How to remove mimikatz.exe
- File Details
- Overview
- Analysis
mimikatz.exe
The module mimikatz.exe has been detected as Hack.Mimikatz
File Details
| Product Name: |
|
| Company Name: |
|
| MD5: |
f2d89917651a1006728ade3441b0bb2e |
| Size: |
716 KB |
| First Published: |
2018-06-29 20:04:56 (6 years ago) |
| Latest Published: |
2020-11-25 23:22:36 (4 years ago) |
| Status: |
Hack.Mimikatz (on last analysis) |
|
| Analysis Date: |
2020-11-25 23:22:36 (4 years ago) |
Overview
| %localappdata%\packages\kalilinux.54290c8133fee_ey8k8hqnwqnmg\localstate\rootfs\usr\share\mimikatz |
| %sysdrive%\utilities\mimikatz_trunk |
| %desktop%\zrtfg |
| %desktop%\aaaaaa\m |
| %sysdrive%\$recycle.bin\s-1-5-21-4002530241-252803949-4081733239-1001\$r0x0u0a |
| %sysdrive%\$recycle.bin\s-1-5-21-4002530241-252803949-4081733239-1001\$ruk6czp |
| %sysdrive%\bcert 19-02\encryption exercise\mimikatz_trunk.zip |
| Windows 8.1 |
42.9% |
|
| Windows 10 |
28.6% |
|
| Windows Server 2008 R2 |
14.3% |
|
| Windows Server 2012 R2 |
14.3% |
|
Analysis
| Subsystem: |
Windows CUI |
| PE Type: |
pe |
| OS Bitness: |
32 |
| Image Base: |
0x00400000 |
| Entry Address: |
0x0005f194 |
| Name |
Size of data |
MD5 |
| .text |
411648 |
e95a011a7083006cb3a40e8bb0fe329c |
| .rdata |
257024 |
1e731298ec356e3cc6dee25962e40c81 |
| .data |
11776 |
777a6c1280df746e00f2a8eb67011129 |
| .rsrc |
16384 |
4d3274378374c85ad717bb72fade9a5c |
| .reloc |
24576 |
29b3a1a3e5ed43886dfb6c20e456e173 |
