# Process Explorer

Application: Microsoft Corporation

Also called procexp, procexp64, sysinternals process explorer

Microsoft Corporation, System

A Sysinternals Task Manager replacement. Microsoft hosts it now. The 64-bit process is procexp64.exe. It is not Task Manager.

## What you need to know

Process Explorer is the Sysinternals tree. It is not Task Manager.

Microsoft hosts Process Explorer as a Sysinternals tool. procexp64.exe is a deeper live process view than taskmgr.exe. Get it from Microsoft Learn. Process Monitor is the logger, not this window.

- **What is it?**: A Sysinternals Task Manager replacement

  **Same as Task Manager?**: No. Deeper tree, handles, and DLLs

  **Same as Process Monitor?**: No. Procmon is a trace log

Feex says

If Task Manager only shows a name, I would open Process Explorer for the parent and the handle. I would not start Process Monitor until I needed a trace log.

## What is Process Explorer?

Process Explorer is a live process tree. procexp64.exe is the usual 64-bit window. Task Manager is taskmgr.exe. Process Monitor is a different Sysinternals logger named Procmon64.exe.

## If you have never used it

If Task Manager is not enough, Process Explorer is the Sysinternals tree Mark Russinovich wrote. Microsoft hosts it now. Download it from learn.microsoft.com. It shows parent processes, handles, and DLLs. It is not Task Manager, not Process Monitor, and not a Windows component you uninstall from Settings.

## What is it used for?

**See the process tree and parent**

That tree is why people replace Task Manager. taskmgr.exe does not show the same parent view by default.

**Inspect handles and DLLs**

Find which process holds a file. Process Monitor records a timeline. This window is the live tree.

**Replace Task Manager (optional)**

Options can swap Ctrl+Shift+Esc. That is a Process Explorer setting, not a Windows default.

## Who is it for?

- People who need the parent of a mystery exe
- Technicians hunting a locked file's owner
- Anyone who should still keep Task Manager for a quick look

## Current status

Process Explorer (1997) is a current process inspector from Microsoft Corporation. The vendor still points Windows users at https://learn.microsoft.com/sysinternals/downloads/process-explorer.

## How old is it?

Process Explorer started in 1997 at Winternals / Sysinternals. Microsoft bought Sysinternals in 2006 and still publishes the tool. It is not the Task Manager redesign from Windows 8 or Windows 11.

## Versions

Major channels first. Exact build numbers are not all verified here.

procexp64.exe

Sysinternals Suite zip

## System requirements

Values follow the publisher's public guidance. Workload still changes the real need.

### Minimum

| Operating system | A current supported Windows 10 or Windows 11 release, per Microsoft Sysinternals |
| ---------------- | -------------------------------------------------------------------------------- |
| RAM              | Enough for Windows plus this app. Heavy projects want more.                      |

## Resource profile

- **CPU demand**: Low unless you refresh very fast

  **RAM demand**: Grows with the number of processes and open handle view

## Installed processes

These executables belong to this product when it is installed.

| procexp64.exe | Process tree window                   |
| ------------- | ------------------------------------- |
| procexp.exe   | Launcher that starts the 64-bit build |

## Startup components

Process Explorer can start at logon from its Options menu if you replace Task Manager. That is optional.

## File locations

| Typical install | Wherever you unpacked Sysinternals. Often C:\Sysinternals\ or Downloads\\ |
| --------------- | ------------------------------------------------------------------------- |

## File formats

It inspects running processes. It is not an archive tool

## Common problems

### People close Task Manager and think they uninstalled it

Process Explorer is a separate download. taskmgr.exe stays in System32.

### Handle view used when they needed a trace

A locked file right now is Process Explorer. A "who created this file at 3pm" question is Process Monitor.

## Getting unstuck

### Download from Microsoft Learn Sysinternals, not a "procexp crack"

The real zip is small and signed. Task Manager is already on the PC if you only needed the in-box list.

### Run as administrator if handles are empty

Many handles hide without elevation. That is Process Explorer, not a Task Manager setting.

### Use Find > Handle or DLL for a locked path

Type the file name. LockHunter is another locker tool. Process Monitor is the timeline if the lock already closed.

## Alternatives

Task Manager for a quick look. Process Monitor for a log. LockHunter if the only job is a locked file.

## Official help and downloads

Start with the vendor. Random exe sites are not a support channel.

| Download      | [learn.microsoft.com/sysinternals/downloads/process-explorer ](https://learn.microsoft.com/sysinternals/downloads/process-explorer)Official installer or vendor page |
| ------------- | -------------------------------------------------------------------------------------------------------------------------------------------------------------------- |
| Help          | [learn.microsoft.com/sysinternals/ ](https://learn.microsoft.com/sysinternals/)Vendor support                                                                        |
| Official site | [learn.microsoft.com/sysinternals/downloads/process-explorer ](https://learn.microsoft.com/sysinternals/downloads/process-explorer)Start here, not a random exe host |

## Related hardware

The tree reads process metadata. It is not a GPU bench and it does not add Feex sensors.

## Technical details

Technical details

Vendor version numbers change. This article does not pin a build.

## Related

These entities connect to this article. Type is shown on every link.

[Sysinternals Suite: Application](https://feex.it/wiki/software/sysinternals)[Process Monitor: Application](https://feex.it/wiki/software/process-monitor)[How to read Task Manager: Guide](https://feex.it/wiki/software/system/how-to-read-task-manager)

## Sources and verification

Reviewed by Feex editorial. Last verified August 2026 Status: Feex Reviewed. [How we research](https://feex.it/wiki/research).

- [Process Explorer official site ](https://learn.microsoft.com/sysinternals/downloads/process-explorer)· Vendor product page
- [Process Explorer help ](https://learn.microsoft.com/sysinternals/)· Vendor support
- [Sysinternals Process Explorer ](https://learn.microsoft.com/sysinternals/downloads/process-explorer)· What Microsoft documents
- [Foxhole process map ](https://foxhole.feex.it/)· First-party samples on Windows PCs. Not a lab benchmark.

## Was this article useful?

A yes or no is enough. Pick a reason if you want, or add a short note.

Quick facts

The short identity of this page. Specs, sources, and the full story stay in the article.

- **Developer**: Microsoft Corporation

  **Category**: Process inspector

  **Process**: procexp64.exe

  **License**: Freeware from Microsoft Sysinternals

  **First released**: 1997

  **Official site**: [learn.microsoft.com/sysinternals/process-explorer](https://learn.microsoft.com/sysinternals/downloads/process-explorer)

  **Mapped by Feex**: Seen on Windows PCs in Foxhole

Feex Reviewed: Last verified August 2026

---

Source: [Canonical Feex Wiki page](https://feex.it/wiki/software/process-explorer/)

[Developer guide](https://feex.it/wiki/developers/) | [API policy](https://feex.it/developers/api-policy/) | [Agent guidance](https://feex.it/wiki/llms.txt)
