Member Avatar for ranjanprachanda

Hi All,

Some abnormal process is running from the background.How I can see the location from where they are executing.

Ranjan

  • 3 Contributors
  • 2 Replies
  • 66 Views
  • 1 Week Discussion Span
  • Latest Post Latest Post by arun_cdm

Dani AI

Generated

— good question. pointed toward a GUI approach and suggested using a command-line listing; both are good starting points. Below are a few additional, practical methods to get an exact executable path, the command line that launched it, and quick checks to see if the binary looks legitimate.

Quick GUI: open Task Manager, go to the Details (or Processes) tab, right‑click the process and choose "Open file location". Enable the "Command line" column to see full path and startup arguments. For a precise, scriptable query from an elevated PowerShell session:

Get-CimInstance Win32_Process -Filter "ProcessId = 1234" | Select-Object ExecutablePath, CommandLine, ParentProcessId

Replace 1234 with the PID. This returns the executable path, the command line used, and the parent PID.

Fallback and quick integrity checks: on systems without the CIM cmdlets use WMIC:

wmic process where (processid=1234) get ExecutablePath, CommandLine

To verify the file itself (publisher or tampering), compute a SHA256 hash and compare with vendor/source:

certutil -hashfile "C:\full\path\to\file.exe" SHA256

Notes and cautions: many queries require Administrator rights and protected system processes may block module/path reads. If the file is unexpected, capture the binary and metadata, check the digital signature, and scan with up-to-date AV or an online multi-scanner before killing or deleting it.

Recommended Answers

All 2 Replies

Member Avatar for cguan_77

search this keyword on your friend google: "sysinternals process explorer"
check if it will be able to assist on what you need. :)

Good luck!

Member Avatar for arun_cdm

Try cmd(Command Prompt)--> tasklist /svc
It'll list-out the entire process of ur system.

Be a part of the DaniWeb community

We're a friendly, industry-focused community of developers, IT pros, digital marketers, and technology enthusiasts meeting, networking, learning, and sharing knowledge.