ReiGuard.exe

Reimage Real Time Protection

Reimage Limited

It runs as a separate (within the context of its own process) windows Service named “Reimage Real Time Protector”.
Publisher:
Reimage®  (signed by Reimage Limited)

Product:
Reimage Real Time Protection

Version:
2.0.1.5

MD5:
8f1d20d86f813b0266674c35f9e62b23

SHA-1:
77ff5cb90b28fa15b91b69fdf7dc97ddef75d789

SHA-256:
c3d80d0df7650c544716269a8def42f55845944460a7734862994a47bde3fa34

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
11/5/2024 9:51:52 AM UTC  (today)

File size:
6.2 MB (6,542,712 bytes)

Product version:
2.0.1.5

Copyright:
Reimage®. All rights reserved.

Original file name:
ReiGuard.exe

File type:
Executable application (Win32 EXE)

Common path:
C:\Program Files\reimage\reimage protector\reiguard.exe

Digital Signature
Signed by:

Authority:
Symantec Corporation

Valid from:
6/28/2016 3:00:00 AM

Valid to:
7/29/2017 2:59:59 AM

Subject:
CN=Reimage Limited, O=Reimage Limited, L=Nicosia, S=Nicosia, C=CY

Issuer:
CN=Symantec Class 3 SHA256 Code Signing CA, OU=Symantec Trust Network, O=Symantec Corporation, C=US

Serial number:
4FEC4F265B7018ECB4015D9B534005BC

File PE Metadata
Compilation timestamp:
11/6/2016 2:02:51 PM

OS version:
5.1

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
10.0

CTPH (ssdeep):
196608:IfRGLuxp4GiJosngBFxiPdwd9hnbmjLwjnh:IZGLs4FoI0xugl

Entry address:
0x245EC1

Entry point:
E8, B4, 0D, 01, 00, E9, 89, FE, FF, FF, 8B, FF, 55, 8B, EC, 83, EC, 10, FF, 75, 10, 8D, 4D, F0, E8, 8E, D6, FF, FF, 8B, 45, F4, 83, 78, 08, 00, 75, 20, FF, 75, 0C, FF, 75, 08, E8, EE, 03, 00, 00, 80, 7D, FC, 00, 59, 59, 0F, 84, E4, 00, 00, 00, 8B, 4D, F8, 83, 61, 70, FD, C9, C3, 8B, 45, 0C, 85, C0, 75, 21, E8, A3, 5E, 00, 00, C7, 00, 16, 00, 00, 00, E8, E6, 93, 00, 00, 80, 7D, FC, 00, 74, 07, 8B, 45, F8, 83, 60, 70, FD, 33, C0, C9, C3, 80, 38, 00, 75, 12, 80, 7D, FC, 00, 74, 07, 8B, 45, F8, 83, 60, 70, FD...
 
[+]

Entropy:
6.4704

Code size:
3.8 MB (4,034,048 bytes)

Service
Display name:
Reimage Real Time Protector

Service name:
ReimageRealTimeProtector

Type:
Win32OwnProcess


Scan ReiGuard.exe - Powered by Reason Core Security