← Back to driver explorer
Driver intelligenceVulnerableVerified

libnicm.sys

Description not recorded.

UUID / 2b949a0d-939f-456a-a34f-4589d7712227ADDED / 2023-01-09AUTHOR / Michael Haag

Known samples 19

0 recorded TRUE · 19 recorded FALSE · 0 unknown for loading despite HVCI. Results apply to individual samples.

libnicm.sysSample 1 · HVCI FALSE
MD5
f026460a7a720d0b8394f28a1f9203dc
SHA1
116679c4b2cca6ec69453309d9d85d3793cbe05f
SHA256
00c02901472d74e8276743c847b8148be3799b0e3037c1dfdca21fa81ad4b922
Imphash
ad34ea17f90a34f6f84a399a96383ada
Authentihash MD5
b30004dbb5ad9b8320c964273875a103
Authentihash SHA1
7678c8c5a3153f4c06db097e1c3e1b2942149c7a
Authentihash SHA256
b756d234559ee0ed93328bb598352ead2efb27eabaf1afac5fb3e2f43b9901f3
Machine
AMD64
Version
3.1.11.0
Publisher
Novell, Inc.
libnicm.sysSample 2 · HVCI FALSE
MD5
21e72a43aedefcd70ca8999cc353b51b
SHA1
63f9ee1e7aefd961cf36eeffd455977f1b940f6c
SHA256
72b67b6b38f5e5447880447a55fead7f1de51ca37ae4a0c2b2f23a4cb7455f35
Imphash
ad34ea17f90a34f6f84a399a96383ada
Authentihash MD5
e6998e382a753d8ca44f7959e293f770
Authentihash SHA1
ef4e66576fd736dc05419b33267eef99dd90e628
Authentihash SHA256
ae85245fcb873d6fbf61f1923b8c10f0680abeaf2bf5527aef1c4a52aae321d0
Machine
AMD64
Version
3.1.12.0
Publisher
Novell, Inc.
libnicm.sysSample 3 · HVCI FALSE
MD5
1bd38ac06ef8709ad23af666622609c9
SHA1
c3a893680cd33706546a7a3e8fbcc4bd063ce07e
SHA256
c190e4a7f1781ec9fa8c17506b4745a1369dcdf174ce07f85de1a66cf4b5ed8a
Imphash
3f4a90b2976641ad2c0164792b24d322
Authentihash MD5
cc4471fe044c4ef3e14b12bc1a406d37
Authentihash SHA1
364af2f39c71999cf403d29b8dab412862f1994d
Authentihash SHA256
83e993691aa4f5f599dddd1fab2bc3e0791587c9e93eeb9e405c130922096343
Machine
AMD64
Version
3.1.5.0
Publisher
Novell, Inc.
libnicm.sysSample 4 · HVCI FALSE
MD5
55c36d43dd930069148008902f431ea5
SHA1
a4ae87b7802c82dfb6a4d26ab52788410af98532
SHA256
e89cb7217ec1568b43ad9ca35bf059b17c3e26f093e373ab6ebdeee24272db21
Imphash
262d8fbbf1f514399bb3f230cddc12af
Authentihash MD5
1bc4bf123f43b3ce055593d1b830b48f
Authentihash SHA1
10054d42b03ef3bc3800524673e2ce6b9cf05a63
Authentihash SHA256
6d4cb02a826973521678309a0076b2fd50894c09dda87ca86089e815f4bc9bce
Machine
AMD64
Version
3.1.10.0
Publisher
Novell, Inc.
libnicm.sysSample 5 · HVCI FALSE
MD5
6822566b28be75b2a76446a57064369f
SHA1
34ec04159d2c653a583a73285e6e2ac3c7b416dd
SHA256
66f8bd2b29763acfbb7423f4c3c9c3af9f3ca4113bd580ab32f6e3ee4a4fc64e
Imphash
28d780857f0f6616f938aca3a38b5072
Authentihash MD5
73c68c141f839f59d677542d06dbfdfc
Authentihash SHA1
51bd5e3567352d021979026eb2b7c3bd1cf2ac1c
Authentihash SHA256
3ad340c8a4a6e071e15095fd286b600847cd600b7312bd573802f26a73600da7
Machine
I386
Version
3.1.6.0
Publisher
Novell, Inc.
libnicm.sysSample 6 · HVCI FALSE
MD5
46cae59443ae41f4dbb42e050a9b501a
SHA1
b671677079bf7c660579bee08b8875a48ff61896
SHA256
6cf1cac0e97d30bb445b710fd8513879678a8b07be95d309cbf29e9b328ff259
Imphash
28d780857f0f6616f938aca3a38b5072
Authentihash MD5
f386df5a06d6c8e4cc55a328c706f9a5
Authentihash SHA1
d2aba6c93eec7bfed77d10e9f01671d9a07ab0ae
Authentihash SHA256
1aee4d8a00f126582c4488025c7451fdbb9d0becbbfd58a396a2ac52011fac14
Machine
I386
Version
3.1.6.0
Publisher
Novell, Inc.
