← Back to driver explorer
Driver intelligenceVulnerableVerified

NCHGBIOS2x64.SYS

Description not recorded.

UUID / d2806397-9ceb-47c8-b5f3-3aabec182ff5ADDED / 2023-01-09AUTHOR / Michael Haag

Known samples 2

0 recorded TRUE · 2 recorded FALSE · 0 unknown for loading despite HVCI. Results apply to individual samples.

NCHGBIOS2x64.SYSSample 1 · HVCI FALSE
MD5
d9ce18960c23f38706ae9c6584d9ac90
SHA1
d0d39e1061f30946141b6ecfa0957f8cc3ddeb63
SHA256
314384b40626800b1cde6fbc51ebc7d13e91398be2688c2a58354aa08d00b073
Imphash
17a9b50297a2334d8e9dfc3411bbe8ab
Authentihash MD5
188d9708ba2de146c555d484668decee
Authentihash SHA1
bb209301f3785febdd7bdeb717cbd66340ad5c65
Authentihash SHA256
c4031eb0a40137c4ab6d2dbdd2755135c63ab137a0aeb74a7bbea6617b96f0a7
Machine
AMD64
Version
4.2.4.0 built by: WinDDK
Publisher
TOSHIBA Corporation
NCHGBIOS2x64.SYSSample 2 · HVCI FALSE
MD5
6e2178dc5f9e37e6b4b6cbdaef1b12b1
SHA1
091df975fa983e4ad44435ca092dbf84911f28a5
SHA256
7d4ca5760b6ad2e4152080e115f040f9d42608d2c7d7f074a579f911d06c8cf8
Imphash
c9f08d92efe88afb2545eb82a8870233
Authentihash MD5
cedf27970826b662ee8b0de712b55804
Authentihash SHA1
a50d03e73f06b42e5d3b8eca737fca51af666e1e
Authentihash SHA256
85686a6dec96776c2e8510fea7ca198b84429fb0b756a2d87ee1cc4570ac9b87
Machine
AMD64
Version
4.1.0.0 built by: WinDDK
Publisher
TOSHIBA Corporation

Recorded command

sc.exe create NCHGBIOS2x64.SYS binPath=C:\windows\temp\NCHGBIOS2x64.SYS     type=kernel && sc.exe start NCHGBIOS2x64.SYS

Elevate privileges · Privileges: kernel · OS: Windows 10

Research & references