home

rsacardconversionutility.exe

RSA Desktop Component

RSA Security LLC

It is set to automatically execute when any user logs into Windows (through the local user run registry setting) with the name ‘RSA Card Conversion Utility’.
Publisher:
RSA, The Security Division of EMC.  (signed by RSA Security LLC)

Product:
RSA Desktop Component

Description:
RSA Card Conversion Utility

Version:
8.1.0.82

MD5:
1428e408814baa3414720b61b9c1d56b

SHA-1:
ae932aa9ace6e41ae6a5f545d181c0639110bfac

SHA-256:
6ff6ee6ea41a4045c50e310cb4ec894dc88e6ce1467c221d5a00ee7226cfc93f

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
4/19/2024 2:25:22 PM UTC  (today)

File size:
4.8 MB (5,000,840 bytes)

Product version:
8.1.0.82

Copyright:
Copyright © 2008-2011 EMC Corporation

Trademarks:
RSA, The Security Division of EMC.

File type:
Executable application (Win64 EXE)

Language:
English (United States)

Common path:
C:\Program Files\common files\rsa shared\rsa card conversion utility\rsacardconversionutility.exe

Digital Signature
Signed by:
RSA Security LLC

Authority:
Thawte, Inc.

Valid from:
3/24/2011 1:00:00 AM

Valid to:
3/24/2012 12:59:59 AM

Subject:
CN=RSA Security LLC, OU=Identity Management & Protection, O=RSA Security LLC, L=Bedford, S=Massachusetts, C=US

Issuer:
CN=Thawte Code Signing CA - G2, O="Thawte, Inc.", C=US

Serial number:
31BB5519DAF7864D66BC51B0DF11952A

File PE Metadata
Compilation timestamp:
7/13/2011 10:36:47 PM

OS version:
5.2

OS bitness:
Win64

Subsystem:
Windows GUI

Linker version:
9.0

CTPH (ssdeep):
98304:6/coC0/YeuUmmGy9oH649rVgafd9zfxFD5PDO0OSRBzagCSdJRnOLqfFES/noJ:6/coC0/YeuUmmGy9oH39fd9z5FD5PDO/

Entry address:
0x1D2D84

Entry point:
48, 83, EC, 28, E8, B7, 05, 00, 00, 48, 83, C4, 28, E9, F6, FC, FF, FF, CC, CC, CC, CC, CC, CC, CC, CC, CC, CC, CC, CC, CC, CC, CC, CC, 66, 66, 0F, 1F, 84, 00, 00, 00, 00, 00, 48, 3B, 0D, 79, CA, 21, 00, 75, 11, 48, C1, C1, 10, 66, F7, C1, FF, FF, 75, 02, F3, C3, 48, C1, C9, 10, E9, 29, 06, 00, 00, CC, 48, 89, 5C, 24, 08, 48, 89, 74, 24, 10, 57, 48, 83, EC, 20, 8B, F2, 48, 8B, D9, F6, C2, 02, 74, 2A, 44, 8B, 41, F8, 4C, 8D, 0D, 6C, 07, 00, 00, BA, 18, 00, 00, 00, E8, D2, 01, 00, 00, 40, F6, C6, 01, 74, 09...
 
[+]

Code size:
2.6 MB (2,728,448 bytes)

Startup File (All Users Run)
Registry location:
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run

Name:
RSA Card Conversion Utility

Command:
C:\Program Files\common files\rsa shared\rsa card conversion utility\rsacardconversionutility.exe -background


Scan rsacardconversionutility.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.