diff options
| -rw-r--r-- | ReverseEngineering/Get-PEB.format.ps1xml | 9 |
1 files changed, 3 insertions, 6 deletions
diff --git a/ReverseEngineering/Get-PEB.format.ps1xml b/ReverseEngineering/Get-PEB.format.ps1xml index 88eee6a..3d075eb 100644 --- a/ReverseEngineering/Get-PEB.format.ps1xml +++ b/ReverseEngineering/Get-PEB.format.ps1xml @@ -74,8 +74,7 @@ <PropertyName>InInitializationOrderModuleList</PropertyName>
</ListItem>
<ListItem>
- <Label>ProcessParameters</Label>
- <ScriptBlock>"0x$($_.ProcessParameters.ToString("X$([IntPtr]::Size * 2)"))"</ScriptBlock>
+ <PropertyName>ProcessParameters</PropertyName>
</ListItem>
<ListItem>
<Label>SubSystemData</Label>
@@ -411,8 +410,7 @@ <PropertyName>InInitializationOrderModuleList</PropertyName>
</ListItem>
<ListItem>
- <Label>ProcessParameters</Label>
- <ScriptBlock>"0x$($_.ProcessParameters.ToString("X$([IntPtr]::Size * 2)"))"</ScriptBlock>
+ <PropertyName>ProcessParameters</PropertyName>
</ListItem>
<ListItem>
<Label>SubSystemData</Label>
@@ -705,8 +703,7 @@ <PropertyName>InInitializationOrderModuleList</PropertyName>
</ListItem>
<ListItem>
- <Label>ProcessParameters</Label>
- <ScriptBlock>"0x$($_.ProcessParameters.ToString("X$([IntPtr]::Size * 2)"))"</ScriptBlock>
+ <PropertyName>ProcessParameters</PropertyName>
</ListItem>
<ListItem>
<Label>SubSystemData</Label>
|