How to remove $REF5EXR.exe

$REF5EXR.exe

The module $REF5EXR.exe has been detected as Ransom.Wacatac

$REF5EXR.exe
Remove $REF5EXR.exe

File Details

Product Name:

MaxPayne2

Company Name:

Rockstar Games

MD5: be10a785c061011344dc9e9f96d0aa91
Size: 3 MB
First Published: 2023-09-14 23:31:52 (2 years ago)
Latest Published: 2023-09-14 23:31:52 (2 years ago)
Status: Ransom.Wacatac (on last analysis)
Analysis Date: 2023-09-14 23:31:52 (2 years ago)

Common Places:

%sysdrive%\$recycle.bin

Geography:

100.0%

OS Version:

Windows 10 100.0%

Analysis

Subsystem: Windows GUI
PE Type: pe
OS Bitness: 32
Image Base: 0x00400000
Entry Address: 0x00009c14

PE Sections:

Name Size of data MD5
CODE 37888 0f1e58bee0e7f7b353de3dde9de0259d
DATA 1024 1afd2a5d0373792e0d1942b295194e3c
BSS 0 d41d8cd98f00b204e9800998ecf8427e
.idata 2560 bb5485bf968b970e5ea81292af2acdba
.tls 0 d41d8cd98f00b204e9800998ecf8427e
.rdata 512 9ba824905bf9c7922b6fc87a38b74366
.reloc 0 d41d8cd98f00b204e9800998ecf8427e
.rsrc 15872 64644a9b02a82ba9b4c3fc9beeeb5fe9

More information:

Search on Virustotal
Download GridinSoft Anti-Malware - Removal tool for $REF5EXR.exe
copyright for information about $REF5EXR.exe