# System Informer

> Windows process viewer and system inspector, formerly Process Hacker, for examining running programs and the system around them. It gives a highlighted overview of system activity, searches the handles and loaded DLLs of processes to find which one is using a file, shows active network connections and real-time disk access, displays stack traces with kernel-mode, WOW64 and .NET support, and creates, edits and controls services. Version 4.0 adds a Process Monitor that logs process, thread, image, registry, file, handle and silo events from its kernel driver, and plugins add .NET assembly and performance tabs, a window explorer and Hybrid Analysis lookups.

- Type: Tool
- Targets: Binary
- Category: Debugging and dynamic analysis
- Relationship: Foundation tool
- Sources reviewed: 2026-11-05
- Added to the catalog: 2026-11-06
- Original resource: <https://github.com/winsiderss/systeminformer>
- Primary source: <https://github.com/winsiderss/systeminformer/blob/999fe5ef6a554f55d8e7df43903eb31ca530377e/README.md>
- Catalog page: <https://awesomerea.org/resources/system-informer/>
- Record JSON: <https://awesomerea.org/resources/system-informer/record.json>
- Chinese version: [简体中文](https://awesomerea.org/zh/resources/system-informer/index.md)

## Requirements & limits

- **Prerequisites:** Windows 10 or later, 32-bit or 64-bit, per the README. Release at review: v4.0.26241.138, published 2026-08-29 as the first 4.0 release; the reviewed master commit is 874 commits ahead of it. Building from source needs Visual Studio 2022 or later and the build_init.cmd and build_release.cmd scripts in build/.
- **Limits:** The KSystemInformer kernel driver gives its broader inspection only to verified callers: binaries loaded into System Informer need a .sig from the build's key pair or a Microsoft or anti-malware vendor signature, and loading an unsigned third-party plugin restricts driver access. Builds signed with a developer's own key need debug and test-signing mode, with Secure Boot disabled where applicable.
- **Scope:** The Agent Tools plugin is on the master branch only, not in the 4.0 release; its source describes it as exposing System Informer's process data and actions to AI agents over the Model Context Protocol. It is off by default, asks to confirm connections by default and offers stdio setup commands for clients such as Claude Code and Codex CLI. The OnlineChecks plugin's Hybrid Analysis lookups are opt-in with per-service API keys and can optionally submit unknown files.
- **License:** MIT per LICENSE.txt and the README.

## Primary sources

1. <https://github.com/winsiderss/systeminformer/blob/999fe5ef6a554f55d8e7df43903eb31ca530377e/README.md>
2. <https://github.com/winsiderss/systeminformer/blob/999fe5ef6a554f55d8e7df43903eb31ca530377e/KSystemInformer/README.md>
3. <https://github.com/winsiderss/systeminformer/blob/999fe5ef6a554f55d8e7df43903eb31ca530377e/CHANGELOG.txt>
4. <https://github.com/winsiderss/systeminformer/blob/999fe5ef6a554f55d8e7df43903eb31ca530377e/plugins/AgentTools/main.c#L58-L75>
5. <https://github.com/winsiderss/systeminformer/blob/999fe5ef6a554f55d8e7df43903eb31ca530377e/plugins/AgentTools/options.c#L1044-L1060>
6. <https://github.com/winsiderss/systeminformer/blob/999fe5ef6a554f55d8e7df43903eb31ca530377e/LICENSE.txt>
7. <https://github.com/winsiderss/systeminformer/releases/tag/v4.0.26241.138>
8. <https://systeminformer.com/>

## More in Native binaries

- [CyberChef](https://awesomerea.org/resources/cyberchef/index.md) · Tool
- [YARA](https://awesomerea.org/resources/yara/index.md) · Tool
- [Cheat Engine](https://awesomerea.org/resources/cheat-engine/index.md) · Tool
- [Noriben](https://awesomerea.org/resources/noriben/index.md) · Tool
- [QEMU](https://awesomerea.org/resources/qemu/index.md) · Tool
- [Hex Fiend](https://awesomerea.org/resources/hex-fiend/index.md) · Tool

## About this entry

The description was reviewed against primary sources.
Original editorial content: MIT. Linked projects, papers and assets retain their own rights and licenses.