poqexec.exe

  • File Path: C:\Windows\SysWOW64\poqexec.exe
  • Description: Primitive Operations Queue Executor

Hashes

Type Hash
MD5 F9DB219480FCB37EC09DAF9A26BCCA87
SHA1 23F02BF758557B9DE7C87756B7944D6B0C5A02FF
SHA256 BFAE94C2FC5642B7B165DD35AE78F61D84533C2F9757B7D72017D761BC7F27FE
SHA384 5CC9223E6B9811EB81C955D7AD42216189C7A5200D05850B315550B7213C1002A4B97647AC31D28435F7F29B800282B1
SHA512 82700C5A69FD4021525EE77DBE9A4E3B6F04CBBDE32D7E3528D3846FDBB3FAFC11B77E540B59DDBFAAD137CE8B8C1348882E5102B156D0BECB77DFBA3F361918
SSDEEP 6144:KW5uKmK3eyy33PInY24RQHMt/N+MP7ikFvm1a9ZpHBufqnPCOjvCa4aOnUWkQok5:KW5feyy339WsJN+MP7ikc1c3BufqnPC3

Signature

  • Status: The file C:\Windows\SysWOW64\poqexec.exe is not digitally signed. You cannot run this script on the current system. For more information about running scripts and setting execution policy, see about_Execution_Policies at https:/go.microsoft.com/fwlink/?LinkID=135170
  • Serial: ``
  • Thumbprint: ``
  • Issuer:
  • Subject:

File Metadata

  • Original Filename: poqexec.exe
  • Product Name: Microsoft Windows Operating System
  • Company Name: Microsoft Corporation
  • File Version: 10.0.19041.441 (WinBuild.160101.0800)
  • Product Version: 10.0.19041.441
  • Language: English (United States)
  • Legal Copyright: Microsoft Corporation. All rights reserved.

File Similarity (ssdeep match)

File Score
C:\Windows\SysWOW64\poqexec.exe 99
C:\Windows\SysWOW64\poqexec.exe 99
C:\Windows\SysWOW64\poqexec.exe 93
C:\Windows\SysWOW64\poqexec.exe 97

Possible Misuse

The following table contains possible examples of poqexec.exe being misused. While poqexec.exe is not inherently malicious, its legitimate functionality can be abused for malicious purposes.

Source Source File Example License
sigma registry_event_asep_reg_keys_modification_common.yml - 'C:\Windows\System32\poqexec.exe' DRL 1.0

MIT License. Copyright (c) 2020-2021 Strontic.