Skip to main content
Share Your Experience: Take the 2024 Developer Survey

Questions tagged [process-explorer]

Process Explorer is a Windows tool written by Mark Russinovich, used for examining currently running processes and their open handles

Filter by
Sorted by
Tagged with
0 votes
1 answer
114 views

Process not showing in Process Explorer, even though it's running

Something strange is happening, I am running the game "Sheep dog 'n' wolf" via the SheepD3D.exe executable. While it is running I alt-tab and open SysInternals' Process Explorer (latest ...
user107586's user avatar
0 votes
0 answers
38 views

Laptop will not go to sleep

I'm new here, so it is a pleasure to meet all of you. I have a Windows 11 computer, and everything else works fine otherwise. However, when I try to make my computer sleep, the screen will only dim ...
Throwaway3314232's user avatar
0 votes
2 answers
821 views

How to create and run the windows service using powershell script

I'm trying to create a new service (AppOneTest) on windows 2016, which should be available in services.msc and whenever the service starts (AppOneTest) it should start the process explorer $...
mohan 's user avatar
  • 21
0 votes
0 answers
214 views

Process Explorer won't launch "Find Handle or DLL..." window

There's some really strange behavior going on where when I launch Process Explorer (procexp.exe) on one account, it won't launch the Find Handle or DLL... window. All that happens is the Process ...
Dyllon Gagnier's user avatar
0 votes
2 answers
303 views

Why do processes start appearing at the top of the tree's root instead of where they should, underneath wininit.exe and explorer.exe?

Why do these processes appear at the top of the Process Explorer window instead of below the wininit.exe section where they should be? Some Facts Starts happening after about 10-30 minutes of system ...
Jeff's user avatar
  • 574
0 votes
2 answers
1k views

Process Explorer does not show the real CPU load

I notice that my computer becomes significantly slower while µTorrent is running. For example starting new programs takes anormally long and programs react more slowly. When I shut down µTorrent all ...
Elmue's user avatar
  • 1,041
0 votes
2 answers
613 views

How to run a program as administrator

Is this a joke? Nothing as simple as running a program as administrator: click-right on the name of the program in Windows explorer, choose "Run as administrator" from the context menu and ...
Dominique's user avatar
  • 2,249
1 vote
2 answers
3k views

where to obtain Windows XP-compatible Process Explorer

Where can I obtain a Windows-XP compatible Process Explorer? the current release of Process Explorer does not run on XP SP3, attempting to executing it just says "Not a valid win32 executable&...
hanshenrik's user avatar
  • 1,705
0 votes
0 answers
394 views

Can not run Sysinternals Process Explorer via Task scheduler (installed via winget on Win11)

I'm unable to setup the Process Explorer to run at startup via Task Scheduler. Regardless if I create the task via the Process Explorer menu 'Run at startup' or manually I am unable to make it work. I'...
Dalibor Čarapić's user avatar
1 vote
0 answers
943 views

Get CPU Usage of Specific Program Command Line Windows

Process explorer can show me the CPU % usage of a particular program: I would like to obtain this number through command line to automatically sample the percentage utilization of a process. It has ...
EllipticalInitial's user avatar
0 votes
1 answer
125 views

Why my drivers use 4.2 TB of physical memory?

So I got this info from Process Explorer (System Information window -> Memory)... I have 32 GB of RAM installed. How could drivers use 4 TB, while Kernel only 8 KB?
ScienceDiscoverer's user avatar
0 votes
1 answer
56 views

How is it possible for a process to read 300+ I/O TB?

Take a look at how much I/O this process done! KillerAnalyticsService is, apparently, program made by the manufacturer of network card installed in PC. Can somebody explain how so much bytes was read? ...
ScienceDiscoverer's user avatar
2 votes
2 answers
1k views

Windows debugging: How can I determine which application is opening my web browser

I'm just debugging a potential malware problem where blank browser windows (full windows not tabs) keep opening, but can't find any malware after multiple scans and after installing fresh browser so I'...
Sean Bannister's user avatar
3 votes
1 answer
765 views

running Process Explorer as administrator at log on of non-admin account

I have tried to achieve a supposedly simple task of running Process Explorer with administrator rights (to show all processes) when logging on as normal user on my Win10 Pro 21H1 system. It proved to ...
Prorok Rak's user avatar
0 votes
1 answer
495 views

How to see the process stack in the Sysinternals Process Explorer from a .net console app?

I am trying to get deeper in the understanding how the OS stacks up the chained function calls. So I created a very simple dotnet console app, see the code below, I call the "Call()" method ...
AmandaSai98b's user avatar
0 votes
1 answer
1k views

Why does Samsung Magician write so much data

I've installed a Samsung SSD recently and have been keeping an eye on the total data written from the Magician dashboard (7.0.0.510). In doing so over the past few days I've notice it jumping about 20 ...
samus's user avatar
  • 355
1 vote
1 answer
408 views

Modify Process (not services) Level Permissions via command line (Windows) - to make process interminable by non admin user

Goal: On my PC, there is a background script (Process A) that runs on startup with Administrator Level Permissions on the Standard Level Account (Account X). I would like to use this script, with it's ...
MrPRambo's user avatar
0 votes
1 answer
429 views

How do I see java thread names in Process Explorer?

