» ummyvideodownloader.exe
Overview
Analysis
File Details
Downloads (19)

ummyvideodownloader.exe

UmmyVideoDownloader 1.3.0.2

Magicbit, Inc

The application ummyvideodownloader.exe, “Ummy Video Downloader ” by Magicbit, Inc has been detected as a potentially unwanted program by 3 anti-malware scanners. This is a setup program which is used to install the application. The installer uses the OpenCandy monitzation platform which will donwload and install offers in the setup for potentially unwanted software including ad/search-supported toolbars. The file has been seen being downloaded from videodownloader.ummy.net and multiple other hosts.

File name:

Publisher:

Magicbit, Inc (signed and verified)

Product:

UmmyVideoDownloader 1.3.0.2

Description:

Ummy Video Downloader

Version:

1.3.0.2

MD5:

b70b3b7c329d448972f612e68a27c9dd

SHA-1:

da09f5998bd045fe7b727ea392f0b6ddb4626dae

SHA-256:

7e5ecba9bb6933f4a955617570bef1b64e12771d0ed57a77b432bba6c849df52

Scanner detections:

3 / 68

Status:

Potentially unwanted

Explanation:

Packages the OpenCandy software bundler that offers to install additional software and may include web browser add-ons and toolbars which display advertising (based on publisher settings and geo context).

Analysis date:

11/24/2024 4:59:50 PM UTC (today)

Scan engine

Detection

Engine version

AVG

OpenCandy

2016.0.3150

Dr.Web

Adware.OpenCandy.116

9.0.1.094

ESET NOD32

Win32/OpenCandy.C potentially unsafe (variant)

9.11423

File size:

12 MB (12,611,216 bytes)

Product version:

1.3.0.2

File type:

Executable application (Win32 EXE)

Language:

Language Neutral

Common path:

C:\users\{user}\appdata\local\temp\ummyvideodownloader.exe

Digital Signature

Signed by:

Magicbit, Inc

Authority:

COMODO CA Limited

Valid from:

4/21/2014 2:00:00 AM

Valid to:

4/21/2017 1:59:59 AM

Subject:

CN="Magicbit, Inc", O="Magicbit, Inc", STREET="901 N. Pitt Street, Suite 325", L=Alexandria, S=VA, PostalCode=22314, C=US

Issuer:

CN=COMODO RSA Code Signing CA, O=COMODO CA Limited, L=Salford, S=Greater Manchester, C=GB

Serial number:

00B5B2652535A2ACE1ACBFF9D5D7816AD4

File PE Metadata

Compilation timestamp:

7/9/2014 9:58:13 AM

OS version:

5.0

OS bitness:

Win32

Subsystem:

Windows GUI

Linker version:

2.25

CTPH (ssdeep):

393216:fMCE2UZsw8QUEauMHqzM+4qChDWovdHe6vTtA:fMb5sBQcMchSydrtA

Entry address:

0x113BC

Entry point:

55, 8B, EC, 83, C4, A4, 53, 56, 57, 33, C0, 89, 45, C4, 89, 45, C0, 89, 45, A4, 89, 45, D0, 89, 45, C8, 89, 45, CC, 89, 45, D4, 89, 45, D8, 89, 45, EC, B8, 2C, 00, 41, 00, E8, E8, 51, FF, FF, 33, C0, 55, 68, 9E, 1A, 41, 00, 64, FF, 30, 64, 89, 20, 33, D2, 55, 68, 5A, 1A, 41, 00, 64, FF, 32, 64, 89, 22, A1, 48, 5B, 41, 00, E8, 16, D8, FF, FF, E8, 65, D3, FF, FF, 80, 3D, DC, 2A, 41, 00, 00, 74, 0C, E8, 2B, D9, FF, FF, 33, C0, E8, 80, 32, FF, FF, 8D, 55, EC, 33, C0, E8, E2, A3, FF, FF, 8B, 55, EC, B8, 50, 86... 
[+]

Entropy:

7.9984

Developed / compiled with:

Microsoft Visual C++

Code size:

63.5 KB (65,024 bytes)

The file ummyvideodownloader.exe has been seen being distributed by the following 19 URLs.

http://videodownloader.ummy.net/.../get.php?id=oc&f=&country=do

http://videodownloader.ummy.net/.../get.php?id=oc&f=&country=gr

http://videodownloader.ummy.net/.../get.php?id=oc&f=&country=sg

http://videodownloader.ummy.net/.../get.php?id=oc&f=&country=bo

http://videodownloader.ummy.net/.../get.php?id=oc&f=&country=pl

http://videodownloader.ummy.net/.../get.php?id=oc&f=&country=sa

http://videodownloader.ummy.net/.../get.php?id=oc&f=&country=hu

http://ummyvideodownloader.software.informer.com/.../

http://videodownloader.ummy.net/.../get.php?id=oc&f=&country=ly

http://videodownloader.ummy.net/.../get.php?id=oc&f=&country=ro

http://videodownloader.ummy.net/.../get.php?id=oc&f=&country=br

http://videodownloader.ummy.net/.../get.php?id=oc&f=&country=ae

http://videodownloader.ummy.net/.../get.php?id=oc&f=&country=pt

http://videodownloader.ummy.net/.../get.php?id=oc&f=&country=my

http://videodownloader.ummy.net/.../get.php?id=oc&f=&country=th

http://videodownloader.ummy.net/.../get.php?id=oc&f=&country=eg

http://videodownloader.ummy.net/.../UmmyVideoDownloader_setup.exe

http://videodownloader.ummy.net/.../get.php?id=oc&f=&country=in

http://videodownloader.ummy.net/.../get.php?id=oc&f=&country=id

Remove ummyvideodownloader.exe - Powered by Reason Core Security

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.