Questions tagged [process-explorer]

Process Explorer is a Windows tool written by Mark Russinovich, used for examining currently running processes and their open handles

Filter by
Sorted by
Tagged with
0
votes
0answers
23 views

Why do RAMMAP's total RAM usage of processes/mapped-file not even remotely add up to the total Memory usage in User Counts?

RamMap: User Counts Processes File summary In RamMap, the memory usage in first image is right. However, when I tried to add up all the Active memory, and the 2nd image and 3rd image doesn't match ...
0
votes
1answer
35 views

Why's there a discrepancy by a factor of 10, for memory figures, with process explorer, compared to e.g. powershell and process hacker?

Why does there seem to be a discrepancy by a factor of 10, for the private memory figure and working set memory figure, in the data given by process explorer, compared to that of powershell and ...
0
votes
1answer
13 views

From Process Explorer, Is it possible to get the exact number of total bytes used for working memory and private memory?

From Process Explorer, Is it possible to get the exact number of total bytes used for working memory and private memory? Those numbers look like they are to the nearest thousand bytes. (or they are ...
1
vote
1answer
28 views

Echo GDI Object Count to Command Line or File

I'm ultimately looking for a way to set up an automated alert that will warn me if a process's GDI Object count is approaching the default 10,000 limit. I have a known issue with some software our ...
4
votes
0answers
228 views

High CPU usage from Explorer.exe - Suspecting Dropbox and/or Onedrive shell integration at fault

I'm experiencing high CPU usage from Explorer.exe and I am using SysInternals' Process Explorer to try to diagnose the issue. Frequently I will get a CPU History graph like this (or worse, showing ...
0
votes
1answer
42 views

What is corel doing on my udp connections for Chrome?

I have a weird mc.corel.com address lingering in Chrome and some parts of svchost processes, what is going on?
0
votes
0answers
47 views

Process Explorer showing RAM use of 99.73%

Is it possible for for Process Explorer to show a RAM use of 99.73%, on Windows 7 SP1 x64 Ultimate (virtual memory disabled to avoid swap)? I thought that Windows was reserving a few % of RAM for ...
0
votes
0answers
22 views

Auto-suspend process if not verified signer

In Process Explorer I found WinStore.App.exe with no signature in Verified Signer column. I wonder if there is a smart way to automatically suspend processes like this.
0
votes
1answer
270 views

Process Explorer Reports Processes with 2TB “virtual size” in Windows 10?

This screen snip of Process Explorer shows multiple processes with >2TB "virtual size": This can't mean they are all using 2TB of virtual memory, so I'm wondering just what this means.
0
votes
1answer
347 views

taskhostw using a lot of disk and doing something on windows.old folder

I found my windows 10 machine being very slow and using a lot of hard drive. Task manager, Disk is reporting 100% usage. I open up Resource monitor, select disk tab. and sort write column. System ...
1
vote
0answers
25 views

How does a process like KeePass protect its memory in Windows?

I am looking at KeePass and trying to figure out how it protects its memory exactly. Is it because the use of KeePassLib.Security.ProtectedBinary class for all it's memory allocations or is it ...
0
votes
0answers
108 views

using process explorer to “debug” powershell scripts

i'm frequently using process explorer from sysinternals to "debug" some problems with applications, eg network connection issues. For example, i start an exe applications which drops an error-message ...
0
votes
0answers
520 views

Stack overflow attempt on svchost.exe

My computer detected a stack overflow attempt on svchost. I looked at procexplorer and checked the hash of the svchost and it checked out. My question is if a file is successful with a stack ...
2
votes
1answer
101 views

How can I save urls from dead Google Chrome window

I have Google Chrome incognito window open with more than 100 tabs. OS: Win10. When I was browsing one site, chrome window suddenly freezed and I can't anymore browse or see any tabs. So I left chrome ...
0
votes
0answers
2k views

Command line tools to view process list in Windows 10. pslist slow

Default Task Manager and Sysinternals ProcessExplorer are well-known GUI applications to show processes details in Windows 10. I use both. Windows 10 comes also with command-line tasklist.exe. It ...
0
votes
1answer
196 views

How can I see current network speed in process explorer?

