8

After reading this interesting Lifehacker post and reading the comments on the page, one person was wondering if it would be possible to use the Physical Device Object Names of other hardware such as the microphone to find out the names of processes using that device.

I tried the same approach, but so far it only seems to work for the webcam. Is there any other way I could get this to work in Process Explorer?


UPDATE:

The Lifehacker post was about finding out which Windows process is currently using your webcam. This is how they went about doing it:

  1. Start Device Manager
    (WIN+R → "devmgmt.msc" → OK)
  2. Find your webcam among the list of devices (check under Imaging Devices)
  3. Open the properties window of the device and switch to the Details tab
    (Right click → Properties → Details)
  4. In the dropdown menu, select Physical Device Object Name and copy the string
    (Right click → Copy)
  5. Download Process Explorer
  6. Make sure you have opened Process Explorer in Administrator Mode
    (File → Show Details for All Processes)
  7. Hit CTRL+F and enter the string you copied earlier
    (it should be something like \Device\000000XX)
  8. Hit the Search button and you should see a list of processes using the webcam
    (if there are any)
    PsExec Handle Search
2
  • You can search for audioses.dll which is used for most of the audio sessions. May 29, 2014 at 18:00
  • @ParthParikh I tried searching for audioses.dll, and it brings up a lot of processes. Even if a process isn't recording any sound it still shows up (e.g. Sound Recorder, Skype, etc.) I need a way to only show the processes that are currently using the microphone.
    – Vinayak
    May 29, 2014 at 21:46

2 Answers 2

2

I can indeed confirm this works with the same thing, altho device manager / Audio devices doesn't work the same for me.

To clarify:

  1. Right click your Volume icon on the lower right hand on the task bar.
  2. Click 'Recording Devices'
  3. Right click your current / Default Device and go to 'Properties'.
  4. Under where it says Controller Information click 'Properties' and under the 'Details' tab when it pops up, under Property, go to Physical Device Object Name.
  5. Right-click and copy the Device path. After this you can find it in Process Explorer or wherever necessary.

Notes: For me it's not the device name (Headset Microphone) but rather Bluetooth Hands-free Audio. Huh. It may be different depending on your hardware. I was able to find all processes using my mic, including the audiodg.exe (Where you open it up to test if your mic is working.)

Good luck guys!

Screenshot

4
  • i.stack.imgur.com/tvH7p.png Jun 15, 2015 at 15:56
  • Are you sure that it works? Your screenshot doesn't look convincing. I've tried the exact same thing and it won't work for me. I'd be convinced if by this method you can find processes like skype.exe or audacity.exe. If you could test further and let me know what you get, that'd be helpful. Thanks.
    – Vinayak
    Jun 16, 2015 at 0:04
  • In my case search results show many svchost.exe lines, which is still not very informative, since each svchost process actually hosts a different running program. What are these programs, and which of them is a recording spy is still not clear. So the next step is to open each listed svchost PID, and check what program it hosts. However, such program can mask under the name of any legit Windows or 3rd party program component, so more research will still be needed.
    – sambul35
    Sep 4, 2018 at 21:18
  • Is there anyway to check this using Powershell Jan 31, 2023 at 5:21
0

Answering my own question because I just discovered this today. There may be a better solution available for this problem by now but this might be the simplest or most straightforward one, at least if you're running Windows 10.

Whenever there's an app using the microphone, you can see this icon in the taskbar.

taskbar icon showing microphone usage

Click on it and it'll take you to the Microphone section under App Permissions in the Privacy page in the Settings app.

Microphone section in the Privacy page in the Settings app

Scroll down to the Allow desktop apps to access your microphone section and sort by Last used

Apps using the microphone sorted by last used time

This screen shows when the microphone was last used by what app sorted by date and for apps currently using the microphone, the apps are listed at the top with the caption, Currently in use.

1
  • The issue is when that process is svchost.exe, which run a lot of different services. How do you find the service using the mic?
    – Pablo A
    May 7, 2022 at 1:33

You must log in to answer this question.

Not the answer you're looking for? Browse other questions tagged .