Process Management
CyberManager provides a high-performance virtualized process grid with search, grouping, and process control.
Process Grid
Virtualization
The process grid uses UI virtualization:
- Only visible rows are rendered
- Handles 3000+ processes at 144fps
- Zero lag scrolling and refreshing
- Recycling mode for memory efficiency
Columns
| Column |
Description |
| Name |
Process name |
| PID |
Process identifier |
| CPU |
CPU usage percentage |
| RAM |
Memory usage |
| Path |
Executable file path |
| Status |
Running / Suspended |
Real-Time Refresh
- Configurable refresh interval (default: 800ms)
- Delta-based CPU calculation
- Differential snapshots for instant updates
Search and Filter
Instant Search
Type to filter processes:
| Filter |
Description |
| Name |
Filter by process name |
| PID |
Filter by process ID |
| Path |
Filter by executable path |
Search Features
- Zero blocking with debounced input (150ms)
- Case-insensitive matching
- Instant results as you type
Process Grouping
Group by Application
Processes are grouped by application:
- Expandable tree hierarchy
- Child processes nested under parent
- Toggle grouping on/off in Settings
Group Headers
| Info |
Description |
| App name |
Application display name |
| Process count |
Number of child processes |
| Total CPU |
Combined CPU usage |
| Total RAM |
Combined memory usage |
Process Control
Actions
| Action |
Description |
| End task |
Terminate the process |
| End tree |
Terminate process and all children |
| Suspend |
Pause process execution |
| Resume |
Resume suspended process |
| Set priority |
Change process priority |
Priority Levels
| Level |
Description |
| Real Time |
Highest priority (system may become unstable) |
| High |
Above normal priority |
| Above Normal |
Slightly elevated |
| Normal |
Default priority |
| Below Normal |
Slightly reduced |
| Idle |
Only when system is idle |
Confirmation
- Confirmation dialogs for dangerous operations
- Elevation check before priority changes
- Clear warnings for system processes
NT-Native Engine
How It Works
CyberManager uses direct NT API calls for all process operations:
| API |
Purpose |
NtQuerySystemInformation |
Fast process enumeration (all PIDs in one call) |
NtQueryInformationProcess |
Parent PID resolution, thread count |
QueryFullProcessImageName |
Executable path extraction |
NtSuspendProcess |
Process suspension |
NtResumeProcess |
Process resumption |
GetProcessMemoryInfo |
Working set and page fault counts |
Performance
- Async process collection on thread pool
HashSet<int> for O(1) dead PID cleanupStringComparison.OrdinalIgnoreCase to reduce allocations- Differential snapshots minimize CPU overhead
- Zero WMI or Performance Counter dependency
Icon Extraction
SHGetFileInfo for high-quality file iconsQueryFullProcessImageName fallback for path-based icons- Deduplicated icon cache per executable path