{
	"id": "af1f49cc-178b-424d-a47b-453764a35399",
	"created_at": "2026-04-06T00:17:41.621639Z",
	"updated_at": "2026-04-10T03:22:03.121731Z",
	"deleted_at": null,
	"sha1_hash": "4ee9e0de7269cd156139b2940d68431626d5cfb0",
	"title": "Processes and Threads - Win32 apps",
	"llm_title": "",
	"authors": "",
	"file_creation_date": "0001-01-01T00:00:00Z",
	"file_modification_date": "0001-01-01T00:00:00Z",
	"file_size": 37578,
	"plain_text": "Processes and Threads - Win32 apps\r\nBy Karl-Bridge-Microsoft\r\nArchived: 2026-04-05 14:06:50 UTC\r\nAn application consists of one or more processes. A process, in the simplest terms, is an executing program. One\r\nor more threads run in the context of the process. A thread is the basic unit to which the operating system allocates\r\nprocessor time. A thread can execute any part of the process code, including parts currently being executed by\r\nanother thread.\r\nA job object allows groups of processes to be managed as a unit. Job objects are namable, securable, sharable\r\nobjects that control attributes of the processes associated with them. Operations performed on the job object affect\r\nall processes associated with the job object.\r\nA thread pool is a collection of worker threads that efficiently execute asynchronous callbacks on behalf of the\r\napplication. The thread pool is primarily used to reduce the number of application threads and provide\r\nmanagement of the worker threads.\r\nA fiber is a unit of execution that must be manually scheduled by the application. Fibers run in the context of the\r\nthreads that schedule them.\r\nUser-mode scheduling (UMS) is a lightweight mechanism that applications can use to schedule their own threads.\r\nUMS threads differ from fibers in that each UMS thread has its own thread context instead of sharing the thread\r\ncontext of a single thread.\r\nWhat's New in Processes and Threads\r\nAbout Processes and Threads\r\nUsing Processes and Threads\r\nProcess and Thread Reference\r\nSource: https://docs.microsoft.com/en-us/windows/win32/procthread/processes-and-threads\r\nhttps://docs.microsoft.com/en-us/windows/win32/procthread/processes-and-threads\r\nPage 1 of 1",
	"extraction_quality": 1,
	"language": "EN",
	"sources": [
		"MITRE"
	],
	"references": [
		"https://docs.microsoft.com/en-us/windows/win32/procthread/processes-and-threads"
	],
	"report_names": [
		"processes-and-threads"
	],
	"threat_actors": [],
	"ts_created_at": 1775434661,
	"ts_updated_at": 1775791323,
	"ts_creation_date": 0,
	"ts_modification_date": 0,
	"files": {
		"pdf": "https://archive.orkl.eu/4ee9e0de7269cd156139b2940d68431626d5cfb0.pdf",
		"text": "https://archive.orkl.eu/4ee9e0de7269cd156139b2940d68431626d5cfb0.txt",
		"img": "https://archive.orkl.eu/4ee9e0de7269cd156139b2940d68431626d5cfb0.jpg"
	}
}