Categories: Malware

Downloader.19 (file analysis)

The Downloader.19 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Downloader.19 virus can do?

The binary likely contains encrypted or compressed data.
Authenticode signature is invalid
Deletes executed files from disk

How to determine Downloader.19?


File Info:
name: 2A576ED0EE43DFF022AA.mlwpath: /opt/CAPEv2/storage/binaries/065c984ef9b07809b84a2384bffe0db2505989a9b75f7830f535b70f6acb5d57crc32: 93CCA070md5: 2a576ed0ee43dff022aa8d5137ba1a87sha1: 2b7e3f1572cd60c37ae0d4a14927b4ee382b86f7sha256: 065c984ef9b07809b84a2384bffe0db2505989a9b75f7830f535b70f6acb5d57sha512: 0587f5b89580ad6629d566322b7635ea223bd1d43e3a0f124547e7d5282b0c6d663c046c8b828f1da69662b43fef1434f83bf38a1b48bf22961bf05e0fcbeb31ssdeep: 384:KrxUg8kFNHM/y4byzLeReR3nXai1nYPmgx9pO4Xh+gUQ0/kYQ94CdmJmZ+245b+/:eTNHWQiIaiZpgvp/Ygf0hS4Cdc8AFxgtype: PE32 executable (GUI) Intel 80386, for MS Windowstlsh: T1AEF29E4E1DAB4097F6864A74C7EA89DA9FFE2C2739DB747FCF80200014D119895D2EB6sha3_384: 729726fdd3e93d12289f9d4a557f5788164fa368bc153ff2627b3d2259733d5b010655d461eb8ec1b37b64f7c2640b46ep_bytes: 558bec81ec380300005356576a4033dbtimestamp: 2010-08-09 01:44:42
Version Info:
CompanyName: Adobe Systems, Inc.FileDescription: Adobe? Flash? Player Installer/Uninstaller 10.1 r53FileVersion: 10,1,53,64InternalName: Adobe? Flash? Player Installer/Uninstaller 10.1LegalCopyright: Copyright ? 1996-2010 Adobe, Inc.LegalTrademarks: Adobe? Flash? PlayerOriginalFilename: FlashUtil.exeProductName: Flash? Player Installer/UninstallerProductVersion: 10,1,53,64Translation: 0x0409 0x04b0

Downloader.19 also known as:

Bkav	W32.AIDetectMalware
Lionic	Trojan.Win32.Generic.lk0q
Elastic	malicious (high confidence)
MicroWorld-eScan	Gen:Variant.Downloader.19
CAT-QuickHeal	Trojan.Mauvaise.SL1
Cylance	unsafe
VIPRE	Gen:Variant.Downloader.19
Sangfor	Trojan.Win32.Save.a
CrowdStrike	win/malicious_confidence_100% (W)
Alibaba	Trojan:Win32/Dorv.bd47
K7GW	Trojan ( 0053a0a21 )
K7AntiVirus	Trojan-Downloader ( 0040f54b1 )
BitDefenderTheta	Gen:NN.ZexaF.36680.cq0@a0LUH!ci
Symantec	Trojan.Cryect
ESET-NOD32	Win32/Injector.BFSU
APEX	Malicious
Cynet	Malicious (score: 100)
BitDefender	Gen:Variant.Downloader.19
NANO-Antivirus	Trojan.Win32.Small.cpbmb
SUPERAntiSpyware	Backdoor.Bot/Variant
Tencent	Trojan.Win32.Miancha.za
TACHYON	Trojan/W32.Agent.36864.BSC
F-Secure	Trojan.TR/Dropper.Gen
DrWeb	Trojan.DownLoad2.15318
Zillya	Trojan.MianchaGen.Win32.2
Sophos	Troj/DwnLdr-MDK
SentinelOne	Static AI – Malicious PE
Jiangmin	TrojanDownloader.Small.ajux
Webroot	W32.Backdoor.Simbot
Google	Detected
Avira	TR/Dropper.Gen
Antiy-AVL	Trojan/Win32.Inject.aaceh
Kingsoft	malware.kb.a.1000
Xcitium	Backdoor.Win32.Simbot.FTSP@5j7zlt
Arcabit	Trojan.Downloader.19
ViRobot	Trojan.Win32.Downloader.36864.PZ
ZoneAlarm	HEUR:Trojan.Win32.Miancha.gen
Varist	W32/Rubin.A.gen!Eldorado
AhnLab-V3	Backdoor/Win32.CSon.R885
Acronis	suspicious
VBA32	BScope.Trojan.Miancha
MAX	malware (ai score=83)
DeepInstinct	MALICIOUS
Malwarebytes	Generic.Malware.AI.DDS
TrendMicro-HouseCall	BKDR_SIMBOT.SMJB
Rising	Trojan.Injector!1.A7C6 (CLASSIC)
Yandex	Trojan.GenAsa!G2T9Vhma1ds
Ikarus	Trojan-Downloader.Win32.Small
MaxSecure	Trojan.Inject.AACEH
Fortinet	W32/Injector.BFSU!tr
Cybereason	malicious.572cd6
Panda	Trj/Genetic.gen