描述:Process PEB Finder is a tool that can find the PEB address of running processes. The tool is available for free from SecurityXploded.com.
The Process Environment Block - or PEB - is is the part of Process memory where is stores important information including loaded modules, startup paramenters, environment variables, debug information etc.
By default it will list the PEB address of all running processes on the system, but you can filter based on Process ID or Name.
下载地址: http://www.afterdawn.com/software/system_tools/misc_system_tools/process_peb_finder.cfm