Re: meterpreter ps question

[HD Moore <hdm () metasploit com>]

On 3/24/2010 2:21 PM, Joshua Smith wrote:
> what does it mean/imply when some of the listings from a meterpreter ps
> listing comes back as:
> ...        NT AUTHORITY\SYSTEM  \??\C:\WINDOWS\system32\csrss.exe
>
> specifically the \??\ part, as I notice I can't migrate to those
> processes prepended with that

Thats how the Windows API returns those path names for system services.

-HD
_______________________________________________
https://mail.metasploit.com/mailman/listinfo/framework