home

ummyvd-web-loader.exe

Magicbit, Inc

The application ummyvd-web-loader.exe by Magicbit, Inc has been detected as a potentially unwanted program by 1 anti-malware scanner with very strong indications that the file is a potential threat. The file has been seen being downloaded from videodownloader.ummy.net and multiple other hosts.
Publisher:
Magicbit, Inc  (signed and verified)

Version:
1.0.0.0

MD5:
7f69190cd7408f67665cbde831920288

SHA-1:
05c294a19cda023bef57d560ca0236a9185a3716

SHA-256:
3b18b76addbb396ce8f3698e76ba5430f8b2817137bbb89c361dbac922feeeae

Scanner detections:
1 / 68

Status:
Potentially unwanted

Analysis date:
11/24/2024 4:49:00 PM UTC  (today)

Scan engine
Detection
Engine version

Reason Heuristics
PUP.Magicbit.Downloader.Meta (M)
16.3.31.18

File size:
1.6 MB (1,696,648 bytes)

Product version:
1.0.0.0

File type:
Executable application (Win32 EXE)

Language:
English (United States)

Common path:
C:\users\{user}\downloads\programs\ummyvd-web-loader.exe

Digital Signature
Signed by:
Magicbit, Inc

Authority:
COMODO CA Limited

Valid from:
4/21/2014 7:00:00 AM

Valid to:
4/21/2017 6:59:59 AM

Subject:
CN="Magicbit, Inc", O="Magicbit, Inc", STREET="901 N. Pitt Street, Suite 325", L=Alexandria, S=VA, PostalCode=22314, C=US

Issuer:
CN=COMODO RSA Code Signing CA, O=COMODO CA Limited, L=Salford, S=Greater Manchester, C=GB

Serial number:
00B5B2652535A2ACE1ACBFF9D5D7816AD4

File PE Metadata
Compilation timestamp:
3/4/2016 7:40:13 PM

OS version:
5.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
2.25

CTPH (ssdeep):
24576:yx5W+AACF9lgGGCFQBzJ2BBSdaCp/nubZYLFGx7bUe2b+wGQW:2snWZJ2zS8PZY+ibDGQW

Entry address:
0x1603B0

Entry point:
55, 8B, EC, 83, C4, F0, B8, 10, 80, 55, 00, E8, 94, A7, EA, FF, A1, 44, 5F, 56, 00, 8B, 00, E8, 60, B9, FA, FF, A1, 44, 5F, 56, 00, 8B, 00, B2, 01, E8, 72, D6, FA, FF, 8B, 0D, 2C, 5D, 56, 00, A1, 44, 5F, 56, 00, 8B, 00, 8B, 15, EC, 55, 55, 00, E8, 52, B9, FA, FF, A1, 44, 5F, 56, 00, 8B, 00, E8, AA, BA, FA, FF, E8, A9, 65, EA, FF, 90, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00...
 
[+]

Entropy:
6.5976

Developed / compiled with:
Microsoft Visual C++

Code size:
1.4 MB (1,436,672 bytes)

The file ummyvd-web-loader.exe has been seen being distributed by the following 50 URLs.

http://videodownloader.ummy.net/.../UmmyVD-Web-Loader-[148-yt-B7LyyR1YV2M].exe

http://videodownloader.ummy.net/.../UmmyVD-Web-Loader-[113-yt-bF0yKlpK2So].exe

http://videodownloader.ummy.net/.../UmmyVD-Web-Loader-[148-yt-raROM_Y8q38].exe

http://videodownloader.ummy.net/.../UmmyVD-Web-Loader-[148-yt-hHUbLv4ThOo].exe

http://videodownloader.ummy.net/.../UmmyVD-Web-Loader-[148-yt-Qh6sJzGfcvo].exe

http://videodownloader.ummy.net/.../UmmyVD-Web-Loader-[130-yt-LulEXljbM1U].exe

http://videodownloader.ummy.net/.../UmmyVD-Web-Loader-[148-yt-uxeb-C_h75Y].exe

http://videodownloader.ummy.net/.../UmmyVD-Web-Loader-[148-yt-GmtHJykxSrw].exe

http://videodownloader.ummy.net/.../UmmyVD-Web-Loader-[148-yt-ux1gDe8nqws].exe

http://videodownloader.ummy.net/.../UmmyVD-Web-Loader-[148-yt-wi3paw3nxds].exe

http://videodownloader.ummy.net/.../UmmyVD-Web-Loader-[148-yt-Sa4JDbdv4Os].exe

http://videodownloader.ummy.net/.../UmmyVD-Web-Loader-[113-yt-BWCSva5D7-k].exe

http://videodownloader.ummy.net/.../UmmyVD-Web-Loader-[130-yt-9qU4X9wzhEw].exe

http://videodownloader.ummy.net/.../UmmyVD-Web-Loader-[148-yt-EV6QpAiQCjc].exe

http://videodownloader.ummy.net/.../UmmyVD-Web-Loader-[148-yt-T6Y-3Lfeuz4].exe

http://videodownloader.ummy.net/.../UmmyVD-Web-Loader-[148-yt-P-sKjGkSN-s].exe

http://videodownloader.ummy.net/.../UmmyVD-Web-Loader-[148-yt-9ejaqIh86Ow].exe

http://videodownloader.ummy.net/.../UmmyVD-Web-Loader-[148-yt-pg_QiiI05Rs].exe

http://videodownloader.ummy.net/.../UmmyVD-Web-Loader-[148-yt-mE8acUkUxEw].exe

http://videodownloader.ummy.net/.../UmmyVD-Web-Loader-[148-yt-Tyr-paHKmc4].exe

http://videodownloader.ummy.net/.../UmmyVD-Web-Loader-[148-yt-FBwC0dVkTD0].exe

http://videodownloader.ummy.net/.../UmmyVD-Web-Loader-[148-yt-4CEaY1NVdUs].exe

http://videodownloader.ummy.net/.../UmmyVD-Web-Loader-[148-yt-eVTXPUF4Oz4].exe

http://videodownloader.ummy.net/.../UmmyVD-Web-Loader-[148-yt-F1Fc6gU9mzk].exe

http://videodownloader.ummy.net/.../UmmyVD-Web-Loader-[148-yt-wo018cHcoOY].exe

http://videodownloader.ummy.net/.../UmmyVD-Web-Loader-[148-yt-8iR6JgODHts].exe

http://videodownloader.ummy.net/.../UmmyVD-Web-Loader-[148-yt-KgE-GIw7qhM].exe

http://videodownloader.ummy.net/.../UmmyVD-Web-Loader-[113-yt-Q_yw3ivhBq0].exe

http://videodownloader.ummy.net/.../UmmyVD-Web-Loader-[148-yt-1cSOIIS8DRc].exe

http://videodownloader.ummy.net/.../UmmyVD-Web-Loader-[113-yt-lALbb3vEZi0].exe

Latest 30 of 528 download URLs

Remove ummyvd-web-loader.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.