Windows Tutorials - Herong's Tutorial Examples - Version 5.62, by Dr. Herong Yang
Showing All DLL Files Used by Each Process
This section provides a tutorial example on how to use command 'tasklist' to show all DLL module files used by each running process with the module option '/M'.
The "tasklist" command does also have another useful feature - Showing all DLL module files used by each running process. The DLL module file usage information is useful to answer some common administration questions like:
To get a list of DLL module files used by each process, you can run the "tasklist" command with the module option "/M". An example result is included below:
C:\herong>tasklist /M Image Name Modules ========================= =========================================== System Idle Process N/A System N/A smss.exe ntdll.dll csrss.exe ntdll.dll, CSRSRV.dll, basesrv.dll, winsrv.dll, GDI32.dll, KERNEL32.dll, USER32.dll, LPK.DLL, USP10.dll, msvcrt.dll, ADVAPI32.dll, RPCRT4.dll, sxs.dll, Apphelp.dll, VERSION.dll winlogon.exe ntdll.dll, kernel32.dll, ADVAPI32.dll, RPCRT4.dll, AUTHZ.dll, msvcrt.dll, CRYPT32.dll, USER32.dll, GDI32.dll, MSASN1.dll, NDdeApi.dll, PROFMAP.dll, NETAPI32.dll, USERENV.dll, PSAPI.DLL, REGAPI.dll, Secur32.dll, SETUPAPI.dll, VERSION.dll, WINSTA.dll, WINTRUST.dll, IMAGEHLP.dll, WS2_32.dll, WS2HELP.dll, IMM32.DLL, LPK.DLL, USP10.dll, MSGINA.dll, SHELL32.dll, SHLWAPI.dll, COMCTL32.dll, ODBC32.dll, comdlg32.dll, comctl32.dll, odbcint.dll, SHSVCS.dll, sfc.dll, sfc_os.dll, ole32.dll, Apphelp.dll, msctfime.ime, WINSCARD.DLL, WTSAPI32.dll, sxs.dll, uxtheme.dll, WINMM.dll, Ati2evxx.dll, cscdll.dll, WlNotify.dll, WINSPOOL.DRV, MPR.dll, rsaenh.dll, WgaLogon.dll, OLEAUT32.dll, NTMARTA.DLL, WLDAP32.dll, SAMLIB.dll, CLBCATQ.DLL, COMRes.dll, msv1_0.dll, iphlpapi.dll, cscui.dll, xpsp2res.dll, wdmaud.drv, msacm32.drv, MSACM32.dll, midimap.dll, wbemprox.dll, wbemcomn.dll, wbemsvc.dll, fastprox.dll, MSVCP60.dll, NTDSAPI.dll, DNSAPI.dll, msxml3.dll, wsock32.dll, icmp.dll, MPRAPI.dll, ACTIVEDS.dll, adsldpc.dll, ATL.DLL, rtutils.dll, mswsock.dll, hnetcfg.dll, wshtcpip.dll, kerberos.dll, cryptdll.dll, Cabinet.dll services.exe ntdll.dll, kernel32.dll, msvcrt.dll, ADVAPI32.dll, RPCRT4.dll, USER32.dll, GDI32.dll, USERENV.dll, SCESRV.dll, AUTHZ.dll, umpnpmgr.dll, WINSTA.dll, NETAPI32.dll, NCObjAPI.DLL, MSVCP60.dll, ShimEng.dll, AcGenral.DLL, WINMM.dll, ole32.dll, OLEAUT32.dll, MSACM32.dll, VERSION.dll, SHELL32.dll, SHLWAPI.dll, UxTheme.dll, IMM32.DLL, LPK.DLL, USP10.dll, comctl32.dll, comctl32.dll, secur32.dll, Apphelp.dll, eventlog.dll, WS2_32.dll, WS2HELP.dll, PSAPI.DLL, wtsapi32.dll, ESENT.dll, SETUPAPI.dll, Cabinet.dll, SAMLIB.dll ...
The result is a surprise for me. Look at how many DLL files are used by "winlogon.exe", 88 of them!.
Table of Contents