Nedim Šabić²

Results 49 comments of Nedim Šabić²

Hey @mnznndr97 , The JSON payload you posted contains the REG_BINARY registry value parameter, which unsurprisingly is a binary blob. Thus, it would require some sort of encoding before transmitting...

Oddly, the binary generated in `Debug` mode does work as expected. I'm fine with this, so closing the issue. Thanks for the help!

That's weird, because executing a couple of methods resulted in spawning an elevated cmd. I'll try attaching the debugger and get back to you with the findings

I'm exercising the elevated COM interface technique. Does it pertain to the category of simple methods you're calling out above? ![akagi](https://github.com/hfiref0x/UACME/assets/11174375/666685fa-401f-445e-b9f3-dd46ce5b3410)

The debugger is revealing the following exception raised in `Akagi\stub.c` line 75: ``` ******************************************************************************* * * * Exception Analysis * * * ******************************************************************************* KEY_VALUES_STRING: 1 Key : Analysis.CPU.mSec Value: 2875...

Well, you asked me to trace the program's execution and let you know the results. I thought that may be insightful to you. However, if you think there is nothing...

Hi @Swar2424 , Thanks for the detailed error report. Does the crash happens with any capture size or only capture with significant size? Do you capture and reply on the...

Hi @Swar2424 , Does your capture contain sensitive data? If you don't have any objections to share the capture file, that would definitely streamline the investigation and troubleshooting on my...

@Swar2424 could you upload the capture file to some file sharing platform (WeTransfer, Google Drive)? TIA

@Swar2424 got the capture files. Thanks! I'll investigate and come back to you with my findings.