Using process explorer, how can I see how many bytes or bits send/received by a process in an instant of time say, seconds? I couldn't find an answer to this.
0
votes
1answer
52 views

Find missing file in an process openfile request on Windows

I have an thid-party EXE that doesn't work and it fails with a generic "File not found" exception and I cannot understand what it is looking for. Unfortunately I cannot use ProcessExplorer or ...
3
votes
3answers
5k views

How to identify which process committed memory

My system runs high on committed memory (out of 8GB RAM + 2 GB page file 85% memory is committed). Physical usage is at some 65%. How can I identify what process(es) is allocating most of the ...
2
votes
3answers
3k views

Windows 10 System (ntoskrnl.exe) using CPU when machine has been idle for a while

I noticed that my laptop's CPU starts getting used (maybe 15% usage?) and the CPU fan turns on, generally in the evening when my laptop has been idle for 5 minutes or so. The process using the CPU ...
1
vote
1answer
431 views

icacls - Integrity level is not apply on the exe file

I have an exe file that run as Medium integrity by default. I tried to change its integrity to Low with the following statament : icacls 1.exe /L The output message show its succeed : 1.exe ...
0
votes
2answers
695 views

Silent Process Exit: process '?' was terminated by the process 'C:\Windows\System32\svchost.exe' with termination code 1067

We have a serious issue with a C# application being terminated silently at random and infrequent points in time on a Windows 10 32-bit installation. E.g. it might be a month between occurrences. Or ...
4
votes
1answer
205 views

Where does chocolatey install sysinternals?

Chocolatey has a nice sysinternals package, but where does it install to? (by default) https://chocolatey.org/packages/sysinternals
0
votes
2answers
359 views

Found a crypto mining process - how do I get rid of it? [duplicate]

Noticed some minor performance decrease, decided to install the process explorer described here: https://security.stackexchange.com/questions/76100/how-to-find-processes-that-are-hidden-from-task-...
1
vote
1answer
75 views

Process Explorer doesn't show all privileges

Win7 x64 Enterprise, Process Explorer v16.20. On a process' Security tab, only a few privileges are listed instead of three dozen as it should: I doesn't matter if I run Process Explorer elevated or ...
0
votes
0answers
3k views

rtcore64.sys in use - process explorer does not show why

I am trying to install new version of MSI AterBurner. First it said application is active, so installation will cancel. OK so after I closed the application I started setup again and I got I tried ...
1
vote
0answers
419 views

How to get historical graph of processes activity in Process Exprlorer - Windows Sysinternals

I have strange behaviour of laptop during night with no human around. Sometimes fan gets high RPMs and it looks like computer is processing something. It happed also that Laptop waked up by itself few ...
0
votes
0answers
55 views

Process Explorer Why is my Java process displayed with a shortcut icon?

Why is my Java process displayed with a shortcut icon? I have startade the Java program from a bat-file containing this command: java -jar myProgram.jar
3
votes
1answer
357 views

“I/O write” or “Disk write” affects the SSD?

I like to find out which program using mostly my SSD. I'm using Process Hacker (in elevated mode) to get an overview of my SSD usage and find the programs whose using it mostly. To test the ...
0
votes
0answers
755 views

Process Explorer: Process Disk: Read/Write bytes not working?

I like to find out which program using mostly my SSD. On Windows 7 x64 machine in Process Explorer (opened as Administrator) double clicking on a process opens up the details of it. On the Disk and ...
0
votes
0answers
56 views

When can a file be in use by a process when it is not in use by a process? [duplicate]

Forgive the riddle-like question, but that's what I'm experiencing (I think). What I'm trying to do is delete a specific file. When I originally tried to delete it, Explorer tells me it's in use by ...
0
votes
0answers
1k views

How to list all Privileges held by a Process?

Using Process Explorer tool, we can see the privileges held by a running process. A running process might delete the privileges, and hence effective privileges held by the process would be less than ...
0
votes
0answers
157 views

Process Explorer hangs after symbols have been configured

I have configured symbols in Process Explorer. I am aware that this has an impact on the performance of Process Explorer, especially in the beginning when symbols have not been downloaded from ...
1
vote
1answer
3k views

View process environment variables in Windows

Is there a way to view the environment variables of a specific process. I know that i can see them using the Process Explorer. However, i need to use them in a batch or powershell script. Is there a ...
-1
votes
1answer
859 views

Process Explorer CPU Usage pattern explanation

The Process Explorer utility shows that my CPU is running at about 5% capacity. Why does the CPU usage suddenly increase when I launch an application and then come back down to normal usage (5-8%) a ...
-1
votes
1answer
2k views

What causes CPU usage to suddenly increase when a program is closed.

