+ Reply to Thread
Results 1 to 6 of 6
  1. #1
    Senior Member Ignatius is just really nice Ignatius is just really nice Ignatius is just really nice Ignatius is just really nice Ignatius is just really nice
    Join Date
    Oct 2004
    Posts
    183

    Identify which dlls an executable uses

    Hi

    I've seen some digital forensics books and articles refer to having a "clean" version of executables (such as cmd.exe from various versions of Windows) on write-only media. It struck me that some (if not most) executables use one or more dlls and I wonder of it's possible to trace which is/are used? Ideally, I'd like to use a utility which is native to Windows but, if that's not possible, freeware or shareware.

    Thanks for your time.

  2. #2
    Junior Member stk is on a distinguished road
    Join Date
    Jul 2007
    Posts
    1

    Process Explorer?

    Maybe this is what you're looking for?

    http://www.microsoft.com/technet/sys...sExplorer.mspx

  3. #3
    AO Curmudgeon rcgreen has a reputation beyond repute rcgreen has a reputation beyond repute rcgreen has a reputation beyond repute rcgreen has a reputation beyond repute rcgreen has a reputation beyond repute rcgreen has a reputation beyond repute rcgreen has a reputation beyond repute rcgreen has a reputation beyond repute rcgreen has a reputation beyond repute rcgreen has a reputation beyond repute rcgreen has a reputation beyond repute rcgreen's Avatar
    Join Date
    Nov 2001
    Posts
    2,714
    I came in to the world with nothing. I still have most of it.

  4. #4
    Senior Member Ignatius is just really nice Ignatius is just really nice Ignatius is just really nice Ignatius is just really nice Ignatius is just really nice
    Join Date
    Oct 2004
    Posts
    183
    Thank you for the tips. I'll look into these apps.

  5. #5
    And don't forget for XP, the built-in tasklist /M

  6. #6
    Senior Member Ignatius is just really nice Ignatius is just really nice Ignatius is just really nice Ignatius is just really nice Ignatius is just really nice
    Join Date
    Oct 2004
    Posts
    183
    I had no idea about that switch - it looks very useful. Thank you.

Similar Threads

  1. Identify rogue processes using netstat and the windows taskmanager
    By 576869746568617 in forum The Security Tutorials Forum
    Replies: 8
    Last Post: February 3rd, 2004, 03:19 AM
  2. executable files
    By rcgreen in forum The Security Tutorials Forum
    Replies: 1
    Last Post: October 4th, 2002, 05:07 AM
  3. Email Tracking Software to Help Identify the True Source of Emails
    By E5C4P3 in forum Miscellaneous Security Discussions
    Replies: 6
    Last Post: March 8th, 2002, 08:30 AM
  4. Registered dlls
    By proactive in forum Non-Security Archives
    Replies: 0
    Last Post: December 20th, 2001, 02:13 PM
  5. Source Code for TFTP executable (no DLLs)
    By Pr3shuR in forum Security Archives
    Replies: 4
    Last Post: November 1st, 2001, 02:28 PM

Bookmarks

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts

 Security News

     Patches

       Security Trends

         How-To

           Buying Guides