svchost – What's running inside it?

I’m sure when you look at your running processes in Task Manager you see a few svchost.exe processes running. I’m also sure that you’d like to know what is running inside the wrapper. Here are a few methods to help you find this information out.
First, the easiest/quickest, is to use a built-in Windows tool called tasklist. I’m not going into detail about everything tasklist can do, but here’s how to briefly find out what’s in svchost.exe.

tasklist /svc /FI "IMAGENAME eq svchost.exe"


Another method would be to use Sys Internal’s ProcessExplorer tool. You can view the svchost.exe contents using that tool also as shown below.

Published by

Rich

Just another IT guy.

Leave a Reply

Your email address will not be published. Required fields are marked *