libnicm.sysSample 7 · HVCI FALSE
MD5
5dd25029499cd5656927e9c559955b07
SHA1
f52c2d897fa00910d5566503dd5a297970f13dc6
SHA256
4cd80f4e33b713570f6a16b9f77679efa45a466737e41db45b41924e7d7caef4
Imphash
ad34ea17f90a34f6f84a399a96383ada
Authentihash MD5
04fd9292c73e5cc527eae867e930dfbb
Authentihash SHA1
04fa843bbb3e54e9a3566e769d476034fbaab240
Authentihash SHA256
9ce5188745ffcb5dc8304dac97cd037360600d8eb4739cfdbfb06bcd0efd72e4
Machine
AMD64
Version
3.1.11.0
Publisher
Novell, Inc.
libnicm.sysSample 8 · HVCI FALSE
MD5
1c591efa8660d4d36a75db9b82474174
SHA1
a5f9aef55c64722ff2db96039af3b9c7dd8163e3
SHA256
0cfb7ea2cc515a7fe913ab3619cbfcf1ca96d8cf72dc350905634a5782907a49
Imphash
28d780857f0f6616f938aca3a38b5072
Authentihash MD5
efa641bd31d86547dedc5bd0a678170b
Authentihash SHA1
c20217149ac84ed17db7a13d3a07f642866adb64
Authentihash SHA256
3b22adc61900fbdc26629dc1135344d878f6a368ec6df0d4ec374559cb669182
Machine
I386
Version
3.1.6.0
Publisher
Novell, Inc.
libnicm.sysSample 9 · HVCI FALSE
MD5
fc6dadb97bd3b7a61d06f20d0d2e1bac
SHA1
bca4bbe4388ebeb834688e97fac281c09b0f3ac1
SHA256
7f84f009704bc36f0e97c7be3de90648a5e7c21b4f870e4f210514d4418079a0
Imphash
96f270be3f73ec3fc2f2237fe84efca0
Authentihash MD5
fa31cbbfe06a2f4f6b29c60b76de5c30
Authentihash SHA1
8e7500a8d24c5a6cd6dce5679bab065e58b4dbb5
Authentihash SHA256
5ebfc2c2fc43fc34cc98378f627e6147af473cb37076f4c2ba278210bd88b2bf
Machine
AMD64
Version
3.1.6.0
Publisher
Novell, Inc.
libnicm.sysSample 10 · HVCI FALSE
MD5
0703c1e07186cb98837a2ae76f50d42e
SHA1
e1bf5dd17f84bce3b2891dffa855d81a21914418
SHA256
66a20fc2658c70facd420f5437a73fa07a5175998e569255cfb16c2f14c5e796
Imphash
acd1b0130287133223d26c91f27f6899
Authentihash MD5
9aee04fa1bdb51eb3122c1c9b5e9b3c1
Authentihash SHA1
7e2db8140582d0d606627ff4d97e294080d4d334
Authentihash SHA256
e2a330131ca4a9499736fdc72e819a6ff1f883b1c6dc7b83d5b69d288508e0fe
Machine
I386
Version
3.1.11.0
Publisher
Novell, Inc.
libnicm.sysSample 11 · HVCI FALSE
MD5
41339c852c6e8e4c94323f500c87a79c
SHA1
9ca90642cff9ca71c7022c0f9dfd87da2b6a0bff
SHA256
8138b219a2b1be2b0be61e5338be470c18ad6975f11119aee3a771d4584ed750
Imphash
acd1b0130287133223d26c91f27f6899
Authentihash MD5
dc077cd1d4adde370496ba2ea39e9397
Authentihash SHA1
fa064d914e051cfb54bebfeec92f38d7b4f714d3
Authentihash SHA256
6429f89dd7e9f8f7784736b6d3471be3c480d4eb4c9a573c698ede1dd64f5010
Machine
I386
Version
3.1.11.0
Publisher
Novell, Inc.
libnicm.sysSample 12 · HVCI FALSE
MD5
d48f681f70e19d2fa521df63bc72ab9e
SHA1
10fc6933deb7de9813e07d864ce03334a4f489d9
SHA256
d04c72fd31e7d36b101ad30e119e14f6df9cbc7a761526da9b77f9e0b9888bc4
Imphash
ad34ea17f90a34f6f84a399a96383ada
Authentihash MD5
31ea879f360e292dc09e69d8098e5dbe
Authentihash SHA1
d6f4650669233ba26c47c7b252867b4ffa2e7f06
Authentihash SHA256
615c391666b0fdaa0a8096320d35c7b951e6a0ee7f984ab3e892f838cb212b60
Machine
AMD64
Version
3.1.12.0
Publisher
Novell, Inc.
libnicm.sysSample 13 · HVCI FALSE
MD5
da7e98b23b49b7293ee06713032c74f6
SHA1
c22c28a32a5e43a76514faf4fac14d135e0d4ffd
SHA256
87e094214feb56a482cd8ae7ee7c7882b5a8dccce7947fdaa04a660fa19f41e5
Imphash
acd1b0130287133223d26c91f27f6899
Authentihash MD5
468460d75f9141ee3e1bfba845ef8c13
Authentihash SHA1
22fcace035c25521bdfca64df32a67fb16ee87bc