I'm using the Process Explorer utility to look at the CPU usage. My CPU is running at < 5% for the most part. But when I launch a program (for e.g. Word, or Excel etc.) the CPU usage increases (for ...
0
votes
1answer
712 views

CPU constantly at 100%, but in Process Explorer usage is around 5%

Task Manager shows CPU usage constantly at 100%, but Process Explorer shows CPU usage at about 5%. I've tried the solution presented in CPU Constantly at 100% In Task Manager, But Not in Process ...
0
votes
1answer
113 views

Process explorer's Thread values don't display the total amount for that Process

I would like process explorer to display on the process details the total amount of the quantity used by all its threads in each field. From the looks of the following picture, a Google Chrome example,...
0
votes
1answer
169 views

How to make process explorer show disk active time?

How can you make process explorer show active time like Windows Task Manager? EDIT: My problem is as shown down here in the picture. Some times my hdd is working, but I won't see it in process ...
1
vote
0answers
328 views

System is taking up too much CPU Power

The "System" is taking up too much CPU usage. I've had this problem for a while but it keeps getting worse, I feel. Sometimes I need to restart the computer multiple times until I'm lucky and it won't ...
1
vote
1answer
354 views

What is the lowest priority Process Explorer can set?

I ask because the last two entries in the context menu sound as if they may be in the wrong order: … Background: 4 (Low I/O and Memory Priority) Idle: 4 If these both have the same numeric base ...
0
votes
2answers
2k views

What process is running with Processid:{1EF75F33-893B-4E8F-9655-C3D602BA4897} via DllHost? It eats up CPU and RAM on a continuous basis

I'm curious if anyone knows what COM service is using Processid:{1EF75F33-893B-4E8F-9655-C3D602BA4897}? I've noticed that my RAM usage went up to 96%, and is still growing. (Mind you, I have 32GB of ...
1
vote
2answers
658 views

Why does process explorer show thousands of threads?

In the screenshot below, you can see that the OS is reporting 2925 threads. In my own programs, I set the number of threads per core to around 1:1 and that results in the fastest overall processing....
0
votes
3answers
867 views

Is it possible to kill a process on its startup? [closed]

I have to run a program, a virus scanner, on my work laptop. It is awful, so amazingly bad that it slows down everything else I try to run. It's made me so much less productive - however, due to ...
2
votes
3answers
903 views

Add Process explorer to taskbar right click context menu Windows 8.1

I recently discovered process explorer (https://technet.microsoft.com/en-us/sysinternals/bb896653.aspx) and would like to add it to the context menu when you right click on the taskbar. It has the ...
0
votes
0answers
335 views

Process Hacker/Explorer: How to automatically open process properties on launch

When monitoring/debugging executables, I often have to restart them. In Process Hacker/Process Explorer: Is it possible to automatically open the properties window after launching/restarting a ...
0
votes
0answers
149 views

“Access denied” message when investigating driver in Process Explorer

I have a virgin installation of Vista Home Premium 32 with a 100% CPU usage problem arising from svchost hosting taskeng.exe doing some unknown thing. I know that this is due to some driver ...
0
votes
0answers
475 views

How to debug 'File in use by another process' error in Sublime Text

All of a sudden, today, I have started having problems uploading files with Sublime Text and the SFTP plugin. There have been no sytem changes, new programs installed or suchlike. I was using it ...
5
votes
1answer
927 views

periodic error dialog (default Email app related) on Windows 10, appears to be CortanaMapiHelper, should I be concerned?

I'm running Windows 10 64-bit. Periodically (maybe daily?), I get the below dialog appearing on my machine. I normally just click OK and move on. This time, I ran Process Explorer, then used the "...
1
vote
1answer
2k views

Background processes running while idle using lots of CPU

I downloaded Windows 10 to my VMware machine and it works great but I've noticing slowdown on my real computer when I leave my virtual machine idle. I have Process Explorer open and when I have it run ...
14
votes
3answers
11k views

How to identify terminated Windows process if I still have its PID?

Background: In the middle of my work, license agreement for installing "Microsoft Mouse and Keyboard Center" suddenly appeared. I'd like to understand what process launched the setup, but using ...