-2

I have a process running in my process list. I would like to know which file is responsible for running the process.

How can I trace it to a file?

abhi
  • 163
  • 4
  • You might want to elaborate on what exactly you want to do, please describe it in full detail – MichelZ Apr 03 '14 at 05:27
  • @MichelZ I want to know which executable is running a process in memory. – abhi Apr 03 '14 at 12:42
  • Please delete the question as it doesn't fall into the realm of **professional** system administration. – abhi Apr 04 '14 at 15:00

1 Answers1

4

With the Sysinternals suite. Looking at procmon, and/or Process Explorer.

(That's assuming it's not trivial to discover with, say the Command Line column in Task Manager, of course - see below image.)

enter image description here

HopelessN00b
  • 53,795
  • 33
  • 135
  • 209