home

ReimageRepair.exe

Reimage Repair

Reimage Limited

The program is a setup application that uses the NSIS (Nullsoft Scriptable Install System) installer. This is installed with Reimage Repair. The file has been seen being downloaded from www.reimage.us.com and multiple other hosts.
Publisher:
Reimage®  (signed by Reimage Limited)

Product:
Reimage Repair

Description:
Reimage Downloader

Version:
1.287

MD5:
277be1505807314a14ebcac7fca1ab2e

SHA-1:
3ba3aad00cf94ca546d1b40a0535730328ff687b

SHA-256:
f4254a734f7b605b5a6a485efa2410114d76df613b70d8146aa0d5b086e0e21c

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
4/24/2024 2:19:13 AM UTC  (today)

File size:
802.1 KB (821,352 bytes)

Product version:
1.287

Copyright:
© Reimage 2014

Original file name:
ReimageRepair.exe

File type:
Executable application (Win32 EXE)

Installer:
NSIS (Nullsoft Scriptable Install System)

Language:
English (United States)

Common path:
C:\Program Files\reimage\reimage repair\reimagerepair.exe

Digital Signature
Signed by:
Reimage Limited

Authority:
VeriSign, Inc.

Valid from:
3/19/2014 10:00:00 AM

Valid to:
6/10/2016 9:59:59 AM

Subject:
CN=Reimage Limited, OU=Digital ID Class 3 - Microsoft Software Validation v2, O=Reimage Limited, L=Nicosia, S=Nicosia, C=CY

Issuer:
CN=VeriSign Class 3 Code Signing 2010 CA, OU=Terms of use at https://www.verisign.com/rpa (c)10, OU=VeriSign Trust Network, O="VeriSign, Inc.", C=US

Serial number:
3F75B6FA72B8CDE336A61550C70978D2

File PE Metadata
Compilation timestamp:
2/25/2012 5:20:04 AM

OS version:
5.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
10.0

CTPH (ssdeep):
12288:g0gos0ZmIWgyM30E9YzewxnK3RTo9+phNxO0gcCre50ET3cfE/KyZISelOq8:7Ps0wI9x30E0pnmq4X0EwfE/Pe8

Entry address:
0x38AF

Entry point:
81, EC, D4, 02, 00, 00, 53, 55, 56, 57, 6A, 20, 33, ED, 5E, 89, 6C, 24, 18, C7, 44, 24, 10, 68, A2, 40, 00, 89, 6C, 24, 14, FF, 15, 30, 90, 40, 00, 68, 01, 80, 00, 00, FF, 15, B4, 90, 40, 00, 55, FF, 15, C0, 92, 40, 00, 6A, 08, A3, 98, EB, 47, 00, E8, 36, 2A, 00, 00, 55, 68, B4, 02, 00, 00, A3, B0, EA, 47, 00, 8D, 44, 24, 38, 50, 55, 68, 64, A2, 40, 00, FF, 15, 84, 91, 40, 00, 68, 4C, A2, 40, 00, 68, A0, 6A, 47, 00, E8, 18, 27, 00, 00, FF, 15, B0, 90, 40, 00, 50, BF, A0, F0, 4C, 00, 57, E8, 06, 27, 00, 00...
 
[+]

Entropy:
7.9344

Packer / compiler:
Nullsoft install system v2.x

Code size:
29 KB (29,696 bytes)

The file ReimageRepair.exe has been discovered within the following programs.

Reimage Protector  by Reimage
The Reimage Protector service is designed to support Reimage, a purported PC optimization tool designed to 'fine-tune' the computer's registry.
www.reimageplus.com
67% remove it
Reimage Repair  by Reimage
Publisher's description - “Reimage will Scan and Detect and Fix and Repair your PC by utilizing the follow features and benefits. Scan Reimage scans through your entire PC, uncovering information about your Windows Operating System in order to learn about your PC's Hardware, Stability, and Security Issues.”
20% remove it
 
Powered by Should I Remove It?

The file ReimageRepair.exe has been seen being distributed by the following 16 URLs.

http://www.reimage.us.com/downloadsoftware

http://www.reimageplus.com/.../track.php?tracking=revenuewire&campaign=direct&adgroup=direct&ads_name=direct&keyword=direct&exec=run

http://www.reimageplus.com/.../router_land.php?tracking=revenuewire&exec=run

http://errorfixes.reimage.safecart.com/.../download

http://errorfixes.reimage.revenuewire.net/.../download

http://www.reimageplus.com/.../track.php?tracking=PiyushSites&campaign=vir.us.com&adgroup=direct&ads_name=direct&keyword=direct&exec=run

http://www.reimageplus.com/.../router_land.php?tracking=PiyushSites&banner=vir.us.com&exec=run

http://www.reimage.com/.../router_land.php?tracking=PiyushSites&banner=vir.us.com&exec=run

http://www.vir.us.com/downloadsoftware

http://www.reimageplus.com/.../track.php?tracking=PiyushSites&campaign=reimage.us.com&adgroup=direct&ads_name=direct&keyword=direct&exec=run

http://www.reimageplus.com/.../router_land.php?tracking=PiyushSites&banner=reimage.us.com&exec=run

http://www.reimage.com/.../router_land.php?tracking=PiyushSites&banner=reimage.us.com&exec=run

http://www.desinstalarspywarevirus.com/descargagratuita

http://www.errorfixes.net/.../download

http://cdnrep.reimage.com/download/.../ReimageRepair.exe

http://www.exelist.net/.../download

Scan ReimageRepair.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.