systeminformer

winsiderssMIT活跃维护

一款免费强大的系统监控与调试工具,可实时查看进程、性能、网络等资源占用,还能辅助排查恶意软件。

A free, powerful, multi-purpose tool that helps you monitor system resources, debug software and detect malware. Brought to you by Winsider Seminars & Solutions, Inc. @ https://windows-internals.com

v4.0.26241.138发布于 2026-08-29 01:54 UTC16,469star +31 / 7 天1,821fork同步于 2026-11-10 17:25 UTC

怎么上手

由 README 提炼,执行前请确认
build_init.cmd(在 build 目录下运行一次)
build_release.cmd(在 build 目录下编译)
硬件要求按 README 说明

需 Windows 10 或更高版本,支持 32 位与 64 位;README 未说明其他硬件要求

下载:源码 zip·GitHub Releases(安装包)本站不镜像安装包

项目说明

由 README 自动翻译提炼

Windows 上的免费系统监控与调试工具,可查看进程、网络、磁盘和内核栈并排查恶意软件

一款免费强大的系统监控与调试工具,可实时查看进程、性能、网络等资源占用,还能辅助排查恶意软件。

核心能力

  • 高亮显示系统活动概览,快速定位资源占用大户
  • 查看文件被哪些进程占用,解决无法编辑或删除问题
  • 列出程序的活跃网络连接并支持手动关闭
  • 提供内核态、WOW64 与 .NET 的详细调用栈回溯
  • 可创建、编辑和控制服务,替代 services.msc

容易踩的坑

编译需 Visual Studio 2022 或更高版本;build_init.cmd 仅在工具或第三方库更新时才需重跑;从 U 盘运行时需手动创建 SystemInformer.exe.settings.xml 才能把配置保存在同目录

内容由模型根据 README 生成,可能不完整或不准确,以官方文档为准。看原文 README

最近发版

5 个版本v4.0.26241.138
  1. v4.0.26241.1384.0.26241.138最新正式版2026-08-29 · 2026-08-29 01:54 UTC

    System Informer 4.0

    The first 4.0 release: a new kernel/user transport, a Process Monitor, Hybrid Analysis integration, a JSON settings store, a rewritten installer, and a year of fixes across the app, driver, plugins, and phnt headers.

    Highlights

    • Process Monitor (Tools menu): a driver-backed live log of process, thread, image, registry, file, handle and silo events with filtering, access-mask decoding, and configurable look-back.
    • Hybrid Analysis integration (OnlineChecks): System Informer can now automatically check running processes and loaded images against Hybrid Analysis, showing verdicts directly in the process and module lists via a new Hybrid Analysis column. Unknown files can optionally be submitted for analysis. Results are cached locally so repeated lookups are free, and scanning is opt-in with per-service API keys, path exclusions, and rate handling built in.
    • Ring-buffer informer transport in the kernel driver: large shared-memory ring instead of per-message port round-trips, with rate limiting and per-client statistics; informer callbacks run at APC/DPC level where possible.
    • New installer: modern wizard with dark mode, DPI scaling, uninstaller, shortcut page, and atomic staged extraction with rollback — failed updates no longer leave a half-written directory.
    • Updater: toast-notification flow with progress and actions; BITS, Delivery Optimization and Microsoft Store download back-ends.
    • Low-latency mode (experimental, Windows 11): high-resolution provider timers.
    • Per-monitor DPI and dark theme work throughout the app, plugins, and property sheets, including Windows 11 borders and much less resize flicker.

    Application

    New

    • Users tab (logged-on sessions); process environment editor with multi-entry split editing; WMI tab gains MI support.
    • Columns: Short user name, service Username, thread RPC usage, thread kernel stack, handle reference count/size, extended GDI/handle details, ALPC port state; GPU/NPU committed memory.
    • Process tree: independent root/child sort options, Collapse/Expand All, aggregate-aware sorting; Ctrl-drag parent fix.
    • Threads: Freeze/Thaw, suspended/wait-type highlighting; Modules: native/mapped highlighting and CLR metadata mapping.
    • Memory strings search: parallel/bulk scanning, UTF-8, progress, sortable results.
    • Services: multi-select start/pause with progress and retry; Run As: per-launch privilege selection and AppContainer launch.
    • Handle protect/inherit changes without the driver; COM permission dialogs; desktop heap detection; UDP firewall-exempt port highlighting.
    • System Information: reorderable sections, horizontal scrolling, per-CPU speed; overhauled tray mini-info window; energy statistics.
    • Options: consolidated Highlighting page, per-tab layout persistence, advanced setting editor; settings.schema.json shipped for editors.
    • Hold Shift at startup to launch the original Task Manager when System Informer is the replacement.

    Fixed

    • I/O delta columns sorting by cumulative values; page/IO priority in Threads tab; protection column sort; username column not updating.
    • Process affinity regressions (single and multi processor groups); main window stealing foreground at startup; previous-instance restore and handle leak.
    • Hangs opening the security editor and AFD socket properties; crashes on CPUs without rdtscp, in snapshot handling, on "Current Power Scheme", and with WSL info when no distro is installed.
    • Settings not saving on network shares; User Notes not reloaded on restart; Windows 7 import resolution.
    • Numerous memory and handle leaks, out-of-bounds reads (CPU info, syscall list, AVX search), and dark-theme painting bugs.

