›

Window non-standard application concept

suikatarosuikataro
in Off-topic

Hi everyone.
I've started learning security at HTB academy for a few weeks and currently stuck at window security topic question.
The question is "What non-standard application is running under the current user?" but i don't know what exactly the "non-standard application" means.
I've googled but didn't find any result.
Can you guys explain this concept for me?
Thank you in advance.

Tagged:

Comments

  • TazWakeTazWake
    edited January 2

    In general it means an application that doesn't come with a normal install of windows (IMHO).

    For example, notepad is a standard windows application. Notepad++ isn't (although it is very common and probably installed so often you'd consider it standard).

    Then if you find IrfanView running, it clearly isn't standard.

    TazWake

    Note: https://www.nohello.com/

    Happy to help people but PLEASE explain your problem in as much detail as possible! If you say vague things like "It's not working", I cant help. This isn't Twitter so my DMs are always open.

  • suikatarosuikataro

    @TazWake Thank you for your answer. It's very clear explanation.

  • 5N34KY5N34KY
    edited February 19

    Thank's for suggestion

  • zer021zer021

    I'm stuck, can't find it. I'll have to actually learn shell to get this answer naturally.

  • acidbatacidbat

    With Windows if you run:
    Get-Process | select-object Processname, id or powershell -c get-process | select-object Processname, id it will list the processes that is on the machine.
    Filter through them to see what sticks out

    Always happy to help others. 100% human

    https://www.mindfueldaily.com/livewell/thank-you/

  • hajdarevicedinhajdarevicedin

    I don't know why but for some reason I am struggling with this.. I saw the hint and this post, and I was thinking its Foxit Reader Update Service but it is not.. Any extra hints for me please?

  • PrivacyMonk3yPrivacyMonk3y
    edited April 3

    Type your comment> @acidbat said:

    With Windows if you run:
    Get-Process | select-object Processname, id or powershell -c get-process | select-object Processname, id it will list the processes that is on the machine.
    Filter through them to see what sticks out

    from cli tasklist will work too. Depending on what type of shell you have and have access too.

    There are some pretty decent courses on Udemy that cover windows but if you're just starting out HTB / tryhackme have a lot of very good information to soak up.

    When you reach the end of those check out other resources. Books/Udemy blah blah.

    Oh... and look up winpeas ;)


  • acidbatacidbat

    Type your comment> @PrivacyMonk3y said:

    Type your comment> @acidbat said:

    With Windows if you run:
    Get-Process | select-object Processname, id or powershell -c get-process | select-object Processname, id it will list the processes that is on the machine.
    Filter through them to see what sticks out

    from cli tasklist will work too. Depending on what type of shell you have and have access too.

    There are some pretty decent courses on Udemy that cover windows but if you're just starting out HTB / tryhackme have a lot of very good information to soak up.

    When you reach the end of those check out other resources. Books/Udemy blah blah.

    Oh... and look up winpeas ;)

    Ah yes tasklist is good :D

    Always happy to help others. 100% human

    https://www.mindfueldaily.com/livewell/thank-you/

  • hajdarevicedinhajdarevicedin

    I don't know why, but NordVPN and Foxit Reader aren't pre-installed right?

  • CryptoAnar84CryptoAnar84

    Hi! I'm still stuck at this question. I've been trying almost all of the services listed in tasklist either with .exe or not) and and still have not find it. Any help please...? This is getting frustrating. Nothing that stands out work.

  • acidbatacidbat

    Type your comment> @hajdarevicedin said:

    I don't know why, but NordVPN and Foxit Reader aren't pre-installed right?

    Just looking over my time on this machine, the fox is the right way to go. Just need to get the name right...

    Always happy to help others. 100% human

    https://www.mindfueldaily.com/livewell/thank-you/

  • acidbatacidbat

    on a side note; I do find Academy good but equally frustrating because of the case sensitive answers

    Always happy to help others. 100% human

    https://www.mindfueldaily.com/livewell/thank-you/

  • WBH64WBH64

    name of the service EXEcutable

  • hajdarevicedinhajdarevicedin

    That moment when you realize that you have been missing file extension all time long...

  • lilith39lilith39

    I tried everythings possibile.. lol the last question in this module, i copied and pasted the name, with the file extension, but nothing i really don't understand. This question is present 2 time, the first time everything ok, but second one none... Pls help me lol

  • NautiluScorpNautiluScorp

    Type your comment> @lilith39 said:

    I tried everythings possibile.. lol the last question in this module, i copied and pasted the name, with the file extension, but nothing i really don't understand. This question is present 2 time, the first time everything ok, but second one none... Pls help me lol

    la respuesta tiene que estar completa con la extensión.

  • lilith39lilith39

    Type your comment> @NautiluScorp said:

    Type your comment> @lilith39 said:

    I tried everythings possibile.. lol the last question in this module, i copied and pasted the name, with the file extension, but nothing i really don't understand. This question is present 2 time, the first time everything ok, but second one none... Pls help me lol

    la respuesta tiene que estar completa con la extensión.

    I know, alredy done it, but nothing.

  • Rainbowolf77Rainbowolf77

    hello everyone, tip, don't forget .exe and also look for an update service not built into windows

  • klausneilklausneil

    Hi @Rainbowolf77 i try with the .exe or EXE extention and also with the name of UpdateService for FoxitReader but not work for me; what may be failing.

  • lilith39lilith39

    Nothing, i can't find it. In the Windows Security, i tried the "animal" but nothing... pls if someone can help i would really appriciate. tnks

  • Skitz66Skitz66
    edited April 15

    Type your comment> @lilith39 said:

    Nothing, i can't find it. In the Windows Security, i tried the "animal" but nothing... pls if someone can help i would really appriciate. tnks

    Hi Lilith39 there is a much easier way to find the Non Standard Application than using the command line. Once you RDP to the target just take a look into Apps & Features in the start menu and look for the App's that are not standard to the windows. There are only a few so they should stand out

  • Skitz66Skitz66

    @klausneil did you succeed in this yet?

  • klausneilklausneil

    Type your comment> @Skitz66 said:

    @klausneil did you succeed in this yet?

    Yes, jajaja is a blues

  • solo276solo276

    can anyone help me with this question?
    Which Windows NT version is installed on the workstation? (i.e. Windows X - case sensitive)

  • xmelfoyxxmelfoyx

    Type your comment> @solo276 said:

    can anyone help me with this question?
    Which Windows NT version is installed on the workstation? (i.e. Windows X - case sensitive)

    Hi, that is very simple, replace X in "Windows X" to the NT number.

Sign In to comment.