OK, I just started the latest version 2.54, right clicked on a closed wait and it gave me the path and command line. I am unsure what is happening but your experience is not the usual behavior.
That depends on from what process you are attempting to obtain the properties.
A normal application will show its properties, but TCPView will not show the properties for a System process:
-- History does not long entrust the care of freedom to the weak or the timid. -- Dwight D. Eisenhower The tree of liberty must be refreshed from time to time with the blood of patriots and tyrants. -- Thomas Jefferson
You are right. I had not noticed that before. Any ideas on how to catch it short of a firewall. I am out of aces.
I already suggested Process Explorer. It sees all and tells all.
If you walk the process trees, you can find out about all active processes including any network sessions. -- History does not long entrust the care of freedom to the weak or the timid. -- Dwight D. Eisenhower The tree of liberty must be refreshed from time to time with the blood of patriots and tyrants. -- Thomas Jefferson