home

magiclinenpiz.exe

MagicLine4NP

Dreamsecurity Co., Ltd.

It is set to automatically execute when any user logs into Windows (through the local user run registry setting) with the name ‘MagicLine4NPIZ’. This is installed with MagicLine4NPIZ.
Publisher:
Dreamsecurity  (signed by Dreamsecurity Co., Ltd.)

Product:
MagicLine4NP

Version:
1.0.1.4

MD5:
0349aeb48b3c267912321b6b9f454f60

SHA-1:
bf73b225eca717badaabd6cf178392011c3dde3c

SHA-256:
94b639d1b9d4cdca0c6832643cec831ce1888709339e74ce47f76dfc690cbd3c

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
12/28/2024 8:41:44 PM UTC  (today)

File size:
5 MB (5,231,936 bytes)

Product version:
1.0.1.4

Copyright:
Dreamsecurity Co., Ltd.

Original file name:
MagicLineNP.exe

File type:
Executable application (Win32 EXE)

Common path:
C:\Program Files\dreamsecurity\magicline4npiz\magiclinenpiz.exe

Digital Signature
Signed by:
Dreamsecurity Co., Ltd.

Authority:
thawte, Inc.

Valid from:
4/12/2016 9:00:00 AM

Valid to:
7/13/2018 8:59:59 AM

Subject:
CN="Dreamsecurity Co., Ltd.", O="Dreamsecurity Co., Ltd.", L=Songpa, S=Seoul, C=KR

Issuer:
CN=thawte SHA256 Code Signing CA, O="thawte, Inc.", C=US

Serial number:
5A173A74657F8CF8A7AE91B34A3D7641

File PE Metadata
Compilation timestamp:
2/24/2017 9:29:39 AM

OS version:
5.1

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
10.0

Entry address:
0xBB4000

Entry point:
56, 50, 53, E8, 01, 00, 00, 00, CC, 58, 89, C3, 40, 2D, 00, F0, 1A, 00, 2D, AC, B0, 0B, 10, 05, A3, B0, 0B, 10, 80, 3B, CC, 75, 19, C6, 03, 00, BB, 00, 10, 00, 00, 68, FD, FA, DE, 4A, 68, 91, 9E, 15, 2D, 53, 50, E8, 0A, 00, 00, 00, 83, C0, 00, 89, 44, 24, 08, 5B, 58, C3, 55, 89, E5, 50, 53, 51, 56, 8B, 75, 08, 8B, 4D, 0C, C1, E9, 02, 8B, 45, 10, 8B, 5D, 14, 85, C9, 74, 0A, 31, 06, 01, 1E, 83, C6, 04, 49, EB, F2, 5E, 59, 5B, 58, C9, C2, 10, 00, 3D, 00, 8B, 9F, 46, B3, 59, 0F, 3A, 84, 4D, A9, BC, 11, E7, EE...
 
[+]

Entropy:
7.5057

Code size:
4 MB (4,243,456 bytes)

Startup File (All Users Run)
Registry location:
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run

Name:
MagicLine4NPIZ

Command:
C:\Program Files\dreamsecurity\magicline4npiz\magiclinenpiz.exe


The file magiclinenpiz.exe has been discovered within the following program.

MagicLine4NPIZ  by Dreamsecurity, Inc.
About 7% of users remove it
 
Powered by Should I Remove It?

Scan magiclinenpiz.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.