Add WmCopyDataIPC class for IPC detection

[kevross33]

No description provided.

[gemini-code-assist]

Code Review

This pull request introduces a new signature class, WmCopyDataIPC, to detect inter-process communication via WM_COPYDATA messages by monitoring SendMessage API calls. The review feedback suggests improving the robustness of the message argument parsing to handle both decimal and hexadecimal string formats correctly. Additionally, it recommends removing the unused self.sending_pids state and its associated operations to clean up the code.

Important

The consumer version of Gemini Code Assist on GitHub is being sunset. Starting June 18, 2026, new organization installations will be blocked, and all code review activity will officially cease on July 17, 2026.
For more details on the timeline and next steps, please review the Help Documentation.