{"Id":"c1ece07b-e92a-4050-95ee-90e03aa82120","Tags":["NetProxyDriver.sys"],"Verified":"FALSE","Author":"Michael Haag","Created":"2023-01-09","MitreID":"T1068","Category":"vulnerable driver","Commands":{"Command":"sc.exe create NetProxyDriver.sys binPath=C:\\windows\\temp\\NetProxyDriver.sys     type=kernel type=kernel && sc.exe start NetProxyDriver.sys","Description":"","OperatingSystem":"Windows 10","Privileges":"kernel","Usecase":"Elevate privileges"},"Resources":["https://learn.microsoft.com/en-us/windows/security/threat-protection/windows-defender-application-control/microsoft-recommended-driver-block-rules"],"Detection":[],"Acknowledgement":{"Handle":"","Person":""},"KnownVulnerableSamples":[{"Company":"","Date":"","Description":"","FileVersion":"","Filename":"NetProxyDriver.sys","MachineType":"","OriginalFilename":"","Product":"","ProductVersion":"","Publisher":"","SHA256":"","Signature":[],"LoadsDespiteHVCI":"FALSE","Authentihash":{"MD5":"","SHA1":"00b4fdc0f7f28ddecd5b4e5880a71e7f08b5f825","SHA256":"8111085022bda87e5f6aa4c195e743cc6dd6a3a6d41add475d267dc6b105a69f"}}]}