What it does
Process Explorer displays Windows processes, owning accounts, open handles and loaded DLLs with search tools for investigation.
Process Explorer helps answer which process has a file open or has loaded a particular DLL. Its handle and DLL views provide different ways to investigate the selected process. Begin with a concrete path or process question rather than treating every unfamiliar process as malicious. Preserve useful details before making a change. The tool is also used for ordinary troubleshooting, which is why the surrounding account, path and application context matters in a defensive investigation.
Strengths
- Searchable process, handle and DLL relationships
Best for
- Windows defenders investigating a particular process or file
Sources
- Process Explorer - Sysinternals | Microsoft Learn (Oct 26, 2026)