Gridinsoft Logo
File Icon

The ReMouse.exe (ReMouse Standard) File Analysis

Updated 1 day ago
Checked by Malware Check
ReMouse.exe

Technical Analysis

File Name ReMouse.exe
File Type
Win32 EXE
Magic Bytes PE32 executable (GUI) Intel 80386, for MS Windows
SSDEEP Hash
24576:R4lavt0LkLL9IMixoEgeaCMfySw4EEavrtQYQoJ/s1q9MmCSKW:gkwkn9IMHeaCMfymaDp4aPCS
Scanner Version 1.0.218.174
Database Version 2025-06-22 15:00:30 UTC
⚠

Suspicious File Detected

Detected by 9 security engines - requires caution

This file requires additional checking for potential threats. Based on suspicious indicators, we will soon add it to our virus database.
13%
Detection Rate
1,365,608
File Size (bytes)
9/72
Engines Detected
2025-06-22
Analysis Date

Scan Another File

File Identification

Hash Type Value Action
MD5
697d7ffc29417b81f4f2bbf8eacf2c7e
SHA1
ef987bcec71af2896856ea93c3ecdc9b384848a0
SHA256
d9d65769b6534cad0fbc5e56412a76381929500b4b10e69b30a752d2f5e3b2bc
SHA512
407e1a5464dcf4ccde5219bc1dffa7055a497f28044a8872cb14347bbecff73e916a170e125e7d254785d2c1df9d0dbb41ca9acbbd3bb372f1995d72c78447e0
ImpHash
0e136cae6f625c80ecae333d9e2a37fa

Security Engines with Detections (9 of 72)

Bkav
W32.AIDetectMalware Malicious
K7GW
Trojan ( 700000111 ) Malicious
K7AntiVirus
Trojan ( 700000111 ) Malicious
Cynet
Malicious (score: 100) Malicious
Paloalto
generic.ml Malicious
Trapmine
suspicious.low.ml.score Malicious
Gridinsoft
Trojan.Win32.Gen.cl Malicious
VBA32
Trojan.Autoit.F Malicious
MaxSecure
Trojan.Malware.300983.susgen Malicious
63 engines reported no threats - Only engines with detections are shown above for clarity

PE Analysis

Basic Information

▼
Icon
Hash: 920c91291841d64e868c7832177ba2fa
Fuzzy: 69047ec3220c08eb0d3e0523de9120ca
dHash: 64d2b9f191b2a4a0
Image Base 0x00400000
Entry Point 0x00426bf7
Compilation Time 2024-12-14 18:34:31
Checksum 0x0015327b (Actual: 0x0015327b)
OS Version 5.1
PEiD Signatures PE32 executable (GUI) Intel 80386, for MS Windows
Digital Signature OK
Imports 18 libraries
Exports 0 functions
Resources 20 Resources
Sections 5 Sections

Version Information

▼
Comments www.remouse.com
FileDescription ReMouse Standard
FileVersion 5.6
LegalCopyright AutomaticSolution Software
ProductName ReMouse Standard
ProductVersion 5.6
Translation 0x0409 0x04b0

PE Sections

▼
Name Virtual Address Virtual Size Raw Size Entropy Characteristics MD5
.text 0x00001000 573,044 bytes 573,440 bytes 6.68 (Compressed) IMAGE_SCN_CNT_CODE|IMAGE_SCN_MEM_EXECUTE|IMAGE_SCN_MEM_READ 74AF66FA540568C59B3868E78900E476
.rdata 0x0008d000 182,122 bytes 182,272 bytes 5.78 (Normal) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ 576C856AFAAD699AD9FE099FC6A9CE33
.data 0x000ba000 40,756 bytes 25,088 bytes 2.00 (Normal) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ|IMAGE_SCN_MEM_WRITE E6D2E204147F7CDC3055011093632F54
.rsrc 0x000c4000 529,628 bytes 529,920 bytes 7.45 (Compressed) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ 2F9FDA1BCA11A60256F998D73721ACF3
.reloc 0x00146000 42,082 bytes 42,496 bytes 5.24 (Normal) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_DISCARDABLE|IMAGE_SCN_MEM_READ C2F6DDAEEF894B7510C3BE928EEAE5DD
Entropy Analysis Alert

