home

rsacardconversionutility.exe

RSA Smart Card Middleware

RSA Security Inc.

It is set to automatically execute when any user logs into Windows (through the local user run registry setting) with the name ‘RSA Card Conversion Utility’.
Publisher:
RSA, The Security Division of EMC.  (signed by RSA Security Inc.)

Product:
RSA Smart Card Middleware

Version:
3.0.1.0021

MD5:
5bc9474f3037bacfaa27df7187f0446c

SHA-1:
847ff8b019e2760a9876d0a7248ae94350bd4206

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
4/25/2024 3:07:21 PM UTC  (today)

File size:
1.4 MB (1,520,336 bytes)

Product version:
3.0.1.0021

Copyright:
Copyright © 1999-2008 RSA Security Inc.

Trademarks:
RSA, The Security Division of EMC.

File type:
Executable application (Win32 EXE)

Language:
English (United States)

Common path:
C:\Program Files\common files\rsa shared\rsa card conversion utility\rsacardconversionutility.exe

Digital Signature
Signed by:
RSA Security Inc.

Authority:
Thawte Consulting (Pty) Ltd.

Valid from:
9/30/2008 8:27:17 PM

Valid to:
10/15/2011 4:47:15 PM

Subject:
CN=RSA Security Inc., OU=IT Security, O=RSA Security Inc., L=Bedford, S=Massachusetts, C=US

Issuer:
CN=Thawte Code Signing CA, O=Thawte Consulting (Pty) Ltd., C=ZA

Serial number:
69A62373C5929556C26284FAFDE2817F

File PE Metadata
Compilation timestamp:
11/26/2008 1:59:20 PM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
8.0

CTPH (ssdeep):
24576:cJem8xmH8k5ISRbJ3q8+TEyRXSx3uAsVyIHMsCCzOl2r5x593FTLvhowQWd9IHjx:Iem8xmH8k5ISRV3q1TEyRfdLVx593FTk

Entry address:
0xBF4C5

Entry point:
E8, 96, 05, 00, 00, E9, 36, FD, FF, FF, 53, 8A, 5C, 24, 08, F6, C3, 02, 56, 8B, F1, 74, 24, 57, 68, 22, FC, 4B, 00, 8D, 7E, FC, FF, 37, 6A, 0C, 56, E8, D2, 01, 00, 00, F6, C3, 01, 74, 07, 57, E8, 62, F7, FF, FF, 59, 8B, C7, 5F, EB, 13, E8, 1D, 07, 00, 00, F6, C3, 01, 74, 07, 56, E8, 4C, F7, FF, FF, 59, 8B, C6, 5E, 5B, C2, 04, 00, 3B, 0D, 20, 8C, 51, 00, 75, 02, F3, C3, E9, CD, 05, 00, 00, CC, FF, 25, A0, 47, 4D, 00, FF, 25, B4, 47, 4D, 00, FF, 25, B8, 47, 4D, 00, 6A, 14, 68, A0, B4, 4F, 00, E8, 72, 04, 00...
 
[+]

Entropy:
5.7160

Code size:
844 KB (864,256 bytes)

Startup File (All Users Run)
Registry location:
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run

Name:
RSA Card Conversion Utility

Command:
C:\Program Files\common files\rsa shared\rsa card conversion utility\rsacardconversionutility.exe -background


Scan rsacardconversionutility.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.