Microsoft Process Explorer is an advanced process management utility. It shows you detailed information about a process including its icon, command-line, full image path, memory statistics, user account, security attributes, and more.
When you zoom in on a particular process you can list the DLLs it has loaded or the operating system resource handles it has open.
A search capability enables you to track down a process that has a resource opened. Such as a file, directory or Registry key, or to view the list of processes that have a DLL loaded.
In addition, the program can browse a particular process name in Google, just to make sure it isn't spyware. But it can also provide you with in-depth information on threads, TCP/IP connections, environments, handles (files, registry entires, syncronization objects), and others.
The Microsoft Process Explorer display consists of two sub-windows. The top always shows a list of the currently active processes, including the names of their owning accounts. Whereas the information displayed in the bottom window, which you can close, depends on the mode that Process Explorer is in. If it is in handle mode you will see the handles that the process selected in the top window has opened. If this application is in DLL mode you will see the DLLs and memory-mapped files that the process has loaded.
Microsoft Process Explorer runs on:
- Client: Windows 8.1 and higher
- Server: Windows Server 2012 and higher
What's New in version 16.40:
- This update to Process Explorer, an advanced process, DLL and handle viewing utility, adds process filtering support to the main display and reports process CET (shadow stack) support.
Homepage - https://technet.microsoft.com
Size: 2.53 MB