Resolve service name from svchost.exe PID

[crazy-max]

No description provided.

[Atavic]

A quick solution is Process Explorer.

• lists svchost instances by PID
• r-click on an instance, select Properties, then click on Services tab for a list of the services on that instance.

[crazy-max]

Yes but i want to automate the process ;)

[Atavic]

Ha! There are CLI tools as DaeMON-CLI in verbose mode. Convoluted choice, as you must have Firedaemon running, then you can monitor it's services with this tool.

[Atavic]

For service shared in svchost.exe, display real service name instead of just "svchost.exe"

http://www.net-peeker.com/

[crazy-max]

Ok nice thanks!

[Atavic]

cmd console:
tasklist /svc /fi "imagename eq svchost.exe" > network_info.txt

Without > network_info.txt the result appears on the console, while with the redirection (>), nothing appears in CMD, but the info goes into the txt.