home

trarcsya.sd

ArcSoft, Inc.

It runs as a Windows kernel mode device driver named “TRArcsyA”.
Publisher:
ArcSoft, Inc.  (signed and verified)

MD5:
8b73a7836bf2ab5b5e0320a102703df3

SHA-1:
4a49547bd89b66a89a236f956f30b8ae300593bf

SHA-256:
209eb331b303f0239344bb269f722148365c03f1405dd4d373c769c2d21915e8

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
4/18/2024 6:00:31 PM UTC  (today)

File size:
97.5 KB (99,840 bytes)

Common path:
C:\Program Files\digion\dixim digital tv\trarc\trarcsya.sd

Digital Signature
Signed by:
ArcSoft, Inc.

Authority:
VeriSign, Inc.

Valid from:
7/24/2007 9:00:00 AM

Valid to:
8/15/2010 8:59:59 AM

Subject:
CN="ArcSoft, Inc.", OU=Digital ID Class 3 - Microsoft Software Validation v2, O="ArcSoft, Inc.", L=Fremont, S=California, C=US

Issuer:
CN=VeriSign Class 3 Code Signing 2004 CA, OU=Terms of use at https://www.verisign.com/rpa (c)04, OU=VeriSign Trust Network, O="VeriSign, Inc.", C=US

Serial number:
38B5A40BC3E8552B45588D0EB9B5F330

File PE Metadata
Compilation timestamp:
10/14/2009 4:34:35 PM

OS version:
5.1

OS bitness:
Win32

Subsystem:
Native (none required)

Linker version:
7.10

CTPH (ssdeep):
1536:YvB80kLdMaHx2EqKjZ5Ae2+jzKlCG0cWlPubYwyeHByPXitu+1hABwS2+0qXnX/g:zjBhjZ5Ae2MrsbYwXhxg+1yfI

Entry address:
0xDD0

Entry point:
68, B9, DB, 32, 74, E8, 4A, 3E, 00, 00, 89, F3, 1C, C4, 04, EB, 03, 75, 00, 83, EC, FC, 0F, A4, CA, 01, 8A, 46, FF, 00, DA, 0F, 90, C2, 30, D8, 66, FF, CA, C0, EA, 06, 66, 0F, B6, D1, F6, D0, 0F, BE, D2, FE, C6, 80, DA, 9B, F9, 04, 38, FE, C2, 68, B1, 65, 6E, 4F, 0F, BE, D0, 4E, 66, FF, CA, FE, CA, 80, F6, 91, 66, 0F, B3, EA, F6, D8, 5A, 9C, 50, 0F, BD, D3, FE, C8, 8D, 64, 24, 08, 0F, 85, C7, 03, 00, 00, 60, 80, CE, 33, F6, D8, 60, FE, C8, 80, F9, 28, F6, D8, 66, FF, CA, 66, D3, F2, 30, C3, 66, 0F, BA, FA...
 
[+]

Entropy:
7.8389  (probably packed)

Code size:
89.6 KB (91,776 bytes)

Driver
Display name:
TRArcsyA

Type:
Kernel device driver (KernelDriver)


Scan trarcsya.sd - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.