2022 Developer Survey is open! Take survey.

Questions tagged [process-explorer]

Process Explorer is a Windows tool written by Mark Russinovich, used for examining currently running processes and their open handles

Filter by
Sorted by
Tagged with
0 votes
0 answers
21 views

How to add Privileges to Process?

Using Process Explorer tool, we can see the privileges held by a running process. But how can we change these privileges, for example SeLockMemoryPrivilege, without having to run the program on behalf ...
user avatar
2 votes
2 answers
59 views

Windows debugging: How can I determine which application is opening my web browser

I'm just debugging a potential malware problem where blank browser windows (full windows not tabs) keep opening, but can't find any malware after multiple scans and after installing fresh browser so I'...
user avatar
3 votes
1 answer
72 views

running Process Explorer as administrator at log on of non-admin account

I have tried to achieve a supposedly simple task of running Process Explorer with administrator rights (to show all processes) when logging on as normal user on my Win10 Pro 21H1 system. It proved to ...
user avatar
0 votes
1 answer
23 views

How to see the process stack in the Sysinternals Process Explorer from a .net console app?

I am trying to get deeper in the understanding how the OS stacks up the chained function calls. So I created a very simple dotnet console app, see the code below, I call the "Call()" method ...
user avatar
0 votes
1 answer
109 views

Why does Samsung Magician write so much data

I've installed a Samsung SSD recently and have been keeping an eye on the total data written from the Magician dashboard (7.0.0.510). In doing so over the past few days I've notice it jumping about 20 ...
user avatar
  • 195
1 vote
1 answer
66 views

Modify Process (not services) Level Permissions via command line (Windows) - to make process interminable by non admin user

Goal: On my PC, there is a background script (Process A) that runs on startup with Administrator Level Permissions on the Standard Level Account (Account X). I would like to use this script, with it's ...
user avatar
0 votes
0 answers
85 views

How do I see java thread names in Process Explorer?

I have named a thread in my program as "Input Acceptor". userInputThread = new Thread("Input acceptor") { public void run(){ while(true) //dosomething } }...
user avatar
0 votes
0 answers
119 views

Process Explorer Administrator Run At Logon - No mapping between account names and security IDs was done

I'm trying to run process explorer at startup as admin, but when I click the Run At Logon button when running as admin, I get an error message. I can't seem to find anything specifically relating to ...
user avatar
  • 396
1 vote
1 answer
116 views

How do I save my Windows 10 hosts file?

Before someone goes and marks this as a duplicate, please understand that I have tried all of the following: Running notepad as an administrator, editing the file and attempting to save. No luck. ...
user avatar
  • 131
0 votes
1 answer
140 views

Recurrent issue Integrated webcam is used by another application

I am having issue with my webcam it stops working randomly for indefinite time, these issue first occurred to me year ago after that I have reinstalled windows one time but these issue comes up ...
user avatar
1 vote
2 answers
990 views

How can I see the pagefile of a process using Process Explorer?

I thought Process Explorer has every statistic possible. But I was looking for the pagefile size of a process and I can't find it. Maybe it's under a different name?
user avatar
  • 198
0 votes
1 answer
320 views

I keep finding the same string in memory dumps

First off, forgive me - this is less a problem and more of a personal curiosity, but hopefully it will pique the curiosity of my fellow enthusiasts here! As a geek, I do love to get into the processes ...
user avatar
  • 103
0 votes
2 answers
431 views

Process Explorer Itself Consuming High CPU

Process Explorer version 16.32 from Sysinternals is consuming almost 100% of 1 core. I was on Windows 10 version 1909 and upgraded to Windows 10 version 20H2 build 19042.572. Process Explorer ...
user avatar
  • 1,218
0 votes
1 answer
25 views

editing sysinternal log to post on forum

I use sysinternal tool procmon https://docs.microsoft.com/en-us/sysinternals/downloads/procmon I want to edit its log because I want to post it online on technical forums for disucssions. I want to ...
user avatar
1 vote
0 answers
145 views

Why do RAMMAP's total RAM usage of processes/mapped-file not even remotely add up to the total Memory usage in User Counts?

RamMap: User Counts Processes File summary In RamMap, the memory usage in first image is right. However, when I tried to add up all the Active memory, and the 2nd image and 3rd image doesn't match ...
user avatar
  • 11
0 votes
1 answer
59 views

Why's there a discrepancy by a factor of 10, for memory figures, with process explorer, compared to e.g. powershell and process hacker?

Why does there seem to be a discrepancy by a factor of 10, for the private memory figure and working set memory figure, in the data given by process explorer, compared to that of powershell and ...
user avatar
  • 21.6k
0 votes
1 answer
114 views

From Process Explorer, Is it possible to get the exact number of total bytes used for working memory and private memory?

