Driver intelligenceVulnerableVerified

NICM.SYS

Description not recorded.

UUID / f4126206-564f-49f5-a942-2138a3131e0eADDED / 2023-05-06AUTHOR / Nasreddine Bencherchali

Known samples 3

1 recorded TRUE · 2 recorded FALSE · 0 unknown for loading despite HVCI. Results apply to individual samples.

NICM.SYSSample 1 · HVCI TRUE

MD5: 52b7cd123f6d1b9ed76b08f2ee7d9433
SHA1: 4d6e532830058fadd861ff9eac16de8cfc6974ce
SHA256: 3a65d14fd3b1b5981084cdbd293dc6f4558911ea18dd80177d1e5b54d85bcaa0
Imphash: 8ec78cf864273fd81203678b61c41f04
Authentihash MD5: cd820a2aee5e475a92f3860b20a3fc1a
Authentihash SHA1: db97af81d295f3f7f7777d3805635ab8cc40ab44
Authentihash SHA256: 98636f857235fb66122296db147cd29440de681a29bbd631fc94373da31f99fa
Machine: AMD64
Version: 3.1.11.0
Publisher: Novell, Inc.

NICM.SYSSample 2 · HVCI FALSE

MD5: f690bfc0799e51a626ba3931960c3173
SHA1: d3a6f86245212e1ef9e0e906818027ec14a239cb
SHA256: 904e0f7d485a98e8497d5ec6dd6e6e1cf0b8d8e067fb64a9e09790af3c8c9d5a
Imphash: 0e4f5481813eeec4e5dd96e36020135f
Authentihash MD5: 2e72873429bed4886fe76aeba274283e
Authentihash SHA1: ab636e8ba41f37d2bcd5291ddf30024be7f3ce2f
Authentihash SHA256: 7419b05e74733d2b7ce4c860ab74043b816a7f66a1ff7eec81fe3b35730e3bbb
Machine: I386
Version: 3.1.6.0
Publisher: Novell, Inc.

NICM.SYSSample 3 · HVCI FALSE

MD5: 3bf217f8ef018ca5ea20947bfdfc0a4d
SHA1: 26a8ab6ea80ab64d5736b9b72a39d90121156e76
SHA256: cf3180f5308af002ac5d6fd5b75d1340878c375f0aebc3157e3bcad6322b7190
Imphash: f2dc136141066311fddef65f7f417c44
Authentihash MD5: 1b164cdc9dadc9944f2d3c0063cfcaa9
Authentihash SHA1: a13e2a1ea1c6427bc2006b1512047cc9779e480e
Authentihash SHA256: ea80b4a2314e44061f33a7403e0740437aa34326082e97816bb6e7693866478b
Machine: AMD64
Version: 3.1.6.0
Publisher: Novell, Inc.

sc.exe create NICM.sys binPath=C:\windows\temp\NICM.SYS type=kernel && sc.exe start NICM.SYS

Elevate privileges · Privileges: kernel · OS: Windows 10