{"Id":"e6338692-90e0-41b1-9481-a47e0df144ad","Tags":["fidpcidrv.sys"],"Verified":"FALSE","Author":"Michael Haag","Created":"2023-01-09","MitreID":"T1068","Category":"vulnerable driver","Commands":{"Command":"sc.exe create fidpcidrv.sys binPath=C:\\windows\\temp\\fidpcidrv.sys type=kernel && sc.exe start fidpcidrv.sys","Description":"","OperatingSystem":"Windows 10","Privileges":"kernel","Usecase":"Elevate privileges"},"Resources":["https://learn.microsoft.com/en-us/windows/security/threat-protection/windows-defender-application-control/microsoft-recommended-driver-block-rules"],"Detection":[],"Acknowledgement":{"Handle":"","Person":""},"KnownVulnerableSamples":[{"Company":"","Date":"","Description":"","FileVersion":"","Filename":"fidpcidrv.sys","MachineType":"","OriginalFilename":"","Product":"","ProductVersion":"","Publisher":"","SHA1":"","Signature":[],"LoadsDespiteHVCI":"FALSE","Authentihash":{"MD5":"","SHA1":"08596732304351b311970ff96b21f451f23b1e25","SHA256":"7b7e0e1453e733050b586a6fac91883dbb85ae0775c84c4ceb967cfc9b4efd10"}},{"Company":"","Date":"","Description":"","FileVersion":"","Filename":"fidpcidrv.sys","MachineType":"","OriginalFilename":"","Product":"","ProductVersion":"","Publisher":"","SHA1":"","Signature":[],"LoadsDespiteHVCI":"FALSE","Authentihash":{"MD5":"","SHA1":"08596732304351b311970ff96b21f451f23b1e25","SHA256":"7b7e0e1453e733050b586a6fac91883dbb85ae0775c84c4ceb967cfc9b4efd10"}},{"Company":"","Date":"","Description":"","FileVersion":"","Filename":"fidpcidrv.sys","MachineType":"","OriginalFilename":"","Product":"","ProductVersion":"","Publisher":"","SHA1":"","Signature":[],"LoadsDespiteHVCI":"FALSE","Authentihash":{"MD5":"","SHA1":"4789b910023a667bee70ff1f1a8f369cffb10fe8","SHA256":"7fb0f6fc5bdd22d53f8532cb19da666a77a66ffb1cf3919a2e22b66c13b415b7"}},{"Company":"","Date":"","Description":"","FileVersion":"","Filename":"fidpcidrv.sys","MachineType":"","OriginalFilename":"","Product":"","ProductVersion":"","Publisher":"","SHA1":"","Signature":[],"LoadsDespiteHVCI":"FALSE","Authentihash":{"MD5":"","SHA1":"4789b910023a667bee70ff1f1a8f369cffb10fe8","SHA256":"7fb0f6fc5bdd22d53f8532cb19da666a77a66ffb1cf3919a2e22b66c13b415b7"}}]}