Risk

Should I remove “Win64/Riskware.Mimikatz.F”?

Malware Removal

The Win64/Riskware.Mimikatz.F is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Win64/Riskware.Mimikatz.F virus can do?

  • The binary likely contains encrypted or compressed data.
  • Anomalous binary characteristics

How to determine Win64/Riskware.Mimikatz.F?


File Info:

crc32: 4C1C386C
md5: 26a8308d81ca2b693c77393177509997
name: 26A8308D81CA2B693C77393177509997.mlw
sha1: d40442912070aca67c862a301dc9b147d60f612d
sha256: 9c33fbd0a58ea80b6ef4040eecc9922dbe3c66c2e303bcf72473212e99acc65f
sha512: b4dbc444085d287319a3b9adcca8006d7f8a8b851ee4b28732dc734dccf9464a2f2ab967c4e1f0dadcdb1708f334d700f64176a79e665c0d6ce79e01cb0a3e25
ssdeep: 12288:DAkyQyjQAX9hnpWPy9Sr5YErmW7UIw9w6y5UH9Efi1hkp5jaaYn9ZhhpqQo6vte:0AlmWoD95y5U71ejaaWvhXBgXw
type: PE32+ executable (console) x86-64 Mono/.Net assembly, for MS Windows

Version Info:

Translation: 0x0000 0x04b0
LegalCopyright:
Assembly Version: 0.0.0.0
InternalName: 416e0389551347818e05596de5ae96cd.exe
FileVersion: 0.0.0.0
ProductVersion: 0.0.0.0
FileDescription:
OriginalFilename: 416e0389551347818e05596de5ae96cd.exe

Win64/Riskware.Mimikatz.F also known as:

K7AntiVirusTrojan ( 004fe0521 )
Elasticmalicious (high confidence)
CylanceUnsafe
SangforTrojan.Win32.Save.a
K7GWTrojan ( 004fe0521 )
Cybereasonmalicious.12070a
ESET-NOD32a variant of Win64/Riskware.Mimikatz.F
APEXMalicious
AvastFileRepMalware
ClamAVWin.Malware.Mimikatz-9807955-0
KasperskyHEUR:Trojan.MSIL.Bsymem.gen
TencentWin64.Risk.Riskware.Hrzc
SophosCQUIRE T00ls (PUA)
VIPRETrojan.Win32.Generic!BT
McAfee-GW-EditionBehavesLike.Win64.VirRansom.bc
FireEyeGeneric.mg.26a8308d81ca2b69
SentinelOneStatic AI – Malicious PE
MicrosoftHackTool:Win64/Mikatz!rfn
AegisLabTrojan.Win32.Generic.4!c
GDataMSIL.Riskware.Mimikatz.E
McAfeeArtemis!26A8308D81CA
MalwarebytesMalware.AI.4021939086
IkarusPUA.RiskWare.Mimikatz
FortinetRiskware/Mimikatz
AVGFileRepMalware
Paloaltogeneric.ml

How to remove Win64/Riskware.Mimikatz.F?

Win64/Riskware.Mimikatz.F removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment