Windows · Windows Utilities
Process Explorer for Windows
Sysinternals process-monitoring tool from Microsoft that shows detailed process trees, handles, DLLs, and resource usage far beyond Task Manager.
Updated August 9, 2026 · Reviewed by SoftNexi Editorial Team, Software research and documentation
Overview
Process Explorer is a Sysinternals utility, published by Microsoft on Microsoft Learn, that functions as a far more detailed version of Task Manager. It displays running processes in a tree view that shows exactly which process launched which, along with the handles and DLLs each process has loaded, live CPU/memory graphs, and digital signature verification for executables.
Like Autoruns and Process Monitor, it is distributed as a portable, no-install tool: download the ZIP, extract it, and run the executable, with no installer and no persistent system footprint left behind.
It is especially useful for identifying which process is holding a file or handle open, spotting unsigned or suspicious processes, and understanding the parent-child relationships between processes when Task Manager's flat list is not enough to diagnose a problem.
It suits IT professionals, developers, and advanced users troubleshooting performance issues or investigating unfamiliar processes, rather than everyday users who need only Task Manager's basics.
Key features
- Process tree view showing parent-child launch relationships
- Lists handles and DLLs loaded by each process
- Live CPU, memory, and I/O graphs per process
- Digital signature verification for running executables
- Can replace Task Manager as the default task manager
- Search for which process has a specific file or handle open
System requirements
- Operating system
- Windows 11 and Windows 10 (also supports older Windows releases)
- Distribution
- Portable, no-install ZIP download from Microsoft Learn's Sysinternals pages
- Permissions
- Administrator rights recommended for full visibility into all processes
How to install Process Explorer
1. Download from Microsoft Learn
Open the Process Explorer page on learn.microsoft.com/sysinternals and download the ZIP archive.
2. Extract the ZIP
Unzip to a folder of your choice; no installer runs.
3. Run as administrator
Right-click procexp64.exe (or procexp.exe) and choose Run as administrator for full process visibility.
How to use it
1. Find what's using a file
Use Find > Find Handle or DLL to search for which process has a specific file, folder, or DLL open — useful when Windows says a file is in use.
2. Inspect a process tree
Expand the tree view to see which process launched a given process, helpful for spotting unexpected parent processes.
3. Check a process's signature
Add the Verified Signer column to quickly spot unsigned processes worth investigating further.
4. Replace Task Manager
In Options, choose Replace Task Manager so Process Explorer opens whenever you invoke Task Manager's usual shortcuts.
Safety and privacy
- We link only to Microsoft Learn's official Sysinternals page, the authoritative source for this tool.
- As a portable, no-install tool, it leaves no persistent installation once you delete the extracted files.
- Bundled software
- None; distributed directly by Microsoft with no third-party bundling.
- Privacy
- Runs entirely locally; no account or telemetry beyond standard Windows update behavior for the download page itself.
Known risks
- Terminating an unfamiliar process, especially a system process, can cause instability — verify what a process is before ending it.
What's new
Current Sysinternals release
Microsoft updates Sysinternals tools periodically. Check the Process Explorer page on Microsoft Learn for the current version and release history.
Pros and cons
Pros
- Far more detailed than Task Manager for processes, handles, and DLLs
- Free, official, and maintained by Microsoft
- Portable — no installation required
- Can fully replace Task Manager if desired
Cons
- Dense interface aimed at technical users
- Some features require administrator rights
- Not necessary for users who only need basic Task Manager functions
Verdict
Process Explorer is the go-to free tool when Task Manager's information is not enough — for finding what has a file locked, checking process signatures, or understanding process trees. It is a Sysinternals staple for good reason.
Frequently asked questions
Is Process Explorer free?
Yes, it is a free Microsoft Sysinternals tool.
Do I need to install Process Explorer?
No, it is a portable ZIP download; extract and run the executable directly.
Can Process Explorer replace Task Manager?
Yes, an option in its Options menu lets it open automatically whenever Task Manager is normally invoked.