TaskList displays all running applications and services with their Process ID (PID) This can be run on either a local or a remote computer.
This command has been around since Windows NT 4.0, and continues to be useful through Windows 10 and Windows Server 2016.
Syntax
tasklist options
Key
| Switch | Explanation |
|---|---|
| /s computer | Specify the name or IP address of a remote computer (do not use backslashes). The default is the local computer. |
| /u | domain\user [/p password]] Run under a different account |
| /fo | {TABLE|LIST|CSV}] Output format, the default is TABLE. |
| /nh | No Headers in the output (does not apply to LIST output) |
| /fi FilterName [/fi FilterName2 [ … ]] | Apply one of the Filters below: Status eq, ne RUNNING|NOT RESPONDING Imagename eq, ne String PID eq, ne, gt, lt, ge, le Positive integer. Session eq, ne, gt, lt, ge, le Any valid session number. SessionName eq, ne String CPUTime eq, ne, gt, lt, ge, le Time hh:mm:ss MemUsage eq, ne, gt, lt, ge, le Any valid integer. Username eq, ne User name ([Domain\]User). Services eq, ne String Windowtitle eq, ne String Modules eq, ne String |
| /m | [ModuleName] | /svc | /v |
| /m | Show the processes that include the given module. |
| /svc | List all info for each process without truncation. Valid when /fo=TABLE. Cannot be used with /m or /v |
| /v | Verbose task information |
Example
Note: The output of the Tasklist command displays in a table format by default. The table is very wide and may not look right due to line wrapping.
C:\>tasklist /v /fi "STATUS eq running"
Image Name PID Session Name Session# Mem Usage Status User Name CPU Time Window Title ========================= ======== ================ ======== ============ ========= ========== ======== ======================================================================== csrss.exe 888 Console 1 6,268 K Running N/A 0:03:30 N/A dwm.exe 1304 Console 1 77,440 K Running N/A 0:40:11 DWM Notification Window RAVBg64.exe 3500 Console 1 12,652 K Running N/A 0:00:00 Realtek HD Audio Background Process for Vista NVDisplay.Container.exe 5636 Console 1 26,268 K Running N/A 0:00:02 NvSvc