PWalk

Process Walker (PWALK.EXE) provides a complete listing of the memory usage of a particular process. It displays the process' entire user-mode address space, as well as which DLLs are loaded and where the code, data, and stack are located. This tool is extremely useful for tracking down memory leaks and examining memory usage.

Each line in the list produced by PWALK contains the following:

• Address
• State (committed, reserved, or free)
• Protection (read-only, read-write, or none)
• Size
• Base Address
• Object
• Section
• Name

You can sort the list by address, state, protection, size, or base address.

Double-click on any line that displays committed memory to view the contents of the memory. Click Process statistics from the View menu to obtain additional process statistics such as the total committed, reserved, and free memory. Click System statistics from the View menu to obtain system statistics such as physical memory, pagefile, and disk space.