Which dll’s certain process use


Some times during a troubleshooting analysis we need to know what is in use at that current moment, and what is the version of the dll in use.

From SysInternals Suite we will use pslist and listdlls tools, to get this information.

Run from command prompt pslist.exe tool

c:\SysinternalsSuite\pslist -t
pslist v1.29 - Sysinternals PsList
Copyright (C) 2000-2009 Mark Russinovich
Sysinternals
Process information for %computer%:
Name                             Pid Pri Thd  Hnd      VM      WS    Priv
Idle                               0   0   2    0       0      24       0
  System                           4   8 107  947   25344   20648      92
    smss                         280  11   2   30    4048     816     264
csrss                            388  13   9  895   36508    3528    1396
........Multiple processes that does not interest to this post...........
explorer                        2328   8  31 1076  334668   69360   60524
  firefox                       1488   8  37  518  504512  223264  183908
  cmd                           1968   8   1   88   59324    5788    2428
........Multiple processes that does not interest to this post...........

We will use firefox process for this example, see in red the process
From command prompt run listdlls.exe tool

C:\SysinternalsSuite>Listdlls.exe /?

ListDLLs v2.25 - DLL lister for Win9x/NT
Copyright (C) 1997-2004 Mark Russinovich
Sysinternals - www.sysinternals.com
usage: listdlls [-r] [processname|pid]
usage: listdlls [-r] [-d dllname]
  processname   Dump DLLs loaded by process (partial name accepted)
  pid           Dump DLLs associated with the specified process id
  dllname       Show only processes that have loaded the specified DLL.
  -r            Flag DLLs that relocated because they are not loaded at
                their base address.
H:\SOFTWARE\TOOLS\microsoft\SysinternalsSuite>Listdlls.exe -r 1488
ListDLLs v2.25 - DLL lister for Win9x/NT
Copyright (C) 1997-2004 Mark Russinovich
Sysinternals - www.sysinternals.com
------------------------------------------------------------------------------
firefox.exe pid: 1488
Command line: "C:\Program Files\Mozilla Firefox\firefox.exe"
  Base        Size      Version         Path
  0x003d0000  0xe0000   11.00.0000.4454  C:\Program Files\Mozilla Firefox\firefox.exe
  0x77bd0000  0x13c000  6.01.7601.17725  C:\Windows\SYSTEM32\ntdll.dll
  0x76a40000  0xd4000   6.01.7601.17651  C:\Windows\system32\kernel32.dll
  0x75ec0000  0x4a000   6.01.7601.17651  C:\Windows\system32\KERNELBASE.dll
  0x77a70000  0xc9000   6.01.7601.17514  C:\Windows\system32\USER32.dll
  0x77d40000  0x4e000   6.01.7601.17514  C:\Windows\system32\GDI32.dll
  0x76480000  0xa000    6.01.7600.16385  C:\Windows\system32\LPK.dll
  0x760e0000  0x9d000   1.626.7601.17514  C:\Windows\system32\USP10.dll
  0x77770000  0xac000   7.00.7601.17744  C:\Windows\system32\msvcrt.dll
  0x709b0000  0x9b000   8.00.50727.6195  C:\Windows\WinSxS\x86_microsoft.vc80.
                                         crt_1fc8b3b9a1e18e3b_8.0.50727.6195_
                                         none_d09154e044272b9a\MSVCR80.dll
  0x77d10000  0x1f000   6.01.7601.17514  C:\Windows\system32\IMM32.DLL
  0x761f0000  0xcc000   6.01.7600.16385  C:\Windows\system32\MSCTF.dll
  0x68c60000  0x132000  3.00.0000.53061  C:\PROGRA~1\IMESHA~1\MediaBar\Datamngr\datamngr.dll
