Process Hacker v2.39

billon on 29 Mar 2016

Process Hacker is a feature-packed tool for manipulating processes and services on your computer. Includes a simple, customized tree view, detailed performance graphs, list of network connections, comprehensive process list (including hidden), full control over processes, rootkit termination, and DLL controls.

Alternatively, Process Hacker Portable is stealth.

System Requirements: WinXP / Vista / Win7 / Win8 / Win10
Writes settings to: Settings location is specified by passing the -settings parameter to Process Hacker, together with the full path to the settings file.
Stealth: ? No. To make stealth:
  1. Delete/rename kprocesshacker.sys before launch or start the program with -nokph argument. Note that this will disable some advanced features
  2. Delete/rename plugins\UserNotes.dll before launch. The UserNotes plugin saves its settings in %APPDATA%\Process Hacker 2\usernotesdb.xml
  3. Although there is no automatic update checker, avoid this option in the Help menu as it will leave a trace in the Internet Explorer browser cache
License: GPLv3
How to extract:
  1. Download the ZIP package and extract to a folder of your choice
  2. Create an empty text file named ProcessHacker.exe.settings.xml in the x86 subfolder for 32-bit or x64 for 64-bit
  3. Launch ProcessHacker.exe
Similar/alternative apps: Process Explorer
What's new?

23 comments on Process Hacker  The Portable Freeware Collection Latest Entries Feed

SH 2010-08-09 23:41

"full control over processes, rootkit termination, and DLL controls."

The definition of a rootkit is the OS is unaware of its presence because the rootkit *is* the OS at that point, and it won't let you see it's process so you can wack it.

wj32 2010-08-10 04:26

A rootkit is not obliged to hide itself or any processes. See Wikipedia for more information.

wpw 2010-11-02 23:21

This program is written in C and C#
I think this program require .Net Framework

M^3 2010-11-02 23:59

".NET Framework is NOT required." The pre-2.x versions required .NET I believe. This one does not.

mantra 2010-12-29 08:22

the portable version did not work
"impossible to find Rtlgetunloadeventtraceex....
under xp

wj32 2010-12-29 22:30

Read README.txt. I'm sure that if you knew to copy the plugins folder over to the same directory as ProcessHacker.exe in order to get plugins working, you would also know some other important things as well...

a 2011-02-05 21:17

BAT launcher :32/64 bit launcher

wj32, I wish there was an easier way to remove the driver. I want to use the driver version but then remove it from the system when I'm done.

PS. this is totally a cross between

And I like it.

mantra 2011-02-20 14:59


wj32 2011-02-28 05:05

@a: The driver is automatically deleted when you restart. If this is not good enough, please create a feature request on the forums so I can remember to fix it :)


Ralph 2011-03-01 00:30

Help! In Sep2010 this was at vers 2.4 on this page,
now in Feb2011 I see 2.11 and then 2.12.
Was 2.4 dodgy in some way? Thanks


SYSTEM 2011-03-03 20:07

@Ralph: No, it wasn't. In case of Process Hacker, 2.12 is higher version number than 2.4.


ZaK 2011-03-13 22:28

Does any know where te program leaves reg entry, if I don't delete kph.sys dreiver? And what is peview.exe for?


juvera 2011-03-27 13:33

I just downloaded the tool, ran the tool, and because I was just curious, I clicked on "About", and in this popup I clicked on "silk icons".
- Process viewer is frozen
- I cannot even unload it from the memory (task manager / end process does not work.


ChipsNHotSauce 2011-06-20 20:04

I think this is getting very close to becoming a 'Process Explorer' replacement!

@juvera, clicking that opens a browser window and it works for me in the latest version.


ChipsNHotSauce 2011-06-20 20:18

A couple requests:
* A Startup manager
* Group services in a treeview and arrange them by 'Group type'
* Service description column
* Open handles/open dll files just like process explorer
* 'Single-click tray icon' should be on by default
* Trayicon network history


Magibon 2011-11-22 12:49

how does this compare to System Explorer?


polas 2012-01-22 16:02

Cause it is a delthi and you can't make the process hacker works untill you install it and when go to c:\program files and copy process hacker 2 folder and data from appdata if you can't find or do not know how to find this place so you can download everything program and then you can find it just type in the search box process hacker and that's it :)
Happy making protables ;)
if you wannt make it hide all source codes from users you can make it with winrar :D
and make it more professional app.


webfork 2013-03-20 00:06

Love the "Disk" tab -- frequently when there's a computer slowdown and it's clearly not a processor issue, it's because the hard drive is read/writing some crazy amount of data from antivirus to some background maintenance. Very useful to see what's going on under the hood.


CornHolio the Gringo 2015-05-02 16:54 got v.2.34, and its Stealth.
The UPDATE function is a plugin in folder /plugin, called Updater.dll.
You configure it through hacker/plugins.
If You ever not gonna update, just delete Updater.dll.
Also consider OnlineChecks.dll, who checks Your searches for descriptions
of files/resources etc.


misan 2016-02-02 17:33

Please note it for this app in the description.


misan 2016-02-02 17:39

btw the link for the BAT launcher seems to be broken.


SYSTEM 2016-02-03 07:48

I added a link to Process Hacker Portable.


misan 2016-02-04 20:15

Thank you.
It's a great app, I personally prefer it over Process Explorer.


Post your comment