Windows Commands / IT Support Guides
Identify an application process with tasklist
A background process may remain after its window closes, or a service may run under an unexpected executable. Capture process information before attempting termination.
Environment and inputs: Windows 11 · Command Prompt unless PowerShell is specified
Try the diagnostic command
Use the stated shell and platform. Replace sample domains, addresses, services and paths with values from the system you are authorized to support.
tasklist /v
tasklist /svcHow to read the result
The verbose view includes additional session details. The service view associates hosted services with process IDs, which helps explain why several services share one process.
What to do next
Find the affected executable and PID, note its user session and compare it with the application log timestamp. Ask the user to save work before any approved restart.
Before you make a change
Do not terminate a shared service host merely because one associated service has a problem. Process names alone are not reliable proof of software identity.