{"Id":"0d0d204b-f6ce-4ce4-8d76-1724a1676c3f","Tags":["Proxy32.sys"],"Verified":"FALSE","Author":"Michael Haag","Created":"2023-01-09","MitreID":"T1068","Category":"vulnerable driver","Commands":{"Command":"sc.exe create Proxy32.sys binPath=C:\\windows\\temp\\Proxy32.sys type=kernel && sc.exe start Proxy32.sys","Description":"","OperatingSystem":"Windows 10","Privileges":"kernel","Usecase":"Elevate privileges"},"Resources":["https://learn.microsoft.com/en-us/windows/security/threat-protection/windows-defender-application-control/microsoft-recommended-driver-block-rules"],"Detection":[],"Acknowledgement":{"Handle":"","Person":""},"KnownVulnerableSamples":[{"Company":"","Date":"","Description":"","FileVersion":"","Filename":"Proxy32.sys","MachineType":"","OriginalFilename":"","Product":"","ProductVersion":"","Publisher":"","SHA256":"","Signature":[],"LoadsDespiteHVCI":"FALSE","Authentihash":{"MD5":"","SHA1":"69d6b4032f1456506382885eba5b396f1c36841b","SHA256":"49ed27460730b62403c1d2e4930573121ab0c86c442854bc0a62415ca445a810"}}]}