home

RsaCardUtility.exe

RSA Desktop Component

RSA Security LLC

It is set to automatically execute when any user logs into Windows (through the local user run registry setting) with the name ‘RSA Card Utility’.
Publisher:
EMC Corporation  (signed by RSA Security LLC)

Product:
RSA Desktop Component

Description:
RSA Card Utility

Version:
8.1.0.82

MD5:
267171476da26c464467b736e3eb0a96

SHA-1:
bdbfbbdf594b3dd626ffb32fc3cdb3f405c9f3f5

SHA-256:
ebb665d2d631c9a994d736be84396381d2f45af536795a8a9515a367a03ff01e

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
4/25/2024 4:57:17 PM UTC  (today)

File size:
1010.1 KB (1,034,352 bytes)

Product version:
8.1.0.82

Copyright:
Copyright © 2009-2011 EMC Corporation

Trademarks:
EMC Corporation

Original file name:
RsaCardUtility.exe

File type:
Executable application (Win32 EXE)

Language:
Language Neutral

Common path:
C:\Program Files\common files\rsa shared\rsa.net\rsacardutility.exe

Digital Signature
Signed by:
RSA Security LLC

Authority:
Thawte, Inc.

Valid from:
3/24/2011 1:00:00 AM

Valid to:
3/24/2012 12:59:59 AM

Subject:
CN=RSA Security LLC, OU=Identity Management & Protection, O=RSA Security LLC, L=Bedford, S=Massachusetts, C=US

Issuer:
CN=Thawte Code Signing CA - G2, O="Thawte, Inc.", C=US

Serial number:
31BB5519DAF7864D66BC51B0DF11952A

File PE Metadata
Compilation timestamp:
7/13/2011 10:40:44 PM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
8.0

.NET CLR dependent:
Yes

CTPH (ssdeep):
6144:p5YENLbh+qJABnNkSgOn6Aova5YENLbh+qJABnNkSgq:pVR9VJABnuSgONoiVR9VJABnuSgq

Entry address:
0x9060E

Entry point:
FF, 25, 00, 20, 40, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00...
 
[+]

Developed / compiled with:
Microsoft Visual C# / Basic .NET

Code size:
570 KB (583,680 bytes)

Startup File (All Users Run)
Registry location:
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run

Name:
RSA Card Utility

Command:
C:\Program Files\common files\rsa shared\rsa.net\rsacardutility.exe


Scan RsaCardUtility.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.