Difference between revisions of "Process Explorer"
Jump to navigation
Jump to search
m (fixed capitalization. next up: References and external links) |
(added a little more info) |
||
| Line 1: | Line 1: | ||
| − | '''Process Explorer''' is a [[Microsoft]] program which offers the same features as [[Task Manager]], but much more as well. It gives the user access to detailed information about all the processes which are running on the local [[computer]]. It also gives access to other information, including startup entries, [[Dynamic Link Library|Dynamic Link Libraries]], and more. | + | '''Process Explorer''' is a [[Microsoft]] program which offers the same features as [[Task Manager]], but much more as well. It gives the user access to detailed information about all the processes which are running on the local [[computer]]. It also gives access to other information, including startup entries, [[Dynamic Link Library|Dynamic Link Libraries]], and more.<ref name="Mircosoft Technet">https://technet.microsoft.com/en-us/sysinternals/bb896653.aspx</ref> |
==Features== | ==Features== | ||
| Line 27: | Line 27: | ||
*Virtualized (yes/no) | *Virtualized (yes/no) | ||
*ASLR Enabled (yes/no) | *ASLR Enabled (yes/no) | ||
| − | *UI Access | + | *UI Access<br /> |
| − | Additional properties can be viewed at the press of a button. | + | |
| + | Additional properties can be viewed at the press of a button. This program offers a DLL mode, that reveals to the user which DLLs and memory-mapped files loaded by each process. Also, it provides a search function, so DLLs can be searched to a process.<ref name="Mircosoft Technet">https://technet.microsoft.com/en-us/sysinternals/bb896653.aspx</ref> | ||
Revision as of 02:45, January 9, 2016
Process Explorer is a Microsoft program which offers the same features as Task Manager, but much more as well. It gives the user access to detailed information about all the processes which are running on the local computer. It also gives access to other information, including startup entries, Dynamic Link Libraries, and more.[1]
Features
Process list with the following information in column form
- Process Name
- Process Identification Number
- User Name
- Description
- Company Name
- Verified Signer
- Version
- Image Path (file path of source file)
- Window Title
- Window Status
- Session
- Command Line
- Comment
- Autostart Location
- Virus Total Rating
- DEP Status
...and on some operating systems,
- Image Type (64 vs 32-bit)
- Package Name
- DPI Awareness
- Protection
- Integrity Level
- Virtualized (yes/no)
- ASLR Enabled (yes/no)
- UI Access
Additional properties can be viewed at the press of a button. This program offers a DLL mode, that reveals to the user which DLLs and memory-mapped files loaded by each process. Also, it provides a search function, so DLLs can be searched to a process.[1]