home

cricut-magick.exe

Provo Craft & Novelty, Inc.

This is installed with Cricut Design Space Client.
Publisher:
Provo Craft & Novelty, Inc.  (signed and verified)

MD5:
cf5c74ff3564533666f61c69585ada22

SHA-1:
7054c4bdc57e861326816aec2ff80b9b92fbcecf

SHA-256:
2fb4569205477aaa49faf74c47252bc2c923ece3a2cb439540c7b8047077bc14

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
4/25/2024 4:15:37 PM UTC  (today)

File size:
3.5 MB (3,628,640 bytes)

File type:
Executable application (Win32 EXE)

Common path:
C:\users\{user}\appdata\roaming\cricutdesignspace3\utils\cricut-magick.exe

Digital Signature
Signed by:
Provo Craft & Novelty, Inc.

Authority:
Symantec Corporation

Valid from:
9/11/2016 6:00:00 PM

Valid to:
9/12/2019 5:59:59 PM

Subject:
CN="Provo Craft & Novelty, Inc.", O="Provo Craft & Novelty, Inc.", L=South Jordan, S=Utah, C=US, SERIALNUMBER=609817-0142, OID.2.5.4.15=Private Organization, OID.1.3.6.1.4.1.311.60.2.1.2=Utah, OID.1.3.6.1.4.1.311.60.2.1.3=US

Issuer:
CN=Symantec Class 3 Extended Validation Code Signing CA - G2, OU=Symantec Trust Network, O=Symantec Corporation, C=US

Serial number:
46331E4D872B5E5D3AC718EA9F7C2261

File PE Metadata
Compilation timestamp:
2/7/2017 4:54:13 PM

OS version:
6.0

OS bitness:
Win32

Subsystem:
Windows Console

Linker version:
14.0

Entry address:
0x1BAB1A

Entry point:
E8, FC, 10, 00, 00, E9, 87, FE, FF, FF, 55, 8B, EC, 6A, 00, FF, 15, 1C, 13, 68, 00, FF, 75, 08, FF, 15, 18, 13, 68, 00, 68, 09, 04, 00, C0, FF, 15, 3C, 11, 68, 00, 50, FF, 15, 58, 11, 68, 00, 5D, C3, 55, 8B, EC, 81, EC, 24, 03, 00, 00, 6A, 17, E8, F8, 3E, 0C, 00, 85, C0, 74, 05, 6A, 02, 59, CD, 29, A3, 28, 0E, 76, 00, 89, 0D, 24, 0E, 76, 00, 89, 15, 20, 0E, 76, 00, 89, 1D, 1C, 0E, 76, 00, 89, 35, 18, 0E, 76, 00, 89, 3D, 14, 0E, 76, 00, 66, 8C, 15, 40, 0E, 76, 00, 66, 8C, 0D, 34, 0E, 76, 00, 66, 8C, 1D, 10...
 
[+]

Entropy:
6.6355

Code size:
2.5 MB (2,618,880 bytes)

The file cricut-magick.exe has been discovered within the following program.

Cricut Design Space Client  by Provo Craft
www.cricut.com/design
About 1% of users remove it
 
Powered by Should I Remove It?

Scan cricut-magick.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.