Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Windows 10 22H2: Phantom Images everywhere #6

Open
avengerx opened this issue Nov 29, 2024 · 1 comment
Open

Windows 10 22H2: Phantom Images everywhere #6

avengerx opened this issue Nov 29, 2024 · 1 comment

Comments

@avengerx
Copy link

The binary available in the release of the repo works great in a Windows Server 2012 R2.
But when I put it for the run in a Windows 10, all loaded DLLs are reported as "phantom image":

image

It's probably just a tech/lib upgrade issue. But glad it worked in ol' win12. Helped a lot making sure what a malware was doing.

@avengerx
Copy link
Author

Oh, the process in question is just an IIS's w3wp.exe and, if it helps, this is the output of a similiar (but lilkely compromised) one:

image

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

1 participant