poqexec.exe

  • File Path: C:\windows\SysWOW64\poqexec.exe
  • Description: Primitive Operations Queue Executor

Hashes

Type Hash
MD5 19829BFF8D35FEE6F67018E784FE9B02
SHA1 933AB5AF495C0CB6DD53BE9839C8039DD2C4F1BE
SHA256 C4038AA119B24360B20E4F93D91E643A79017B352F3742071FFA352EC3CDF246
SHA384 453462A5F38D2962D385DAA584E3A370EF4C72BF05774E7257DB03AEBA977F89297ECDF9ECBC019190BE54F20769E35C
SHA512 83516F496D324BE4799EC41AD586A66A291E5075CFF46D5E9D76D25D71FEC825C21114F0ECF773554D9FF841708402005D6081A6B738106FBE5FAE7DED147B61
SSDEEP 3072:f38RR0I+yA9GqCFa40rF7LDYCcK2jKfGwU:ERR0I+yA9GqCFa4+LVcK2OuF

Signature

  • Status: The file C:\windows\SysWOW64\poqexec.exe is not digitally signed. You cannot run this script on the current system. For more information about running scripts and setting execution policy, see about_Execution_Policies at http://go.microsoft.com/fwlink/?LinkID=135170
  • Serial: ``
  • Thumbprint: ``
  • Issuer:
  • Subject:

File Metadata

  • Original Filename: poqexec.exe
  • Product Name: Microsoft Windows Operating System
  • Company Name: Microsoft Corporation
  • File Version: 6.3.9600.19651 (winblue_ltsb_escrow.200212-1700)
  • Product Version: 6.3.9600.19651
  • Language: English (United States)
  • Legal Copyright: Microsoft Corporation. All rights reserved.

Possible Misuse

The following table contains possible examples of poqexec.exe being misused. While poqexec.exe is not inherently malicious, its legitimate functionality can be abused for malicious purposes.

Source Source File Example License
sigma registry_event_asep_reg_keys_modification_common.yml - 'C:\Windows\System32\poqexec.exe' DRL 1.0

MIT License. Copyright (c) 2020-2021 Strontic.