Malware.AI.302039520 malicious file

The Malware.AI.302039520 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What Malware.AI.302039520 virus can do?

Dynamic (imported) function loading detected
CAPE extracted potentially suspicious content
The binary likely contains encrypted or compressed data.
Authenticode signature is invalid
Binary compilation timestomping detected

How to determine Malware.AI.302039520?


File Info:
name: CF9732AD2883E825C16D.mlw
path: /opt/CAPEv2/storage/binaries/d0b333b578d3ff85c4137e71835c4f71a897d40ccc8bc0eb78aa3a7708a51b2c
crc32: E241E1D1
md5: cf9732ad2883e825c16d9f6a15a30c12
sha1: d9b34e747b8049fa297d5d0bdc0522472fc78f76
sha256: d0b333b578d3ff85c4137e71835c4f71a897d40ccc8bc0eb78aa3a7708a51b2c
sha512: c799eb5841696dec270934caf8070f976c8c9175d92b066508fb275874894c89a32fd5e79f85b2826d6b0bdfa0b1c76aebce26fd1f0f0be55a067c160cbe98da
ssdeep: 98304:RZqjVoYclHdqPnsHTrgPCgmSkjGCRRtu/HuDcNfNJGWpvgcn0cC:WJokMTsJmhjGCRCvuYBOWp4c0
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T1E036330C122A8717EB2E53FB6CD8E2910FE5252753B9FB1C0D8B22D4AD52792524727F
sha3_384: ebe7240231ed26bd781c61b41fc6bf04d16c1294e31541f7042346f18595d0122ec5491cb0c081520ba718abc2a959af
ep_bytes: ff250020400000000000000000000000
timestamp: 2039-11-03 22:38:59

Version Info:
Translation: 0x0000 0x04b0
Comments: 
CompanyName: 
FileDescription: WindowsFormsApp1
FileVersion: 1.0.0.0
InternalName: WindowsFormsApp1.exe
LegalCopyright: Copyright ©  2022
LegalTrademarks: 
OriginalFilename: WindowsFormsApp1.exe
ProductName: WindowsFormsApp1
ProductVersion: 1.0.0.0
Assembly Version: 1.0.0.0

Malware.AI.302039520 also known as:

Sangfor	Trojan.MSIL.Agent_AGen.OM
K7AntiVirus	Trojan-Downloader ( 005907361 )
Alibaba	Trojan:MSIL/DropperX.150bcf2a
K7GW	Trojan-Downloader ( 005907361 )
Elastic	malicious (moderate confidence)
ESET-NOD32	a variant of MSIL/TrojanDownloader.Agent_AGen.OM
APEX	Malicious
Tencent	Msil.Trojan-downloader.Agent_agen.Tclz
McAfee-GW-Edition	Artemis
Trapmine	suspicious.low.ml.score
Ikarus	Trojan-Downloader.MSIL.Agent
GData	Win32.Trojan.Agent.CA8PBZ
Avira	TR/Agent_AGen.cjfca
Microsoft	Trojan:Win32/Wacatac.B!ml
Cynet	Malicious (score: 99)
AhnLab-V3	Dropper/Win.DropperX-gen.C5153078
McAfee	Artemis!CF9732AD2883
Malwarebytes	Malware.AI.302039520
Avast	Win32:DropperX-gen [Drp]
SentinelOne	Static AI – Suspicious PE
MaxSecure	Trojan.Malware.300983.susgen
Fortinet	MSIL/Agent_AGen.OM!tr.dldr
AVG	Win32:DropperX-gen [Drp]

How to remove Malware.AI.302039520?

Malware.AI.302039520 removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X