Questions tagged [process-explorer]
Process Explorer is a Windows tool written by Mark Russinovich, used for examining currently running processes and their open handles
140
questions
0
votes
2
answers
121
views
Why do processes start appearing at the top of the tree's root instead of where they should, underneath wininit.exe and explorer.exe?
Why do these processes appear at the top of the Process Explorer window instead of below the wininit.exe section where they should be?
Some Facts
Starts happening after about 10-30 minutes of system ...
- 552
0
votes
2
answers
233
views
Process Explorer does not show the real CPU load
I notice that my computer becomes significantly slower while µTorrent is running. For example starting new programs takes anormally long and programs react more slowly. When I shut down µTorrent all ...
- 1,011
0
votes
2
answers
70
views
How to run a program as administrator
Is this a joke?
Nothing as simple as running a program as administrator: click-right on the name of the program in Windows explorer, choose "Run as administrator" from the context menu and ...
- 1,921
0
votes
2
answers
704
views
where to obtain Windows XP-compatible Process Explorer
Where can I obtain a Windows-XP compatible Process Explorer? the current release of Process Explorer does not run on XP SP3, attempting to executing it just says "Not a valid win32 executable&...
- 1,007
0
votes
0
answers
171
views
Can not run Sysinternals Process Explorer via Task scheduler (installed via winget on Win11)
I'm unable to setup the Process Explorer to run at startup via Task Scheduler. Regardless if I create the task via the Process Explorer menu 'Run at startup' or manually I am unable to make it work.
I'...
- 203
0
votes
0
answers
498
views
Get CPU Usage of Specific Program Command Line Windows
Process explorer can show me the CPU % usage of a particular program:
I would like to obtain this number through command line to automatically sample the percentage utilization of a process. It has ...
- 1,188
0
votes
1
answer
92
views
Why my drivers use 4.2 TB of physical memory?
So I got this info from Process Explorer (System Information window -> Memory)... I have 32 GB of RAM installed. How could drivers use 4 TB, while Kernel only 8 KB?
0
votes
1
answer
49
views
How is it possible for a process to read 300+ I/O TB?
Take a look at how much I/O this process done! KillerAnalyticsService is, apparently, program made by the manufacturer of network card installed in PC. Can somebody explain how so much bytes was read?
...
2
votes
2
answers
363
views
Windows debugging: How can I determine which application is opening my web browser
I'm just debugging a potential malware problem where blank browser windows (full windows not tabs) keep opening, but can't find any malware after multiple scans and after installing fresh browser so I'...
- 180
3
votes
1
answer
402
views
running Process Explorer as administrator at log on of non-admin account
I have tried to achieve a supposedly simple task of running Process Explorer with administrator rights (to show all processes) when logging on as normal user on my Win10 Pro 21H1 system. It proved to ...
- 45
0
votes
1
answer
221
views
How to see the process stack in the Sysinternals Process Explorer from a .net console app?
I am trying to get deeper in the understanding how the OS stacks up the chained function calls. So I created a very simple dotnet console app, see the code below, I call the "Call()" method ...
- 171
0
votes
1
answer
621
views
Why does Samsung Magician write so much data
I've installed a Samsung SSD recently and have been keeping an eye on the total data written from the Magician dashboard (7.0.0.510). In doing so over the past few days I've notice it jumping about 20 ...
- 255
1
vote
1
answer
134
views
Modify Process (not services) Level Permissions via command line (Windows) - to make process interminable by non admin user
Goal:
On my PC, there is a background script (Process A) that runs on startup with Administrator Level Permissions on the Standard Level Account (Account X). I would like to use this script, with it's ...
- 11
0
votes
0
answers
211
views
How do I see java thread names in Process Explorer?
I have named a thread in my program as "Input Acceptor".
userInputThread = new Thread("Input acceptor") {
public void run(){
while(true)
//dosomething
}
}...
1
vote
1
answer
311
views
How do I save my Windows 10 hosts file?
Before someone goes and marks this as a duplicate, please understand that I have tried all of the following:
Running notepad as an administrator, editing the file and attempting to save. No luck.
...
- 131
0
votes
1
answer
233
views
Recurrent issue Integrated webcam is used by another application
I am having issue with my webcam it stops working randomly for indefinite time, these issue first occurred to me year ago after that I have reinstalled windows one time but these issue comes up ...
1
vote
2
answers
3k
views
How can I see the pagefile of a process using Process Explorer?
I thought Process Explorer has every statistic possible. But I was looking for the pagefile size of a process and I can't find it. Maybe it's under a different name?
