I use Process Hacker as a replacement for Window's Task Manager on my computer.
While looking at the various information available about a selected process, I found the
Memory tab. I figured this was a just list of memory locations in use by the selected process, however I noticed the
Strings button which searches for strings in memory and was very surprised to find that when searching for strings in memory locations used by KeePassX entries, usernames and passwords show in plain text.
How is it possible for Process Hacker - running with "
Limited" elevation (as reported by itself) - to access the memory of another process? I assumed processes could only access memory assigned to them by the operating system and that accessing another process's memory would cause an access violation error.
Process Hacker's optional service has not been installed.