process-hacker
https://github.com/processhacker/processhacker#process-hacker
// begin_phapppub
typedef enum _PH_KNOWN_PROCESS_TYPE
{
UnknownProcessType,
SystemProcessType, // ntoskrnl/ntkrnlpa/...
SessionManagerProcessType, // smss
WindowsSubsystemProcessType, // csrss
WindowsStartupProcessType, // wininit
ServiceControlManagerProcessType, // services
LocalSecurityAuthorityProcessType, // lsass
LocalSessionManagerProcessType, // lsm
WindowsLogonProcessType, // winlogon
ServiceHostProcessType, // svchost
RunDllAsAppProcessType, // rundll32
ComSurrogateProcessType, // dllhost
TaskHostProcessType, // taskeng, taskhost, taskhostex
ExplorerProcessType, // explorer
UmdfHostProcessType, // wudfhost
EdgeProcessType, // Microsoft Edge
WmiProviderHostType,
MaximumProcessType,
KnownProcessTypeMask = 0xffff,
KnownProcessWow64 = 0x20000
} PH_KNOWN_PROCESS_TYPE;
浙公网安备 33010602011771号