How to get running processes with PowerShell using WMI and display its path. PowerShell below will display the path and also the command line of the process on how the process was executed. The code below will also display the process-id, the process-id or PID can also be supplied to an application called handle64 from SysInternal tools. This tool is quite cool since it will display more info about the PID supplied to handle application. Download link for handle64: https://docs.microsoft.com/en-us/sysinternals/downloads/handle Example output of handle64: Skype.exe pid: 42360 DESKTOP-Name\iuser-xname 40: File C:\Windows 84: File C:\Program Files (x86)\Microsoft\Skype for Desktop 24C: File C:\Windows\WinSxS\x86_microsoft.windows.common-controls_6595b23cb64144ccf1df_6.0.19041.1_none_fd031af4F787f5b0106f2 380: File C:...
Make the world a better place by sharing knowledge, ideas and anything that you can give that comes from the heart.