Skip to main content
Share Your Experience: Take the 2024 Developer Survey

Questions tagged [windows-10]

An operating system developed by Microsoft released July 2015 and designed to run across devices with multiple form factors - PC, tablet, smartphone, Xbox and HoloLens.

Filter by
Sorted by
Tagged with
1 vote
1 answer
169 views

Why does Windows force you to do a mandatory restart once in a while? Apparently, its for 'security purposes.'

I haven't needed to restart my computer for a while now, as I just usually shut down when I'm finished, and then reboot when I use Windows again. I dual-boot, so of course I often restart to a ...
security_paranoid's user avatar
0 votes
1 answer
60 views

How to handle trojan executed on my laptop? [duplicate]

Unfortunately, I have executed an .exe file on my PC. After scanning the file I understood that it is a trojan and after checking its behaviour using VirusTotal I understood that it left many files on ...
VSB's user avatar
  • 185
1 vote
0 answers
71 views

How does Windows 11 handle incrementing low-level syscalls compared to W10

I implemented my own version of SysWhisperer2 to parse ntdll and dynamically resolve syscall service numbers in Windows 11 under the assumption that the methodology would still be able to process ...
v0rtex's user avatar
  • 11
0 votes
0 answers
94 views

How to embed a PE file to another PE files

So what I want to do basically is what BDFproxy does on the go, I want to modify a file (on the disk) to embed another PE in it and have both working, it does not matter if they work concurrently or ...
LuckyCoder3607's user avatar
1 vote
1 answer
136 views

Security vulnerabilites in Windows updates from local network

Windows has offered the ability to download updates from machines in the local network for some time. My gut feeling tells me this would be a great attack vector for Windows security vulnerabilites. ...
J Heschl's user avatar
  • 123
1 vote
0 answers
74 views

Why do I suddenly receive print notifications on Windows 10? [closed]

I have seen whats's in the image. But i don't have any printer. OS: Windows 10 22H2
priv-like-user's user avatar
0 votes
0 answers
84 views

Disabling UAC (Windows 10) for Administrator accounts

To help improve the user experience on admin workstations, would it be ok to disable the UAC or maybe set it with a more permissive mode?
IscarioteSXIII's user avatar
1 vote
1 answer
133 views

How to tell if BlackByte NT ransomware is on my computer?

The company I work at sadly fell victim to BlackByte NT ransomware this week. It ransomed many of the Windows machines on our factory floor. I have used my personal laptop (Windows 10 Home, version ...
Intrastellar Explorer's user avatar
0 votes
0 answers
76 views

How do I check if my PowerShell is connected on SSH?

I know how to check but command line cmd or powershell can be altered to make it look clean with disguised hash codes (which they show like they are not tempered but actually commands are altered and ...
kurosakichigoo's user avatar
0 votes
0 answers
64 views

Can guest access host clipboard despite sharing turned off?

Host: Win10 Guest: Linux Software: VirtualBox Clipboard information might not seem important, but it could very well contain a copied password or other useful data. On the host, clipboard history is ...
No Name's user avatar
  • 217
1 vote
1 answer
275 views

Is it worth it to force UAC to ask for a password?

I've tried to harden my Windows 10 by using an unprivileged account, which I know reduces the attack surface a lot. I'm running Ableton (a music program) which is running after UAC has given admin ...
JulianGR's user avatar
0 votes
0 answers
91 views

Proof of concept: Services File Permissions Weakness (T1574.010)

I am trying to do a proof of concept where I use technique T1574.010. In this technique, I should rewrite the binpath of some service in Windows 10 so that when the service starts again the payload ...
P00's user avatar
  • 1
0 votes
1 answer
225 views

Executable to try DLL hijacking attacks

I'm doing an educational project and I need an executable to try different DLL hijacking techniques in Windows 10. Obviously, there are no such vulnerabilities in Windows 10 by default, so I thought ...
P00's user avatar
  • 1
0 votes
0 answers
108 views

Is there any increase to known security risks by mounting the EFI System Partition, on a Windows 10 PC?

Security risks, as in malware, attackers, or known vulnerabilities. Threats while the ESP is mounted, or after unmounting. E.g. Could it open access routes for future attackers. I aim to avoid ...
Eric's user avatar
  • 1
0 votes
2 answers
286 views

execute command in go without storing the command in a .exe file

I am trying to do a go program to execute a .exe file, but without be actually a .exe file. The idea is to read the executable from a .txt file and decode it (it is in base64). Once I hava that code ...
P00's user avatar
  • 1
0 votes
1 answer
151 views

Recover deleted (Shift+Delete) One Drive Folder on a bitlocker enabled drive. Should I unencrypt drive before I atempt recovery?

Windows 11, bitlocked C:\ Drive (I have the bitlocker key and can unencrypt drive). Onedrive installed, synced to my Docs folder but not signed in to OneDrive account (never signed in). Uninstalled ...
user85643's user avatar
1 vote
1 answer
185 views

What "indicators of compromise" are there that end users can diagnose themselves?

