smw.sys
Goobzo LTD
The file smw.sys by Goobzo has been detected as adware by 1 anti-malware scanner with very strong indications that the file is a potential threat. It runs as a Windows 64-bit kernel mode device driver named “Search Module UpdateD”.
MD5:
c8a640c0bdb143d4b3d43e1daae03249
SHA-1:
e2f5b02b848017ea246082d91e40eab17b90a0a0
SHA-256:
6f452b581331bc888d69600e9f197ab324465cbd2760c86dca608ae648f1d843
Scanner detections:
1 / 68
Note:
Our current pool of anti-malware engines have not currently detected this file, however based on our own detection heuristics we feel that this file is unwanted.
Analysis date:
4/25/2024 10:11:24 AM UTC (today)
Scan engine
Detection
Engine version
Reason Heuristics
PUP.Goobzo.G
14.8.8.2
File size:
40.4 KB (41,320 bytes)
File type:
Driver (Win64 SYS)
Common path:
C:\Program Files\common files\goobzo\gbupdate\smw.sys
Valid from:
5/2/2013 3:00:00 AM
Valid to:
5/3/2015 2:59:59 AM
Subject:
CN=Goobzo LTD, O=Goobzo LTD, L=Haifa, S=Israel, C=IL
Issuer:
CN=Thawte Code Signing CA - G2, O="Thawte, Inc.", C=US
Serial number:
120B25DDE57B88636AD4D97D23B99C88
CTPH (ssdeep):
768:XqSnSua05pkZzpmSFrsdYC2Ooc4cTWqWkiJKq3IZpelxDjNduRyaQAT9:XddSsH2O+3JxDMr
Driver
Display name:
Search Module UpdateD
Type:
Kernel device driver (KernelDriver)