![]() |
HollowsHunter
Scans all running processes. Recognizes and dumps a variety of potentially malicious implants (replaced/implanted PEs, shellcodes, hooks, in-memory patches).
|
#include <windows.h>#include <psapi.h>#include <string>#include <vector>#include <set>#include "hh_params.h"#include "hh_report.h"Go to the source code of this file.
Classes | |
| class | HHScanner |
Typedefs | |
| typedef enum single_status | t_single_scan_status |
Enumerations | |
| enum | single_status { SSCAN_ERROR1 = (-2) , SSCAN_ERROR0 = (-1) , SSCAN_NOT_MATCH = 0 , SSCAN_IGNORED = 1 , SSCAN_SUCCESS = 2 , SSCAN_READY = 3 } |
Variables | |
| t_hh_params | g_hh_args |
| typedef enum single_status t_single_scan_status |
| enum single_status |
| Enumerator | |
|---|---|
| SSCAN_ERROR1 | |
| SSCAN_ERROR0 | |
| SSCAN_NOT_MATCH | |
| SSCAN_IGNORED | |
| SSCAN_SUCCESS | |
| SSCAN_READY | |
Definition at line 15 of file hh_scanner.h.
|
extern |