Malware

What is “Downloader.Win32.Agent.mxoy”?

Malware Removal

The Downloader.Win32.Agent.mxoy is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Downloader.Win32.Agent.mxoy virus can do?

  • Behavioural detection: Executable code extraction – unpacking
  • Sample contains Overlay data
  • Reads data out of its own binary image
  • Drops a binary and executes it
  • The binary contains an unknown PE section name indicative of packing
  • Authenticode signature is invalid

How to determine Downloader.Win32.Agent.mxoy?


File Info:

name: F3A0CA0E795DEA84F079.mlw
path: /opt/CAPEv2/storage/binaries/31206a05b99a2c1eb20bda69ea99abc53c5b03b1133406f27e6f744ad49323c6
crc32: 3472A43F
md5: f3a0ca0e795dea84f079810b4b9a6f07
sha1: b796d6ee3368c1d0994c5789bba1f02253871aae
sha256: 31206a05b99a2c1eb20bda69ea99abc53c5b03b1133406f27e6f744ad49323c6
sha512: 4f6013362af424c8d72022935efcfd77666016f9b438ba4fab93ac6fd6c2baec797e212e9b1f9fe13d6059f0773a2bb4ccab8dee709cb1f1eeff9f4ea4a0e6d8
ssdeep: 98304:cSiu1fVgC446eGpdWVgjpe+DidXvh6d204OOR5qrs:ZfKF46eM8Va3gJ6M8YYo
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T1DCF5023FB258A53ED4AA0B3245B39750887BBB65B81A8C1F57F0091DCF664701E3BB46
sha3_384: 5c7453b0914507a9eab6892ad2bc8e7d32ec6d0b201b765fef641876e9d9f7cd0e6b35c3d5a538a1019c2f31fe596edd
ep_bytes: 558bec83c4a453565733c08945c48945
timestamp: 2020-11-15 09:48:30

Version Info:

Comments: This installation was built with Inno Setup.
CompanyName:
FileDescription: Crack + Keygen Setup
FileVersion:
LegalCopyright:
OriginalFileName:
ProductName: Crack + Keygen
ProductVersion: 1.0
Translation: 0x0000 0x04b0

Downloader.Win32.Agent.mxoy also known as:

CyrenW32/Agent.FLZ.gen!Eldorado
Elasticmalicious (high confidence)
ESET-NOD32a variant of Win32/TrojanDownloader.Agent.GPE
Kasperskynot-a-virus:Downloader.Win32.Agent.mxoy
AvastWin32:Trojan-gen
F-SecureTrojan.TR/Downloader.Gen
McAfee-GW-EditionBehavesLike.Win32.Dropper.wc
Trapminesuspicious.low.ml.score
IkarusTrojan.Downloader.Inno.Agent
GoogleDetected
AviraTR/Downloader.Gen
MicrosoftTrojan:Win32/OffLoader.RPY!MTB
ZoneAlarmnot-a-virus:Downloader.Win32.Agent.mxoy
CynetMalicious (score: 99)
TencentMalware.Win32.Gencirc.13ac0171
AVGWin32:Trojan-gen
CrowdStrikewin/grayware_confidence_60% (D)

How to remove Downloader.Win32.Agent.mxoy?

Downloader.Win32.Agent.mxoy removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment