Process Explorer

Process Explorer aka procexp, is a amazingly helpful little peace of standalone code. There have been so many scenarios that I would not have survived without it but now that I need to blog about it I realise theirs just to much to cover all of it without making it look like a one dimensional tool.

So I will just cover the basics, read more at:
http://technet.microsoft.com/en-us/sysinternals/bb896653.aspx


Introduction

Process Explorer shows you information about which handles and DLLs processes have opened or loaded.

Its display consists of two sub-windows.
The top window always shows a list of the currently active processes, including the names of their owning accounts, whereas the information displayed in the bottom window depends on the mode that Process Explorer is in.

If it is in handle mode,
you'll see the handles that the process selected in the top window has opened.

If it is in DLL mode,
you'll see the DLLs and memory-mapped files that the process has loaded. 

Process Explorer has everything from a powerful search capability that will quickly show you which processes have particular handles opened or DLLs loaded to the useful unique capabilities such as tracking down DLL-version problems or handle leaks, and provide insight into the way Windows and applications work.

Ever wondered which program has a particular file or directory open or what sits behind a particular window or application? With Process Explorer you can now find out.

Download

Run Process Explorer now from Live.Sysinternals.com

Runs on:
Client: Windows XP and higher (Including IA64).
Server: Windows Server 2003 and higher (Including IA64).


Installation

Simply run Process Explorer (procexp.exe).

The help file describes Process Explorer operation and usage. If you have problems or questions please visit the Sysinternals Process Explorer Forum.