From Process Explorer, Is it possible to get the exact number of total bytes used for working memory and private memory? Those numbers look like they are to the nearest thousand bytes. (or they are ...
user avatar
  • 21.6k
2 votes
1 answer
401 views

Echo GDI Object Count to Command Line or File

I'm ultimately looking for a way to set up an automated alert that will warn me if a process's GDI Object count is approaching the default 10,000 limit. I have a known issue with some software our ...
user avatar
4 votes
0 answers
1k views

High CPU usage from Explorer.exe - Suspecting Dropbox and/or Onedrive shell integration at fault

I'm experiencing high CPU usage from Explorer.exe and I am using SysInternals' Process Explorer to try to diagnose the issue. Frequently I will get a CPU History graph like this (or worse, showing ...
user avatar
  • 641
0 votes
1 answer
53 views

What is corel doing on my udp connections for Chrome?

I have a weird mc.corel.com address lingering in Chrome and some parts of svchost processes, what is going on?
user avatar
0 votes
0 answers
54 views

Process Explorer showing RAM use of 99.73%

Is it possible for for Process Explorer to show a RAM use of 99.73%, on Windows 7 SP1 x64 Ultimate (virtual memory disabled to avoid swap)? I thought that Windows was reserving a few % of RAM for ...
user avatar
2 votes
1 answer
1k views

Process Explorer Reports Processes with 2TB "virtual size" in Windows 10?

This screen snip of Process Explorer shows multiple processes with >2TB "virtual size": This can't mean they are all using 2TB of virtual memory, so I'm wondering just what this means.
user avatar
1 vote
1 answer
3k views

taskhostw using a lot of disk and doing something on windows.old folder

I found my windows 10 machine being very slow and using a lot of hard drive. Task manager, Disk is reporting 100% usage. I open up Resource monitor, select disk tab. and sort write column. System ...
user avatar
  • 13
1 vote
0 answers
32 views

How does a process like KeePass protect its memory in Windows?

I am looking at KeePass and trying to figure out how it protects its memory exactly. Is it because the use of KeePassLib.Security.ProtectedBinary class for all it's memory allocations or is it ...
user avatar
  • 820
0 votes
0 answers
178 views

using process explorer to "debug" powershell scripts

i'm frequently using process explorer from sysinternals to "debug" some problems with applications, eg network connection issues. For example, i start an exe applications which drops an error-message ...
user avatar
0 votes
0 answers
673 views

Stack overflow attempt on svchost.exe

My computer detected a stack overflow attempt on svchost. I looked at procexplorer and checked the hash of the svchost and it checked out. My question is if a file is successful with a stack ...
user avatar
2 votes
1 answer
315 views

How can I save urls from dead Google Chrome window

I have Google Chrome incognito window open with more than 100 tabs. OS: Win10. When I was browsing one site, chrome window suddenly freezed and I can't anymore browse or see any tabs. So I left chrome ...
user avatar
0 votes
0 answers
4k views

Command line tools to view process list in Windows 10. pslist slow

Default Task Manager and Sysinternals ProcessExplorer are well-known GUI applications to show processes details in Windows 10. I use both. Windows 10 comes also with command-line tasklist.exe. It ...
user avatar
  • 2,477
0 votes
1 answer
1k views

How can I see current network speed in process explorer?

Using process explorer, how can I see how many bytes or bits send/received by a process in an instant of time say, seconds? I couldn't find an answer to this.
user avatar
0 votes
1 answer
145 views

Find missing file in an process openfile request on Windows

I have an thid-party EXE that doesn't work and it fails with a generic "File not found" exception and I cannot understand what it is looking for. Unfortunately I cannot use ProcessExplorer or ...
user avatar
  • 2,154
4 votes
4 answers
11k views

How to identify which process committed memory

My system runs high on committed memory (out of 8GB RAM + 2 GB page file 85% memory is committed). Physical usage is at some 65%. How can I identify what process(es) is allocating most of the ...
user avatar
  • 809
3 votes
3 answers
5k views

Windows 10 System (ntoskrnl.exe) using CPU when machine has been idle for a while

I noticed that my laptop's CPU starts getting used (maybe 15% usage?) and the CPU fan turns on, generally in the evening when my laptop has been idle for 5 minutes or so. The process using the CPU ...
user avatar
  • 2,822
1 vote
1 answer
796 views

icacls - Integrity level is not apply on the exe file

I have an exe file that run as Medium integrity by default. I tried to change its integrity to Low with the following statament : icacls 1.exe /L The output message show its succeed : 1.exe ...
user avatar
0 votes
2 answers
1k views

Silent Process Exit: process '?' was terminated by the process 'C:\Windows\System32\svchost.exe' with termination code 1067

We have a serious issue with a C# application being terminated silently at random and infrequent points in time on a Windows 10 32-bit installation. E.g. it might be a month between occurrences. Or ...
user avatar
  • 83
4 votes
1 answer
576 views

Where does chocolatey install sysinternals?

