Process Management

Process Management

CyberManager provides a high-performance virtualized process grid with search, grouping, and process control.

---

Process Grid

Virtualization

The process grid uses UI virtualization:

• Only visible rows are rendered
• Icons load through a bounded background cache and update individual images without refreshing the entire grid
• Scrollbar arrows animate pixel movement to reduce row flicker in Full and Compact modes; wheel, keyboard, and thumb input interrupt that animation immediately
• Recycling mode for memory efficiency

Columns

Newly spawned processes appear with a soft animated emerald fade highlight, while terminating processes announce their exit state with a crimson fade highlight. Suspended processes appear with reduced opacity.

Column Visibility

• Right-click any column header to open a checklist of columns
• Right-clicking the empty strip after the last header opens the same menu
• Hidden columns are remembered across restarts
• The last visible column cannot be hidden, so the grid never ends up empty

Sorting

• Click a column header to sort; click again to reverse the direction
• The Process column sorts by the friendly name shown, case-insensitively
• The sorted column and direction are remembered across restarts

Real-Time Refresh

• Configurable refresh interval (default: 800ms)
• Delta-based CPU calculation
• Differential snapshots for instant updates
• Pause detection (Ctrl+P) freezes the process list snapshot while system gauges, totals, and sparklines keep updating

---

Search and Filter

Instant Search

Type to filter processes:

Category Filter

Filter the list by process role:

• All — Full process overview
• Apps — User-interactive desktop applications
• Background — Background services and helper processes
• Windows — Core Windows operating system processes

Available via chip buttons in Full mode and through a dedicated dropdown in Compact mode.

Search Features

• Zero blocking with debounced input (150ms)
• Case-insensitive matching
• Instant results as you type
• Persistent history of the 10 most recent non-empty searches

Heavy Process Filter

• Shows the 10 processes with the highest combined normalized CPU and RAM usage
• Works in Full and Compact modes
• Respects process grouping and updates as live metrics change

Hide System Processes

• A toggle in the footer and in Settings filters out Windows system processes
• System processes are kernel tasks, driver images with no executable path, and anything running from the Windows directory
• The desktop shell (explorer.exe) stays visible, because it is also a usable window
• Disabled by default

Selecting Several Processes

The grid supports Windows Explorer style selection:

The action bar shows the selection count and an End selected button, and Delete ends the whole batch after a single confirmation. When a group parent is selected, the batch expands to all of its instances. Actions that only apply to one process are disabled while a batch is selected.

---

Process Grouping

Group by Application

Processes are grouped by application:

• Expandable tree hierarchy
• Child processes nested under parent
• Toggle grouping on/off in Settings

Group Headers

---

Process Control

Actions

Run New Task

To open a separate program or resource, use Run New Task. This action is independent of the process selection, supports arguments and optional administrator privileges, and keeps the last 20 successful open requests.

Restart

Restarting starts the replacement process first and terminates the original only once the relaunch succeeds, so a failed relaunch never leaves you without the app. Packaged apps (UWP / Microsoft Store) are refused with a clear message, because they cannot be relaunched by executing their image from the protected WindowsApps folder.

Priority Levels

Confirmation

• Confirmation dialogs for dangerous operations
• A batch end asks once and reports the total number of instances
• Closing the window asks whether to minimize to the notification area or exit, with an option to remember the decision
• Elevation check before priority changes
• Clear warnings for system processes

---

NT-Native Engine

How It Works

CyberManager uses direct NT API calls for all process operations:

Performance

• Async process collection on thread pool
• HashSet<int> for O(1) dead PID cleanup
• StringComparison.OrdinalIgnoreCase to reduce allocations
• Differential snapshots minimize CPU overhead
• Zero WMI or Performance Counter dependency

Icon Extraction

• SHGetFileInfo for high-quality file icons
• QueryFullProcessImageName fallback for path-based icons
• Deduplicated icon cache per executable path