  0x75120000  0xd000    6.01.7601.17514  C:\Windows\system32\WTSAPI32.dll
  0x77940000  0xa0000   6.01.7601.17514  C:\Windows\system32\ADVAPI32.dll
  0x76a20000  0x19000   6.01.7600.16385  C:\Windows\SYSTEM32\sechost.dll
  0x76800000  0xa1000   6.01.7601.17514  C:\Windows\system32\RPCRT4.dll
  0x70ec0000  0xeb000   6.01.7601.17514  C:\Windows\system32\dbghelp.dll
  0x6d440000  0x2d000   4.09.0000.0000  C:\Program Files\Mozilla Firefox\nspr4.dll
  0x709a0000  0x7000    6.01.7600.16385  C:\Windows\system32\WSOCK32.dll
  0x764c0000  0x35000   6.01.7601.17514  C:\Windows\system32\WS2_32.dll
  0x761e0000  0x6000    6.01.7600.16385  C:\Windows\system32\NSI.dll
  0x73920000  0x32000   6.01.7601.17514  C:\Windows\system32\WINMM.dll
  0x74c10000  0xd000    11.00.0000.4454  C:\Program Files\Mozilla Firefox\mozglue.dll
  0x74c20000  0x7000    4.09.0000.0000  C:\Program Files\Mozilla Firefox\plc4.dll
  0x740f0000  0x7000    4.09.0000.0000  C:\Program Files\Mozilla Firefox\plds4.dll
  0x74620000  0x6000    11.00.0000.4454  C:\Program Files\Mozilla Firefox\mozalloc.dll
  0x68fb0000  0xc7000   3.07.0007.0001  C:\Program Files\Mozilla Firefox\mozsqlite3.dll
  0x718b0000  0x18000   3.13.0003.0000  C:\Program Files\Mozilla Firefox\nssutil3.dll
  0x6ff90000  0x28000   3.13.0003.0000  C:\Program Files\Mozilla Firefox\softokn3.dll
  0x6d190000  0x9d000   3.13.0003.0000  C:\Program Files\Mozilla Firefox\nss3.dll
  0x6d320000  0x25000   3.13.0003.0000  C:\Program Files\Mozilla Firefox\ssl3.dll
  0x73420000  0x18000   3.13.0003.0000  C:\Program Files\Mozilla Firefox\smime3.dll
  0x65060000  0x1e0000                  C:\Program Files\Mozilla Firefox\mozjs.dll
  0x59710000  0xf69000  11.00.0000.4454  C:\Program Files\Mozilla Firefox\xul.dll
  0x76b20000  0xc4a000  6.01.7601.17755  C:\Windows\system32\SHELL32.dll
  0x77d90000  0x57000   6.01.7601.17514  C:\Windows\system32\SHLWAPI.dll
  0x76500000  0x15c000  6.01.7601.17514  C:\Windows\system32\ole32.dll
  0x75130000  0x9000    6.01.7600.16385  C:\Windows\system32\VERSION.dll
  0x6f970000  0x51000   6.01.7601.17514  C:\Windows\system32\WINSPOOL.DRV
  0x76060000  0x7b000   6.01.7601.17514  C:\Windows\system32\COMDLG32.dll
  0x74c30000  0x19e000  6.10.7601.17514  C:\Windows\WinSxS\x86_microsoft.windows.
                                         common-controls_6595b64144ccf1df_6.0.7601.17514_none
                                         _41e6975e2bd6f2b2\COMCTL32.dll
  0x72fe0000  0x5000    6.01.7600.16385  C:\Windows\system32\MSIMG32.dll
  0x77d30000  0x5000    6.01.7600.16385  C:\Windows\system32\PSAPI.DLL
  0x77b40000  0x8f000   6.01.7601.17676  C:\Windows\system32\OLEAUT32.dll
  0x70910000  0x87000   8.00.50727.6195  C:\Windows\WinSxS\x86_microsoft.vc80.
                                         crt_1fc8b3b9a1e18e3b_8.0.50727.6195_
                                         none_d09154e044272b9a\MSVCP80.dll
  0x74ab0000  0x40000   6.01.7600.16385  C:\Windows\system32\uxtheme.dll
  0x746f0000  0x13000   6.01.7600.16385  C:\Windows\system32\dwmapi.dll
  0x73250000  0x7000    11.00.0000.4454  C:\Program Files\Mozilla Firefox\xpcom.dll
  0x72740000  0x10b000  6.01.7601.17776  C:\Windows\system32\dwrite.dll
  0x75d40000  0xc000    6.01.7600.16385  C:\Windows\system32\CRYPTBASE.dll
  0x76660000  0x19d000  6.01.7601.17514  C:\Windows\system32\SETUPAPI.dll
  0x75e90000  0x27000   6.01.7601.17514  C:\Windows\system32\CFGMGR32.dll
