What Does This Do? Tasklist /M "Mscor*"

3 Answers

It will show processes that have loaded modules (usaully .DLL files) hosting the .NET runtime. The same technique can be used to search for other DLLs that have been loaded.

On a related note, Process Explorer is a Microsoft task manager replacement that will show .NET processes highlighted. I cannot recommend it enough. It is well worth investigating along with the rest of the Sysinternals Suite.

This is a very useful command line tool in windows that shows you a list of all running processes. Passing in a command line parameter of /m "mscor*" lists out all of the processes running on your machine running that are using assemblies that begin with the name "mscor". The "*" is a wildcard character.

It would seem to list all processes using modules like mscoree.dll, mscorwks.dll, etc. This would be .NET processes and possibly processes hosting .NET plug-ins.

2

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service and acknowledge that you have read and understand our privacy policy and code of conduct.

Marcus Vance

Marcus Vance

Cybersecurity & Digital Privacy Researcher

Marcus Vance is a cybersecurity auditor and technology writer dedicated to educating the public about online safety, data privacy regulations, enterprise security, and emerging cyber threats.

Share this article
Twitter Facebook Pinterest