Unique Information of Runnig Programs

[wlalth]

Hi. I need to get unique information of runnig programs. I dont want to get ProcessName or MainWindowTitle. Because im working on anti-cheat program.

Im tried lot of method of GetProcess() but any of them give me the uniq. information.

So is it possible to get uniq data of running programs with c#?

Thanks.

[CFusion]

What kind of data are you looking to retrieve?

[wlalth]

Any data will be useful, which is not same with other applications.

For example: hashcodes, company names etc. Now i can get them and there are very useful about analyzing running processes.

But im sure there are other ways to analyze running applications

[kvprajapati]

Hi. I need to get unique information of runnig programs. I dont want to get ProcessName or MainWindowTitle. Because im working on anti-cheat program.

Im tried lot of method of GetProcess() but any of them give me the uniq. information.

So is it possible to get uniq data of running programs with c#?

Thanks.

Process.Id

[jinus]

using System.Diagnostics;
namespace ConsoleApplication1
{
    class Program
    {

        public static void Main()
        {




//Now you can get a list of the processes with the Process.GetProcesses() method, as seen in this example:

    Process[] processlist = Process.GetProcesses();

    foreach(Process theprocess in processlist){
        Console.WriteLine("Process: {0} ID: {1} : {2}", theprocess.ProcessName, theprocess.Id, theprocess.MainWindowTitle);
    }

compare process which are started before he starts application ans then
compare when he clicks any button on any application if process are increased means cheating ask user to not startany other process and not move from this window

my processes are

Process: sqlservr ID: 5908 :
Process: amqzmgr0 ID: 5184 :
Process: javaw ID: 4132 : IBM WebSphere MQ
Process: BTSNTSvc ID: 2948 :
Process: csrss ID: 580 :
Process: amqzxma0 ID: 5716 :
Process: trcboot ID: 376 :
Process: mmc ID: 3328 : BizTalk Server 2006 Administration Console
Process: SCServer ID: 5100 :
Process: svchost ID: 1356 :
Process: amqxssvn ID: 764 :
Process: ssexp ID: 172 : ESA2 - Visual SourceSafe Explorer
Process: WINZIP32 ID: 6848 : WinZip - Error.zip
Process: BTSNTSvc ID: 2336 :
Process: svchost ID: 956 :
Process: ENTSSO ID: 2728 :
Process: GrooveMonitor ID: 5284 :
Process: wmiprvse ID: 3780 :
Process: CcmExec ID: 3504 :
Process: PDVDDXSrv ID: 5688 :
Process: cmd ID: 6592 : C:\WINDOWS\system32\cmd.exe - ftp
Process: amqpcsea ID: 5272 :
Process: rundll32 ID: 7364 :
Process: firefox ID: 4676 : Unique Information of Runnig Programs - C# - Mozilla
 Firefox
Process: jusched ID: 3096 :
Process: nunit-gui ID: 4276 : Doe.BizTalk.Pci.SC.PreviewStaffJob.UnitTests.dll -
 NUnit
Process: msmdsrv ID: 1908 :
Process: jqs ID: 1316 :
Process: OUTLOOK ID: 4520 : Request for 2010 - Message (HTML)
Process: ctfmon ID: 1116 :
Process: smss ID: 524 :
Process: cmd ID: 324 : Visual Studio 2005 Command Prompt
Process: googletalkplugin ID: 3672 :
Process: runmqchi ID: 4508 :
Process: SqlWb ID: 2088 : Script Wizard - DVSQL08
Process: ccSvcHst ID: 1496 :
Process: spoolsv ID: 1692 :
Process: amqzdmaa ID: 5828 :
Process: notepad ID: 7484 : MyTest.txt - Notepad
Process: svchost ID: 1096 :
Process: SmcGui ID: 3456 :
Process: Rtvscan ID: 2076 :
Process: sqlmangr ID: 5256 :
Process: mysqld ID: 1948 :
Process: svchost ID: 2064 :
Process: amqzlsa0 ID: 3836 :
Process: svchost ID: 880 :
Process: svchost ID: 288 :
Process: mdm ID: 1468 :
Process: amqzlaa0 ID: 4224 :
Process: dllhost ID: 4420 :
Process: cidaemon ID: 5404 :
Process: cidaemon ID: 5600 :
Process: msdtc ID: 476 :
Process: cidaemon ID: 4216 :
Process: amqrrmfa ID: 1260 :
Process: amqzmur0 ID: 1652 :
Process: amqmsrvn ID: 1848 :
Process: svchost ID: 1256 :
Process: msftesql ID: 5980 :
Process: lsass ID: 660 :
Process: amqzfuma ID: 2036 :
Process: ccApp ID: 5776 :
Process: inetinfo ID: 1244 :
Process: SQLAGENT90 ID: 2424 :
Process: services ID: 648 :
Process: issch ID: 5568 :
Process: FreeRAM XP Pro ID: 4188 :
Process: PCS_AGNT ID: 444 :
Process: ConsoleApplication1.vshost ID: 640 : file:///C:/Documents and Settings/
jthakur/My Documents/Visual Studio 2005/Projects/ConsoleApplication1/ConsoleAppl
ication1/bin/Debug/ConsoleApplication1.EXE
Process: ftp ID: 7928 :
Process: cisvc ID: 1032 :
Process: mswinext ID: 4576 :
Process: SSScheduler ID: 4968 :
Process: SeaPort ID: 2012 :
Process: amqsvc ID: 1616 :
Process: msmsgs ID: 4176 :
Process: mmc ID: 1416 : Services
Process: wmiprvse ID: 5552 :
Process: amqxssvn ID: 5748 :
Process: WLIDSVC ID: 2200 :
Process: ldlcserv ID: 2396 :
Process: amqzmuc0 ID: 5788 :
Process: eclipse ID: 1408 :
Process: WLIDSVCM ID: 2588 :
Process: wmiprvse ID: 3572 :
Process: explorer ID: 2980 :
Process: OlpSynch ID: 5752 :
Process: devenv ID: 5764 : ConsoleApplication1 (Running) - Microsoft Visual Stud
io
Process: Smc ID: 1200 :
Process: amqxssvn ID: 4460 :
Process: winlogon ID: 604 :
Process: dllhost ID: 1120 :
Process: AluSchedulerSvc ID: 996 :
Process: System ID: 4 :
Process: MsDtsSrvr ID: 3440 :
Process: Idle ID: 0 :

[wlalth]

Well i try lot of function of System.Diagnostics. Problem is all information which is get by this class is can be edited easily by hex editors.

Im also trying the FileVersionInfo and getting hashcodes of .exe of running programs, but result is same.

Process.Id is meaningles for this program because it is not depended on applications build.

My aim is how can i define a running application without changeble data. For example using hex editor i can edit winamps window title, company name etc. How can i understand these running application is winamp?

Processexplorer can show the strings of running processes. Is there class or dllimport to access them? Im posting a picture to show what i mean.

http://img693.imageshack.us/img693/4151/pxp.jpg