A svchost.exe process on a host is querying .onion domains with the command line "svchost.exe -k netsvcs -p -s SharedAccess". The user seeks guidance on how to further investigate this issue.
svchost.exe is looking up .onion domains
Hi Folks,
I just found out a Host is looking up .onion domains and that process that looks at it is svchost.exe and the cmd line is mentioned below:
svchost.exe -k netsvcs -p -s SharedAccess
Help m...
reddit.com
January 15, 2026 at 1:42 PM
A svchost.exe process on a host is querying .onion domains with the command line "svchost.exe -k netsvcs -p -s SharedAccess". The user seeks guidance on how to further investigate this issue.
Shout out to my mom!
...who signed a photo release for this @jmirpub.bsky.social paper about #sharedaccess (proxy access) in patient portals.
Hot tip: w/permission, you can upload custom images to JMIR! #mychart #olderadults #carepartners @amiainformatics.bsky.social
www.jmir.org/2024/1/e49394/
...who signed a photo release for this @jmirpub.bsky.social paper about #sharedaccess (proxy access) in patient portals.
Hot tip: w/permission, you can upload custom images to JMIR! #mychart #olderadults #carepartners @amiainformatics.bsky.social
www.jmir.org/2024/1/e49394/
Patient Portals Fail to Collect Structured Information About Who Else is Involved in a Person’s Care
The US health care delivery system does not systematically engage or support family or friend care partners. Meanwhile, the uptake and familiarity of portals to personal health information are increas...
www.jmir.org
January 4, 2025 at 9:08 PM
Shout out to my mom!
...who signed a photo release for this @jmirpub.bsky.social paper about #sharedaccess (proxy access) in patient portals.
Hot tip: w/permission, you can upload custom images to JMIR! #mychart #olderadults #carepartners @amiainformatics.bsky.social
www.jmir.org/2024/1/e49394/
...who signed a photo release for this @jmirpub.bsky.social paper about #sharedaccess (proxy access) in patient portals.
Hot tip: w/permission, you can upload custom images to JMIR! #mychart #olderadults #carepartners @amiainformatics.bsky.social
www.jmir.org/2024/1/e49394/
Win10 is such a shitty OS that permission issues across any od these 3 completely breaks firewall service:
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess
HKEY_LOCAL_MACHINE(...)MpsSvc
HKEY_LOCAL_MACHINE(...)Bfe
Aka nothing works anymore :)
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess
HKEY_LOCAL_MACHINE(...)MpsSvc
HKEY_LOCAL_MACHINE(...)Bfe
Aka nothing works anymore :)
February 22, 2025 at 5:30 AM
Win10 is such a shitty OS that permission issues across any od these 3 completely breaks firewall service:
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess
HKEY_LOCAL_MACHINE(...)MpsSvc
HKEY_LOCAL_MACHINE(...)Bfe
Aka nothing works anymore :)
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess
HKEY_LOCAL_MACHINE(...)MpsSvc
HKEY_LOCAL_MACHINE(...)Bfe
Aka nothing works anymore :)
📌 Investigation Needed for svchost.exe Querying .onion Domains https://www.cyberhub.blog/article/18089-investigation-needed-for-svchostexe-querying-onion-domains
Investigation Needed for svchost.exe Querying .onion Domains
The author reports that a host is making requests to .onion domains. The responsible process is svchost.exe, with the following command line: svchost.exe -k netsvcs -p -s SharedAccess. They are seeking assistance to further investigate this behavior.
www.cyberhub.blog
January 16, 2026 at 8:20 AM
📌 Investigation Needed for svchost.exe Querying .onion Domains https://www.cyberhub.blog/article/18089-investigation-needed-for-svchostexe-querying-onion-domains
This RSA Monday, the audit math is simple.
Before SharedAccess: tickets, approvals, endless waiting.
After SharedAccess: browser-based entry in seconds, audit trail built-in.
Before SharedAccess: tickets, approvals, endless waiting.
After SharedAccess: browser-based entry in seconds, audit trail built-in.
April 28, 2025 at 6:08 PM
This RSA Monday, the audit math is simple.
Before SharedAccess: tickets, approvals, endless waiting.
After SharedAccess: browser-based entry in seconds, audit trail built-in.
Before SharedAccess: tickets, approvals, endless waiting.
After SharedAccess: browser-based entry in seconds, audit trail built-in.