WinObjEx64 is an advanced utility that lets you explore the Windows Object Manager namespace.
WinObjEx64 is an advanced utility designed to explore the Windows Object Manager namespace, providing detailed insights into kernel-level objects and their associated properties. It enables users to view object details, edit security information, detect kernel hooks, analyze SSDT (KiServiceTable) and Shadow SSDT (W32pServiceTable), and use driver helpers for memory access or handle management.
Ideal for system administrators, developers, and security professionals who need to analyze and manage low-level Windows objects. WinObjEx64 can be installed via winget.
README
WinObjEx64
Windows Object Explorer 64-bit
WinObjEx64 is an advanced utility that lets you explore the Windows Object Manager namespace. For certain object types, you can double-click on it or use the "Properties..." toolbar button to get more information, such as description, attributes, resource usage etc. WinObjEx64 let you view and edit object-related security information if you have required access rights.
System Requirements
WinObjEx64 does not require administrative privileges. However, administrative privileges are required to view much of the namespace and to edit object-related security information.
WinObjEx64 works only on the following x64 Windows: Windows 7, Windows 8, Windows 8.1, and Windows 10/11, including Server variants.
Features
View list
Explore all of Windows Object Manager namespace
Hierarchical objects tree
Symbolic links resolving
Version information for Section-type objects backed by an image file
Additional information for WindowStation-type objects
If you enjoy using this software and would like to help the authors maintain and improve it, please consider supporting us with a donation. Your contribution fuels development, ensures updates, and keeps the project alive.
