Find all child processes of my own .NET process / find out if a given process is a child of my own?
as it happens I have a bit of C#/WMI code lying around that kills all processes spawned by a specified process id, recursively. the killing is obviously not what you want, but the finding of child processes seems to be what you're interested in. I hope this is helpful:
private static void KillAllProcessesSpawnedBy(UInt32 parentProcessId)
{
logger.Debug("Finding processes spawned by process with Id [" + parentProcessId + "]");
// NOTE: Process Ids are reused!
ManagementObjectSearcher searcher = new ManagementObjectSearcher(
"SELECT * " +
"FROM Win32_Process " +
"WHERE ParentProcessId=" + parentProcessId);
ManagementObjectCollection collection = searcher.Get();
if (collection.Count > 0)
{
logger.Debug("Killing [" + collection.Count + "] processes spawned by process with Id [" + parentProcessId + "]");
foreach (var item in collection)
{
UInt32 childProcessId = (UInt32)item["ProcessId"];
if ((int)childProcessId != Process.GetCurrentProcess().Id)
{
KillAllProcessesSpawnedBy(childProcessId);
Process childProcess = Process.GetProcessById((int)childProcessId);
logger.Debug("Killing child process [" + childProcess.ProcessName + "] with Id [" + childProcessId + "]");
childProcess.Kill();
}
}
}
}
Although the answer of mtijn is probably the closest you can get, the real answer is: you can't.
Windows does not maintain a real process tree where processes are re-structured when a process on an intermediate level dies. However, Windows does remember the parent process ID.
The problematic case is the following:
Original process structure:
YourApp.exe
- SubApp.exe
- Second.exe
If now SubApp.exe terminates, the parent process ID of Second.exe will not be updated. The new result is
YourApp.exe
Second.exe
You can verify this using SysInternals Process Explorer. It is able to show the processes as a tree. Start CMD, then type start cmd
. Into the new window, type start cmd
again. You'll have 3 windows open. Now terminate the middle one.