What it does
System Informer is a Windows inspection tool for processes, system resources, file handles and network activity, including malware-investigation use cases.
System Informer can connect a busy process with the resources or network activity it owns. Its official page also describes finding which process holds a file handle. That makes it useful during an authorized investigation of unexpected desktop behavior. Observe before terminating a process or closing a handle. The project warns that forced handle closure can cause data loss or corruption. Such actions change the system being investigated and should be deliberate rather than a reflex to an unfamiliar name.
Strengths
- Process, handle and network context in one application
Watch out for
- Forcibly closing handles can cause data loss or corruption
Best for
- Windows defenders investigating unexpected process behavior
Sources
- System Informer (Oct 26, 2026)