  0x75de0000  0x12000   6.01.7600.16385  C:\Windows\system32\DEVOBJ.dll
  0x779e0000  0x83000   2001.12.8530.16385  C:\Windows\system32\CLBCatQ.DLL
  0x74af0000  0xf5000   7.00.7601.17514  C:\Windows\system32\propsys.dll
  0x744e0000  0x21000   6.01.7600.16385  C:\Windows\system32\ntmarta.dll
  0x769d0000  0x45000   6.01.7601.17514  C:\Windows\system32\WLDAP32.dll
  0x738f0000  0x1c000   6.01.7601.17514  C:\Windows\system32\iphlpapi.dll
  0x738e0000  0x7000    6.01.7600.16385  C:\Windows\system32\WINNSI.DLL
  0x75790000  0x3c000   6.01.7601.17514  C:\Windows\system32\mswsock.dll
  0x752b0000  0x5000    6.01.7600.16385  C:\Windows\System32\wshtcpip.dll
  0x6ff70000  0x17000   11.00.0000.4454  C:\Program Files\Mozilla Firefox\components\browsercomps.dll
  0x74510000  0xfb000   6.01.7601.17514  C:\Windows\system32\WindowsCodecs.dll
  0x75cf0000  0x4c000   6.01.7601.17514  C:\Windows\system32\apphelp.dll
  0x6f8e0000  0x31000   6.01.7600.16385  C:\Windows\system32\EhStorShell.dll
  0x6ecc0000  0x40a000  14.00.6106.5000  C:\PROGRA~1\MICROS~1\Office14\GROOVEEX.DLL
  0x713d0000  0xa3000   9.00.30729.6161  C:\Windows\WinSxS\x86_microsoft.vc90.
                                         crt_1fc8b3b9a1e18e3b_9.0.30729.6161_none_
                                         50934f2ebcb7eb57\MSVCR90.dll
  0x6f840000  0x8e000   9.00.30729.6161  C:\Windows\WinSxS\x86_microsoft.vc90.
                                         crt_1fc8b3b9a1e18e3b_9.0.30729.6161_
                                         none_50934f2ebcb7eb57\MSVCP90.dll
  0x6f7c0000  0x2b000   9.00.30729.6161  C:\Windows\WinSxS\x86_microsoft.vc90.
                                         atl_1fc8b3b9a1e18e3b_9.0.30729.6161_
                                         none_51cd0a7abbe4e19b\ATL90.DLL
  0x6e8a0000  0x41a000  14.00.6024.1000  C:\PROGRA~1\COMMON~1\MICROS~1\OFFICE14\Cultures\office.odf
  0x6e030000  0x865000  14.00.6009.1000  C:\PROGRA~1\MICROS~1\Office14\1033\GrooveIntlResource.dll
  0x6f750000  0x6a000   6.01.7601.17514  C:\Windows\System32\cscui.dll
  0x6f600000  0x9000    6.01.7601.17514  C:\Windows\System32\CSCDLL.dll
  0x6f8d0000  0xb000    6.01.7601.17514  C:\Windows\system32\CSCAPI.dll
  0x6f680000  0x70000   6.01.7601.17755  C:\Windows\system32\ntshrui.dll
  0x75c40000  0x19000   6.01.7601.17514  C:\Windows\system32\srvcli.dll
  0x73560000  0xa000    6.01.7600.16385  C:\Windows\system32\slc.dll
  0x75800000  0x16000   6.01.7600.16385  C:\Windows\system32\CRYPTSP.dll
  0x75690000  0x3b000   6.01.7600.16385  C:\Windows\system32\rsaenh.dll
  0x75d50000  0xe000    6.01.7601.17514  C:\Windows\system32\RpcRtRemote.dll
  0x74670000  0x39000   6.01.7601.17514  C:\Windows\System32\MMDevApi.dll
  0x736e0000  0x36000   6.01.7601.17514  C:\Windows\system32\AUDIOSES.DLL
  0x65640000  0x16a000                  C:\Users\%myuser%\AppData\Roaming\Mozilla\Firefox\
                                        Profiles\ysjxsvu7.default\extensions\support@lastpass.com
                                        \platform\WINNT_x86-msvc\components\lpxpcom.dll
  0x75f40000  0x11d000  6.01.7601.17514  C:\Windows\system32\CRYPT32.dll
  0x75dd0000  0xc000    6.01.7601.17514  C:\Windows\system32\MSASN1.dll
  0x75f10000  0x2d000   6.01.7601.17514  C:\Windows\system32\WINTRUST.dll
  0x6fce0000  0x2c000   6.01.7601.17544  C:\Windows\system32\d3d10_1.dll
  0x6fca0000  0x3a000   6.01.7601.17514  C:\Windows\system32\d3d10_1core.dll
