{"Id":"7437388f-821e-421f-a3c1-62ce2c725a6a","Tags":["windows8-10-32.sys"],"Verified":"FALSE","Author":"Michael Haag","Created":"2023-01-09","MitreID":"T1068","Category":"vulnerable driver","Commands":{"Command":"sc.exe create windows8-10-32.sys binPath=C:\\windows\\temp\\windows8-10-32.sys     type=kernel type=kernel && sc.exe start windows8-10-32.sys","Description":"","OperatingSystem":"Windows 10","Privileges":"kernel","Usecase":"Elevate privileges"},"Resources":["https://learn.microsoft.com/en-us/windows/security/threat-protection/windows-defender-application-control/microsoft-recommended-driver-block-rules"],"Detection":[],"Acknowledgement":{"Handle":"","Person":""},"KnownVulnerableSamples":[{"Company":"","Date":"","Description":"","FileVersion":"","Filename":"windows8-10-32.sys","MachineType":"","OriginalFilename":"","Product":"","ProductVersion":"","Publisher":"","SHA256":"","Signature":[],"LoadsDespiteHVCI":"FALSE","Authentihash":{"MD5":"","SHA1":"8a50e81d6e6c45410bf13f95b1a67cada8c82221","SHA256":"5b9623da9ba8e5c80c49473f40ffe7ad315dcadffc3230afdc9d9226d60a715a"}}]}