Chocolatey has a nice sysinternals package, but where does it install to? (by default) https://chocolatey.org/packages/sysinternals
user avatar
  • 2,282
0 votes
2 answers
1k views

Found a crypto mining process - how do I get rid of it? [duplicate]

Noticed some minor performance decrease, decided to install the process explorer described here: https://security.stackexchange.com/questions/76100/how-to-find-processes-that-are-hidden-from-task-...
user avatar
  • 103
1 vote
1 answer
125 views

Process Explorer doesn't show all privileges

Win7 x64 Enterprise, Process Explorer v16.20. On a process' Security tab, only a few privileges are listed instead of three dozen as it should: I doesn't matter if I run Process Explorer elevated or ...
user avatar
  • 1,811
0 votes
0 answers
4k views

rtcore64.sys in use - process explorer does not show why

I am trying to install new version of MSI AterBurner. First it said application is active, so installation will cancel. OK so after I closed the application I started setup again and I got I tried ...
user avatar
  • 781
1 vote
0 answers
747 views

How to get historical graph of processes activity in Process Exprlorer - Windows Sysinternals

I have strange behaviour of laptop during night with no human around. Sometimes fan gets high RPMs and it looks like computer is processing something. It happed also that Laptop waked up by itself few ...
user avatar
  • 804
0 votes
0 answers
82 views

Process Explorer Why is my Java process displayed with a shortcut icon?

Why is my Java process displayed with a shortcut icon? I have startade the Java program from a bat-file containing this command: java -jar myProgram.jar
user avatar
3 votes
1 answer
566 views

"I/O write" or "Disk write" affects the SSD?

I like to find out which program using mostly my SSD. I'm using Process Hacker (in elevated mode) to get an overview of my SSD usage and find the programs whose using it mostly. To test the ...
user avatar
  • 171
0 votes
0 answers
1k views

Process Explorer: Process Disk: Read/Write bytes not working?

I like to find out which program using mostly my SSD. On Windows 7 x64 machine in Process Explorer (opened as Administrator) double clicking on a process opens up the details of it. On the Disk and ...
user avatar
  • 171
0 votes
0 answers
61 views

When can a file be in use by a process when it is not in use by a process? [duplicate]

Forgive the riddle-like question, but that's what I'm experiencing (I think). What I'm trying to do is delete a specific file. When I originally tried to delete it, Explorer tells me it's in use by ...
user avatar
0 votes
2 answers
3k views

How to list all Privileges held by a Process?

Using Process Explorer tool, we can see the privileges held by a running process. A running process might delete the privileges, and hence effective privileges held by the process would be less than ...
user avatar
  • 872
0 votes
0 answers
185 views

Process Explorer hangs after symbols have been configured

I have configured symbols in Process Explorer. I am aware that this has an impact on the performance of Process Explorer, especially in the beginning when symbols have not been downloaded from ...
user avatar
1 vote
1 answer
5k views

View process environment variables in Windows

Is there a way to view the environment variables of a specific process. I know that i can see them using the Process Explorer. However, i need to use them in a batch or powershell script. Is there a ...
user avatar
  • 111
-1 votes
1 answer
1k views

Process Explorer CPU Usage pattern explanation

The Process Explorer utility shows that my CPU is running at about 5% capacity. Why does the CPU usage suddenly increase when I launch an application and then come back down to normal usage (5-8%) a ...
user avatar
-1 votes
1 answer
2k views

What causes CPU usage to suddenly increase when a program is closed.

I'm using the Process Explorer utility to look at the CPU usage. My CPU is running at < 5% for the most part. But when I launch a program (for e.g. Word, or Excel etc.) the CPU usage increases (for ...
user avatar
0 votes
1 answer
1k views

CPU constantly at 100%, but in Process Explorer usage is around 5%

Task Manager shows CPU usage constantly at 100%, but Process Explorer shows CPU usage at about 5%. I've tried the solution presented in CPU Constantly at 100% In Task Manager, But Not in Process ...
user avatar
  • 1
0 votes
1 answer
229 views

Process explorer's Thread values don't display the total amount for that Process

I would like process explorer to display on the process details the total amount of the quantity used by all its threads in each field. From the looks of the following picture, a Google Chrome example,...
user avatar
  • 198