![]() |
PE-sieve
Scans all running processes. Recognizes and dumps a variety of potentially malicious implants (replaced/implanted PEs, shellcodes, hooks, in-memory patches).
|
#include <threads_util.h>
Public Member Functions | |
| _thread_info (DWORD _tid=0) | |
| _thread_info (const _thread_info &other) | |
Public Attributes | |
| DWORD | tid |
| ULONGLONG | start_addr |
| DWORD | last_syscall |
| bool | is_extended |
| bool | is_filled |
| thread_info_ext | ext |
Definition at line 36 of file threads_util.h.
|
inline |
|
inline |
| thread_info_ext pesieve::util::_thread_info::ext |
Definition at line 43 of file threads_util.h.
| bool pesieve::util::_thread_info::is_extended |
Definition at line 41 of file threads_util.h.
| bool pesieve::util::_thread_info::is_filled |
Definition at line 42 of file threads_util.h.
| DWORD pesieve::util::_thread_info::last_syscall |
Definition at line 40 of file threads_util.h.
| ULONGLONG pesieve::util::_thread_info::start_addr |
Definition at line 39 of file threads_util.h.
| DWORD pesieve::util::_thread_info::tid |
Definition at line 38 of file threads_util.h.