| |
Description: | Copied from Process Hacker Homepage:
Introduction
Process Hacker is a feature-packed tool for manipulating processes and services on your computer. It
can show you the threads with symbols , modules, memory regions, handles and token of processes. It
has detailed graphs that show CPU usage, memory usage and I/O activity. It can even change the DEP
status of some processes and protect/unprotect them
It can read/write memory using a built-in hex editor and search through memory.
It has a powerful run-as tool that can run programs as almost any user, including SYSTEM, LOCAL
SERVICE and NETWORK SERVICE. Finally, its kernel-mode driver enables Process Hacker to show
information for any process, even if it is protected by a rootkit.
System Requirements
.NET Framework 2.0
Microsoft Windows XP or above
1GB or more of total RAM if you want to read/write or search memory
2 CPUs physical or multi-core if you want to read/write or search memory
Features:
Processes
Process Hacker can terminate, suspend, resume, restart and set the priority of processes.
Threads
It can also terminate, suspend, resume and set the priority of threads.
It can also view threads call stacks and their usernames/privileges/groups if they are
impersonating another user.
Modules
It can display the modules loaded by each process and their properties.
It can also find the address of any exported function in a module, change page protection of the
module s memory region, and read the module s memory.
Token
It can display each process primary token and its user, source, groups and privileges. It even
allows you to enable and disable privileges.
Memory
It can display using VirtualQueryEx the memory regions in a process virtual memory space, and
even read/write data using a built-in hex editor.
Handles
It can display the handles opened by processes and can close them.
Search
Process Hacker also supports saving search results and even intersecting finding common items
between two sets of search results
FAQ:
Why should I use Process Hacker? Why not Process Explorer or some other program?
Process Hacker offers some pretty unique features, like an awesome run-as tool and the ability to
protect and unprotect processes. Process Explorer is now owned by Microsoft, and they obviously
don t want to provide a tool which lets users bypass their own Digital Restrictions Management.
Comments from the uploader olofolleola4 :
This is a really powerful application that can do much more things than the Task Manager and
programs like Process Explorer and Itty Bitty Process Manager.
Try it :D
Here is the link to the Homepage:
http://processhacker.sourceforge.net/index.php
|