Download Process Explorer

Process Explorer shows you information about which handles and DLLs processes have opened or loaded.

  • Windows 17.2
  • Free to download
  • Proprietary

Windows 17.2

ArchitectureFormatScopeSHA-256Download
x64 (64-bit) ZIPin Portable — dab147316264b89ae46ae2ad7d8a94116848ef0b703bcac8de9ff22689ce9d51 Download
ARM64 ZIPin Portable — dab147316264b89ae46ae2ad7d8a94116848ef0b703bcac8de9ff22689ce9d51 Download
x86 (32-bit) ZIPin Portable — dab147316264b89ae46ae2ad7d8a94116848ef0b703bcac8de9ff22689ce9d51 Download

Install with winget: winget install --id Microsoft.Sysinternals.ProcessExplorer --exact

Check a download: Get-FileHash .\<file> -Algorithm SHA256 (PowerShell) and compare it with the SHA-256 above.

What the installer does

Windows

  • Delivered as a ZIP archive that is unpacked containing a portable program that runs without being installed for x64, x86, and ARM64.
  • The manifest does not state an install scope.
  • Declared install modes: interactive, silent, and silentWithProgress.
  • Adds the command-line command procexp.
  • Upgrades remove the previous version first.

Overview

Ever wondered which program has a particular file or directory open? Now you can find out. Process Explorer shows you information about which handles and DLLs processes have opened or loaded.

The Process Explorer display consists of two sub-windows. The top window always shows a list of the currently active processes, including the names of their owning accounts, whereas the information displayed in the bottom window depends on the mode that Process Explorer is in: if it is in handle mode you'll see the handles that the process selected in the top window has opened; if Process Explorer is in DLL mode you'll see the DLLs and memory-mapped files that the process has loaded. Process Explorer also has a powerful search capability that will quickly show you which processes have particular handles opened or DLLs loaded.

The unique capabilities of Process Explorer make it useful for tracking down DLL-version problems or handle leaks, and provide insight into the way Windows and applications work.

Details

Publisher
Sysinternals
Latest version
Windows 17.2
Released
2026-10-15
Platforms
Windows
License
Proprietary
Price
Free to download (may offer paid tiers) curated by hand
Copyright
Copyright © 1996-2026 Mark Russinovich
Tags
diagnostics dll handle process process-explorer sysinternals system-monitoring task-manager thread windows
winget ID
Microsoft.Sysinternals.ProcessExplorer
winget moniker
procexp

Official links

Verification & provenance

Level 0. Hashes copied from upstream package manifests (winget-pkgs, Homebrew cask). Not independently re-computed; signatures not checked.
Hash re-computed by everyversion.netNot yet
Code signature checkedNot yet
Publisher / domain / certificate change monitoringNot yet
Windows: sourcemicrosoft/winget-pkgs
Windows: SHA-256 in upstream manifestYes
Windows: observed at commit21e6be824c55 · retrieved 2026-11-04

All Process Explorer versions

Windows versions

1 version listed. Open a version for its installers, checksums and a command that pins it.

17.2 latest2026-10-15 · 3 installers
ArchitectureFormatScopeSHA-256Download
x64 (64-bit) ZIPin Portable — dab147316264b89ae46ae2ad7d8a94116848ef0b703bcac8de9ff22689ce9d51 Download
ARM64 ZIPin Portable — dab147316264b89ae46ae2ad7d8a94116848ef0b703bcac8de9ff22689ce9d51 Download
x86 (32-bit) ZIPin Portable — dab147316264b89ae46ae2ad7d8a94116848ef0b703bcac8de9ff22689ce9d51 Download

Pin this version: winget install --id Microsoft.Sysinternals.ProcessExplorer --version 17.2 --exact

Manifest: manifests/m/Microsoft/Sysinternals/ProcessExplorer/17.2