• About
• Making of ProcHeapViewer
• Using ProcHeapViewer
• Screenshots
• Release History
• Download  v4.5
• References
  

Proc Heap Viewer is the FREE tool to quickly enumerate process heaps on Windows. It uses smart approach using undocumented API functions than slower Windows heap API functions. This makes it fastest & smartest tool to enumerate process heaps on Windows.

You can enumerate the heaps from normal Windows processes as well as system services. You can view all the heap blocks, data within each heap blocks and then search within this data.

It is very useful tool for anyone involved in analyzing process heaps. Vulnerability researchers can use it as a companion tool for discovering Process Heap related vulnerabilities.

It is fully portable tool and works on most of the Windows platforms starting from Windows XP to Windows 8.

This is standalone tool and does not require any installation.

• Launch ProcHeapViewer by clicking on the binary file. It automatically loads all running processes including services.
• Select any process from the list. Then all the heap nodes for that process will be displayed.
• Now you can click on any of the heap nodes to display all the heap blocks within it.
• Next click on one of the heap block to view its content. You can store this data by clicking on the 'save' button. To get back to the main screen, simply click on 'close' button.
• You can use 'Find' button to search for strings within the selected heap block. Select the 'Unicode' check box for searching Unicode strings.