Tool

tnagareshwar's picture
tool
Reads:

9679

Score:
3
3
1
 
Comments:

1

Process Heap Viewer

Author Info

8 October 2008 - 9:35am
Submitted by: tnagareshwar

(View Disclaimer)

license: 
Free

ProcHeapViewer is a fast heap enumeration tool which uses better technique than normal Windows heap API functions. It is very useful tool for anyone especially developers involved in analyzing process heaps and makes it easy to troubleshoot any heap related problems.

Traditional Windows heap enumeration functions are slower and take lot of time while traversing large number of heap blocks. ProcHeapViewer removes those flaws by using better implementation based on reverse engineering of heap API functions.

Now it comes with integrated search feature which makes it easy to find this page you can look up ASCII characters and descriptions.">ASCII as well as Unicode strings within the heap blocks.

Using ProcHeapViewer:

Launch ProcHeapViewer by clicking on the binary file. It automatically loads all running processes including services.

  • Select any process from the list. Then all the heap nodes for that process will be displayed.
  • Now you can click on any of the heap nodes to display all the heap blocks within it.
  • Next click on one of the heap block to view its contents. You can store its contents by clicking on the ‘save’ button. To get back to the main screen, simply click on ‘close’ button.
  • Use the ‘Find’ button to search for ASCII as well as Unicode strings within the heap blocks.

Screenshots:

Click to view.

Click to view.

AttachmentSize
ProcHeapViewer.zip118.12 KB

Disclaimer: As with everything else at Cool Solutions, this content is definitely not supported by Novell (so don't even think of calling Support if you try something and it blows up).

It was contributed by a community member and is published "as is." It seems to have worked for at least one person, and might work for you. But please be sure to test, test, test before you do anything drastic with it.




User Comments

tnagareshwar's picture

Get New Version

Submitted by tnagareshwar on 20 January 2011 - 9:34am.

Here is the location of new updated version

http://securityxploded.com/ProcHeapViewer.php

Thanks
Author

© 2013 Novell