home

SCardSvr.exe

Smart Card Resource Management Server

While the file properties state the file is developed by 'Microsoft Corporation', this is not the case and it is designed just to look like a legitimate Microsoft system file. The executable SCardSvr.exe, “Smart Card Resource Management Server” has been detected as malware by 4 anti-virus scanners. It runs as a windows Service named “Smart Card”.
Publisher:
Microsoft Corporation*  (Invalid match)

Product:
Microsoft® Windows® Operating System

Description:
Smart Card Resource Management Server

Version:
5.1.2600.5512 (xpsp.080413-2113)

MD5:
618d1e4667fbc12eab2a67db86274f9e

SHA-1:
df1b20ddf94c472a8dc0cf79f4588b3d64535c2d

SHA-256:
d1c73bb99f8524ffcadffc3d5885866a3d70f75c3a92382fa61517ab55288957

Scanner detections:
4 / 68

Status:
Malware

Analysis date:
5/6/2024 7:06:06 PM UTC  (today)

Scan engine
Detection
Engine version

avast!
Sf:Virut-A [Trj]
160126-1

AVG
Win32/Virut.AN
2015.0.4489

Boost by Reason
Optional.Service
188838

Microsoft Security Essentials
Threat.Undefined
1.213.5352.0

File size:
122.5 KB (125,440 bytes)

Product version:
5.1.2600.5512

Copyright:
© Microsoft Corporation. All rights reserved.

Original file name:
SCardSvr.exe

File type:
Executable application (Win32 EXE)

Language:
English (United States)

Common path:
C:\Windows\System32\scardsvr.exe

File PE Metadata
Compilation timestamp:
4/13/2008 8:30:55 PM

OS version:
5.1

OS bitness:
Win32

Subsystem:
Windows Console

Linker version:
7.10

CTPH (ssdeep):
3072:hWsSDT6U3m+/BSBpR8clKm2ruFVCQN6HxHWHgvzRC:/kWCm+/c7R8Hm2ruQHx2OlC

Entry address:
0x3DEF

Entry point:
6A, 28, 68, 08, 14, 00, 01, E8, B9, 02, 00, 00, 33, FF, 57, FF, 15, CC, 10, 00, 01, 66, 81, 38, 4D, 5A, 75, 1F, 8B, 48, 3C, 03, C8, 81, 39, 50, 45, 00, 00, 75, 12, 0F, B7, 41, 18, 3D, 0B, 01, 00, 00, 74, 1F, 3D, 0B, 02, 00, 00, 74, 05, 89, 7D, E4, EB, 27, 83, B9, 84, 00, 00, 00, 0E, 76, F2, 33, C0, 39, B9, F8, 00, 00, 00, EB, 0E, 83, 79, 74, 0E, 76, E2, 33, C0, 39, B9, E8, 00, 00, 00, 0F, 95, C0, 89, 45, E4, 89, 7D, FC, 6A, 01, FF, 15, 1C, 11, 00, 01, 59, 83, 0D, F0, 41, 01, 01, FF, 83, 0D, F4, 41, 01, 01...
 
[+]

Entropy:
5.9234

Developed / compiled with:
Microsoft Visual C++ v7.1

Code size:
73.5 KB (75,264 bytes)

Service
Display name:
Smart Card

Service name:
SCardSvr

Description:
Manages access to smart cards read by this computer. If this service is stopped, this computer will be unable to read smart cards. If this service is disabled, any services that explicitly depend on i

Type:
Win32ShareProcess

Group:
SmartCardGroup

Depends on:
PlugPlay


Remove SCardSvr.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.