After executing:
.\createprocess.exe /w /systemtoken c:\Windows\System32\cmd.exe
And pressing the Ctrl+C (or Ctrl+Break) key combination, only the first createprocess.exe process is terminated, the processes running as SYSTEM are still left running.
Would it be possible to propagate the key combination to the other processes? Maybe using SetConsoleCtrlHandler/GenerateConsoleCtrlEvent.
PS Ah, the signal is reaching all the processes (including the ones running as SYSTEM). Maybe createprocess.exe should ignore the signal instead? I mean, when using /w, createprocess.exe should wait for the actual application to exit despite receiving the signal?
After executing:
And pressing the
Ctrl+C(orCtrl+Break) key combination, only the firstcreateprocess.exeprocess is terminated, the processes running asSYSTEMare still left running.Would it be possible to propagate the key combination to the other processes? Maybe using
SetConsoleCtrlHandler/GenerateConsoleCtrlEvent.PS Ah, the signal is reaching all the processes (including the ones running as
SYSTEM). Maybecreateprocess.exeshould ignore the signal instead? I mean, when using/w,createprocess.exeshould wait for the actual application to exit despite receiving the signal?