File scan report
Verdict Safe
Is Magic
No antivirus engine detected the Chrome extension, and one sandbox found no offensive behavior, though its direct-IP contacts lack a completed reputation check.
Read the whole reasonShow less
Moderate evidence · No engine flags it, but no publisher signature confirms who made it.
Good practice2 tips
We found nothing harmful in this file.
Open it only if you trust the person or website it came from.
Keep your security software and system updates switched on.
No scanner can promise a file is 100% safe.
Reads the latest antivirus results for this file's hash. Nothing is uploaded.
Antivirus results
0 of 62 flagged
- Flagged 0
- No detection 62
- No result 14
- Code signing Not applicable
- Test run Completed
- First seen 12mo ago
Chapter 02
Why we think so
4 points against it and 5 in its favour, checked against the scan evidence.
The reasoning behind this verdict
All 62 antivirus engines that checked it were free of detections, including 17 major antivirus engines, and the completed sandbox run produced no malware verdict or offensive techniques. Direct-IP traffic was observed, but its reputation was not fully checked; this limits certainty without outweighing the otherwise consistent evidence.
The Chrome extension received no malicious or suspicious detections from 76 engines, with all 17 reporting major antivirus engines remaining silent. One completed sandbox run observed browser-extension techniques and but no offensive techniques, persistence indicators, or malware verdict. Ten extracted files were inspected without a malicious-child finding, although their individual verdicts remain unknown. A medium-severity direct-IP behaviour rule matched after seven external unicast contacts, and no complete host-reputation cross-check is available. No YARAify, CIRCL, or MalwareBazaar intelligence corroborated malware activity.
What We Detected
No malicious or suspicious detection appeared among 76 antivirus engines. Seventeen major antivirus engines, including Avast, BitDefender, ESET-NOD32, Kaspersky, and Microsoft, reported no detection. Research intelligence also returned no YARAify rules, CIRCL match, or MalwareBazaar record.
Threat Behavior
One sandbox run loaded and unpacked the Chrome extension. It recorded T1176 and T1185, which are compatible with extension and browser activity, but found no offensive techniques, persistence indicators, or malicious sandbox verdict. A direct-IP behaviour rule matched because seven external unicast IP addresses were contacted without recorded application domains. Because contactedHosts is unavailable, those contacts do not have a complete reputation result. Ten extracted files were inspected without a malicious-child finding, but their individual classifications remain unknown.
What To Do Now
Install the extension only from its official browser-store listing or verified publisher channel, and review the permissions Chrome requests. Keep browser and security software enabled, especially if the package came from an unofficial download site.
Where this verdict could be wrong2 caveats
- One of our behaviour rules fired because the sandbox recorded seven external unicast IP addresses without application domains; no complete host-reputation result is available because no contacted-host reputation result was saved.
- The 10 extracted files it created have unknown individual verdicts despite the absence of a known-malicious dropped file, limiting assurance about their contents.
These are the assessment's weak points. If you believe one applies to your file, report the verdict and we'll re-review it.
- 0/62 engines reported malicious or suspicious detections.
- No major antivirus engines flagged it and 17 major antivirus engines reported it clean.
- No offensive techniques were mapped and no sandbox returned a malicious verdict.
- No dropped file is known to be malicious after 10 inspected children.
- No community YARA rule matched, the hash is not in the known-software reference database, and the hash is not listed in the MalwareBazaar malware database.
- One of our behaviour rules fired for seven external unicast IP contacts.
- No contacted-host reputation result was saved, so no complete reputation cross-check exists for observed IP contacts.
- All 10 extracted files it created retain unknown individual verdicts.
- A community reputation score of 0 and a count of 12 submissions provide limited reputation history.
6 sources checked · 5 complete · 1 partial. See every source
Chapter 03
What it did in our test
It ran in our isolated test environment; no test environment rated what it did as risky.
Test run summary
Capture complete- 2sandbox rule tags
- 5spawned processes
- 7network contacts
- 18filesystem & mutex artifacts
Includes 2 mapped techniques, every process, file, registry and network entry and 10 dropped files.
Show the technical evidenceChapter 04
Technical details
None of the 62 antivirus engines that checked it flag it.
Sources checked
Every check behind this verdict
6 sources checked · 5 complete · 1 partial. Complete means the check returned a usable result; it does not mean the file is safe.
File fingerprint
- Last analyzed
- Sep 9, 2026, 6:27 PM UTC
- SHA-256
df9a8a4ea4f83d656fd94898011ebb3e75f8be400a439fcbb75c013a02034f22- SHA-1
c9f08109c54389b47b67af92bbf506667d2a3033- MD5
7c6fe69b0571a2a7982ccdd442a2df21
About this file
MagicActions_Latest.crx is a Google Chrome Extension file of 173.7 kB.
- Type and size
- Google Chrome Extension · 173.7 kB
- Signer
- Not applicable
- First seen
- Oct 30, 2025On VirusTotal.
- Submitted by
- 10 distinct sources
First scanned
Includes every engine result (76) and how widely the file has been seen.
Show the technical evidenceChapter 05
Questions & answers
Short answers to the 6 questions people ask most about this file.
Is MagicActions_Latest.crx safe?
What is MagicActions_Latest.crx?
How many antivirus engines detected MagicActions_Latest.crx?
What is the SHA-256 hash of MagicActions_Latest.crx?
Is it safe to open MagicActions_Latest.crx?
How up to date is this analysis of MagicActions_Latest.crx?
Community
Member reviews and reports for this exact file hash.