Driver intelligenceMaliciousVerified

NQrmq.sys

Found via RichPEHeaderHash pivoting.

UUID / 61abe019-08cb-48a3-89b2-62810696f277ADDED / 2023-06-05AUTHOR / Michael Haag

Known samples 1

1 recorded TRUE · 0 recorded FALSE · 0 unknown for loading despite HVCI. Results apply to individual samples.

NQrmq.sysSample 1 · HVCI TRUE

MD5: 550b7991d93534bc510bc4f237155a7a
SHA1: 9382981b05b1fb950245313992444bfa0db5f881
SHA256: ad938d15ecfd70083c474e1642a88b078c3cea02cdbddf66d4fb1c01b9b29d9a
Imphash: dbf09dd3e675f15c7cc9b4d2b8e6cd90
Authentihash MD5: deb930efdc62da7c54923e3c7802a85c
Authentihash SHA1: 1ce8dfaf518604b9043f7fe3c31eae11f84e74cb
Authentihash SHA256: 16a1977a9251d6d4bec86bb0702a97bcaefa94444bbfe3978af2f79ee10d62a6
Machine: AMD64
Version: Not recorded
Publisher: Not recorded

sc.exe create NQrmq.sys binPath=C:\windows\temp\NQrmq.sys type=kernel && sc.exe start NQrmq.sys

Elevate privileges · Privileges: kernel · OS: Windows 10