Hot answers tagged

57

Yes. There is a tool on GitHub here that can change that information. It supports both 64-bit and 32-bit. The syntax I used: rcedit-x64.exe cmx.exe --set-version-string OriginalFilename "cmdx.exe" --set-version-string FileDescription "details are irrelevant" Therefore, your solution may be efficient against beginners, but not against people with IT ...


2

Yes you can start a shell with a service account . Can they login all depends on what permissions and checkboxes the admin selected when he created the account so yes again it could've be possible . In many cases I've seen service accounts poorly setup and granted extremely high amount of privileges such as Remote Desktop or local admin or domain admin thus ...


2

Windows is not case sensitive by default. If the only symptom you have is a lowercase w and nothing else, it's not an issue to be worried about. You don't need to remove the drive to inspect on a Linux machine. Download any modern Linux iso, create a bootable USB drive on another machine, and boot on the suspect machine.


2

It is generally considered safer to open PDFs in browsers, because they are better sandboxed than the other PDF readers installed on your computer. The sandbox should prevent the browser to access your local files (I'm simplifying a little). Anyway, if the PDF is malicious and targets (for example) Adobe Reader, nothing prevents Adobe Reader to access your ...


2

The only one of those that is even potentially a major risk is starting services, because services run as their own user instead of inheriting the security token of the process that started them. If the service account can launch more-privileged services, especially if any of them take parameters and/or otherwise consume data that the service account can ...


2

Key store is used for private keys. Those can be used for applications that use cryptography features such as public or private key encryption. These types of keys are supported: Diffie-Hellman public and private keys Digital Signature Algorithm (DSA, FIPS 186-2) public and private keys Elliptic Curve Cryptography public and private keys RSA (PKCS #1) ...


1

Signing with a self signed certificate provides no value for the usual windows user. The signature is invalid from the point of Windows. The name of the signer is not shown in the elevation prompt. People who would be able to verify such a signature are equally able to verify e.g. a GPG signature which is more common in the open source community. Signing ...


1

"... Remote Desktop Protocol ... Microsoft advises to disable it until the latest patches have been applied..." https://en.m.wikipedia.org/wiki/BlueKeep


Only top voted, non community-wiki answers of a minimum length are eligible