Skip to content

imm0r/hideProcess

Folders and files

NameName
Last commit message
Last commit date

Latest commit

 

History

6 Commits
 
 
 
 
 
 
 
 
 
 

Repository files navigation

HideProcess Logo

License Platform Architecture Language


📌 Overview

HideProcess is a proof‑of‑concept demonstrating how a process can be hidden from the Windows Task Manager on legacy Windows systems (Windows 2000 → Windows 7).

It uses a DLL injected into all running processes via a CBT hook (SetWindowsHookEx) to intercept specific API calls and prevent the target process from being listed.


✨ Features

  • Hide a process from the Windows Task Manager
  • Works on x86 and x64, depending on the AutoHotkey version used
  • Injection via:
    • SetWindowsHookEx(WH_CBT, ...)
    • Exported CBTProc inside the DLL
  • Auto‑injection into all running processes
  • Press ESC to stop the script and unload the hook
  • Works with:
    • AutoHotkey.exe (if script not compiled)
    • Your compiled EXE name (if compiled)

🧩 How It Works

The AutoHotkey script loads a DLL that:

  1. Installs a CBT hook using SetWindowsHookEx
  2. Injects itself into all running processes
  3. Hooks internal APIs responsible for enumerating processes
  4. Filters out the target process name
  5. Prevents the Task Manager from displaying it

⚠️ Disclaimer

This project is intended for research, debugging, and reverse‑engineering education.
It must not be used for malicious purposes.

📜 License

This project is licensed under the MIT License.

About

hyde.dll hides a process from the Task-Manager on Windows2k/Windows7 (x86/x64 bit)

Resources

Stars

22 stars

Watchers

3 watching

Forks

Releases

No releases published

Packages

 
 
 

Contributors