Struct MalfindInfo 

pub struct MalfindInfo {
    pub pid: u64,
    pub comm: String,
    pub start: u64,
    pub end: u64,
    pub flags: VmaFlags,
    pub reason: String,
    pub header_bytes: Vec<u8>,
}

A suspicious memory region detected by malfind analysis.

Fields

pid: u64

PID of the owning process.

comm: String

Process name.

start: u64

VMA start address.

end: u64

VMA end address.

flags: VmaFlags

VMA permission flags.

reason: String

Why this region is suspicious.

header_bytes: Vec<u8>

First 64 bytes of the region (hex dump).

Trait Implementations

impl Clone for MalfindInfo

fn clone(&self) -> MalfindInfo

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for MalfindInfo

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.