|
|
 |
|
OnLineDFS: A Guided Tour
Background |
1 |
2 |
3 |
4 |
5 |
6 |
7 |
8 |
9 |
10
Miller immediately notices something out of the ordinary. One of the running processes on the target is WINWORD.EXE, the executable name for Microsoft Word. This is odd, because the standard company document editor is Word Perfect. Wallace would have had to specifically install Microsoft Word on his computer in order for it to appear as a running process. Miller decides to examine the process WINWORD.EXE in detail. By clicking on a process name in the running process table, he can get more information about that process, as shown in Figure 11. This information includes the owner, open network ports, running threads, open DLLs and open handles.
Figure 11 - Detailed Process Information (WINWORD.EXE)
|
|
|
