https://www.virustotal.com/gui/file/11bd2c9f9e2397c9a16e0990e4ed2cf0679498fe0fd418a3dfdac60b5c160ee5

(Detected on FanCtrl.sys in FanCtrl 1.7.4)

I assume it's just another vuln in winring0 or winring0 being used in a malicious trojan, and not winring0 itself being malicious... but if there is an update to winring0 available, it would be good to grab that.