  0x6fc10000  0x83000   6.01.7601.17514  C:\Windows\system32\dxgi.dll
  0x10000000  0x447000  8.15.0010.2555  C:\Windows\system32\igd10umd32.dll
  0x74170000  0xba000   6.01.7601.17563  C:\Windows\system32\d2d1.dll
  0x6bc90000  0x102000  6.01.7600.16385  C:\Windows\system32\d3d10.dll
  0x6c2b0000  0x33000   6.01.7600.16385  C:\Windows\system32\d3d10core.dll
  0x73720000  0x10000   6.01.7601.17514  C:\Windows\system32\NLAapi.dll
  0x70850000  0x10000   6.01.7600.16385  C:\Windows\system32\napinsp.dll
  0x70830000  0x12000   6.01.7600.16385  C:\Windows\system32\pnrpnsp.dll
  0x755b0000  0x44000   6.01.7601.17570  C:\Windows\system32\DNSAPI.dll
  0x70820000  0x8000    6.01.7600.16385  C:\Windows\System32\winrnr.dll
  0x70810000  0xd000    6.01.7601.17514  C:\Windows\system32\wshbth.dll
  0x707e0000  0x27000   7.250.4232.0000  C:\Program Files\Common Files\Microsoft 
                                         Shared\Windows Live\WLIDNSP.DLL
  0x6fed0000  0x79000   6.01.7601.17514  C:\Windows\system32\mscms.dll
  0x75380000  0x17000   6.01.7601.17514  C:\Windows\system32\USERENV.dll
  0x75d60000  0xb000    6.01.7600.16385  C:\Windows\system32\profapi.dll
  0x72b20000  0x158000  6.30.7601.17514  C:\Windows\System32\msxml6.dll
  0x740e0000  0xc000    6.01.7600.16385  C:\Windows\system32\feclient.dll
  0x75cd0000  0x1b000   6.01.7601.17725  C:\Windows\system32\SspiCli.dll
  0x6faa0000  0x16f000  6.01.7601.17514  C:\Windows\system32\explorerframe.dll
  0x74830000  0x2f000   6.01.7600.16385  C:\Windows\system32\DUser.dll
  0x74860000  0xb2000   6.01.7600.16385  C:\Windows\system32\DUI70.dll
  0x6d2e0000  0x19000   3.13.0003.0000  C:\Program Files\Mozilla Firefox\nssdbm3.dll
  0x6c3a0000  0x44000   3.13.0003.0000  C:\Program Files\Mozilla Firefox\freebl3.dll
  0x6aef0000  0x59000   1.90.0000.0000  C:\Program Files\Mozilla Firefox\nssckbi.dll
  0x75ba0000  0x6000    6.01.7600.16385  C:\Windows\System32\wship6.dll
  0x700b0000  0x6000    6.01.7600.16385  C:\Windows\system32\rasadhlp.dll
  0x730d0000  0x38000   6.01.7601.17514  C:\Windows\System32\fwpuclnt.dll
  0x6df60000  0x2e000   6.01.7601.17514  C:\Windows\system32\shdocvw.dll
  0x6df50000  0x9000    6.01.7600.16385  C:\Windows\system32\LINKINFO.dll

Hope that this information can be useful.

Advertisements

About rodvars
Been working in IT Services/Consulting for the past 15 years. My main areas of work are planning, development, managing and administration System infrastructures focusing on optimizing user processes, enforcing business security, performance enhancements, high availabilty and infrastucture scalability.

3 Responses to Which dll’s certain process use

  1. Pingback: Fix Pnrpnsp.dll Problem Errors - Windows XP, Vista & Windows 7, 8

  2. Pingback: How To Fix Pnrpnsp Dll Problems Errors in Windows

  3. Pingback: How To Fix Grooveintlresource.dll Error Errors - Windows Vista, Windows 7 & 8

Leave a Reply

Fill in your details below or click an icon to log in:

WordPress.com Logo

You are commenting using your WordPress.com account. Log Out / Change )

Twitter picture

You are commenting using your Twitter account. Log Out / Change )

Facebook photo

You are commenting using your Facebook account. Log Out / Change )

Google+ photo

You are commenting using your Google+ account. Log Out / Change )

Connecting to %s

%d bloggers like this: