Questions tagged [windows-10]
An operating system developed by Microsoft released July 2015 and designed to run across devices with multiple form factors - PC, tablet, smartphone, Xbox and HoloLens.
384 questions
1
vote
0
answers
72
views
Un-Quarentinable Files and Ghost Malware?
I've run into a series of odd behaviours from my computer (Windows10) and Avast Antivirus and believe I might be infected with an impersonator malware (or I'm being paranoid). I don't know what to do ...
- 11
1
vote
1
answer
118
views
How can I ensure that sensitive data on a Windows computer is not transmitted externally by any software?
How can I securely handle sensitive information on my computer given the pervasive threat of malicious software and cyber-attacks?
I am concerned that my computer, connected to the internet, is ...
- 202
17
votes
4
answers
8k
views
How to deal with monitoring software on a personal PC used for work?
My husband currently uses his personal computer for virtual work. The agency he works for insists that all employees install monitoring software that can see everything on the computer. I have heard ...
- 173
1
vote
1
answer
311
views
Why does Windows force you to do a mandatory restart once in a while? Apparently, its for 'security purposes.'
I haven't needed to restart my computer for a while now, as I just usually shut down when I'm finished, and then reboot when I use Windows again. I dual-boot, so of course I often restart to a ...
- 3,025
0
votes
1
answer
86
views
How to handle trojan executed on my laptop? [duplicate]
Unfortunately, I have executed an .exe file on my PC. After scanning the file I understood that it is a trojan and after checking its behaviour using VirusTotal I understood that it left many files on ...
- 185
1
vote
0
answers
105
views
How does Windows 11 handle incrementing low-level syscalls compared to W10
I implemented my own version of SysWhisperer2 to parse ntdll and dynamically resolve syscall service numbers in Windows 11 under the assumption that the methodology would still be able to process ...
- 11
0
votes
0
answers
175
views
How to embed a PE file to another PE files
So what I want to do basically is what BDFproxy does on the go, I want to modify a file (on the disk) to embed another PE in it and have both working, it does not matter if they work concurrently or ...
1
vote
1
answer
151
views
Security vulnerabilites in Windows updates from local network
Windows has offered the ability to download updates from machines in the local network for some time. My gut feeling tells me this would be a great attack vector for Windows security vulnerabilites.
...
- 123
1
vote
0
answers
92
views
Why do I suddenly receive print notifications on Windows 10? [closed]
I have seen whats's in the image.
But i don't have any printer.
OS: Windows 10 22H2
0
votes
0
answers
95
views
Disabling UAC (Windows 10) for Administrator accounts
To help improve the user experience on admin workstations, would it be ok to disable the UAC or maybe set it with a more permissive mode?
1
vote
1
answer
174
views
How to tell if BlackByte NT ransomware is on my computer?
The company I work at sadly fell victim to BlackByte NT ransomware this week. It ransomed many of the Windows machines on our factory floor.
I have used my personal laptop (Windows 10 Home, version ...
0
votes
0
answers
95
views
How do I check if my PowerShell is connected on SSH?
I know how to check but command line cmd or powershell can be altered to make it look clean with disguised hash codes (which they show like they are not tempered but actually commands are altered and ...
1
vote
1
answer
540
views
Is it worth it to force UAC to ask for a password?
I've tried to harden my Windows 10 by using an unprivileged account, which I know reduces the attack surface a lot. I'm running Ableton (a music program) which is running after UAC has given admin ...
- 35
0
votes
0
answers
121
views
Proof of concept: Services File Permissions Weakness (T1574.010)
I am trying to do a proof of concept where I use technique T1574.010. In this technique, I should rewrite the binpath of some service in Windows 10 so that when the service starts again the payload ...
- 11
0
votes
1
answer
382
views
Executable to try DLL hijacking attacks
I'm doing an educational project and I need an executable to try different DLL hijacking techniques in Windows 10.
Obviously, there are no such vulnerabilities in Windows 10 by default, so I thought ...
- 11
1
vote
2
answers
472
views
execute command in go without storing the command in a .exe file
I am trying to do a go program to execute a .exe file, but without be actually a .exe file. The idea is to read the executable from a .txt file and decode it (it is in base64). Once I have that code ...
- 11
0
votes
1
answer
196
views
Recover deleted (Shift+Delete) One Drive Folder on a bitlocker enabled drive. Should I unencrypt drive before I atempt recovery?
Windows 11, bitlocked C:\ Drive (I have the bitlocker key and can unencrypt drive).
Onedrive installed, synced to my Docs folder but not signed in to OneDrive account (never signed in).
Uninstalled ...
1
vote
1
answer
219
views
What "indicators of compromise" are there that end users can diagnose themselves?
I'm responsible for the IT security of a small (~5 users) office, and I'm preparing training materials for our users.
Obviously, the first step my users should do if anything seems suspicious is to ...
- 3,930
1
vote
0
answers
257
views
Recovering Lost Brave Browser Usernames and Passwords
I recently changed my password for my local Windows 10 account and found out that my usernames/passwords in Brave's password manager are no longer visible.
Unfortunately, I executed Brave after the ...
- 11
1
vote
1
answer
681
views
Why does the windows firewall allow apps to communicate through so many different ports and to so many different addresses?
I looked at my default windows defender firewall on Windows 10 22H2, and most of the rules allow apps to communicate through any local port to any remote address and port. I have read other questions ...
- 13
1
vote
1
answer
417
views
Windows 10 Update - Man In The Middle Attack - Tamper Update [duplicate]
I am connecting to a wi-fi network and blocked all IP addresses in this network with a regular Windows 10 firewall. The only available IP addresses are:
192.168.1.1 = gateway
192.168.1.102 = my own ...
5
votes
3
answers
3k
views
Why/When does patching CVE-2022-41099 (BitLocker Bypass) require extra steps?
Microsoft has published information about a recent security problem classified as "BitLocker Security Feature Bypass" identified as CVE-2022-41099 which points out that Windows Recovery ...
- 51
0
votes
0
answers
2k
views
ERROR kuhl_sekurlsa_acquireLSA from customized mimikatz
Tried to call sekurlsa::logonpasswords function from mimikatz main source, but I get ERROR hl_aaaurlsa_acquireLSA ; Logon list
The program is executed with Administrator cred and I'm sure there's no ...
- 1
1
vote
0
answers
301
views
Windows CSP for remote signing
I have a system (lets call it signer) that has private keys for doing Authenticode code signing. I have bunch of build systems that want to sign generated build artifacts. Obviously I can't use ...
- 111
0
votes
0
answers
174
views
Can a Remote Desktop software prevent windows 10 keylogger from accessing what is typed on client computer during a session to a remote computer?
The “improve inking and typing” setting in Windows 10 allows Microsoft to send themselves processed samples of what is typed on a machine (not sure if it is processed to remove details as it’s typed ...
1
vote
0
answers
91
views
Blank decrypted Windows 10 passwords [duplicate]
I'm getting hashes from Windows 10 SAM using samdump2, then pass this to John the Ripper, with the --format=NT and --show arguments, and get:
username::1001:aad3b435b51404eeaad3b435b51404ee:...
- 11
0
votes
1
answer
153
views
Storing a key in a reasonably safe way
I’m developing an application that will run on a private, on premises network. The application will be accepting requests through an API, read some encrypted data from the disk, decrypt them, do some ...
- 537
1
vote
1
answer
168
views
Secondary disk safe to use after potential virus?
I've recently bought a new disk and made a fresh install on a home PC after having potential malware (or a very corrupted registry, whatever your take is on having numerous Blue Screens of Death, one ...
user130386
0
votes
0
answers
2k
views
Searching in Chrome redirects to "find.fnavigate-now.com"
It used to do a Google search. Now it redirects to this weird website, which itself redirects to Yahoo. What gives?
https://find.fnavigate-now.com/results.aspx?q=test&gd=SY1004294&searchsource=...
- 13
0
votes
0
answers
23
views
How to decrypt windows password with SAM and SYSTEM files? [duplicate]
Suppose we have access to SAM and SYSTEM file, I want to decrypt the password. I'd like not to use any third-party software and write my own algorithm. Is there a way to do so?
- 101
0
votes
0
answers
496
views
Does malware use Oracle RDBMS Kernel Executable (oracle.exe) to steal data?
I'm worried that my computer may have been infected by a virus. My Windows Virus Scan says that nothing came up, and a Chrome malware scan also turned up nothing. However, a process called Oracle ...
- 115
2
votes
1
answer
1k
views
Can an ISO file be harmful if opened as an archive?
I was trying to download something off a sketchy website, and ISO was a reasonable extension for what I was trying to get, but I was still pretty sure it was malicious. I didn't put much thought into ...
0
votes
0
answers
515
views
Bluetooth USB device shows up as HID Keyboard. Is it safe?
I bought a USB Bluetooth adapter and my PC now has Bluetooth available, but while it's connected it is makes a "HID Keyboard" show up in my "Mouse, keyboard & pen" setting in ...
- 673
1
vote
0
answers
423
views
Is it safe to disable certificate checking?
