How to remove $RE4S9Y5.exe

» File
File Details
Overview
Analysis

$RE4S9Y5.exe

The module $RE4S9Y5.exe has been detected as Trojan.Packed

$RE4S9Y5.exe

Remove $RE4S9Y5.exe

File Details

Main Info:

Product Name:	Boeing iFly 747-400 V1.1.0.0 FSX & P3D
Company Name:	iFly Team, sound by Steven Persson
MD5:	8611735850562442f302186cb1d051e4
Size:	54 MB
First Published:	2021-11-30 21:08:34 (3 years ago)
Latest Published:	2021-11-30 21:08:34 (3 years ago)

Analysis:

Status:	Trojan.Packed (on last analysis)
Analysis Date:	2021-11-30 21:08:34 (3 years ago)

Overview

Digital Signature

Signed By:	Rikoooo Simulation
Status:	Valid

Common Places:

%sysdrive%\$recycle.bin

Geography:

100.0%

OS Version:

Windows 10

100.0%

Analysis

PE Info:

Subsystem:	Windows GUI
PE Type:	pe
OS Bitness:	32
Image Base:	0x00400000
Entry Address:	0x00001495

PE Sections:

Name	Size of data	MD5
.text	7680	0cd2ecf145d8ccfea88ca602386a9bf1
.rdata	2048	5e12083e8d12ff23b830066a3280f5dc
.data	0	d41d8cd98f00b204e9800998ecf8427e
.rsrc	356864	94631839b80950187fb5d00c3ac2fc5b
.reloc	512	c48272dc7432ed6e17e29251447fbf24
.tsustub	123904	5bccabede1d41c8fae9b0c072d3c4d17
.tsuarch	56668160	5ff617214b7406bbfc332a402f59bf07

More information:

Search on Virustotal

Download GridinSoft Anti-Malware - Removal tool for $RE4S9Y5.exe

copyright for information about $RE4S9Y5.exe