예제 #1
0
        static void spyMgr_OnCreateProcessCall(NktProcess proc, int childPid, int mainThreadId, bool is64BitProcess, bool canHookNow)
        {
            NktProcess childProc = spyMgr.ProcessFromPID(childPid);

            if (childProc != null && childProc.Name.ToLower().EndsWith("iexplore.exe") != false)
            {
                spyMgr.LoadAgent(childProc);
            }
        }
예제 #2
0
 private NktProcess NktProcessFrom(IRunningProcess aProcess)
 {
     return(_manager.ProcessFromPID(aProcess.Id));
 }