LOLDriversTHE DRIVER THREAT CATALOG
← Back to driver explorer
Driver intelligenceVulnerableVerified

libnicm.sys

Description not recorded.

UUID / a0fbd397-64d5-4af2-844b-b096e08a1866ADDED / 2023-05-06AUTHOR / Nasreddine Bencherchali

Known samples 5

3 recorded TRUE · 2 recorded FALSE · 0 unknown for loading despite HVCI. Results apply to individual samples.

libnicm.sysSample 1 · HVCI TRUE
MD5
7a6a6d6921cd1a4e1d61f9672a4560d6
SHA1
cb5229acdf87493e45d54886e6371fc59fc09ee5
SHA256
ab0925398f3fa69a67eacee2bbb7b34ac395bb309df7fc7a9a9b8103ef41ed7a
Imphash
262d8fbbf1f514399bb3f230cddc12af
Authentihash MD5
8804d6be09e294ab07e2691ca91e67a5
Authentihash SHA1
ffe0a81f1e2aee5cb4c5720da8d3ab2cdec52dc1
Authentihash SHA256
6aa427e7230a2b077bfecade35ffff67b2f15c051cf92fd207a3412c747f83c3
Machine
AMD64
Version
3.1.11.0
Publisher
Novell, Inc.
Download vulnerable sampleView on VirusTotal
libnicm.sysSample 2 · HVCI FALSE
MD5
cfad9185ffcf5850b5810c28b24d5fc8
SHA1
87f313fc30ec8759b391e9d6c08f79b02f3ecebd
SHA256
b37b3c6877b70289c0f43aeb71349f7344b06063996e6347c3c18d8c5de77f3b
Imphash
96f270be3f73ec3fc2f2237fe84efca0
Authentihash MD5
e30ca4b88f80e5441aee1a7102dccf9a
Authentihash SHA1
5e68ae28b2e80d0045c01affba7c76f649241fb6
Authentihash SHA256
c5647d315fb5ca1dcf4b063ea3f54003e2545739871519b8f2c98dc5baf66bac
Machine
AMD64
Version
3.1.6.0
Publisher
Novell, Inc.
Download vulnerable sampleView on VirusTotal
libnicm.sysSample 3 · HVCI FALSE
MD5
0809f48fd30845d983d569b847fa83cf
SHA1
c02cb8256dfb37f690f2698473fe5428d17bc178
SHA256
b50ffc60eaa4fb7429fdbb67c0aba0c7085f5129564d0a113fec231c5f8ff62e
Imphash
28d780857f0f6616f938aca3a38b5072
Authentihash MD5
1fd61feb0c5b905441426742e69ec997
Authentihash SHA1
faab67dd8387e4ccb17e28f3637ccce4096bd10b
Authentihash SHA256
fcdf0eaf9c8effa2786c82e774974f1ef4098dcd376461bad37fd4168dcab52b
Machine
I386
Version
3.1.6.0
Publisher
Novell, Inc.
Download vulnerable sampleView on VirusTotal
libnicm.sysSample 4 · HVCI TRUE
MD5
6ae9d25e02b54367a4e93c2492b8b02e
SHA1
cfdf9c9125755f4e81fa7cc5410d7740fdfea4ed
SHA256
da11e9598eef033722b97873d1c046270dd039d0e3ee6cd37911e2dc2eb2608d
Imphash
262d8fbbf1f514399bb3f230cddc12af
Authentihash MD5
e960feebe973feb9fa4ceae648439f05
Authentihash SHA1
85dd2e3e9e97e981542336ab7051035d5e611380
Authentihash SHA256
14ec631a3cff171b86e2b0279c8db436cb88ec705c517bd82a964e2c59def92f
Machine
AMD64
Version
3.1.11.0
Publisher
Novell, Inc.
Download vulnerable sampleView on VirusTotal
libnicm.sysSample 5 · HVCI TRUE
MD5
34a7fab63a4ed5a0b61eb204828e08e5
SHA1
469c04cb7841eedd43227facaf60a6d55cf21fd7
SHA256
e16dc51c51b2df88c474feb52ce884d152b3511094306a289623de69dedfdf48
Imphash
262d8fbbf1f514399bb3f230cddc12af
Authentihash MD5
e960feebe973feb9fa4ceae648439f05
Authentihash SHA1
85dd2e3e9e97e981542336ab7051035d5e611380
Authentihash SHA256
14ec631a3cff171b86e2b0279c8db436cb88ec705c517bd82a964e2c59def92f
Machine
AMD64
Version
3.1.11.0
Publisher
Novell, Inc.
Download vulnerable sampleView on VirusTotal

Recorded command

sc.exe create libnicm.sys binPath=C:\windows\temp\libnicm.sys type=kernel && sc.exe start libnicm.sys

Elevate privileges · Privileges: kernel · OS: Windows 10