← Back to driver explorer
Driver intelligenceMaliciousVerified
POORTRY2.sys
Driver categorized as POORTRY by Mandiant.
Known samples 1
0 recorded TRUE · 1 recorded FALSE · 0 unknown for loading despite HVCI. Results apply to individual samples.
POORTRY2.sysSample 1 · HVCI FALSE
- MD5
b164daf106566f444dfb280d743bc2f7- SHA1
7e836dadc2e149a0b758c7e22c989cbfcce18684- SHA256
9bb09752cf3a464455422909edef518ac18fe63cf5e1e8d9d6c2e68db62e0c87- Imphash
0ad7da35304c75ccf859bc29fe9ed09e- Authentihash MD5
ffbbaeada1f7507faca4ef59c6e3e577- Authentihash SHA1
56f9aa37f099409170b4656079edbf52e464b700- Authentihash SHA256
29bf8618816bce5fa2845409d98b7b96915e0763bb04719535ca885e4713cfaf- Machine
- I386
- Version
- Not recorded
- Publisher
- Not recorded
Recorded command
sc.exe create POORTRY2.sys binPath=C:\windows\temp\POORTRY2.sys type=kernel && sc.exe start POORTRY2.sysElevate privileges · Privileges: kernel · OS: Windows 10