How to remove mimilib.dll
- File Details
- Overview
- Analysis
mimilib.dll
The module mimilib.dll has been detected as Hack.Mimikatz
File Details
| Product Name: |
|
| Company Name: |
|
| MD5: |
71ed3d1d85ebc3b4924e433840762896 |
| Size: |
40 KB |
| First Published: |
2019-10-08 03:12:25 (5 years ago) |
| Latest Published: |
2020-07-15 15:34:10 (4 years ago) |
| Status: |
Hack.Mimikatz (on last analysis) |
|
| Analysis Date: |
2020-07-15 15:34:10 (4 years ago) |
Overview
| %profile%\dministrator\my documents\downloads\wor\mimikatz\mimikatz |
| %sysdrive%\wmpub\1\mimikatz\mimikatz |
| %desktop%\mimik\mimikatz |
| %desktop%\tools\extract\mimikatz |
| %desktop%\automim.zip\automim\automim\mimikatz |
| %desktop%\automim\automim\automim\mimikatz |
| India |
33.3% |
|
| South Korea |
16.7% |
|
| Argentina |
16.7% |
|
| United Kingdom |
16.7% |
|
| Poland |
16.7% |
|
| Windows Server 2003 |
33.3% |
|
| Windows Server 2008 R2 |
33.3% |
|
| Windows Server 2012 R2 |
16.7% |
|
| Windows 7 |
16.7% |
|
Analysis
| Subsystem: |
Windows CUI |
| PE Type: |
pe |
| OS Bitness: |
32 |
| Image Base: |
0x10000000 |
| Entry Address: |
0x0000415b |
| Name |
Size of data |
MD5 |
| .text |
13824 |
a24083c14c64bf0e7b0670cdc0712a8f |
| .rdata |
9216 |
5bb9fb61e0ac66b6878618cfc58ce0d0 |
| .data |
1536 |
6dd0e13c4a9483806e2e52fd7c91557e |
| .rsrc |
1536 |
85993cfa5b0952085f26f36f74ab0bf3 |
| .reloc |
2560 |
abb63a9c0815907a31da287ac26e172d |
