home

ummyvideodownloader.exe

Ummy Video Downloader

Magicbit, Inc

The application ummyvideodownloader.exe by Magicbit, Inc has been detected as a potentially unwanted program by 1 anti-malware scanner with very strong indications that the file is a potential threat.
Publisher:
Magicbit, Inc  (signed and verified)

Product:
Ummy Video Downloader

Version:
1.6.0.2

MD5:
18f025a93a0a7b8100b3a9de2a5d1bff

SHA-1:
7b8b489d93f01638965fde3233755da69b6eaa1f

SHA-256:
262906a7deae22cde0b51b978ca06d6062dfaec8fc02a30f9530f66712db8a2b

Scanner detections:
1 / 68

Status:
Potentially unwanted

Analysis date:
4/25/2024 7:37:07 PM UTC  (today)

Scan engine
Detection
Engine version

Reason Heuristics
PUP.Magicbit.Downloader (M)
17.3.5.13

File size:
10.2 MB (10,730,376 bytes)

Product version:
1.6.0.2

Copyright:
Copyright © 2016 Magicbit, Inc

File type:
Executable application (Win32 EXE)

Language:
English (United States)

Common path:
C:\users\{user}\appdata\local\ummyvideodownloader\ummyvideodownloader.exe

Digital Signature
Signed by:
Magicbit, Inc

Authority:
COMODO CA Limited

Valid from:
4/21/2014 5:30:00 AM

Valid to:
4/21/2017 5:29:59 AM

Subject:
CN="Magicbit, Inc", O="Magicbit, Inc", STREET="901 N. Pitt Street, Suite 325", L=Alexandria, S=VA, PostalCode=22314, C=US

Issuer:
CN=COMODO RSA Code Signing CA, O=COMODO CA Limited, L=Salford, S=Greater Manchester, C=GB

Serial number:
00B5B2652535A2ACE1ACBFF9D5D7816AD4

File PE Metadata
Compilation timestamp:
3/9/2016 7:03:54 PM

OS version:
5.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
2.25

Entry address:
0x402E8C

Entry point:
55, 8B, EC, 83, C4, E8, 53, 56, 57, 33, C0, 89, 45, E8, 89, 45, EC, B8, 04, 7E, 7F, 00, E8, 7D, C9, C0, FF, 8B, 35, 74, 0A, 82, 00, 33, C0, 55, 68, 82, 30, 80, 00, 64, FF, 30, 64, 89, 20, E8, 20, C5, F0, FF, 84, C0, 75, 2D, B8, 4C, 84, 84, 00, BA, A0, 30, 80, 00, E8, 75, 78, C0, FF, 6A, 10, 68, D0, 30, 80, 00, A1, 4C, 84, 84, 00, E8, AC, 83, C0, FF, 50, 6A, 00, E8, 3C, 15, C1, FF, E9, 76, 01, 00, 00, 6A, 00, 68, FC, 30, 80, 00, E8, 33, 12, C1, FF, 8B, D8, 85, DB, 0F, 84, AC, 00, 00, 00, E8, C0, 3C, C0, FF...
 
[+]

Entropy:
4.2208

Developed / compiled with:
Microsoft Visual C++

Code size:
4 MB (4,203,008 bytes)

Remove ummyvideodownloader.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.