home

JMCR.SYS

JMB38X Memory Card Reader Driver

Contoso.com(Test)

It runs as a Windows kernel mode device driver named “JMCR”.
Publisher:
JMicron Technology Corp.  (signed by Contoso.com(Test))

Product:
JMB38X Memory Card Reader Driver

Description:
JMicron JMB38X Memory Card Reader Driver

Version:
1.00.13.03 built by: WinDDK

MD5:
5ee25c846a119a75d66a485cf8e77e78

SHA-1:
9fe0777dbc184f53be28b3d55d0ab22865ffe6c6

SHA-256:
ec468157e6833fb468b64fcdcfb0a3dbf5a2764550313eaa9921e1d5c59c7ab7

Scanner detections:
1 / 68

Status:
Clean  (1 probable false positive detection)

Explanation:
This is mosty likely a false positive detection, the file is probably clean.

Analysis date:
4/19/2024 10:56:15 AM UTC  (today)

Scan engine
Detection
Engine version

Vba32 AntiVirus
suspected of Win32.BrokenEmbeddedSignature
3.12.10.0

File size:
84.6 KB (86,672 bytes)

Product version:
1.00.13.03

Copyright:
Copyright (C) JMicron 2005-2007

Original file name:
JMCR.SYS

File type:
Driver (Win32 SYS)

Language:
English (United States)

Common path:
C:\Windows\System32\drivers\jmcr.sys

Digital Signature
Signed by:
Contoso.com(Test)

Authority:
Root Agency

Valid from:
2/22/2008 8:38:41 AM

Valid to:
1/1/2040 12:59:59 AM

Subject:
CN=Contoso.com(Test)

Issuer:
CN=Root Agency

Serial number:
3426589C62564D8C418602E37D7B27EB

File PE Metadata
Compilation timestamp:
5/21/2008 9:32:52 AM

OS version:
5.1

OS bitness:
Win32

Subsystem:
Native (none required)

Linker version:
7.10

CTPH (ssdeep):
1536:QjVd2FS2Lc2HNQX+yooeV3UqOfnYVkNl9vNEf1fW6XCIrgAwckp:MWSJ9qVRfkjQ+IrgAwckp

Entry address:
0x2E54

Entry point:
55, 8B, EC, 83, EC, 54, 53, 8B, 5D, 08, 56, 57, 33, C0, BA, B0, 36, 02, 00, B9, 08, 01, 00, 00, 8B, FA, F3, AB, B8, 14, 38, 02, 00, A3, 18, 38, 02, 00, A3, 14, 38, 02, 00, 89, 1D, F0, 36, 02, 00, 33, C0, 66, 81, 88, 1C, 38, 02, 00, FF, FF, 83, C0, 7C, 3D, 6C, 02, 00, 00, 72, ED, 8B, 43, 18, 8B, 70, 10, 0F, B7, 40, 0C, D1, E8, 83, F8, 17, 76, 03, 6A, 17, 58, 03, C0, 8B, C8, 8B, FA, 8B, D1, C1, E9, 02, F3, A5, 8B, CA, 83, E1, 03, F3, A4, 8D, B8, B0, 36, 02, 00, BE, 42, 2E, 01, 00, A5, A5, A5, A5, 33, F6, 56...
 
[+]

Entropy:
6.4447

Developed / compiled with:
Microsoft Visual C++

Code size:
75.5 KB (77,312 bytes)

Driver
Display name:
JMCR

Type:
Kernel device driver (KernelDriver)

Group:
SCSI Miniport


Scan JMCR.SYS - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.