The Process Explorer display consists of two sub windows. The top window always shows a list of the currently active processes, including the names of their owning accounts, whereas the information displayed in the bottom window depends on the mode that Process Explorer is in: if it is in handle mode you'll see the handles that the process selected in the top window has opened; if Process Explorer is in DLL mode you'll see the DLLs and memory mapped files that the process has loaded. Process Explorer also has a powerful search capability that will quickly show you which processes have particular handles opened or DLLs loaded.
The unique capabilities of Process Explorer make it useful for tracking down DLL version problems or handle leaks, and provide insight into the way Windows and applications work.
Process Explorer works on Windows 9x/Me, Windows NT 4.0, Windows 2000, Windows XP, Server 2003, and 64 bit versions of Windows for x64 processors, and Windows Vista.
- New treelist control for better UI responsiveness
- Asynchronous thread symbol resolution on threads tab of process properties
- More flags on groups in security tab and SID display
- Thread IDs on threads tab
- On line search uses default web browser and search engine
- Vista ASLR column for processes and DLLs
- Vista Process and thread I/O and memory priorities in process and thread properties
- Vista Process and thread I/O and memory columns
- PROCESSQUERYLIMITED_INFORMATION support on process permissions on Vista
- Run as limited user runs with low IL on Vista
- Reports information for all object types on Vista
- Show details for all processes elevation menu item on Vista
- Supports replacement of task manager on Vista
- /e to launch elevated
- /s switch to select a process at startup
- Compiled w/ASLR, DEP
- Faster startup
- Miscellaneous bug fixes and minor improvements