Process Explorer

Sysinternals · Microsoft.Sysinternals.ProcessExplorer

Process Explorer shows you information about which handles and DLLs processes have opened or loaded.

Ever wondered which program has a particular file or directory open? Now you can find out. Process Explorer shows you information about which handles and DLLs processes have opened or loaded. The Process Explorer display consists of two sub-windows. The top window always shows a list of the currently active processes, including the names of their owning accounts, whereas the information displayed in the bottom window depends on the mode that Process Explorer is in: if it is in handle mode you'll see the handles that the process selected in the top window has opened; if Process Explorer is in DLL mode you'll see the DLLs and memory-mapped files that the process has loaded. Process Explorer also has a powerful search capability that will quickly show you which processes have particular handles opened or DLLs loaded. The unique capabilities of Process Explorer make it useful for tracking down DLL-version problems or handle leaks, and provide insight into the way Windows and applications work.

winget install --id Microsoft.Sysinternals.ProcessExplorer --exact --source winget

Latest 17.11

Installer type: zip

Architecture Scope Download SHA256
x86 Download 7B3498C606413794BADF773D0E00E9B2B1AFAFA82921946DA39B411C2B3710BB
x64 Download 7B3498C606413794BADF773D0E00E9B2B1AFAFA82921946DA39B411C2B3710BB
arm64 Download 7B3498C606413794BADF773D0E00E9B2B1AFAFA82921946DA39B411C2B3710BB

Details

Homepage
https://learn.microsoft.com/en-us/sysinternals/downloads/process-explorer
License
Proprietary
Publisher
Sysinternals
Support
https://learn.microsoft.com/en-us/answers/tags/435/sysinternals
Privacy Policy
https://learn.microsoft.com/en-us/sysinternals/license-terms
Copyright
Copyright © 1996-2026 Mark Russinovich
Moniker
procexp

Tags

diagnosticsdllhandleprocessprocess-explorersysinternalssystem-monitoringtask-managerthreadwindows