Downloader.19 (file analysis)

The Downloader.19 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What Downloader.19 virus can do?

The binary likely contains encrypted or compressed data.
Authenticode signature is invalid
Deletes executed files from disk

How to determine Downloader.19?


File Info:
name: 2A576ED0EE43DFF022AA.mlw
path: /opt/CAPEv2/storage/binaries/065c984ef9b07809b84a2384bffe0db2505989a9b75f7830f535b70f6acb5d57
crc32: 93CCA070
md5: 2a576ed0ee43dff022aa8d5137ba1a87
sha1: 2b7e3f1572cd60c37ae0d4a14927b4ee382b86f7
sha256: 065c984ef9b07809b84a2384bffe0db2505989a9b75f7830f535b70f6acb5d57
sha512: 0587f5b89580ad6629d566322b7635ea223bd1d43e3a0f124547e7d5282b0c6d663c046c8b828f1da69662b43fef1434f83bf38a1b48bf22961bf05e0fcbeb31
ssdeep: 384:KrxUg8kFNHM/y4byzLeReR3nXai1nYPmgx9pO4Xh+gUQ0/kYQ94CdmJmZ+245b+/:eTNHWQiIaiZpgvp/Ygf0hS4Cdc8AFxg
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T1AEF29E4E1DAB4097F6864A74C7EA89DA9FFE2C2739DB747FCF80200014D119895D2EB6
sha3_384: 729726fdd3e93d12289f9d4a557f5788164fa368bc153ff2627b3d2259733d5b010655d461eb8ec1b37b64f7c2640b46
ep_bytes: 558bec81ec380300005356576a4033db
timestamp: 2010-08-09 01:44:42

Version Info:
CompanyName: Adobe Systems, Inc.
FileDescription: Adobe? Flash? Player Installer/Uninstaller 10.1 r53
FileVersion: 10,1,53,64
InternalName: Adobe? Flash? Player Installer/Uninstaller 10.1
LegalCopyright: Copyright ? 1996-2010 Adobe, Inc.
LegalTrademarks: Adobe? Flash? Player
OriginalFilename: FlashUtil.exe
ProductName: Flash? Player Installer/Uninstaller
ProductVersion: 10,1,53,64
Translation: 0x0409 0x04b0

Downloader.19 also known as:

Bkav	W32.AIDetectMalware
Lionic	Trojan.Win32.Generic.lk0q
Elastic	malicious (high confidence)
MicroWorld-eScan	Gen:Variant.Downloader.19
CAT-QuickHeal	Trojan.Mauvaise.SL1
Cylance	unsafe
VIPRE	Gen:Variant.Downloader.19
Sangfor	Trojan.Win32.Save.a
CrowdStrike	win/malicious_confidence_100% (W)
Alibaba	Trojan:Win32/Dorv.bd47
K7GW	Trojan ( 0053a0a21 )
K7AntiVirus	Trojan-Downloader ( 0040f54b1 )
BitDefenderTheta	Gen:NN.ZexaF.36680.cq0@a0LUH!ci
Symantec	Trojan.Cryect
ESET-NOD32	Win32/Injector.BFSU
APEX	Malicious
Cynet	Malicious (score: 100)
BitDefender	Gen:Variant.Downloader.19
NANO-Antivirus	Trojan.Win32.Small.cpbmb
SUPERAntiSpyware	Backdoor.Bot/Variant
Tencent	Trojan.Win32.Miancha.za
TACHYON	Trojan/W32.Agent.36864.BSC
F-Secure	Trojan.TR/Dropper.Gen
DrWeb	Trojan.DownLoad2.15318
Zillya	Trojan.MianchaGen.Win32.2
Sophos	Troj/DwnLdr-MDK
SentinelOne	Static AI – Malicious PE
Jiangmin	TrojanDownloader.Small.ajux
Webroot	W32.Backdoor.Simbot
Google	Detected
Avira	TR/Dropper.Gen
Antiy-AVL	Trojan/Win32.Inject.aaceh
Kingsoft	malware.kb.a.1000
Xcitium	Backdoor.Win32.Simbot.FTSP@5j7zlt
Arcabit	Trojan.Downloader.19
ViRobot	Trojan.Win32.Downloader.36864.PZ
ZoneAlarm	HEUR:Trojan.Win32.Miancha.gen
Varist	W32/Rubin.A.gen!Eldorado
AhnLab-V3	Backdoor/Win32.CSon.R885
Acronis	suspicious
VBA32	BScope.Trojan.Miancha
MAX	malware (ai score=83)
DeepInstinct	MALICIOUS
Malwarebytes	Generic.Malware.AI.DDS
TrendMicro-HouseCall	BKDR_SIMBOT.SMJB
Rising	Trojan.Injector!1.A7C6 (CLASSIC)
Yandex	Trojan.GenAsa!G2T9Vhma1ds
Ikarus	Trojan-Downloader.Win32.Small
MaxSecure	Trojan.Inject.AACEH
Fortinet	W32/Injector.BFSU!tr
Cybereason	malicious.572cd6
Panda	Trj/Genetic.gen

How to remove Downloader.19?

Downloader.19 removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X