Process Hacker is a free and open source process viewer and memory editor with unique features such as powerful process termination. It can show services, processes and their threads, modules, handles and memory regions.
Key features of Process Hacker:
- A simple, customizable tree view with highlighting showing you the processes running on your computer.
- Detailed system statistics with graphs.
- Advanced features not found in other programs, such as detaching from debuggers, viewing GDI handles, viewing heaps, injecting and unloading DLLs, and more.
- Powerful process termination that bypasses security software and rootkits.
- View, edit and control services, including those not shown by the Services console.
- View and close network connections.
- Starts up almost instantly, unlike other programs.
- Many more features...
Compared with Process Explorer, Process Hacker:
- Implements almost all of the functionality offered by Process Explorer, plus more advanced features.
- Performs stack traces correctly for .NET programs on x64.
- Allows you to see what a thread is waiting on.
- Has advanced string scanning capabilities, as well as regular expression filtering.
- Highlights both relocated and .NET DLLs.
- Shows symbolic access masks (e.g. Read, Write), rather than just numbers (e.g. 0x12019f).
- Shows names for transaction manager objects and ETW registration objects.
- Shows detailed token information, as well as allowing privileges to be enabled and disabled.
Process Hacker 2.38 changes:
Highlights
- Added labels to indicate the maximum data point in each I/O graph
- Graph grids now scale correctly when resized
- Improved high DPI scaling
- Added exploit mitigation policy information to process properties (Windows 8 and above)
- Added File modified time and File size columns for processes and modules
- Added Key modified time column for services
- Clicking a tray icon now shows the pop-up UI (useful for touch-enabled devices)
- The NetAdapters plugin has been renamed to HardwareDevices
- This plugin shows network adapter and disk drive graphs
- If you are manually upgrading, please delete NetAdapters.dll from the plugins folder
- Updated UserNotes plugin:
- Added "Collapse by default" option for processes
Other changes
- Added "Start when I log on" option
- Added "Not responding" text to tray icon rich pop-up for programs that are hung
- Added right-click menu and double-click action for environment variables
- Added dialog box to show long command line strings
- Added Time stamp column for processes
- Added -sysinfo command line parameter for opening System Information at startup
- Added 32x32 icons for high DPI displays
- Digital signature verification is now performed with very low I/O priority
- Improved performance when handling a large number of threads, modules or handles
- The pop-up UI no longer displays when double-clicking the tray icon
- Fixed ASLR state being shown as N/A in process properties
- Fixed multi monitor window placement bug
- Fixed handle enumeration bug affecting processes with PID >= 65536
- Fixed Interrupts being missing from the max CPU usage history
- Updated ToolStatus plugin:
- Added 32x32 icons for high DPI displays
- Fixed status bar crash
Note: This release has significant internal code changes. Please make sure all plugins are up-to-date.
Download: Process Hacker 2.38 | 2.2 MB (Open Source)
Download: Portable Process Hacker 2.38 | 3.2 MB
Links: Process Hacker Home Page | Support