Forrest logo
back to the tasklist tool

tasklist:tldr:f5df9

tasklist: Display running processes using the specified `.exe` or `.dll` file name.
$ tasklist /m ${module_pattern}
try on your machine

This command is used in the Windows operating system to display a list of currently running processes along with the dynamic-link libraries (DLLs) that are loaded by each process that matches the specified module pattern.

Here is a breakdown of the command:

  • tasklist: It is the main command used to display the list of currently running processes and their associated information.

  • /m: This is an option or switch used with the tasklist command. It specifies that the following module pattern should be used to filter the displayed processes.

  • ${module_pattern}: This is a placeholder for the actual module pattern that you would specify. The module pattern is a string used to match the names of the DLL modules loaded by processes. You can use wildcard characters (* and ?) in the module pattern to match multiple modules.

So, when you run the command "tasklist /m ${module_pattern}", it will list all running processes that have DLL modules loaded matching the specified module pattern. For example, if you run "tasklist /m kernel32*", it will display all running processes that have DLL modules starting with "kernel32".

This explanation was created by an AI. In most cases those are correct. But please always be careful and never run a command you are not sure if it is safe.
back to the tasklist tool