I'm responsible for the IT security of a small (~5 users) office, and I'm preparing training materials for our users. Obviously, the first step my users should do if anything seems suspicious is to ...
Heinzi's user avatar
  • 3,608
1 vote
0 answers
141 views

Recovering Lost Brave Browser Usernames and Passwords

I recently changed my password for my local Windows 10 account and found out that my usernames/passwords in Brave's password manager are no longer visible. Unfortunately, I executed Brave after the ...
arn's user avatar
  • 11
0 votes
1 answer
461 views

Why does the windows firewall allow apps to communicate through so many different ports and to so many different addresses?

I looked at my default windows defender firewall on Windows 10 22H2, and most of the rules allow apps to communicate through any local port to any remote address and port. I have read other questions ...
Cybsechuman's user avatar
1 vote
1 answer
326 views

Windows 10 Update - Man In The Middle Attack - Tamper Update [duplicate]

I am connecting to a wi-fi network and blocked all IP addresses in this network with a regular Windows 10 firewall. The only available IP addresses are: 192.168.1.1 = gateway 192.168.1.102 = my own ...
Minerva Developer's user avatar
5 votes
3 answers
3k views

Why/When does patching CVE-2022-41099 (BitLocker Bypass) require extra steps?

Microsoft has published information about a recent security problem classified as "BitLocker Security Feature Bypass" identified as CVE-2022-41099 which points out that Windows Recovery ...
user287998's user avatar
0 votes
0 answers
1k views

ERROR kuhl_sekurlsa_acquireLSA from customized mimikatz

Tried to call sekurlsa::logonpasswords function from mimikatz main source, but I get ERROR hl_aaaurlsa_acquireLSA ; Logon list The program is executed with Administrator cred and I'm sure there's no ...
zbx0310's user avatar
1 vote
0 answers
259 views

Windows CSP for remote signing

I have a system (lets call it signer) that has private keys for doing Authenticode code signing. I have bunch of build systems that want to sign generated build artifacts. Obviously I can't use ...
videoguy's user avatar
  • 111
0 votes
0 answers
156 views

Can a Remote Desktop software prevent windows 10 keylogger from accessing what is typed on client computer during a session to a remote computer?

The “improve inking and typing” setting in Windows 10 allows Microsoft to send themselves processed samples of what is typed on a machine (not sure if it is processed to remove details as it’s typed ...
AndroidUser558's user avatar
1 vote
0 answers
87 views

Blank decrypted Windows 10 passwords [duplicate]

I'm getting hashes from Windows 10 SAM using samdump2, then pass this to John the Ripper, with the --format=NT and --show arguments, and get: username::1001:aad3b435b51404eeaad3b435b51404ee:...
GREAT DNG's user avatar
0 votes
1 answer
148 views

Storing a key in a reasonably safe way

I’m developing an application that will run on a private, on premises network. The application will be accepting requests through an API, read some encrypted data from the disk, decrypt them, do some ...
Q-bertsuit's user avatar
1 vote
1 answer
139 views

Secondary disk safe to use after potential virus?

I've recently bought a new disk and made a fresh install on a home PC after having potential malware (or a very corrupted registry, whatever your take is on having numerous Blue Screens of Death, one ...
user avatar
0 votes
0 answers
2k views

Searching in Chrome redirects to "find.fnavigate-now.com"

It used to do a Google search. Now it redirects to this weird website, which itself redirects to Yahoo. What gives? https://find.fnavigate-now.com/results.aspx?q=test&gd=SY1004294&searchsource=...
fnavigate's user avatar
0 votes
0 answers
18 views

How to decrypt windows password with SAM and SYSTEM files? [duplicate]

Suppose we have access to SAM and SYSTEM file, I want to decrypt the password. I'd like not to use any third-party software and write my own algorithm. Is there a way to do so?
JavaGamesJAR's user avatar
0 votes
0 answers
415 views

Does malware use Oracle RDBMS Kernel Executable (oracle.exe) to steal data?

I'm worried that my computer may have been infected by a virus. My Windows Virus Scan says that nothing came up, and a Chrome malware scan also turned up nothing. However, a process called Oracle ...
Some Guy's user avatar
  • 115
2 votes
1 answer
1k views

Can an ISO file be harmful if opened as an archive?

I was trying to download something off a sketchy website, and ISO was a reasonable extension for what I was trying to get, but I was still pretty sure it was malicious. I didn't put much thought into ...
Emily Cravens's user avatar
0 votes
0 answers
464 views

Bluetooth USB device shows up as HID Keyboard. Is it safe?

I bought a USB Bluetooth adapter and my PC now has Bluetooth available, but while it's connected it is makes a "HID Keyboard" show up in my "Mouse, keyboard & pen" setting in ...
W2a's user avatar
  • 673
1 vote
0 answers
394 views

Is it safe to disable certificate checking?

I am developing a web API, which runs only on my local computer, and using PowerShell to test it. Here is an example test: $baseUri = 'https://localhost:5001' $body = '{ "title": "...
Matt Cassinelli's user avatar
3 votes
0 answers
223 views

Does Windows 10 read/run/care about USB devices plugged in "Lock Screen" mode?

