See Which Services Run Inside Each Process (svchost Deep Dive)

Use tasklist /SVC to reveal the services hosted inside every process, especially svchost.exe.

WindowsProcessessvchostsystemservicesLow risk
Run `tasklist /SVC /FI "IMAGENAME eq svchost.exe"` to list each svchost.exe instance and the services it hosts.

01Command

Command
$ tasklist /SVC /FI "IMAGENAME eq svchost.exe"

02What it does

Windows bundles many background services inside shared svchost.exe processes, so the plain task list doesn't tell you what each copy actually does. The /SVC switch appends the service names hosted in each process to the output. Combined with /FI to narrow it to svchost.exe (or any other image), you can identify which instance is eating CPU or memory and which service is responsible.

03Risk

RiskLow risk
!Warning: Never end an svchost.exe process at random — one instance can host several essential services; stop the specific service instead.

04Undo

✓No undo needed — this command does not change persistent state.

05Sources

  • tasklist
    Microsoft Learn · vendor-doc · 2026-09-17
    Evidence: Syntax includes /svc which 'Lists all the service information for each process' — i.e. services hosted inside each process.
  • TaskList — List processes running on the machine
    SS64 · technical · 2026-09-17
    Evidence: Documents /SVC: 'List services hosted within each process' — useful for identifying the services inside svchost.exe instances.

Last verified: 2026-09-19 · Category: System & Settings

06Related solutions