UDS:Trojan-Downloader.Win32.Paph malicious file

The UDS:Trojan-Downloader.Win32.Paph is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What UDS:Trojan-Downloader.Win32.Paph virus can do?

Dynamic (imported) function loading detected
Authenticode signature is invalid

How to determine UDS:Trojan-Downloader.Win32.Paph?


File Info:
name: 22EAFEE64F18C891CDB7.mlw
path: /opt/CAPEv2/storage/binaries/816cec1f559b25f237ed6050562686ecf18f5bda99c0db499c925803a4f6ae5a
crc32: 05A2EAB5
md5: 22eafee64f18c891cdb71ce8e32d464e
sha1: 2f475947b7e70b9d85793e0fd233fe2c561883f7
sha256: 816cec1f559b25f237ed6050562686ecf18f5bda99c0db499c925803a4f6ae5a
sha512: 5051783df1e540a763ba4e8bfd7843d5fe844a9a89da33f300f06e3ec7cc072c95de38843e5a1ac16c986ccde6b33a891266fd2965315b5650d11612573d78f7
ssdeep: 1536:i4KUgPG0aXfOqqIbOOgNjgjjc4MEbAvnDX3h/7s7HpHrHn+9U/0KwfNw7cx:ii8AW8SB5eWjd7sxg+wyw
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T1B804B32174D9A0AFF52BAFF02BD410E26D39F7BD2B02951E156413BB9B61A12CD1323D
sha3_384: deb6a8d0a29f368974b7e78a6c26cc40bc4cf85105bf3c9721aae56a67ea6365e92c5dd0383f1144bdc6cd043f296643
ep_bytes: ff250020400000000000000000000000
timestamp: 2021-12-10 09:56:44

Version Info:
Translation: 0x0000 0x04b0
FileDescription: Mapping Networkdrives for Comapny FS-BF GmbH & Co. KG V1.3
FileVersion: 2021.12.10
InternalName: ni_map_networkdrive_fsbf_20211125.exe
LegalCopyright: © 2021 by Nisch Informatik
OriginalFilename: ni_map_networkdrive_fsbf_20211125.exe
ProductName: Nisch Informatik NetDriveMapper
ProductVersion: 2021.12.10
Assembly Version: 2021.12.10.0

UDS:Trojan-Downloader.Win32.Paph also known as:

Lionic	Trojan.Win32.Generic.4!c
MicroWorld-eScan	Trojan.GenericKD.47621141
FireEye	Trojan.GenericKD.47621141
McAfee	Artemis!22EAFEE64F18
Cybereason	malicious.7b7e70
BitDefenderTheta	Gen:NN.ZemsilF.34084.lm0@aSQYRql
Cyren	W32/MSIL_Kryptik.BWA.gen!Eldorado
APEX	Malicious
Kaspersky	UDS:Trojan-Downloader.Win32.Paph
BitDefender	Trojan.GenericKD.47621141
Ad-Aware	Trojan.GenericKD.47621141
Emsisoft	Trojan.GenericKD.47621141 (B)
McAfee-GW-Edition	Artemis!Trojan
Sophos	Mal/Generic-S
GData	Trojan.GenericKD.47621141
Avira	HEUR/AGEN.1200629
Gridinsoft	Ransom.Win32.Sabsik.sa
Microsoft	Trojan:Win32/Sabsik.FL.B!ml
Cynet	Malicious (score: 99)
AhnLab-V3	Trojan/Win.Generic.C4840290
ALYac	Trojan.GenericKD.47621141
MAX	malware (ai score=86)
TrendMicro-HouseCall	TROJ_GEN.R002H07LD21
SentinelOne	Static AI – Suspicious PE
eGambit	Unsafe.AI_Score_56%
MaxSecure	Trojan.Malware.300983.susgen

How to remove UDS:Trojan-Downloader.Win32.Paph?

UDS:Trojan-Downloader.Win32.Paph removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X