Driver intelligenceMaliciousVerified

POORTRY1.sys

Driver categorized as POORTRY by Mandiant.

UUID / 2740a074-1e06-4f75-9c6a-dc57a3f85189ADDED / 2023-03-04AUTHOR / Michael Haag

Known samples 1

0 recorded TRUE · 1 recorded FALSE · 0 unknown for loading despite HVCI. Results apply to individual samples.

POORTRY1.sysSample 1 · HVCI FALSE

MD5: acac842a46f3501fe407b1db1b247a0b
SHA1: 31fac347aa26e92db4d8c9e1ba37a7c7a2234f08
SHA256: 575e58b62afab094c20c296604dc3b7dd2e1a50f5978d8ee24b7dca028e97316
Imphash: 3fd33d5b3b52e2db91983ac4b1d7a3c4
Authentihash MD5: 887c566bdc8ed5231f45a37845d5ee89
Authentihash SHA1: e6ab2bbad89502d8985381b33d7351eb97cb2b78
Authentihash SHA256: 565733b6e6d8f7b9661f04a3b4f29372f5dec080512551204b92ac4916a144cb
Machine: AMD64
Version: Not recorded
Publisher: Not recorded

sc.exe create POORTRY1.sys binPath=C:\windows\temp\POORTRY1.sys type=kernel && sc.exe start POORTRY1.sys

Elevate privileges · Privileges: kernel · OS: Windows 10