Open-source atomic malware analysis

Analyze another

ImageMagick/ImageMagick

PE
Verdict: BENIGN
AI Legitimate ImageMagick installer
Mal-ecule
O₂(AsC)H₆(Db₄F₂Mg₂Os₅Po₅U)Md₃(Bi₆PaSi₂)
Size 21.2 MB download
First seen 21 days ago
Analyzed 21 days ago
Ecosystem github
Source github.com
ImageMagick-ImageMagick-7.1.2-29-ImageMagick-7.1.2-29-Q8-x86-dll.exe pe
0x0 4d5a50000200000004000f00ffff0000 MZP.............
0x10 b80000000000000040001a0000000000 ........@.......
0x20 00000000000000000000000000000000 ................
0x30 00000000000000000000000000010000 ................
0x40 ba10000e1fb409cd21b8014ccd219090 ........!..L.!..
0x50 546869732070726f6772616d206d7573 This program mus
0x60 742062652072756e20756e6465722057 t be run under W
0x70 696e33320d0a24370000000000000000 in32..$7........
0x80 00000000000000000000000000000000 ................
0x90 00000000000000000000000000000000 ................
0xa0 00000000 ....
0xa18c 6600740077006100720065005c004300 f.t.w.a.r.e.\.C.
0xa19c 6f006400650047006500610072005c00 o.d.e.G.e.a.r.\.
0xa1ac 4c006f00630061006c00650073000000 L.o.c.a.l.e.s...
0xa1bc 53006f00660074007700610072006500 S.o.f.t.w.a.r.e.
0xa1cc 5c0042006f0072006c0061006e006400 \.B.o.r.l.a.n.d.
0xa1dc 5c004c006f00630061006c0065007300 \.L.o.c.a.l.e.s.
0xa1ec 0000000053006f006600740077006100 ....S.o.f.t.w.a.
0xa1fc 720065005c0042006f0072006c006100 r.e.\.B.o.r.l.a.
0xa20c 6e0064005c00440065006c0070006800 n.d.\.D.e.l.p.h.
0xa21c 69005c004c006f00630061006c006500 i.\.L.o.c.a.l.e.
0xa22c 7300000000000000 s.......
0x19f94 c6e81afeffff598bd88bc35f5e5b8be5 ......Y...._^[..
0x19fa4 5dc38bc0558bec83c4f05356578bf08d ]...U.....SVW...
0x19fb4 7df0a5a5a5a58bda8bc3e85dcefeff66 }..........]...f
0x19fc4 837df0017422a1b4a44b008338007411 .}..t"...K..8.t.
0x19fd4 8b35b4a44b008b368d55f08bc3ffd6eb .5..K..6.U......
0x19fe4 07b010e860a9feff5f5e5b8be55dc390 ....`..._^[..]..
0x19ff4 558bec81c410ffffff53565733db899d U........SVW3...
0x1a004 10ffffff899d14ffffff899d18ffffff ................
0x1a014 899d1cffffff899d20ffffff899d24ff ........ .....$.
0x1a024 ffff895de4894dd88955dc8945e033c0 ...]..M..U..E.3.
0x1a034 556833b6410064ff306489208b45e085 Uh3.A.d.0d. .E..
0x1a044 c074078b55d885d2750733dbe9b80900 .t..U...u.3.....
0x1a054 0083cfff8b550c428955d0 .....U.B.U.
0x22224 feffc3e91042feffebeb5b59595dc300 .....B....[YY]..
0x22234 b0040200ffffffff0300000054004d00 ............T.M.
0x22244 50000000b0040200ffffffff04000000 P...............
0x22254 540045004d00500000000000b0040200 T.E.M.P.........
0x22264 ffffffff0b0000005500530045005200 ........U.S.E.R.
0x22274 500052004f00460049004c0045000000 P.R.O.F.I.L.E...
0x22284 538b0885c9740583e9048b093bca0f9f S....t......;...
0x22294 c3e8ca57feff8bc35bc38bc0558bec83 ...W....[...U...
0x222a4 c4ec53565733db895dfc894df48955f8 ..SVW3..]..M..U.
0x222b4 8bf833c05568d62f420064ff30648920 ..3.Uh./B.d.0d.
0x222c4 33db33c08945ec8d45ec506a008d45f0 3.3..E..E.Pj..E.
0x222d4 506a008b45f85057e8a7b1feff85c00f Pj..E.PW........
0x222e4 85d70000008b45f03b450c740c8b45f0 ......E.;E.t..E.
0x222f4 3b4508 ;E.
0x245d8 44240cc6442410008d54240c33c9b818 D$..D$...T$.3...
0x245e8 524200e8ecfdffff8b4424083bc6740a RB.......D$.;.t.
0x245f8 b806000000e8dafcffff83c4145f5e5b ............._^[
0x24608 c3000000b0040200ffffffff16000000 ................
0x24618 4c007a006d0061004400650063006f00 L.z.m.a.D.e.c.o.
0x24628 6400650020006600610069006c006500 d.e. .f.a.i.l.e.
0x24638 64002000280025006400290000000000 d. .(.%.d.).....
0x24648 c6401100c6401000c38d4000538bd856 .@...@....@.S..V
0x24658 518b033b430475278bcc8b73108bd38b Q..;C.u'...s....
0x24668 c6ff168943148b0b030c24894b04833c ....C.....$.K..<
0x24678 2400750bc7431801000000b0ffeb068b $.u..C..........
0x24688 13ff038a025a5e5bc3909090538bd833 .....Z^[....S..3
0x24698 c05689430433d2 .V.C.3.

Objectives

Micro-behaviors

Metadata

notable severity, 100% confident.
signed Authenticode chain CN: ImageMagick Studio LLC

file

notable severity, 86% confident.
sfx/inno-setup Inno Setup extraction failed

20 of 31 traits shown

Identity

SHA-256 2beeba79b30c61f95295a6e9816e8fe976e4b130f11ec32acef0e003fadfd209
Filename ImageMagick-ImageMagick-7.1.2-29-ImageMagick-7.1.2-29-Q8-x86-dll.exe
Package ImageMagick/ImageMagick

Origin

Source harvest
Feed github.com
Ecosystem github
Domain github.com

Timeline

First seen 2 Aug 2026 13:20 UTC
First analyzed 2 Aug 2026 18:20 UTC
Last analyzed 2 Aug 2026 18:20 UTC
Last updated 2 Aug 2026 18:20 UTC

Labeling

Label unknown
Label source harvest
Traits version d9759