I have named a thread in my program as "Input Acceptor". userInputThread = new Thread("Input acceptor") { public void run(){ while(true) //dosomething } }...
hidden_machine's user avatar
1 vote
1 answer
751 views

How do I save my Windows 10 hosts file?

Before someone goes and marks this as a duplicate, please understand that I have tried all of the following: Running notepad as an administrator, editing the file and attempting to save. No luck. ...
jlavallet's user avatar
  • 131
0 votes
1 answer
371 views

Recurrent issue Integrated webcam is used by another application

I am having issue with my webcam it stops working randomly for indefinite time, these issue first occurred to me year ago after that I have reinstalled windows one time but these issue comes up ...
Raghav Joshi's user avatar
1 vote
2 answers
5k views

How can I see the pagefile of a process using Process Explorer?

I thought Process Explorer has every statistic possible. But I was looking for the pagefile size of a process and I can't find it. Maybe it's under a different name?
KeyC0de's user avatar
  • 229
0 votes
1 answer
964 views

I keep finding the same string in memory dumps

First off, forgive me - this is less a problem and more of a personal curiosity, but hopefully it will pique the curiosity of my fellow enthusiasts here! As a geek, I do love to get into the processes ...
Cryogen's user avatar
  • 103
1 vote
2 answers
1k views

Process Explorer Itself Consuming High CPU

Process Explorer version 16.32 from Sysinternals is consuming almost 100% of 1 core. I was on Windows 10 version 1909 and upgraded to Windows 10 version 20H2 build 19042.572. Process Explorer ...
Nathan's user avatar
  • 1,306
0 votes
1 answer
30 views

editing sysinternal log to post on forum

I use sysinternal tool procmon https://docs.microsoft.com/en-us/sysinternals/downloads/procmon I want to edit its log because I want to post it online on technical forums for disucssions. I want to ...
koeradoera's user avatar
2 votes
0 answers
259 views

Why do RAMMAP's total RAM usage of processes/mapped-file not even remotely add up to the total Memory usage in User Counts?

RamMap: User Counts Processes File summary In RamMap, the memory usage in first image is right. However, when I tried to add up all the Active memory, and the 2nd image and 3rd image doesn't match ...
obook's user avatar
  • 21
0 votes
1 answer
215 views

Why's there a discrepancy by a factor of 10, for memory figures, with process explorer, compared to e.g. powershell and process hacker?

Why does there seem to be a discrepancy by a factor of 10, for the private memory figure and working set memory figure, in the data given by process explorer, compared to that of powershell and ...
barlop's user avatar
  • 24.1k
0 votes
1 answer
736 views

From Process Explorer, Is it possible to get the exact number of total bytes used for working memory and private memory?

From Process Explorer, Is it possible to get the exact number of total bytes used for working memory and private memory? Those numbers look like they are to the nearest thousand bytes. (or they are ...
barlop's user avatar
  • 24.1k
2 votes
1 answer
949 views

Echo GDI Object Count to Command Line or File

I'm ultimately looking for a way to set up an automated alert that will warn me if a process's GDI Object count is approaching the default 10,000 limit. I have a known issue with some software our ...
Ian McKenzie's user avatar
4 votes
0 answers
1k views

High CPU usage from Explorer.exe - Suspecting Dropbox and/or Onedrive shell integration at fault

I'm experiencing high CPU usage from Explorer.exe and I am using SysInternals' Process Explorer to try to diagnose the issue. Frequently I will get a CPU History graph like this (or worse, showing ...
cometbill's user avatar
  • 651
0 votes
1 answer
76 views

What is corel doing on my udp connections for Chrome?

I have a weird mc.corel.com address lingering in Chrome and some parts of svchost processes, what is going on?
somerandomguy83's user avatar
0 votes
0 answers
64 views

Process Explorer showing RAM use of 99.73%

Is it possible for for Process Explorer to show a RAM use of 99.73%, on Windows 7 SP1 x64 Ultimate (virtual memory disabled to avoid swap)? I thought that Windows was reserving a few % of RAM for ...
Franck Dernoncourt's user avatar
4 votes
2 answers
2k views

Process Explorer Reports Processes with 2TB "virtual size" in Windows 10?

This screen snip of Process Explorer shows multiple processes with >2TB "virtual size": This can't mean they are all using 2TB of virtual memory, so I'm wondering just what this means.
James Bowery's user avatar
1 vote
1 answer
3k views

taskhostw using a lot of disk and doing something on windows.old folder

I found my windows 10 machine being very slow and using a lot of hard drive. Task manager, Disk is reporting 100% usage. I open up Resource monitor, select disk tab. and sort write column. System ...
Luis's user avatar
  • 13
1 vote
0 answers
64 views

How does a process like KeePass protect its memory in Windows?

