Changeset 1404
- Timestamp:
- 03/31/08 14:55:56 (5 months ago)
- Files:
Legend:
- Unmodified
- Added
- Removed
- Modified
- Copied
- Moved
honeyclient/trunk/thirdparty/capture-mod/FileMonitor.exl
r1403 r1404 287 287 + Write C:\\WINDOWS\\system32\\svchost\.exe C:\\Documents and Settings\\Administrator\\Local Settings\\Application Data\\Microsoft\\Feeds Cache\\index\.dat 288 288 + Write C:\\WINDOWS\\system32\\svchost\.exe C:\\WINDOWS\\Microsoft\.NET\\Framework.* 289 + Write C:\\WINDOWS\\system32\\WgaTray\.exe C:\\Documents and Settings\\.+\\Local Settings\\Temporary Internet Files\\.*