Whenever I leave my computer for the bathroom or anything inside the living space, I press WinKey + L to enter the "Lock Screen" mode. (If I go outside, I turn it off completely.) Let's say ...
Derrol H.'s user avatar
4 votes
1 answer
755 views

Use platform TPM as U2F for web applications

The Problem: Use the platform TMP of my Windows Laptop/PC (no external device or USB token) as U2F in a web application to check if it is a known device. My intended solution: I need to store/create ...
MrMaavin's user avatar
3 votes
1 answer
1k views

Why does this Windows process run with High integrity?

Background I'm trying to understand more about the Mandatory Integrity Control system in Windows, and have been looking through the background processes that are running at High integrity on my laptop....
David Alexander's user avatar
2 votes
1 answer
769 views

How risky is it to let someone know the name of your Windows PC?

I have here a situation where if I share this file with someone on the internet, the file may contain: 1. data pointing to the directories where it is stored on my computer, along with 2. the name of ...
HullBreaker's user avatar
2 votes
1 answer
200 views

Does only having Microsoft Office installed make you vulnerable to the CVE-2022-30190 RCE or having Windows as your OS is enough?

I was wondering whether you need to have Microsoft Office installed to be vulnerable to CVE-2022-30190 RCE. As far as I understand, MSDT is the issue here (the attack vector so to say) and as shown ...
Sir Muffington's user avatar
0 votes
2 answers
2k views

Unintended file downloaded. Am I likely to have gotten a virus?

I clicked on a link that appeared to be perfectly legit. It proceeded to bring me to a suspicious website that downloaded a file to my PC automatically. I deleted the file quickly and never ran it. I ...
user277538's user avatar
0 votes
1 answer
288 views

Non executable virus?

Bitdefender detected .class -- File path: ...\tetra-1.12.2.jar => .../GuiStats.class -- Threat name: Java.Trojan.GenericGBA.31135 .tif -- File path: ...\crash-81154...60f8.tif -- Threat name: ...
OverLordGoldDragon's user avatar
0 votes
0 answers
92 views

Windows 10 Cybersecurity on Stand-Alone Computer

I have been asked to investigate what capabilities exist within Windows 10 where the environment for this system is isolated. I believe it would not be able to benefit from an enterprise security ...
Jim's user avatar
  • 255
0 votes
2 answers
205 views

Is this weird folder "Up8d76c_31187" a windows thing?

I noticed it becaue one of these exe's started running after a BSOD. Putting one of the exe's into VirusTotal gives it a 3/70. How can I examine this further? Edit: Other exe's are worse: VirusTotal ...
Vepir's user avatar
  • 103
2 votes
0 answers
715 views

Can a virus infect windows 10 bootable media?

I created a bootable windows 10 usb from my friend's computer. I used the official tool from microsoft. I was dumb enough to not check my friend's computer beforehand (turns out he had Utorrent Web ...
Jilifkate123's user avatar
1 vote
2 answers
513 views

Is Windows 10 Home more secure than Windows 10 Pro in some way?

I'm planning to do a fresh install of Windows 10 on my mother's computer. Despite it has Pro version right now, I wonder if I should use Home version instead, which is also called Single Language. ...
Mycroft's user avatar
  • 768
0 votes
0 answers
305 views

How to isolate Windows10 Virtual machine from w10 host (virtualbox) for malware analysis [duplicate]

My goal is to find malware that performs network activities and captures the traffic with Wireshark. I have a Windows 10 laptop host machine and VirtualBox which has virtual Windows 10 machine. I am ...
ArcherPacman's user avatar
0 votes
2 answers
811 views

Domain admin can monitor all keystrokes. How can I prove that my computer is being targeted? [closed]

I recently found out that my coworker who is domain admin in a large organization told me that he can monitor all keystrokes of any PCs in the domain he'd like and even he can look at any screen to ...
csharpguru1991's user avatar
0 votes
1 answer
420 views

Microsoft site iso download flagged by Defender as hacktool while creating bootable USB through rufus [closed]

Iso of 32 bit Windows 10 professional english version downloaded from Microsoft's website by using chrome's developer tools to spoof a chromeOS signature, so as to avoid using Microsoft's download ...
Jonathan Damora's user avatar
0 votes
0 answers
128 views

No UAC appearing for newly installed applications

Recently I have noticed that my system doesn't show the UAC prompt whenever I install some application from another source, I have UAC on and everything is working fine, I also have an administrator ...
Elytra's user avatar
  • 1
0 votes
2 answers
405 views

Bought a new Laptop. Can't reset. Is it Safe?

I recently bought a new laptop from a third-party seller on new egg. The seller states that it is "upgraded": "*We sell computers with upgraded configurations. If the computer has been ...
cershif's user avatar
0 votes
1 answer
3k views

pwdump8-8.2 correct hash for Microsoft Account Win10

I am having a real issue cracking one NT hash i've pulled from my system for a Microsoft Account. I used - PwDump8.2 I have an admin account unlocked on the system and can access most files. I know ...
Patho's user avatar
  • 5

1
2 3 4 5
8