Getting app name using powershell, for dcom objects: By AppID prefix (the "APPID" in a DCOM 10016 event, or the dcomcnfg entry): Get-CimInstance Win32_DCOMApplication | Where-Object AppID -like '{9CA88EE3*' | Select-Object AppID, Name By CLSID prefix (the "CLSID" in the event), also resolving which AppID it belongs to: Get-ChildItem Registry::HKCR\CLSID | Where-Object PSChildName -like '{9CA88EE3*' | ForEach-Object { [pscustomobject]@{ CLSID=$_.PSChildName; Name=$_.GetValue(''); AppID=$_.GetValue('AppID') } }