I am looking at KeePass and trying to figure out how it protects its memory exactly. Is it because the use of KeePassLib.Security.ProtectedBinary class for all it's memory allocations or is it ...
oleksii's user avatar
  • 850
0 votes
0 answers
252 views

using process explorer to "debug" powershell scripts

i'm frequently using process explorer from sysinternals to "debug" some problems with applications, eg network connection issues. For example, i start an exe applications which drops an error-message ...
PaulRobeere's user avatar
0 votes
0 answers
768 views

Stack overflow attempt on svchost.exe

My computer detected a stack overflow attempt on svchost. I looked at procexplorer and checked the hash of the svchost and it checked out. My question is if a file is successful with a stack ...
James Lee's user avatar
3 votes
2 answers
979 views

How can I save urls from dead Google Chrome window

I have Google Chrome incognito window open with more than 100 tabs. OS: Win10. When I was browsing one site, chrome window suddenly freezed and I can't anymore browse or see any tabs. So I left chrome ...
mlsvmldkv110011's user avatar
0 votes
0 answers
8k views

Command line tools to view process list in Windows 10. pslist slow

Default Task Manager and Sysinternals ProcessExplorer are well-known GUI applications to show processes details in Windows 10. I use both. Windows 10 comes also with command-line tasklist.exe. It ...
nephewtom's user avatar
  • 2,997
0 votes
1 answer
2k views

How can I see current network speed in process explorer?

Using process explorer, how can I see how many bytes or bits send/received by a process in an instant of time say, seconds? I couldn't find an answer to this.
Josigun's user avatar
0 votes
1 answer
417 views

Find missing file in an process openfile request on Windows

I have an thid-party EXE that doesn't work and it fails with a generic "File not found" exception and I cannot understand what it is looking for. Unfortunately I cannot use ProcessExplorer or ...
Tobia's user avatar
  • 2,291
5 votes
4 answers
18k views

How to identify which process committed memory

My system runs high on committed memory (out of 8GB RAM + 2 GB page file 85% memory is committed). Physical usage is at some 65%. How can I identify what process(es) is allocating most of the ...
Dunken's user avatar
  • 839
3 votes
3 answers
6k views

Windows 10 System (ntoskrnl.exe) using CPU when machine has been idle for a while

I noticed that my laptop's CPU starts getting used (maybe 15% usage?) and the CPU fan turns on, generally in the evening when my laptop has been idle for 5 minutes or so. The process using the CPU ...
Jez's user avatar
  • 2,968
1 vote
1 answer
1k views

icacls - Integrity level is not apply on the exe file

I have an exe file that run as Medium integrity by default. I tried to change its integrity to Low with the following statament : icacls 1.exe /L The output message show its succeed : 1.exe ...
BattleTested_закалённый в бою's user avatar
0 votes
2 answers
2k views

Silent Process Exit: process '?' was terminated by the process 'C:\Windows\System32\svchost.exe' with termination code 1067

We have a serious issue with a C# application being terminated silently at random and infrequent points in time on a Windows 10 32-bit installation. E.g. it might be a month between occurrences. Or ...
nietras's user avatar
  • 83
6 votes
1 answer
1k views

Where does chocolatey install sysinternals?

Chocolatey has a nice sysinternals package, but where does it install to? (by default) https://chocolatey.org/packages/sysinternals
David's user avatar
  • 2,322
0 votes
2 answers
2k views

Found a crypto mining process - how do I get rid of it? [duplicate]

Noticed some minor performance decrease, decided to install the process explorer described here: https://security.stackexchange.com/questions/76100/how-to-find-processes-that-are-hidden-from-task-...
Alex_404's user avatar
  • 103
1 vote
1 answer
359 views

Process Explorer doesn't show all privileges

Win7 x64 Enterprise, Process Explorer v16.20. On a process' Security tab, only a few privileges are listed instead of three dozen as it should: I doesn't matter if I run Process Explorer elevated or ...
ivan_pozdeev's user avatar
  • 1,911
0 votes
0 answers
4k views

rtcore64.sys in use - process explorer does not show why

I am trying to install new version of MSI AterBurner. First it said application is active, so installation will cancel. OK so after I closed the application I started setup again and I got I tried ...
Vitas's user avatar
  • 909
1 vote
0 answers
1k views

How to get historical graph of processes activity in Process Exprlorer - Windows Sysinternals

I have strange behaviour of laptop during night with no human around. Sometimes fan gets high RPMs and it looks like computer is processing something. It happed also that Laptop waked up by itself few ...
lluke's user avatar
  • 1,034
0 votes
0 answers
160 views

Process Explorer Why is my Java process displayed with a shortcut icon?

Why is my Java process displayed with a shortcut icon? I have startade the Java program from a bat-file containing this command: java -jar myProgram.jar
user1766169's user avatar