    Kernel driver (KSystemInformer)

    • Silo (container) informer; file informer now reports copy operations, access masks and image sizes; thread kernel-stack query; hash-result caching; dedicated system process for driver threads.
    • Object protection reworked with broader hand
  2. v3.2.25011.21033.2.25011.21032025-05-14 · 2025-05-14 22:39 UTC
    查看更新说明

    What's Changed

  3. v2.392.392016-03-29 · 2016-03-29 01:41 UTC
    查看更新说明
    • HIGHLIGHTS:
      • Improved compatibility with security and anti-cheat software
      • Added ability to edit process environment variables
      • Fixed .NET process detection
    • OTHER CHANGES:
      • Improved tooltip information for dllhost.exe
      • Removed Terminator
      • Updated DotNetTools plugin:
        • Fixed .NET assembly tab performance issues
        • Added extra .NET memory counters to the .NET performance tab
        • Added "Show sizes in bytes" checkbox to the .NET performance tab
        • Added right-click menu to the .NET assembly tab
      • Updated ExtendedTools plugin:
        • Fixed "No process" disk event bug
      • Updated HardwareDevices plugin:
        • Fixed incorrect drive letters
        • Fixed drive letter and panel clipping issue
  4. v2.382.382016-02-26 · 2016-02-26 10:47 UTC
    查看更新说明
    • HIGHLIGHTS:
      • Added labels to indicate the maximum data point in each I/O graph
      • Graph grids now scale correctly when resized
      • Improved high DPI scaling
      • Added exploit mitigation policy information to process properties (Windows 8 and above)
      • Added File modified time and File size columns for processes and modules
      • Added Key modified time column for services
      • Clicking a tray icon now shows the pop-up UI (useful for touch-enabled devices)
      • The NetAdapters plugin has been renamed to HardwareDevices
        • This plugin shows network adapter and disk drive graphs
        • If you are manually upgrading, please delete NetAdapters.dll from the plugins folder
      • Updated UserNotes plugin:
        • Added "Collapse by default" option for processes
    • OTHER CHANGES:
      • Added "Start when I log on" option
      • Added "Not responding" text to tray icon rich pop-up for programs that are hung
      • Added right-click menu and double-click action for environment variables
      • Added dialog box to show long command line strings
      • Added Time stamp column for processes
      • Added -sysinfo command line parameter for opening System Information at startup
      • Added 32x32 icons for high DPI displays
      • Digital signature verification is now performed with very low I/O priority
      • Improved performance when handling a large number of threads, modules or handles
      • The pop-up UI no longer displays when double-clicking the tray icon
      • Fixed ASLR state being shown as N/A in process properties
      • Fixed multi monitor window placement bug
      • Fixed handle enumeration bug affecting processes with PID >= 65536
      • Fixed Interrupts being missing from the max CPU usage history
      • Updated ToolStatus plugin:
        • Added 32x32 icons for high DPI displays
        • Fixed status bar crash
    • NOTE:
      • This release has significant internal code changes. Please make sure all plugins are up-to-date.
  5. v2.372.372016-02-02 · 2016-02-02 13:06 UTC
    查看更新说明
    • HIGHLIGHTS:
      • Updated for Windows 10
      • The "Include CPU (and other) usage of children in collapsed processes" option now aggregates memory and I/O statistics
      • Added regex search to "Find Handles or DLLs"
      • Added process exit codes to log
      • Fixed crash that occurred under some conditions when processes terminated
    • OTHER CHANGES:
      • Added warning when trying to search for handles when the system has too many handles open
      • Upgraded to PCRE2
      • Updated DotNetTools plugin:
        • Rewrite of .NET Performance statistics and AppDomain enumeration
      • Updated OnlineChecks plugin:
        • Fixed virusscan.jotti.org uploader
      • Updated NetAdapters plugin:
        • Added adapter details window
      • Updated ToolStatus plugin:
        • Added CPU, Memory and I/O graphs to the toolbar (not enabled by default)
        • Added toolbar and status bar customization, as well as a new theme
        • Added option to auto-hide the main menu
      • Updated UserNotes plugin:
        • Added individual process highlighting support

用户点评

登录用户的真实使用记录,可按版本和硬件筛选
共 0 条

    还没有人点评。第一个说出真实体验的人最有价值。

    README 原文

    未翻译

    System requirements

    Windows 10 or higher, 32-bit or 64-bit.

    Features

    • A detailed overview of system activity with highlighting.
    • Graphs and statistics allow you quickly to track down resource hogs and runaway processes.
    • Can't edit or delete a file? Discover which processes are using that file.
    • See what programs have active network connections, and close them if necessary.
    • Get real-time information on disk access.
    • View detailed stack traces with kernel-mode, WOW64 and .NET support.
    • Go beyond services.msc: create, edit and control services.
    • Small, portable and no installation required.
    • 100% Free Software (MIT)

    Building the project

    Requires Visual Studio (2022 or later).

    After cloning the repo run build_init.cmd located in the build directory, this doesn't not run again unless there are updates to the tools or third party libraries.

    Execute build_release.cmd located in the build directory to compile the project or load the SystemInformer.sln and Plugins.sln solutions if you prefer building the project using Visual Studio.

    You can download the free Visual Studio Community Edition to build the System Informer source code.

    See the build readme for more information or if you're having trouble building.

    Enhancements/Bugs

    Please use the GitHub issue tracker for reporting problems or suggesting new features.

    Settings

    If you are running System Informer from a USB drive, you may want to save System Informer's settings there as well. To do this, create a blank file named "SystemInformer.exe.settings.xml" in the same directory as SystemInformer.exe. You can do this using Windows Explorer:

    1. Make sure "Hide extensions for known file types" is unticked in Tools > Folder options > View.
    2. Right-click in the folder and choose New > Text Document.
    3. Rename the file to SystemInformer.exe.settings.xml (delete the ".txt" extension).