Sorry, I added some additional text after you replied. I now think the report is just poorly phrased and it should have said "exploit" instead of "downloader".

Sorry, I added some additional text after you replied. I now think the report is just poorly phrased and it should have said "exploit" instead of "downloader". It is very likely the exploit, once run, did download more stuff.