Process Explorer 进程资源管理器

进程资源管理器 - Sysinternals | Microsoft Learn https://learn.microsoft.com/zh-cn/sysinternals/downloads/process-explorer

Process Explorer - Sysinternals | Microsoft Learn https://learn.microsoft.com/en-us/sysinternals/downloads/process-explorer

Introduction

Ever wondered which program has a particular file or directory open? Now you can find out. Process Explorer shows you information about which handles and DLLs processes have opened or loaded.

The Process Explorer display consists of two sub-windows. The top window always shows a list of the currently active processes, including the names of their owning accounts, whereas the information displayed in the bottom window depends on the mode that Process Explorer is in: if it is in handle mode you'll see the handles that the process selected in the top window has opened; if Process Explorer is in DLL mode you'll see the DLLs and memory-mapped files that the process has loaded. Process Explorer also has a powerful search capability that will quickly show you which processes have particular handles opened or DLLs loaded.

The unique capabilities of Process Explorer make it useful for tracking down DLL-version problems or handle leaks, and provide insight into the way Windows and applications work.

简介

曾经想知道哪个程序打开了特定的文件或目录？现在你可以找到。 进程资源管理器 显示有关哪些句柄和 DLL 进程已打开或加载的信息。

进程资源管理器显示由两个子窗口组成。顶部窗口始终显示当前活动进程的列表，包括其拥有的帐户的名称，而底部窗口中显示的信息取决于 进程资源管理器 所处于的模式：如果它处于句柄模式，你将看到进程在顶部窗口中选择的句柄已打开;如果 进程资源管理器 处于 DLL 模式，你将看到进程已加载的 DLL 和内存映射文件。 进程资源管理器 还具有强大的搜索功能，可快速显示哪些进程打开了特定句柄或加载了 DLL。

进程资源管理器的独特功能可用于跟踪 DLL 版本问题或处理泄漏，并深入了解 Windows 和应用程序的工作方式。

Windows 内部书籍由马克·鲁西诺维奇和大卫·所罗门撰写的关于 Windows 内部的权威书籍的官方更新和勘误表页面。
Windows Sysinternals 管理员参考 Mark Russinovich 和 Aaron Margosis 提供的 Sysinternals 实用工具的官方指南，包括所有工具的说明、其功能、如何使用这些工具进行故障排除，以及使用它们的示例真实案例。