← Back to driver explorer
Driver intelligenceVulnerableVerified
ncpl.sys
ncpl.sys is a vulnerable driver. CVE-2013-3956.
Known samples 1
0 recorded TRUE · 1 recorded FALSE · 0 unknown for loading despite HVCI. Results apply to individual samples.
ncpl.sysSample 1 · HVCI FALSE
- MD5
a26e600652c33dd054731b4693bf5b01- SHA1
bbc1e5fd826961d93b76abd161314cb3592c4436- SHA256
6c7120e40fc850e4715058b233f5ad4527d1084a909114fd6a36b7b7573c4a44- Imphash
8ec78cf864273fd81203678b61c41f04- Authentihash MD5
f3387f3cdaec9306dcc5205eebaf3faf- Authentihash SHA1
eecf71aa5767c90ead5f86f5438951f4c764b655- Authentihash SHA256
7b68763c39b45534854ec382434fd5a9640942c1f7393857af642ee327d4c570- Machine
- AMD64
- Version
- 3.1.11.0
- Publisher
- Novell, Inc.
Recorded command
sc.exe create ncpl.sys binPath=C:\windows\temp \n \n \n cpl.sys type=kernel && sc.exe start ncpl.sysElevate privileges · Privileges: kernel · OS: Windows 10