home

magicdmo.exe

Address Magic Personal Edition

Connected Software Inc

Publisher:
Connected Software, Inc.  (signed by Connected Software Inc)

Product:
Address Magic Personal Edition

Description:
Address book migration utility.

Version:
3, 0, 0, 362

MD5:
b83128674c4cf575dbe25dd0316deda1

SHA-1:
4236d4a630e6eca846095e52b8d2af89a5ee154d

SHA-256:
343c3e7e094f226463df111be91ae1f609224afd42eab85d60ce7ac2606b5b90

Scanner detections:
1 / 68

Status:
Clean  (1 probable false positive detection)

Explanation:
This is mosty likely a false positive detection, the file is probably clean.

Analysis date:
4/30/2024 12:35:32 AM UTC  (today)

Scan engine
Detection
Engine version

Qihoo 360 Security
Win32/Trojan.881
1.0.0.1077

File size:
439.7 KB (450,280 bytes)

Product version:
3, 0, 0, 362

Copyright:
© 1997-2006 Connected Software, Inc. All rights reserved.

Original file name:
Magic.EXE

File type:
Executable application (Win32 EXE)

Language:
English (United States)

Common path:
C:\users\{user}\downloads\magicdmo.exe

Digital Signature
Signed by:
Connected Software Inc

Authority:
VeriSign, Inc.

Valid from:
5/30/2005 5:00:00 PM

Valid to:
6/21/2006 4:59:59 PM

Subject:
CN=Connected Software Inc, OU=Connected Software Inc, OU=Digital ID Class 3 - Microsoft Software Validation v2, O=Connected Software Inc, L=West Newbury, S=Massachusetts, C=US

Issuer:
CN=VeriSign Class 3 Code Signing 2004 CA, OU=Terms of use at https://www.verisign.com/rpa (c)04, OU=VeriSign Trust Network, O="VeriSign, Inc.", C=US

Serial number:
6970F872FBB59599614E61920019DCD7

File PE Metadata
Compilation timestamp:
3/22/2006 4:32:29 PM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
6.0

CTPH (ssdeep):
6144:VtdcUFEDYN88Uy6+9U9rGwE16F6dwJdRqh3zlXb6s4fH2clUDdVXATj4zK5HouoT:bdpWDYP59Ud+vupqP6s4azQ4GaV

Entry address:
0x64A56

Entry point:
B8, A8, 53, 54, 00, 50, 64, FF, 35, 00, 00, 00, 00, 64, 89, 25, 00, 00, 00, 00, 33, C0, 89, 08, 50, 45, 43, 6F, 6D, 70, 61, 63, 74, 32, 00, A4, 6B, 17, 97, 99, A2, 53, F5, 71, 2A, 8C, 73, 5E, 4C, 91, F7, 20, 6F, 43, D1, F2, E9, 1D, 13, 5F, 33, 22, E5, 94, 72, 47, AB, BA, C6, 76, C5, 32, A9, 6E, 91, 71, 3C, 81, 51, 6D, 73, 2C, A2, BC, 72, 20, 4C, CD, CB, 75, FD, 66, 2A, 5F, 20, DF, 39, 01, A3, EC, E7, 4B, BC, 4B, 6A, 95, 84, 5A, DD, C3, AA, 5B, 48, B8, 7F, 4F, F2, CE, 64, 20, 84, 74, E5, B2, CF, 87, F2, 6D...
 
[+]

Entropy:
7.9007

Packer / compiler:
PECompact v2

Code size:
652 KB (667,648 bytes)

Scan magicdmo.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.