The file has been observed performing behaviors typical of malicious software, including unauthorized data transmission.
While associated with legitimate-looking, albeit potentially unwanted, driver packages, the behavior exhibited (spawning many processes, modifying firewalls, and memory protection) is highly suspicious. NLoader.exe
It modifies firewall settings via netsh.exe to allow network access for spawned processes. The file has been observed performing behaviors typical