How to remove mimilove.exe
- File Details
- Overview
- Analysis
mimilove.exe
The module mimilove.exe has been detected as Hack.Mimikatz
File Details
| Product Name: |
|
| Company Name: |
|
| MD5: |
9a8a606cdbc3d7ef94fb78c6b3767baa |
| Size: |
35 KB |
| First Published: |
2020-04-17 20:51:15 (4 years ago) |
| Latest Published: |
2020-07-15 15:31:51 (4 years ago) |
| Status: |
Hack.Mimikatz (on last analysis) |
|
| Analysis Date: |
2020-07-15 15:31:51 (4 years ago) |
Overview
| %sysdrive%\wmpub\1\mimikatz\mimikatz |
| %desktop%\mimik\mimikatz |
| %desktop%\tools\extract\mimikatz |
| %desktop%\automim.zip\automim\automim\mimikatz |
| %desktop%\automim\automim\automim\mimikatz |
| Windows Server 2008 R2 |
40.0% |
|
| Windows Server 2003 |
20.0% |
|
| Windows Server 2012 R2 |
20.0% |
|
| Windows 7 |
20.0% |
|
Analysis
| Subsystem: |
Windows CUI |
| PE Type: |
pe |
| OS Bitness: |
32 |
| Image Base: |
0x00400000 |
| Entry Address: |
0x00003132 |
| Name |
Size of data |
MD5 |
| .text |
10240 |
454b4d7318b2d132ff551f39b4dd7a4c |
| .rdata |
9216 |
969b55d638b437ac8fbed6cf1f744b20 |
| .data |
1024 |
c86eca41bd328b35646c913fda3b16c5 |
| .rsrc |
1536 |
64061f0a2b2e60aa3812e9c9da0a97cf |
| .reloc |
2048 |
d2a124531a858539f47d8c34f3481d7e |
