Beyond good ol’ Run key, Part 146
2024-12-20 13:17:9 Author: www.hexacorn.com(查看原文) 阅读量:5 收藏

I did consider writing about:

C:\Windows\System32\WptsExtensions.dll

but this phantom DLL has been documented all over the place, so let’s look at a different one:

C:\Windows\System32\XboxNetApiSvcExtHost.dll

It’s loaded by svchost.exe on Windows 11 24H2 and Windows Server 2022.


文章来源: https://www.hexacorn.com/blog/2024/12/20/beyond-good-ol-run-key-part-146/
如有侵权请联系:admin#unsafe.sh