I started HTB Academy a few weeks ago and started some of the Fundamentals Modules. In Windows Fundamentals, one of the questions there is to “Identify one of the Non-standard update service running on host”,but the module did not mention anything about a command line looking for it and I do not know what a non-standard update service is. From what I understand is that it’s something that didn’t come with the OS.
If someone can explain it to me further, that would be lovely.
For anyone going through this: Figured this out thanks to @KisBal 's suggestion.
The question reads:
Identify one of the non-standard update services running on the host. Submit the full name of the service executable (not the DisplayName) as your answer.
You need the file extension too.
I guess I never really learned to read questions properly myself.
It was also too complex for me to quickly understand the answer format.
Some steps for execution:
First of all it came to me with an attempt to use applications in WINDOWS. Services app - it’s a table (knowing the answer, the key is on properties of the service, the path). It seems too simple and at that time impossible to get:
What was confusing at that time, needed service is located in “Extended” and “Standard” sort types.
Windows PowerShell:
Of course, without a Google & ChatGPT to get a correct command is no chance for the beginner. But I knew that here, as always, must be the request command:
For anyone who got stomp like me and had no where to begin, here is how I went with the question. All this is a longer route, but easier to explain the thought process.
The hint said it involved PDF editing and to use powershell. So you can expect it to be some software. So you can backtrack (“cd …”) all the way until you find the Program Files (x86). Once you follow the Program Files (x86) path, there is a software there that is different from the rest. From that point, you follow the path all the way until you see multiple directories and executables. Then finding one that specifically has the “updateservice” as its name. Because the question was looking for the update service.
Hope that helped breakdown the process for the ones who did not have any know how to use commands apart from the basic ones like me.