mimikatz.exe

mimikatz

Benjamin Delpy

The application mimikatz.exe, “mimikatz pour Windows” by Benjamin Delpy has been detected as adware by 54 anti-malware scanners.
Remove mimikatz.exe - Powered by Reason Core Security
Publisher:
Gentil Kiwi  (signed by Benjamin Delpy)

Product:
mimikatz

Description:
mimikatz pour Windows

Version:
1.0.0.0

MD5:
1515f376964ae2289491ec21a1934f8b

SHA-1:
54b5b8d9eb53bb6146d9fc891225bdd8392d6ca3

SHA-256:
bd5665b76a6b6d12a6017fc14f2b35cbf68b3bd4208ed75fd4a10c8305adbe1a

Scanner detections:
54 / 68

Status:
Adware

Analysis date:
12/7/2016 3:18:15 PM UTC  (today)

Scan engine
Detection
Engine version

Lavasoft Ad-Aware
Application.Htool.WHQ
969

Agnitum Outpost
HackTool.Mimikatz
7.1.1

AhnLab V3 Security
Win-AppCare/Mimikatz.548848
2014.11.07

Avira AntiVirus
SPR/Mimikatz.a.4
7.11.145.130

Antiy Labs AVL
HackTool/Win32.Mimikatz
0.1.0.1

avast!
Win32:PUP-gen [PUP]
2014.9-141129

AVG
HackTool
2015.0.3275

Bitdefender
Application.Htool.WHQ
1.0.20.805

Bkav FE
W32.Cloda46.Trojan
1.3.0.4959

Clam AntiVirus
Win.Trojan.Agent-195525
0.98/21411

CMC Antivirus
HackTool.Win32.Mimikatz!O
1.1.0.977

Commtouch SDK
W32/Trojan.ITZH-4147
5.4.1.7

Comodo Security
ApplicUnsaf.Win32.HackTool.Mimikatz.D
18179

Dr.Web
Tool.Mimikatz.1
9.0.1.0161

ESET NOD32
Win32/HackTool.Mimikatz
8.9729

Fortinet FortiGate
Malware_fam.NB
6/10/2014

F-Secure
Application.Hacktool.DJ
11.2014-29-11_7

G Data
Application.Htool.WHQ
14.6.24

IKARUS anti.virus
HackTool.Win32.Mimikatz
t3scan.1.6.1.0

Jiangmin
HackTool.Mimikatz.a
KV140610

K7 AntiVirus
Unwanted-Program
13.176.11896

K7 Gateway Antivirus
Unwanted-Program
13.176.11896

Kaspersky
Exploit.Win32.Palsas
14.0.0.3732

Kingsoft AntiVirus
Win32.HackTool.Mimikatz.(kcloud)
331020.49267

McAfee
HTooL-Mimikatz.d
5600.7103

McAfee Web Gateway
HTooL-Mimikatz.d
7.7103

Microsoft Security Essentials
HackTool:Win32/Mikatz
1.10502

MicroWorld eScan
Application.Htool.WHQ
15.0.0.483

NANO AntiVirus
Trojan.Win32.Mimikatz.bobaay
0.28.0.59492

Norman
Mikatz.CERT
11.20140610

nProtect
Trojan/W32.HackTool.409152
14.10.31.01

Qihoo 360 Security
Win32/Trojan.Exploit.efd
1.0.0.1015

Quick Heal
Exploit.Palsas.r6 (Not a Virus)
11.14.14.00

Reason Heuristics
PUP.BenjaminDelpy.I
14.7.3.9

Rising Antivirus
PE:Trojan.Win32.Generic.144354E2!339956962
23.00.65.141127

Sophos
Mimikatz Exploit Utility
4.98

Trend Micro House Call
HKTL_MIMIKATZ
7.2.161

Trend Micro
HKTL_MIMIKATZ
10.465.10

Vba32 AntiVirus
Exploit.Palsas.e
3.12.26.0

VIPRE Antivirus
Trojan.Win32.Generic
28650

Zillya! Antivirus
Tool.Mimikatz.Win32.5
2.0.0.1973

Remove mimikatz.exe - Powered by Reason Core Security
File size:
399.6 KB (409,192 bytes)

Product version:
1.0.0.0

Copyright:
Copyright (C) 2012 Gentil Kiwi

File type:
Executable application (Win32 EXE)

Language:
French (France)

Digital Signature
Signed by:

Authority:
GlobalSign nv-sa

Valid from:
6/28/2011 11:46:16 AM

Valid to:
6/28/2014 11:46:16 AM

Subject:
CN=Benjamin Delpy, C=FR

Issuer:
CN=GlobalSign CodeSigning CA - G2, O=GlobalSign nv-sa, C=BE

Serial number:
112169417A1C3EF46A301F99385F50680FA0

File PE Metadata
Compilation timestamp:
1/23/2013 12:13:38 AM

OS version:
5.1

OS bitness:
Win32

Subsystem:
Windows Console

Linker version:
10.0

CTPH (ssdeep):
6144:g5CnATf5TLg7qal6kiOA9NNj11BVoBHilBbQx5/X/Kd7:yTxTU7N0OA9T1HVoBHilBbyXCV

Entry address:
0x27686

Entry point:
E8, 3F, DC, 00, 00, E9, 95, FE, FF, FF, 8B, FF, 55, 8B, EC, 8B, 45, 08, 33, C9, 3B, 04, CD, 40, F5, 44, 00, 74, 13, 41, 83, F9, 2D, 72, F1, 8D, 48, ED, 83, F9, 11, 77, 0E, 6A, 0D, 58, 5D, C3, 8B, 04, CD, 44, F5, 44, 00, 5D, C3, 05, 44, FF, FF, FF, 6A, 0E, 59, 3B, C8, 1B, C0, 23, C1, 83, C0, 08, 5D, C3, E8, 10, 40, 00, 00, 85, C0, 75, 06, B8, A8, F6, 44, 00, C3, 83, C0, 08, C3, E8, FD, 3F, 00, 00, 85, C0, 75, 06, B8, AC, F6, 44, 00, C3, 83, C0, 0C, C3, 8B, FF, 55, 8B, EC, 56, E8, E2, FF, FF, FF, 8B, 4D, 08...
 
[+]

Code size:
240 KB (245,760 bytes)

Remove mimikatz.exe - Powered by Reason Core Security