: When you launch a program, it sends a request to the Windows kernel or BIOS to retrieve hardware serial numbers.
The spoofer installs a filter driver into the storage stack. When Windows sends a IOCTL_STORAGE_QUERY_PROPERTY request to the disk, the filter driver catches the response, modifies the data structure (changing the SerialNumber string or VendorId ), and passes the falsified data up to the OS. To the user, Device Manager shows the fake name. disk spoofer