For this tutorial I will be testing a Keygen.exe file...
1.Start process monitor
2.Hit Control +L for filtering options.
3.Select Operation is Create File – ADD
4.Select Process Name is (Program Name).exe – ADD - OK
5.Run Application
5.There you can see if System Files are being modified or not…
Sorry for images...
Had to do in a rush...
If you liked and it has helped then give me a christmas present ov rep lol _________________
You cannot post new topics in this forum You cannot reply to topics in this forum You cannot edit your posts in this forum You cannot delete your posts in this forum You cannot vote in polls in this forum You cannot attach files in this forum You cannot download files in this forum