I am developing a web API, which runs only on my local computer, and using PowerShell to test it. Here is an example test:
$baseUri = 'https://localhost:5001'
$body = '{
"title": "...
3
votes
0
answers
251
views
Does Windows 10 read/run/care about USB devices plugged in "Lock Screen" mode?
Whenever I leave my computer for the bathroom or anything inside the living space, I press WinKey + L to enter the "Lock Screen" mode. (If I go outside, I turn it off completely.)
Let's say ...
- 31
4
votes
1
answer
855
views
Use platform TPM as U2F for web applications
The Problem:
Use the platform TMP of my Windows Laptop/PC (no external device or USB token) as U2F in a web application to check if it is a known device.
My intended solution:
I need to store/create ...
- 91
3
votes
1
answer
1k
views
Why does this Windows process run with High integrity?
Background
I'm trying to understand more about the Mandatory Integrity Control system in Windows, and have been looking through the background processes that are running at High integrity on my laptop....
- 133
2
votes
1
answer
1k
views
How risky is it to let someone know the name of your Windows PC?
I have here a situation where if I share this file with someone on the internet, the file may contain: 1. data pointing to the directories where it is stored on my computer, along with 2. the name of ...
- 203
2
votes
1
answer
211
views
Does only having Microsoft Office installed make you vulnerable to the CVE-2022-30190 RCE or having Windows as your OS is enough?
I was wondering whether you need to have Microsoft Office installed to be vulnerable to CVE-2022-30190 RCE.
As far as I understand, MSDT is the issue here (the attack vector so to say) and as shown ...
- 1,675
0
votes
2
answers
3k
views
Unintended file downloaded. Am I likely to have gotten a virus?
I clicked on a link that appeared to be perfectly legit. It proceeded to bring me to a suspicious website that downloaded a file to my PC automatically. I deleted the file quickly and never ran it. I ...
0
votes
1
answer
306
views
Non executable virus?
Bitdefender detected
.class -- File path: ...\tetra-1.12.2.jar => .../GuiStats.class -- Threat name: Java.Trojan.GenericGBA.31135
.tif -- File path: ...\crash-81154...60f8.tif -- Threat name: ...
0
votes
0
answers
112
views
Windows 10 Cybersecurity on Stand-Alone Computer
I have been asked to investigate what capabilities exist within Windows 10 where the environment for this system is isolated. I believe it would not be able to benefit from an enterprise security ...
- 255
0
votes
2
answers
229
views
Is this weird folder "Up8d76c_31187" a windows thing?
I noticed it becaue one of these exe's started running after a BSOD.
Putting one of the exe's into VirusTotal gives it a 3/70. How can I examine this further?
Edit: Other exe's are worse: VirusTotal ...
- 103
2
votes
0
answers
887
views
Can a virus infect windows 10 bootable media?
I created a bootable windows 10 usb from my friend's computer. I used the official tool from microsoft. I was dumb enough to not check my friend's computer beforehand (turns out he had Utorrent Web ...
- 29
1
vote
2
answers
607
views
Is Windows 10 Home more secure than Windows 10 Pro in some way?
I'm planning to do a fresh install of Windows 10 on my mother's computer. Despite it has Pro version right now, I wonder if I should use Home version instead, which is also called Single Language.
...
- 768
0
votes
0
answers
317
views
How to isolate Windows10 Virtual machine from w10 host (virtualbox) for malware analysis [duplicate]
My goal is to find malware that performs network activities and captures the traffic with Wireshark. I have a Windows 10 laptop host machine and VirtualBox which has virtual Windows 10 machine.
I am ...
0
votes
2
answers
1k
views
Domain admin can monitor all keystrokes. How can I prove that my computer is being targeted? [closed]
I recently found out that my coworker who is domain admin in a large organization told me that he can monitor all keystrokes of any PCs in the domain he'd like and even he can look at any screen to ...
0
votes
1
answer
438
views
Microsoft site iso download flagged by Defender as hacktool while creating bootable USB through rufus [closed]
Iso of 32 bit Windows 10 professional english version downloaded from Microsoft's website by using chrome's developer tools to spoof a chromeOS signature, so as to avoid using Microsoft's download ...
0
votes
0
answers
142
views
No UAC appearing for newly installed applications
Recently I have noticed that my system doesn't show the UAC prompt whenever I install some application from another source, I have UAC on and everything is working fine, I also have an administrator ...
- 1
0
votes
2
answers
507
views
Bought a new Laptop. Can't reset. Is it Safe?
I recently bought a new laptop from a third-party seller on new egg. The seller states that it is "upgraded": "*We sell computers with upgraded configurations. If the computer has been ...
- 3