- 207
0
votes
1
answer
606
views
I keep finding the same string in memory dumps
First off, forgive me - this is less a problem and more of a personal curiosity, but hopefully it will pique the curiosity of my fellow enthusiasts here!
As a geek, I do love to get into the processes ...
- 103
1
vote
2
answers
765
views
Process Explorer Itself Consuming High CPU
Process Explorer version 16.32 from Sysinternals is consuming almost 100% of 1 core. I was on Windows 10 version 1909 and upgraded to Windows 10 version 20H2 build 19042.572. Process Explorer ...
- 1,256
0
votes
1
answer
25
views
editing sysinternal log to post on forum
I use sysinternal tool procmon
https://docs.microsoft.com/en-us/sysinternals/downloads/procmon
I want to edit its log because I want to post it online on technical forums for disucssions.
I want to ...
- 119
1
vote
0
answers
202
views
Why do RAMMAP's total RAM usage of processes/mapped-file not even remotely add up to the total Memory usage in User Counts?
RamMap: User Counts
Processes
File summary
In RamMap, the memory usage in first image is right.
However, when I tried to add up all the Active memory, and the 2nd image and 3rd image doesn't match ...
- 11
0
votes
1
answer
155
views
Why's there a discrepancy by a factor of 10, for memory figures, with process explorer, compared to e.g. powershell and process hacker?
Why does there seem to be a discrepancy by a factor of 10, for the private memory figure and working set memory figure, in the data given by process explorer, compared to that of powershell and ...
- 23.2k
0
votes
1
answer
320
views
From Process Explorer, Is it possible to get the exact number of total bytes used for working memory and private memory?
From Process Explorer, Is it possible to get the exact number of total bytes used for working memory and private memory?
Those numbers look like they are to the nearest thousand bytes. (or they are ...
- 23.2k
2
votes
1
answer
683
views
Echo GDI Object Count to Command Line or File
I'm ultimately looking for a way to set up an automated alert that will warn me if a process's GDI Object count is approaching the default 10,000 limit. I have a known issue with some software our ...
- 23
4
votes
0
answers
1k
views
High CPU usage from Explorer.exe - Suspecting Dropbox and/or Onedrive shell integration at fault
I'm experiencing high CPU usage from Explorer.exe and I am using SysInternals' Process Explorer to try to diagnose the issue.
Frequently I will get a CPU History graph like this (or worse, showing ...
- 641
0
votes
1
answer
69
views
What is corel doing on my udp connections for Chrome?
I have a weird mc.corel.com address lingering in Chrome and some parts of svchost processes, what is going on?
0
votes
0
answers
55
views
Process Explorer showing RAM use of 99.73%
Is it possible for for Process Explorer to show a RAM use of 99.73%, on Windows 7 SP1 x64 Ultimate (virtual memory disabled to avoid swap)? I thought that Windows was reserving a few % of RAM for ...
- 19.9k
3
votes
2
answers
2k
views
Process Explorer Reports Processes with 2TB "virtual size" in Windows 10?
This screen snip of Process Explorer shows multiple processes with >2TB "virtual size":
This can't mean they are all using 2TB of virtual memory, so I'm wondering just what this means.
- 183
1
vote
1
answer
3k
views
taskhostw using a lot of disk and doing something on windows.old folder
I found my windows 10 machine being very slow and using a lot of hard drive.
Task manager, Disk is reporting 100% usage.
I open up Resource monitor, select disk tab. and sort write column.
System ...
- 13
1
vote
0
answers
46
views
How does a process like KeePass protect its memory in Windows?
I am looking at KeePass and trying to figure out how it protects its memory exactly. Is it because the use of KeePassLib.Security.ProtectedBinary class for all it's memory allocations or is it ...
- 840
0
votes
0
answers
213
views
using process explorer to "debug" powershell scripts
i'm frequently using process explorer from sysinternals to "debug" some problems with applications, eg network connection issues.
For example, i start an exe applications which drops an error-message ...
0
votes
0
answers
713
views
Stack overflow attempt on svchost.exe
My computer detected a stack overflow attempt on svchost. I looked at procexplorer and checked the hash of the svchost and it checked out. My question is if a file is successful with a stack ...
2
votes
2
answers
544
views
How can I save urls from dead Google Chrome window
I have Google Chrome incognito window open with more than 100 tabs. OS: Win10. When I was browsing one site, chrome window suddenly freezed and I can't anymore browse or see any tabs. So I left chrome ...
