Process Explorer v16.0

[sid_16]

Introduction
Ever wondered which program has a particular file or directory open? Now you can find out. Process Explorer shows you information about which handles and DLLs processes have opened or loaded.

The Process Explorer display consists of two sub-windows. The top window always shows a list of the currently active processes, including the names of their owning accounts, whereas the information displayed in the bottom window depends on the mode that Process Explorer is in: if it is in handle mode you'll see the handles that the process selected in the top window has opened; if Process Explorer is in DLL mode you'll see the DLLs and memory-mapped files that the process has loaded. Process Explorer also has a powerful search capability that will quickly show you which processes have particular handles opened or DLLs loaded.

The unique capabilities of Process Explorer make it useful for tracking down DLL-version problems or handle leaks, and provide insight into the way Windows and applications work.

Related Links

• Windows Internals Book
  The official updates and errata page for the definitive book on Windows internals, by Mark Russinovich and David Solomon.
• Windows Sysinternals Administrator's Reference
  The official guide to the Sysinternals utilities by Mark Russinovich and Aaron Margosis, including descriptions of all the tools, their features, how to use them for troubleshooting, and example real-world cases of their use.

Download

​

Download Process Explorer

Published: January 29, 2014

SOURCE- http://technet.microsoft.com/en-us/sysinternals/bb896653.aspx

 

[Exterminator]

Process Explorer 16.0 now brings VirusTotal support to the program.

You can check a process with VirusTotal from process explorer in one of 2 ways.

Right click the process and form the context menu select check virustotal

Options...virustotal.com....check virustotal instead

You can enable sending of unknown executables by going to options then virustotal.com.By doing this all unknown files are automatically sent to virustotal.com where they are scanned

 

[sid_16]

Updates: Process Explorer v16.01, Sigcheck v2.02
Updates: Process Explorer v16.01, Sigcheck v2.02

Process Explorer v16.0: This release fixes a bug that could cause a crash when the VirusTotal column is added to the process view, and another that could cause a crash when verifying digital signatures.

Sigcheck 2.02: This release fixes a bug that caused the –u switch to filter results incorrectly.


Process Explorer, Sigcheck