Authentihash SHA256
d0b918d766e6ce4218a833314525dd6eaeba83c597e9e1a9efefa7f95ec64a95
Machine
I386
Version
3.1.12.0
Publisher
Novell, Inc.
libnicm.sysSample 14 · HVCI FALSE
MD5
aae268c4b593156bdae25af5a2a4af21
SHA1
e3266b046d278194ade4d8f677772d0cb4ecfaf1
SHA256
d1c78c8ba70368e96515fb0596598938a8f9efa8f9f5d9e068ee008f03020fee
Imphash
28d780857f0f6616f938aca3a38b5072
Authentihash MD5
25c0efa043f90ef63f9fdb49bae0342e
Authentihash SHA1
dc1295fe99e5908dd0569acbffdb2d31652accbf
Authentihash SHA256
5e789b6d535b49c66c658978099e50fa2f8d02c2511bdaf9358bb8e40bdcef8e
Machine
I386
Version
3.1.6.0
Publisher
Novell, Inc.
libnicm.sysSample 15 · HVCI FALSE
MD5
20afd54ca260e2bf6589fac72935fecf
SHA1
e9f576137181c261dc3b23871d1d822731d54a12
SHA256
834a3d755b5ae798561f8e5fbb18cf28dfcae7a111dc6a03967888e9d10f6d78
Imphash
28d780857f0f6616f938aca3a38b5072
Authentihash MD5
c9fb69b3569b42eed1b945c068245fb7
Authentihash SHA1
f9af5075200f0d08359e8ee5bfcbfae5e31ac002
Authentihash SHA256
30accf1de5969ff5bf958786b9c9deb9001d1a19d121aac8b3c92c5b463a087e
Machine
I386
Version
3.1.10.0
Publisher
Novell, Inc.
libnicm.sysSample 16 · HVCI FALSE
MD5
7eeb4c0cb786a409b94066986addf315
SHA1
005ac9213a8a4a6c421787a7b25c0bc7b9f3b309
SHA256
3b7177e9a10c1392633c5f605600bb23c8629379f7f42957972374a05d4dc458
Imphash
ad34ea17f90a34f6f84a399a96383ada
Authentihash MD5
d296fda4ade4f49f4defb49740ce23ca
Authentihash SHA1
dd62a35fd568dd79419e151bce6e7c5a8c9819f3
Authentihash SHA256
e03d8492926408a299100ef02c46bf3510a816bd9eed2f988b47c066049e9111
Machine
AMD64
Version
3.1.12.0
Publisher
Novell, Inc.
libnicm.sysSample 17 · HVCI FALSE
MD5
fb7637cfe8562095937f4d6cff420784
SHA1
19bf65bdd9d77f54f1e8ccf189dc114e752344b0
SHA256
f27febff1be9e89e48a9128e2121c7754d15f8a5b2e88c50102cecee5fe60229
Imphash
28d780857f0f6616f938aca3a38b5072
Authentihash MD5
9af58e71b9b5720a3b8b2dec0a26f917
Authentihash SHA1
ddb8f39d27ee3124553dac4b929898a261c021f7
Authentihash SHA256
a1b56ae08d822bb5d041c2a67584371ffddcb7f6d69191efec5b8189e0028331
Machine
I386
Version
3.1.11.0
Publisher
Novell, Inc.
libnicm.sysSample 18 · HVCI FALSE
MD5
bafd6bad121e42f940a0b8abc587eadf
SHA1
3def50587309440e3b9e595bdbe4dde8d69a64e7
SHA256
dd2f1f7012fb1f4b2fb49be57af515cb462aa9c438e5756285d914d65da3745b
Imphash
96f270be3f73ec3fc2f2237fe84efca0
Authentihash MD5
93d6f10e70096a91206b6bca05e1f63a
Authentihash SHA1
ced518548a4800f50ab31a24eda3475d46a5e0ac
Authentihash SHA256
e0e65416f40cf3bea00d77515a7d8ab508d3aa2b7b622a8799a49635c4d5dbb5
Machine
AMD64
Version
3.1.6.0
Publisher
Novell, Inc.
libnicm.sysSample 19 · HVCI FALSE
MD5
c1fce7aac4e9dd7a730997e2979fa1e2
SHA1
25d812a5ece19ea375178ef9d60415841087726e
SHA256
95d50c69cdbf10c9c9d61e64fe864ac91e6f6caa637d128eb20e1d3510e776d3
Imphash
ad34ea17f90a34f6f84a399a96383ada
Authentihash MD5
f4c87edbb9a270058e01fdc58f29692a
Authentihash SHA1
e82346880e59a3d7652896128eb91512f5ee3d53
Authentihash SHA256
bd1d579a15ec3c1120cc6e0c8ff6b265623980de3570a5dd2f57d0c5981334d8
Machine
AMD64
Version
3.1.12.0
Publisher
Micro Focus

Recorded command

sc.exe create libnicm.sys binPath=C:\windows\temp\libnicm.sys type=kernel && sc.exe start libnicm.sys

Elevate privileges · Privileges: kernel · OS: Windows 10

Research & references