SmartCardRemoval.exe

SmartCardRemoval monitor service

Estonian Informatics Centre

It runs as a separate (within the context of its own process) windows Service named “Smart Card Removal”.
Publisher:
Estonian Informatics Centre  (signed and verified)

Product:
SmartCardRemoval monitor service

Version:
3.5.6032.458

MD5:
c9475dfb4b366b11dd351d1a18942674

SHA-1:
f14aacdfb80430f9593961f67247961c4f8a2f6a

SHA-256:
c1cfe445a9ae8f0252f625adbf7d6c39cecf7981670ab212cad069ad79d1302b

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
7/10/2025 1:27:51 AM UTC  (today)

File size:
208.5 KB (213,552 bytes)

Product version:
3.5.6032.458

Original file name:
SmartCardRemoval.exe

File type:
Executable application (Win32 EXE)

Language:
English (United States)

Common path:
C:\Program Files\estonian id card\smartcardremoval.exe

Digital Signature
Authority:
Thawte, Inc.

Valid from:
10/17/2011 3:00:00 AM

Valid to:
10/16/2012 2:59:59 AM

Subject:
CN=Estonian Informatics Centre, O=Estonian Informatics Centre, L=Tallinn, S=Harjumaa, C=EE

Issuer:
CN=Thawte Code Signing CA - G2, O="Thawte, Inc.", C=US

Serial number:
7DEFA84B00B2998DD4756E3D8CA6215A

File PE Metadata
Compilation timestamp:
4/3/2012 12:13:20 AM

OS version:
5.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
9.0

CTPH (ssdeep):
3072:/jMwBgIIVMdAaDF+n5blCfJobHR3UgLPaBYYtlTuwvaOxSIT:vzoHxkgLPtYDSwvaOB

Entry address:
0x1ACCE

Entry point:
E8, 8B, 04, 00, 00, E9, D8, FC, FF, FF, FF, 25, 34, 0B, 43, 00, FF, 25, 30, 0B, 43, 00, FF, 25, 2C, 0B, 43, 00, FF, 25, 28, 0B, 43, 00, FF, 25, 24, 0B, 43, 00, FF, 25, 20, 0B, 43, 00, FF, 25, 1C, 0B, 43, 00, FF, 25, 18, 0B, 43, 00, FF, 25, 14, 0B, 43, 00, FF, 25, 10, 0B, 43, 00, FF, 25, 0C, 0B, 43, 00, FF, 25, 08, 0B, 43, 00, FF, 25, 04, 0B, 43, 00, FF, 25, 00, 0B, 43, 00, FF, 25, FC, 0A, 43, 00, FF, 25, F8, 0A, 43, 00, FF, 25, F4, 0A, 43, 00, CC, CC, 68, 16, A8, 41, 00, 64, FF, 35, 00, 00, 00, 00, 8B, 44...
 
[+]

Code size:
148 KB (151,552 bytes)

Service
Display name:
Smart Card Removal

Service name:
SmartCardRemoval

Description:
Cleans up Certificate Store of Estonian ID Card personal sertificates.

Type:
Win32OwnProcess

Depends on:
RpcSs


The file SmartCardRemoval.exe has been discovered within the following program.

www.ria.ee
About 9% of users remove it
 
Powered by Should I Remove It?

Scan SmartCardRemoval.exe - Powered by Reason Core Security