Skip to main content

PsList v1.3

By Mark Russinovich

Published: March 23, 2012

 Download PsTools (1.6 MB)



pslist expwould show statistics for all the processes that start with "exp", which would include Explorer.
-dShow thread detail.
-mShow memory detail.
-xShow processes, memory information and threads.
-tShow process tree.
-s [n]Run in task-manager mode, for optional seconds specified. Press Escape to abort.
-r nTask-manager mode refresh rate in seconds (default is 1).
\\computerInstead of showing process information for the local system, PsList will show information for the NT/Win2K system specified. Include the -u switch with a username and password to login to the remote system if your security credentials do not permit you to obtain performance counter information from the remote system.
-uusername If you want to kill a process on a remote system and the account you are executing in does not have administrative privileges on the remote system then you must login as an administrator using this command-line option. If you do not include the password with the -p option then PsList will prompt you for the password without echoing your input to the display.
-ppassword This option lets you specify the login password on the command line so that you can use PsList from batch files. If you specify an account name and omit the -p option PsList prompts you interactively for a password.
nameShow information about processes that begin with the name specified.
-eExact match the process name.
pidInstead of listing all the running processes in the system, this parameter narrows PsList's scan to the process that has the specified PID. Thus:
pslist 53
would dump statistics for the process with the PID 53.

How it Works

Like Windows NT/2K's built-in PerfMon monitoring tool, PsList uses the Windows NT/2K performance counters to obtain the information it displays. You can find documentation for Windows NT/2K performance counters, including the source code to Windows NT's built-in performance monitor, PerfMon, in MSDN.

Memory Abbreviation Key

All memory values are displayed in KB.

  • Pri: Priority
  • Thd: Number of Threads
  • Hnd: Number of Handles
  • VM: Virtual Memory
  • WS: Working Set
  • Priv: Private Virtual Memory
  • Priv Pk: Private Virtual Memory Peak
  • Faults: Page Faults
  • NonP: Non-Paged Pool
  • Page: Paged Pool
  • Cswtch: Context Switches


Download PsTools
(1.6 MB)




Download PsTools
(1.6 MB)


PsList is part of a growing kit of Sysinternals command-line tools that aid in the adminstration of local and remote systems named PsTools.

Runs on:

  • Client: Windows Vista and higher.
  • Server: Windows Server 2008 and higher.