home

tmp00000001abfafe1a296fd5d3

JsDriver

The file tmp00000001abfafe1a296fd5d3 has been detected as a potentially unwanted program by 7 anti-malware scanners.
Product:
JsDriver

Description:
jsdrv

Version:
1,37,0,196

MD5:
cff68902a3d01c6a5a62b1674cf2fc71

SHA-1:
9efc72910a1f5953870a90e019528c03ac236a53

SHA-256:
47c6edcb47ff13a164191d3517712c04885a78690efd616d79cf1aad500028bf

Scanner detections:
7 / 68

Status:
Potentially unwanted

Analysis date:
4/26/2024 6:37:03 AM UTC  (today)

Scan engine
Detection
Engine version

avast!
Win32:Adware-CDO [PUP]
150129-1

AVG
Skodna
2016.0.3185

ESET NOD32
Win64/ShopperPro.B potentially unwanted application
7.0.302.0

IKARUS anti.virus
not-a-virus:AdWare.Shopper
t3scan.1.8.6.0

Panda Antivirus
Adware/Goobzo
15.02.27.09

Reason Heuristics
Threat.Win.Reputation.IMP
15.2.27.20

VIPRE Antivirus
Threat.4792716
37788

File size:
512 KB (524,288 bytes)

Product version:
1,37,0,196

Copyright:
Copyright (C) 2014

Original file name:
jsdrv.sys

Language:
English (United States)

Common path:
C:\windows\temp\tmp00000001abfafe1a296fd5d3

File PE Metadata
Compilation timestamp:
6/15/2014 9:15:54 AM

OS version:
6.2

OS bitness:
Win64

Subsystem:
Native (none required)

Linker version:
11.0

CTPH (ssdeep):
6144:msMVgKPNW0tFaMUfu85GYlKwWGh7jKyussRzkKviPcEgZvMTA+MNZFKMrgKI3ee+:msMV7PA0GHWgXJu5RzkKviWvN0wtwF

Entry address:
0x93E0

Entry point:
48, 89, 5C, 24, 08, 57, 48, 83, EC, 20, 48, 8B, DA, 48, 8B, F9, E8, 13, 4C, 00, 00, 48, 8B, D3, 48, 8B, CF, 48, 8B, 5C, 24, 30, 48, 83, C4, 20, 5F, E9, AE, FE, FF, FF, CC, CC, CC, CC, CC, CC, 48, 89, 5C, 24, 08, 57, 48, 83, EC, 20, 48, 8B, 05, 47, 1D, 00, 00, 48, 8B, F9, 48, 8D, 0D, 25, 1D, 00, 00, 48, 8D, 1D, 2E, 1D, 00, 00, 48, 3B, C1, 74, 45, 48, 3B, D8, 77, 40, 48, 8B, 43, 40, 48, 85, C0, 74, 18, 4C, 8B, 05, FC, 2A, 00, 00, 48, 8D, 0D, 57, 01, 00, 00, 4C, 8B, CB, 48, 8B, D7, FF, D0, EB, 12, 48, 8B, 15...
 
[+]

Entropy:
6.0854

Code size:
36 KB (36,864 bytes)

Remove tmp00000001abfafe1a296fd5d3 - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.