How to remove reimage.exe
- File Details
- Overview
- Analysis
reimage.exe
The module reimage.exe has been detected as Hijack.Explorer
File Details
| Product Name: |
|
| Company Name: |
|
| MD5: |
a43091aa72b941822e8e8ba332310166 |
| Size: |
8 MB |
| First Published: |
2018-06-07 13:06:58 (6 years ago) |
| Latest Published: |
2019-06-26 22:27:32 (5 years ago) |
| Status: |
Hijack.Explorer (on last analysis) |
|
| Analysis Date: |
2019-06-26 22:27:32 (5 years ago) |
Overview
| Signed By: |
Reimage Limited |
| Status: |
Invalid (digital signature could be stolen or file could be patched) |
| %sysdrive%\meire-pc\backup set 2016-01-25 101728\backup files 2016-01-25 101728\backup files 3.zip\c\program files\reimage |
| %programfiles%\realtek\reimage |
| %programfiles%\reimage |
| %programfiles%\reimage |
| %programfiles%\reimage |
| Windows 8.1 |
50.0% |
|
| Windows 10 |
37.5% |
|
| Windows 7 |
12.5% |
|
Analysis
| Subsystem: |
Windows GUI |
| PE Type: |
pe |
| OS Bitness: |
64 |
| Image Base: |
0x0000000140000000 |
| Entry Address: |
0x00181380 |
| Name |
Size of data |
MD5 |
| .text |
2923520 |
0deaa689d079b70b066f4630fb9b0e44 |
| .rdata |
1247232 |
ef3e8655baadfb720645ea3a21a3605e |
| .data |
123904 |
a8b5565bc526705816b1b905f0357b44 |
| .pdata |
125952 |
e79f7f4cc222029cb005ed4d6ba82b03 |
| text |
3072 |
328badc1f9725aa32766bb93ff702168 |
| data |
2048 |
08eb5373e50c14af06e0d9ef791fdcfc |
| .rsrc |
4347392 |
8037abe3623631e5ebbcd27c878b0eca |
| .reloc |
102400 |
1c913ea4b49d5eb0930ba9c3c3466f26 |