0
votes
0
answers
6k
views
Command line tools to view process list in Windows 10. pslist slow
Default Task Manager and Sysinternals ProcessExplorer are well-known GUI applications to show processes details in Windows 10. I use both.
Windows 10 comes also with command-line tasklist.exe.
It ...
- 2,807
0
votes
1
answer
1k
views
How can I see current network speed in process explorer?
Using process explorer, how can I see how many bytes or bits send/received by a process in an instant of time say, seconds?
I couldn't find an answer to this.
- 1
0
votes
1
answer
291
views
Find missing file in an process openfile request on Windows
I have an thid-party EXE that doesn't work and it fails with a generic "File not found" exception and I cannot understand what it is looking for.
Unfortunately I cannot use ProcessExplorer or ...
- 2,204
5
votes
4
answers
14k
views
How to identify which process committed memory
My system runs high on committed memory (out of 8GB RAM + 2 GB page file 85% memory is committed). Physical usage is at some 65%.
How can I identify what process(es) is allocating most of the ...
- 839
3
votes
3
answers
6k
views
Windows 10 System (ntoskrnl.exe) using CPU when machine has been idle for a while
I noticed that my laptop's CPU starts getting used (maybe 15% usage?) and the CPU fan turns on, generally in the evening when my laptop has been idle for 5 minutes or so. The process using the CPU ...
- 2,910
1
vote
1
answer
1k
views
icacls - Integrity level is not apply on the exe file
I have an exe file that run as Medium integrity by default. I tried to change its integrity to Low with the following statament :
icacls 1.exe /L
The output message show its succeed :
1.exe ...
0
votes
2
answers
1k
views
Silent Process Exit: process '?' was terminated by the process 'C:\Windows\System32\svchost.exe' with termination code 1067
We have a serious issue with a C# application being terminated silently at random and infrequent points in time on a Windows 10 32-bit installation.
E.g. it might be a month between occurrences. Or ...
- 83
5
votes
1
answer
830
views
Where does chocolatey install sysinternals?
Chocolatey has a nice sysinternals package, but where does it install to? (by default)
https://chocolatey.org/packages/sysinternals
- 2,302
0
votes
2
answers
1k
views
Found a crypto mining process - how do I get rid of it? [duplicate]
Noticed some minor performance decrease, decided to install the process explorer described here:
https://security.stackexchange.com/questions/76100/how-to-find-processes-that-are-hidden-from-task-...
- 103
1
vote
1
answer
226
views
Process Explorer doesn't show all privileges
Win7 x64 Enterprise, Process Explorer v16.20.
On a process' Security tab, only a few privileges are listed instead of three dozen as it should:
I doesn't matter if I run Process Explorer elevated or ...
- 1,880
0
votes
0
answers
4k
views
rtcore64.sys in use - process explorer does not show why
I am trying to install new version of MSI AterBurner. First it said application is active, so installation will cancel. OK so after I closed the application I started setup again and I got
I tried ...
- 851
1
vote
0
answers
909
views
How to get historical graph of processes activity in Process Exprlorer - Windows Sysinternals
I have strange behaviour of laptop during night with no human around. Sometimes fan gets high RPMs and it looks like computer is processing something. It happed also that Laptop waked up by itself few ...
- 914
0
votes
0
answers
128
views
Process Explorer Why is my Java process displayed with a shortcut icon?
Why is my Java process displayed with a shortcut icon?
I have startade the Java program from a bat-file containing this command:
java -jar myProgram.jar
- 55
3
votes
1
answer
678
views
"I/O write" or "Disk write" affects the SSD?
I like to find out which program using mostly my SSD.
I'm using Process Hacker (in elevated mode) to get an overview of my SSD usage and find the programs whose using it mostly. To test the ...
- 171
0
votes
0
answers
1k
views
Process Explorer: Process Disk: Read/Write bytes not working?
I like to find out which program using mostly my SSD.
On Windows 7 x64 machine in Process Explorer (opened as Administrator) double clicking on a process opens up the details of it. On the Disk and ...
- 171
0
votes
0
answers
61
views
When can a file be in use by a process when it is not in use by a process? [duplicate]
Forgive the riddle-like question, but that's what I'm experiencing (I think). What I'm trying to do is delete a specific file. When I originally tried to delete it, Explorer tells me it's in use by ...
- 113
1
vote
2
answers
4k
views
How to list all Privileges held by a Process?
Using Process Explorer tool, we can see the privileges held by a running process. A running process might delete the privileges, and hence effective privileges held by the process would be less than ...
- 924