Windows 10 SearchUI.exe

c++ / delphi package - dll injection and api hooking

Re: Windows 10 SearchUI.exe

Postby ExPx » Mon Dec 24, 2018 3:14 pm

Thanks madshi for information. I added most of them in exclude list temporarily. I will also do a enumeration for suspended apps and kill them before uprate hook dll.
ExPx
 
Posts: 34
Joined: Fri Oct 21, 2016 3:20 pm

Re: Windows 10 SearchUI.exe

Postby madshi » Mon Dec 24, 2018 5:32 pm

You could also use the latest build and *not* use the INJECT_METRO_APPS flag when calling InjectLibrary(). But of course that will include *all* Metro apps. That's probably not what you want?
madshi
Site Admin
 
Posts: 9906
Joined: Sun Mar 21, 2004 5:25 pm

Re: Windows 10 SearchUI.exe

Postby ExPx » Thu Dec 27, 2018 2:06 pm

Disabling INJECT_METRO_APPS is not an option becuse of MS Edge hooking. I will try to terminate suspended metro apps while updating hook dll.
ExPx
 
Posts: 34
Joined: Fri Oct 21, 2016 3:20 pm

Re: Windows 10 SearchUI.exe

Postby madshi » Thu Dec 27, 2018 4:13 pm

Well, you could do one injection for all processes except Metro processes, and a 2nd injection just for Edge?
madshi
Site Admin
 
Posts: 9906
Joined: Sun Mar 21, 2004 5:25 pm

Re: Windows 10 SearchUI.exe

Postby iconic » Sat Dec 29, 2018 8:03 am

Might be worth looking into the IPackageDebugSettings COM interface and exposed Resume() method below:

https://docs.microsoft.com/en-us/window ... ngs-resume


--Iconic
iconic
 
Posts: 857
Joined: Wed Jun 08, 2005 5:08 am

Re: Windows 10 SearchUI.exe

Postby madshi » Mon Dec 31, 2018 11:24 am

Thank you, iconic - that looks really promising!! :crazy:
madshi
Site Admin
 
Posts: 9906
Joined: Sun Mar 21, 2004 5:25 pm

Re: Windows 10 SearchUI.exe

Postby ExPx » Mon Dec 31, 2018 2:08 pm

Thanks iconic. I will try it.
ExPx
 
Posts: 34
Joined: Fri Oct 21, 2016 3:20 pm

Re: Windows 10 SearchUI.exe

Postby iconic » Mon Dec 31, 2018 7:48 pm

I haven't tried it myself so I've no idea if it will even work but as Madshi mentioned it does appear to look somewhat promising. Here's to hoping :wink:

--Iconic
iconic
 
Posts: 857
Joined: Wed Jun 08, 2005 5:08 am

Previous

Return to madCodeHook

Who is online

Users browsing this forum: No registered users and 7 guests

cron