Process Hacker

✨ Megiddo

✨ President ✨
Staff member
Joined
May 15, 2016
Messages
14,201
Likes
2,643
Points
1,730
Process Hacker is a free, powerful, multi-purpose tool that helps you track system resources, debug software, and detect malware.

System requirements:

Windows 7 or higher, 32-bit or 64-bit.

Specifications
  • Detailed overview of system activity with backlighting.
  • Graphs and statistics allow you to quickly track problems with resources and rapidly developing processes.
  • Can't edit or delete the file? Find out which processes are using this file.
  • See which programs have active network connections, and close them if necessary.
  • Get real-time information about disk access.
  • View detailed stack traces with kernel mode, WOW64 and .NET support.
  • You can go beyond services.msc: create, edit and control services.
  • Small, portable and does not require installation.
  • 100% free software (GPL v)
Building a project requires Visual Studio (2017 or later) .Execte build_release.cmd located in the build directory to compile the project or download ProcessHacker.sln and Plugins.sln solutions if you prefer to create a project using Visual Studio.
You can download the free Visual Studio Community Edition to create, launch or develop Process Hacker.

Additional Information

You cannot run the 32-bit version of Process Hacker on a 64-bit system and expect it to work correctly, unlike other programs.
Improvements / Bugs
Please use the GitHub problem tracker to report problems or suggest new features.
Settings
If you run Process Hacker from a USB drive, you can also save the Process Hacker settings there.
To do this, create an empty file with the name "ProcessHacker.exe.settings.xml" in the same directory as ProcessHacker.exe.
You can do this with Windows Explorer:
  • Make sure that “Hide extensions for known file types” are not checked in Tools> Folder Options> View.
  • Right-click the folder and select New> Text Document.
  • Rename the file to ProcessHacker.exe.settings.xml (remove the extension ".txt").
Plugins

Plugins can be configured under Hacker> Plugins.
If you encounter any plug-in malfunctions, make sure they are updated.
The disk and network information provided by the ExtendedTools plugin is available only when you start Process Hacker as an administrator.
KProcessHackerProcess Hacker uses a kernel-mode driver, KProcessHacker, to help with certain functionality.
This includes:
  • Kernel-mode stack trace capture
  • More efficient enumeration of processes
  • Getting names for file descriptors
  • Getting names for EtwRegistration objects
  • Setting Attribute Attributes
Note that by default, KProcessHacker only allows connections from processes with administrative rights (SeDebugPrivilege).
So that Process Hacker can show details for all processes when it is not running as administrator:
  • In Registry Editor, go to: HKEY_LOCAL_MACHINE \ SYSTEM \ CurrentControlSet \ Services \ KProcessHacker3
  • Under this key, create a key named Parameters if it does not exist.
  • Create a DWORD value with the name SecurityLevel and set it to 2. If you do not use the official assembly, you may need to set the value to 0 instead.
  • Restart the KProcessHacker3 service (stop KProcessHacker3, start KProcessHacker3).
Download Processhacker
 
Top Bottom