{"Id":"067589f2-4f29-4dc4-bd50-a2e2ee57b25f","Tags":["GameTerSafe.sys"],"Verified":"FALSE","Author":"Michael Haag","Created":"2023-01-09","MitreID":"T1068","Category":"vulnerable driver","Commands":{"Command":"sc.exe create GameTerSafe.sys binPath=C:\\windows\\temp\\GameTerSafe.sys     type=kernel type=kernel && sc.exe start GameTerSafe.sys","Description":"","OperatingSystem":"Windows 10","Privileges":"kernel","Usecase":"Elevate privileges"},"Resources":["https://learn.microsoft.com/en-us/windows/security/threat-protection/windows-defender-application-control/microsoft-recommended-driver-block-rules"],"Detection":[],"Acknowledgement":{"Handle":"","Person":""},"KnownVulnerableSamples":[{"Company":"","Date":"","Description":"","FileVersion":"","Filename":"GameTerSafe.sys","MachineType":"","OriginalFilename":"","Product":"","ProductVersion":"","Publisher":"","SHA256":"","Signature":[],"LoadsDespiteHVCI":"FALSE","Authentihash":{"MD5":"","SHA1":"39f934078a060bad2d58b5dba8f8884903d697a7","SHA256":"3e9b62d2ea2be50a2da670746c4dbe807db9601980af3a1014bcd72d0248d84c"}}]}