Process Hacker and Windows discussion

 
Performance

Optimizing Saved Strings Results

16 Oct 2018, 23:39

Hello.

I export a lot of strings from Process Hacker, and the files are usually immense in size.
This is hard to sift through due to the inability to remove duplicate lines easily.
Here's my suggestion: add an option when saving a string search result for an "Optimized" save.

This is an example of the current exported .txt file:
(This would be the Normal export mode.)
Process Hacker 3.0.1947
Windows NT 10.0 (64-bit)
10/16/2018 3:53:26 PM

0x10a90 (19): MDO extra data lock
0x10d40 (4): @}J7
0x10d88 (19): MDO extra data lock
0x10f30 (4): `{J7
0x10f78 (19): MDO extra data lock
0x12fa0 (19): MDO extra data lock
0x131c8 (19): MDO extra data lock
0x13338 (19): MDO extra data lock
0x13498 (19): MDO extra data lock
0x13608 (19): MDO extra data lock
0x13b60 (19): MDO extra data lock
0x13ea0 (19): MDO extra data lock
0x14038 (19): MDO extra data lock
0x141b0 (19): MDO extra data lock
0x143d0 (19): MDO extra data lock
0x14568 (19): MDO extra data lock
0x14910 (19): MDO extra data lock
0x14b50 (19): MDO extra data lock
0x14cf8 (19): MDO extra data lock
0x14eb8 (19): MDO extra data lock
0x15060 (19): MDO extra data lock
0x151e8 (19): MDO extra data lock
0x15380 (19): MDO extra data lock
0x154f0 (19): MDO extra data lock
0x15610 (19): MDO extra data lock
0x15908 (19): MDO extra data lock
0x15ab8 (19): MDO extra data lock
0x15c38 (19): MDO extra data lock
0x15e58 (19): MDO extra data lock
0x15f78 (19): MDO extra data lock
0x160b0 (19): MDO extra data lock
0x16250 (4): qA=8
0x162b0 (19): MDO extra data lock
0x16628 (19): MDO extra data lock
0x168b8 (19): MDO extra data lock
0x16ae8 (19): MDO extra data lock
0x16c78 (19): MDO extra data lock
0x16dd0 (19): MDO extra data lock
0x16f98 (4): 8R^D
0x16fe0 (19): MDO extra data lock
Here's what the save menu would look like:
Image

Here's what an Optimized export could look like:
Process Hacker 3.0.1947
Windows NT 10.0 (64-bit)
10/16/2018 3:53:26 PM

MDO extra data lock
@}J7
MDO extra data lock
`{J7
MDO extra data lock
MDO extra data lock
MDO extra data lock
MDO extra data lock
MDO extra data lock
MDO extra data lock
MDO extra data lock
MDO extra data lock
MDO extra data lock
MDO extra data lock
MDO extra data lock
MDO extra data lock
MDO extra data lock
MDO extra data lock
MDO extra data lock
MDO extra data lock
MDO extra data lock
MDO extra data lock
MDO extra data lock
MDO extra data lock
MDO extra data lock
MDO extra data lock
MDO extra data lock
MDO extra data lock
MDO extra data lock
MDO extra data lock
qA=8
MDO extra data lock
MDO extra data lock
MDO extra data lock
MDO extra data lock
MDO extra data lock
MDO extra data lock
8R^D
MDO extra data lock
^ This makes it MUCH easier to remove duplicate lines and have much, much smaller export files, making programs that scan through them much faster.

Without the addresses, I can remove the duplicates with ease:
Process Hacker 3.0.1947
Windows NT 10.0 (64-bit)
10/16/2018 3:53:26 PM

MDO extra data lock
@}J7
`{J7
qA=8
8R^D
Making everyone's life easier.
 
User avatar
Ketch
Member
Posts: 9
OS: Windows 10
Location: What

Re: Optimizing Saved Strings Results

18 Oct 2018, 16:28

it might be nice to include a system that removes similar strings, example: the "MDO extra data lock" instead of appearing 500 times, appearing once, it's very helpful
E.M.A
 
CrNak

Optimizing Saved Strings Results

20 Oct 2019, 19:23

Would be very practical, if action ShowOSD had direct support list of strings.
Namely that way, that each string was displayed in individual line.
Problem namely is, when number strings is variable.
I am make alone one possible solving - lines 111-113, 141-143, 145-148, 421-427.
Example using is on attached picture.

Pako
 
xtal256
Member
Posts: 25
OS: Windows XP and Win 7 64-bit
Location: Australia

Re: Optimizing Saved Strings Results

25 Oct 2019, 03:12

It would also be good to have the export format use tab (or comma) separated values. Then it could be loaded into a program like Excel, where one could more easily manipulate the data (e.g. delete the address and size columns then de-dupe).
[Window Detective] - Windows UI spy utility