2 section(s) with elevated entropy (≥6.5) - possible compression

Resource Analysis

▼
Total Resources: 20 (528,509 bytes)
Resource Type Count Total Size Percentage
RT_ICON 7 115,473 bytes
21.8%
RT_STRING 7 8,842 bytes
1.7%
RT_RCDATA 1 401,588 bytes
76%
RT_GROUP_ICON 2 110 bytes
0%
RT_VERSION 1 608 bytes
0.1%
RT_MANIFEST 2 1,888 bytes
0.4%

Certificate Chain Analysis

▼
Certificate Information
Product ReMouse Standard
Description ReMouse Standard
File Version 5.6
Copyright AutomaticSolution Software
Certificate Chain Summary
SSL.com Root Certification Authority RSA #1 Primary
Validity Period: 2016-02-12 17:39:39 → 2041-02-12 17:39:39
Signature Algorithm: sha256RSA
Serial Number: 7B 2C 9B D3 16 80 32 99
Sectigo Public Time Stamping CA R36 #2 Chain
Validity Period: 2021-03-22 00:00:00 → 2036-03-21 23:59:59
Signature Algorithm: sha384RSA
Serial Number: 7A 23 AE DA 53 69 96 0F 91 C8 3E 5C F4 C7 E3 3F
AMSTION LIMITED #3 Chain
Validity Period: 2022-04-19 09:06:42 → 2025-04-18 09:06:42
Signature Algorithm: sha256RSA
Serial Number: 45 D8 75 B2 6A 1E 20 54 E3 85 38 77 4F 47 8F 1D
Sectigo Public Time Stamping Signer R35 #4 Chain
Validity Period: 2024-01-15 00:00:00 → 2035-04-14 23:59:59
Signature Algorithm: sha384RSA
Serial Number: 3A 52 6A 2C 84 CE 55 E6 1D 65 FC CC 12 D8 E9 89
SSL.com Code Signing Intermediate CA RSA R1 #5 Chain
Validity Period: 2016-06-24 20:44:30 → 2031-06-24 20:44:30
Signature Algorithm: sha256RSA
Serial Number: 64 33 51 D3 C7 38 9F 08
Sectigo Public Time Stamping Root R46 #6 Chain
Validity Period: 2021-03-22 00:00:00 → 2038-01-18 23:59:59
Signature Algorithm: sha384RSA
Serial Number: 36 C2 B0 BD 7C 1B 3A E7 A3 B3 DD 36 CB C9 75 68

✓ This file has been digitally signed and the certificate chain has been verified

  • The signature ensures file integrity and authenticity from the publisher
  • Timestamping proves when the signature was applied
Certificate Verification Status

OK

Remember: This is Result of Online Virus Scanner

Gridinsoft Anti-Malware has a much more powerful virus scanning engine. We recommend using it for a more precise diagnosis of infected systems. This brief guide will help you install our flagship product for more accurate diagnostics:

Download Anti-Malware

Keep Your System Protected

This file appears clean, but regular security maintenance is important

  1. Regular Scans: Run weekly system scans to detect new threats before they can cause damage.
  2. Keep Software Updated: Ensure your operating system and all applications have the latest security patches.
  3. Safe Browsing: Avoid suspicious websites and never download software from untrusted sources.
  4. Email Security: Be cautious with email attachments and links, even from known contacts.
Proactive Protection
9 antivirus engines detected potential threats. This could be a false positive, especially for system tools or packed software. Verify the file source and check if it's digitally signed by a trusted publisher.

Leave a Comment

Share your thoughts or insights about this file. Do you align with our conclusion?

* Your feedback could influence our rating, and rest assured, your email will remain confidential and will only be used to communicate with you if necessary.
Your Score for

Gridinsoft Anti-Malware

Cure your PC from any kind of malware

GridinSoft Anti-Malware will help you to protect your computer from spyware, trojans, backdoors, rootkits. It cleans your system from annoying advertisement modules and other malicious stuff developed by hackers.

Anti-Malware Download Now
Gridinsoft Anti-Malware