LOLDriversTHE DRIVER THREAT CATALOG
← Back to driver explorer
Driver intelligenceVulnerableVerified

nscm.sys

Description not recorded.

UUID / 90afa27c-0f67-46a6-b4a9-809f55157c71ADDED / 2023-05-06AUTHOR / Nasreddine Bencherchali

Known samples 6

2 recorded TRUE · 4 recorded FALSE · 0 unknown for loading despite HVCI. Results apply to individual samples.

nscm.sysSample 1 · HVCI FALSE
MD5
ba2c0fa201c74621cddd8638497b3c70
SHA1
8f540936f2484d020e270e41529624407b7e107e
SHA256
28999af32b55ddb7dcfc26376a244aa2fe297233ce7abe4919a1aef2f7e2cee7
Imphash
7d004bbe0f546a91c93562d324307fa7
Authentihash MD5
3a5b83215c9ea17f8d3ad3812c30a340
Authentihash SHA1
533e0690528ff3f0d59edeed9dd53b4f37c0a110
Authentihash SHA256
1622ac0c618a86be17e0f97daa061f9aaa0e721dc0fd30d76bbc5c958e9a9d92
Machine
AMD64
Version
3.1.6.0
Publisher
Novell, Inc.
Download vulnerable sampleView on VirusTotal
nscm.sysSample 2 · HVCI TRUE
MD5
4c76554d9a72653c6156ca0024d21a8e
SHA1
6d3c760251d6e6ea7ff4f4fcac14876fac829cf9
SHA256
2e665962c827ce0adbd29fe6bcf09bbb1d7a7022075d162ff9b65d0af9794ac0
Imphash
8b7e7c20da6ca9ac4bdb3927fe2b266a
Authentihash MD5
b546d6b223a9e1a42f8359dbf9d9737c
Authentihash SHA1
41f6704252efa14de0d72eeaf7475886ba7f3bdc
Authentihash SHA256
92ca1aec3afc90b44861c2e0be084a3db38d22d52f35e1697643d6477151392f
Machine
AMD64
Version
3.1.11.0
Publisher
Novell, Inc.
Download vulnerable sampleView on VirusTotal
nscm.sysSample 3 · HVCI FALSE
MD5
5f4a232d92480a1bebbe025ef64dc760
SHA1
0cb14c1049c0e81c8655ab7ee7d698c11758ea06
SHA256
5351c81b4ec5a0d79c39d24bac7600d10eac30c13546fde43d23636b3f421e7c
Imphash
01aa65221a48929f0a34a27c4e3011b1
Authentihash MD5
5d62cae57be434a4d56924574498c4f2
Authentihash SHA1
1a99d3141d75a3ef1998944b2d107089ce3ef6e4
Authentihash SHA256
a363deaf1790e9c0610e07a7203749aab8b60f5ededc944abc0ef3010f5e2105
Machine
AMD64
Version
3.1.12.0
Publisher
Micro Focus
Download vulnerable sampleView on VirusTotal
nscm.sysSample 4 · HVCI FALSE
MD5
f56f30ac68c35dd4680054cdfd8f3f00
SHA1
fce3a95b222c810c56e7ed5a3d7fb059eb693682
SHA256
8e88cb80328c3dbaa2752591692e74a2fae7e146d7d8aabc9b9ac9a6fe561e6c
Imphash
b8d0a36d2b14d79dfa08fb2e121f0920
Authentihash MD5
3050ced748b80cc81892435fd0868bfc
Authentihash SHA1
579e23f2b6ce2221ba435abc20801e98ab91a360
Authentihash SHA256
34f36a59ecf6174eeac15994e54c41fe1e3e3b1eee8ed4c399ec8c63212373d7
Machine
AMD64
Version
3.1.6.0
Publisher
Novell, Inc.
Download vulnerable sampleView on VirusTotal
nscm.sysSample 5 · HVCI FALSE
MD5
a1547e8b2ca0516d0d9191a55b8536c0
SHA1
7cd4aea9c1f82111bf7f9d4934be95e9bb6f8ae0
SHA256
ce23c2dae4cca4771ea50ec737093dfafac06c64db0f924a1ccbbf687e33f5a2
Imphash
65181bc89a1c2b5854548236269846c1
Authentihash MD5
7e245f8b1d1bddfd217d1cd060b91657
Authentihash SHA1
8c89db8dd4d7947cb5eb13c7a12907564576cb91
Authentihash SHA256
00dfeab446afecac7b44b0b1680d5ca7d421eda243e16db8c08706bb593a8391
Machine
I386
Version
3.1.6.0
Publisher
Novell, Inc.
Download vulnerable sampleView on VirusTotal
nscm.sysSample 6 · HVCI TRUE
MD5
bd5d4d07ae09e9f418d6b4ac6d9f2ed5
SHA1
d61acd857242185a56e101642d15b9b5f0558c26
SHA256
fb81b5f8bf69637dbdf050181499088a67d24577587bc520de94b5ee8996240f
Imphash
8b7e7c20da6ca9ac4bdb3927fe2b266a
Authentihash MD5
32265ccdfe3d7f66269cbee0d5555e5b
Authentihash SHA1
72e5f5f6f266410d827fef10dc82c7ec8541e036
Authentihash SHA256
253ed7f5c7115e957dfdb1f5c6c51592b491a70b27787903c8fd848e45b9cf22
Machine
AMD64
Version
3.1.11.0
Publisher
Novell, Inc.
Download vulnerable sampleView on VirusTotal

Recorded command

sc.exe create nscm.sys binPath=C:\windows\temp\nscm.sys type=kernel && sc.exe start nscm.sys

Elevate privileges · Privileges: kernel · OS: Windows 10