home

spc640_psc2p_psc2r_win7_realtek_card_reader_6.1.7600.30124_tc50066500i.exe

This is a setup program which is used to install the application. The file has been seen being downloaded from fs3.pc.toshiba-asia.com.
MD5:
ee430ccceb25415e11f8b2e00268d696

SHA-1:
6f29bdb512b894268275115c754cf04db7573c12

SHA-256:
9fd99e558d4aafb6e09b4717545b0f4684ed300b6ad0c7fc315faa66b70c0e47

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
5/16/2024 11:27:44 PM UTC  (a few moments ago)

File size:
1.8 MB (1,935,489 bytes)

File type:
Executable application (Win32 EXE)

Common path:
C:\users\{user}\downloads\spc640_psc2p_psc2r_win7_realtek_card_reader_6.1.7600.30124_tc50066500i.exe

File PE Metadata
Compilation timestamp:
4/15/2010 6:54:58 AM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
8.0

CTPH (ssdeep):
24576:y7hm1Tl3uiiTuiVDAJk/59DBv4pvLY7Lh/fqYZcctb9kj/QlMwDs4sG+VV/NS:gm1TtjOuipX/5LKqLh7db9Gv+6GglNS

Entry address:
0x82A5

Entry point:
E8, 83, 26, 00, 00, E9, 17, FE, FF, FF, 8B, 44, 24, 04, 85, C0, 56, 8B, F1, C6, 46, 0C, 00, 75, 63, E8, 51, 11, 00, 00, 89, 46, 08, 8B, 48, 6C, 89, 0E, 8B, 48, 68, 89, 4E, 04, 8B, 0E, 3B, 0D, A0, E7, 41, 00, 74, 12, 8B, 0D, BC, E6, 41, 00, 85, 48, 70, 75, 07, E8, 23, 30, 00, 00, 89, 06, 8B, 46, 04, 3B, 05, C0, E5, 41, 00, 74, 16, 8B, 46, 08, 8B, 0D, BC, E6, 41, 00, 85, 48, 70, 75, 08, E8, C4, 28, 00, 00, 89, 46, 04, 8B, 46, 08, F6, 40, 70, 02, 75, 14, 83, 48, 70, 02, C6, 46, 0C, 01, EB, 0A, 8B, 08, 89, 0E...
 
[+]

Entropy:
7.9175  (probably packed)

Code size:
92 KB (94,208 bytes)

The file spc640_psc2p_psc2r_win7_realtek_card_reader_6.1.7600.30124_tc50066500i.exe has been seen being distributed by the following URL.

http://fs3.pc.toshiba-asia.com/toshibasg/drivers/public/.../SPC640_PSC2P_PSC2R_Win7_Realtek_Card_Reader_6.1.7600.30124_TC50066500I.exe

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.