Process Hacker - A Free, Powerful, Multi-Purpose Tool That Helps Yous Monitor Arrangement Resources, Debug Software Together With Notice Malware


H5N1 free, powerful, multi-purpose tool that helps y'all monitor organisation resources, debug software too honor malware.

System requirements
Windows seven or higher, 32-bit or 64-bit.

Features
  • A detailed overview of organisation action amongst highlighting.
  • Graphs too statistics allow y'all apace to rail downwards resources hogs too runaway processes.
  • Can't edit or delete a file? Discover which processes are using that file.
  • See what programs accept active network connections, too unopen them if necessary.
  • Get real-time information on disk access.
  • View detailed stack traces amongst kernel-mode, WOW64 too .NET support.
  • Go beyond services.msc: create, edit too command services.
  • Small, portable too no installation required.
  • 100% Free Software (GPL v3)

Building the project
Requires Visual Studio (2017 or later).
Execute build_release.cmd located inward the build directory to compile the projection or charge the ProcessHacker.sln too Plugins.sln solutions if y'all prefer edifice the projection using Visual Studio.
You tin download the gratis Visual Studio Community Edition to build, run or prepare Process Hacker.

Additional information
You cannot run the 32-bit version of Process Hacker on a 64-bit organisation too await it to piece of work correctly, dissimilar other programs.

Enhancements/Bugs
Please work the GitHub upshot tracker for reporting problems or suggesting novel features.

Settings
If y'all are running Process Hacker from a USB drive, y'all may desire to relieve Process Hacker's settings at that spot equally well. To practise this, practise a blank file named "ProcessHacker.exe.settings.xml" inward the same directory equally ProcessHacker.exe. You tin practise this using Windows Explorer:
  1. Make certainly "Hide extensions for known file types" is unticked inward Tools > Folder options > View.
  2. Right-click inward the folder too lead New > Text Document.
  3. Rename the file to ProcessHacker.exe.settings.xml (delete the ".txt" extension).

Plugins
Plugins tin live on configured from Hacker > Plugins.
If y'all sense whatever crashes involving plugins, brand certainly they are upwards to date.
Disk too Network information provided yesteryear the ExtendedTools plugin is alone available when running Process Hacker amongst administrative rights.

KProcessHacker
Process Hacker uses a kernel-mode driver, KProcessHacker, to assistance amongst certainly functionality. This includes:
  • Capturing kernel-mode stack traces
  • More efficiently enumerating procedure handles
  • Retrieving names for file handles
  • Retrieving names for EtwRegistration objects
  • Setting grip attributes
Note that yesteryear default, KProcessHacker alone allows connections from processes amongst administrative privileges (SeDebugPrivilege). To allow Process Hacker to demonstrate details for all processes when it is non running equally administrator:
  1. In Registry Editor, navigate to: HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\KProcessHacker3
  2. Under this key, practise a primal named Parameters if it does non exist.
  3. Create a DWORD value named SecurityLevel too laid upwards it to 2. If y'all are non using an official build, y'all may request to laid upwards it to 0 instead.
  4. Restart the KProcessHacker3 service (sc halt KProcessHacker3, sc commencement KProcessHacker3).