HideProcess is a proof‑of‑concept demonstrating how a process can be hidden from the Windows Task Manager on legacy Windows systems (Windows 2000 → Windows 7).
It uses a DLL injected into all running processes via a CBT hook (SetWindowsHookEx) to intercept specific API calls and prevent the target process from being listed.
- Hide a process from the Windows Task Manager
- Works on x86 and x64, depending on the AutoHotkey version used
- Injection via:
SetWindowsHookEx(WH_CBT, ...)- Exported
CBTProcinside the DLL
- Auto‑injection into all running processes
- Press ESC to stop the script and unload the hook
- Works with:
- AutoHotkey.exe (if script not compiled)
- Your compiled EXE name (if compiled)
The AutoHotkey script loads a DLL that:
- Installs a CBT hook using
SetWindowsHookEx - Injects itself into all running processes
- Hooks internal APIs responsible for enumerating processes
- Filters out the target process name
- Prevents the Task Manager from displaying it
This project is intended for research, debugging, and reverse‑engineering education.
It must not be used for malicious purposes.
This project is licensed under the MIT License.
