» MagicMRSPC.dll
Overview
Analysis
File Details
Behaviors (1)

MagicMRSPC.dll

DreamSecurity MagicMRSPC

Dreamsecurity Co., Ltd.

File name:

MagicMRSPC.dll

Publisher:

DreamSecurity (signed by Dreamsecurity Co., Ltd.)

Product:

DreamSecurity MagicMRSPC

Description:

MagicMRS certificate copy Library

Version:

1, 0, 1, 8

MD5:

a4e880d3fdb6cc184220055dc975b831

SHA-1:

390cbf3fd7896ed09e0072e2dfaca822709e0a5d

SHA-256:

4f8b6e340558f6ee73e3434764acbef85859b75f87388823722b03b53306b2e3

Scanner detections:

0 / 68

Status:

Clean (as of last analysis)

Analysis date:

12/28/2024 7:45:43 PM UTC (today)

File size:

266.9 KB (273,280 bytes)

Product version:

1, 0, 1, 8

Original file name:

MagicMRSPC.dll

File type:

Dynamic link library (Win32 DLL)

Common path:

C:\Program Files\dreamsecurity\smartmobilesign\magicmrspc.dll

Digital Signature

Signed by:

Dreamsecurity Co., Ltd.

Authority:

thawte, Inc.

Valid from:

4/12/2016 9:00:00 AM

Valid to:

7/13/2018 8:59:59 AM

Subject:

CN="Dreamsecurity Co., Ltd.", O="Dreamsecurity Co., Ltd.", L=Songpa, S=Seoul, C=KR

Issuer:

CN=thawte SHA256 Code Signing CA, O="thawte, Inc.", C=US

Serial number:

5A173A74657F8CF8A7AE91B34A3D7641

File PE Metadata

Compilation timestamp:

9/2/2016 2:03:42 PM

OS version:

4.0

OS bitness:

Win32

Subsystem:

Windows GUI

Linker version:

6.0

CTPH (ssdeep):

3072:/l8QEkUVM1XvPwlwiD69dY0lXteKYfw43hgPIdDY8nPn2unxlyOd2vgI:ueUVMpvPwSM/KYfw46PoDY8Pn22p

Entry address:

0xB6C3

Entry point:

55, 8B, EC, 53, 8B, 5D, 08, 56, 8B, 75, 0C, 57, 8B, 7D, 10, 85, F6, 75, 09, 83, 3D, 10, 94, 03, 10, 00, EB, 26, 83, FE, 01, 74, 05, 83, FE, 02, 75, 22, A1, C8, B3, 03, 10, 85, C0, 74, 09, 57, 56, 53, FF, D0, 85, C0, 74, 0C, 57, 56, 53, E8, E7, FE, FF, FF, 85, C0, 75, 04, 33, C0, EB, 4E, 57, 56, 53, E8, ED, 58, FF, FF, 83, FE, 01, 89, 45, 0C, 75, 0C, 85, C0, 75, 37, 57, 50, 53, E8, C3, FE, FF, FF, 85, F6, 74, 05, 83, FE, 03, 75, 26, 57, 56, 53, E8, B2, FE, FF, FF, 85, C0, 75, 03, 21, 45, 0C, 83, 7D, 0C, 00... 
[+]

Entropy:

6.2783

Developed / compiled with:

Microsoft Visual C++

Code size:

76 KB (77,824 bytes)

ActiveX Install

Name:

{6586A775-DEE1-4E13-A37F-395ABB1C8DEA}

Scan MagicMRSPC.dll - Powered by Reason Core Security

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.