Anti-nails principle to open
Conventional procedures to prevent more open, will use the Mutex.
Nails are routine procedures, it is also using Mutex.
Find Mutex nails used
Tools: ProcessExplorer.exe
Start a nail, then use ProcessExplorer view the process of Mutant, you will see more.
Try to open again after nailing one by one stopped Mutant handle until it succeeds.
Mutex verification result needs to close the following two:
\Sessions\1\BaseNamedObjects{{239B7D43-86D5-4E5C-ADE6-CEC42155B475}}DingTalk
\Sessions\1\BaseNamedObjects{{239B7D43-86D5-4E5C-ADE6-CEC42155B475}}DingTalk_loginframe
Close Mutex nails
Tools: Handle.exe
Use handle.exe View Mutex and process pid:
> handle.exe -a "\Sessions\1\BaseNamedObjects\{{239B7D43-86D5-4E5C-ADE6-CEC42155B475}}DingTalk"
Nthandle v4.22 - Handle viewer
Copyright (C) 1997-2019 Mark Russinovich
Sysinternals - www.sysinternals.com
DingTalk.exe pid: 18828 type: Mutant 294: \Sessions\1\BaseNamedObjects\{{239B7D43-86D5-4E5C-ADE6-CEC42155B475}}DingTalk
DingTalk.exe pid: 18828 type: Mutant 2A4: \Sessions\1\BaseNamedObjects\{{239B7D43-86D5-4E5C-ADE6-CEC42155B475}}DingTalk_loginframe
Invoke the following command:
handle.exe -p 18828 -c 294 -y
handle.exe -p 18828 -c 2a4 -y
Then you can start a second nail.
references
How to log on the computer a few micro-letter (micro letter to open)?
https://www.zhihu.com/question/41110715ProcessExplorer.png