home

JMCR_CFS.SYS

JMB368 ExpressCard CF Adapter Driver

Contoso.com(Test)

It runs as a Windows kernel mode device driver named “JMCR_CFS”.
Publisher:
JMicron Technology Corporation  (signed by Contoso.com(Test))

Product:
JMB368 ExpressCard CF Adapter Driver

Description:
JMicron JMB368 ExpressCard CF Adapter Driver

Version:
1.01.04.07 built by: WinDDK

MD5:
9d3824e189ee26c0ad54db8a76985b39

SHA-1:
015b628cf3bb32a9ea778d92c7ebff969aa937bf

SHA-256:
abfe2908866b03fc1642268c6897a771e0d7d8d8bfb612cf23e49b52ade86857

Scanner detections:
1 / 68

Status:
Clean  (1 probable false positive detection)

Explanation:
This is mosty likely a false positive detection, the file is probably clean.

Analysis date:
4/25/2024 7:38:42 AM UTC  (today)

Scan engine
Detection
Engine version

Vba32 AntiVirus
suspected of Win32.BrokenEmbeddedSignature
3.12.10.4

File size:
51.5 KB (52,752 bytes)

Product version:
1.01.04.07

Copyright:
(C) JMicron Technology Corp. All rights reserved.

Original file name:
JMCR_CFS.SYS

File type:
Driver (Win32 SYS)

Language:
Language Neutral

Common path:
C:\Windows\System32\drivers\jmcr_cfs.sys

Digital Signature
Signed by:
Contoso.com(Test)

Authority:
Root Agency

Valid from:
2/22/2008 8:38:41 AM

Valid to:
1/1/2040 12:59:59 AM

Subject:
CN=Contoso.com(Test)

Issuer:
CN=Root Agency

Serial number:
3426589C62564D8C418602E37D7B27EB

File PE Metadata
Compilation timestamp:
6/24/2008 1:02:56 PM

OS version:
5.1

OS bitness:
Win32

Subsystem:
Native (none required)

Linker version:
7.10

CTPH (ssdeep):
1536:PV5uHEr6+W85M+HoHNZ8lWQ+VuGNpY+Qq:PzS+ZVH08l7+VuGNQq

Entry address:
0x2FDE

Entry point:
55, 8B, EC, 83, EC, 50, 53, 8B, 5D, 08, 56, 57, 33, C0, BA, 20, B2, 01, 00, B9, 0B, 01, 00, 00, 8B, FA, F3, AB, B8, 84, B3, 01, 00, A3, 88, B3, 01, 00, A3, 84, B3, 01, 00, 89, 1D, 60, B2, 01, 00, 33, C0, 66, 81, 88, 8C, B3, 01, 00, FF, FF, 83, C0, 7C, 3D, 6C, 02, 00, 00, 72, ED, 8B, 43, 18, 8B, 70, 10, 0F, B7, 40, 0C, D1, E8, 83, F8, 17, 76, 03, 6A, 17, 58, 03, C0, 8B, C8, 8B, FA, 8B, D1, C1, E9, 02, F3, A5, 8B, CA, 83, E1, 03, F3, A4, 8D, B8, 20, B2, 01, 00, BE, CC, 2F, 01, 00, A5, A5, 6A, 00, 68, 70, B2...
 
[+]

Developed / compiled with:
Microsoft Visual C++

Code size:
43.4 KB (44,416 bytes)

Driver
Display name:
JMCR_CFS

Type:
Kernel device driver (KernelDriver)

Group:
SCSI Miniport


Scan JMCR_CFS.SYS - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.