UK Ltd  (signed by Paramount Software UK Ltd)

Product:
ComFix

Description:
Repair COM+ installation

Version:
1.0.2.1

MD5:
07d7b6c83673236de5fcc5fedd74d857

SHA-1:
22ed8a4690867bcc4355beef90f81ee4b11bda1d

SHA-256:
d616b8e8060a07320c8cf757d4dfbcb32ee955c57def458c60976b6b0b5098c0

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
4/16/2024 10:07:30 PM UTC  (today)

File size:
247 KB (252,896 bytes)

Product version:
1.0.2.1

Copyright:
(c) Paramount Software UK Ltd all rights reserved

Original file name:
ComFix.exe

File type:
Executable application (Win32 EXE)

Language:
English (United States)

Common path:
C:\users\{user}\downloads\vssfix.exe

Digital Signature
Signed by:
Paramount Software UK Ltd

Authority:
GlobalSign nv-sa

Valid from:
11/19/2007 6:12:04 AM

Valid to:
11/19/2010 6:12:04 AM

Subject:
E=nick@macrium.com, CN=Paramount Software UK Ltd, O=Paramount Software UK Ltd, C=GB

Issuer:
CN=GlobalSign ObjectSign CA, OU=ObjectSign CA, O=GlobalSign nv-sa, C=BE

Serial number:
0100000000011657D28AD3

File PE Metadata
Compilation timestamp:
7/16/2010 9:25:40 AM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
8.0

CTPH (ssdeep):
3072:bE825bcqm2mz3Oc4cnWObNGHJmBDEmOMvsb1RDRavZ7SIRwr73TSbjktt0BM4dEj:b3Y4p2mz+c4cn3WIV/Eb1wjBXEPwQ

Entry address:
0x11021

Entry point:
E8, 51, 4D, 00, 00, E9, 17, FE, FF, FF, 51, C7, 01, 34, 83, 42, 00, E8, D4, 4D, 00, 00, 59, C3, 56, 8B, F1, E8, EA, FF, FF, FF, F6, 44, 24, 08, 01, 74, 07, 56, E8, 22, 10, FF, FF, 59, 8B, C6, 5E, C2, 04, 00, 8B, 44, 24, 04, 83, C1, 09, 51, 83, C0, 09, 50, E8, 1A, 4E, 00, 00, F7, D8, 59, 1B, C0, 59, 40, C2, 04, 00, 51, 53, 55, 56, 57, FF, 35, 88, 4E, 43, 00, E8, CC, 46, 00, 00, FF, 35, 84, 4E, 43, 00, 8B, F0, 89, 74, 24, 18, E8, BB, 46, 00, 00, 8B, F8, 3B, FE, 59, 59, 0F, 82, 84, 00, 00, 00, 8B, DF, 2B, DE...
 
[+]

Entropy:
6.3008

Code size:
148 KB (151,552 bytes)

The file vssfix.exe has been discovered within the following programs.

Macrium Reflect Home Edition  by Paramount Software (UK) Ltd.
www.macrium.com/default.aspx
About 2% of users remove it
Macrium Reflect Server Plus Edition  by Paramount Software (UK) Ltd.
About 4% of users remove it
Macrium Reflect Workstation Edition  by Paramount Software (UK) Ltd.
About 1% of users remove it
 
Powered by Should I Remove It?

The file vssfix.exe has been seen being distributed by the following 2 URLs.

http://files.check-ict.nl/.../vssfixx32.exe

http://updates.macrium.com/reflect/.../vssfix.exe

Scan vssfix.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.