The problem with saying it is Svchost is that is just an executable wrapper that is used to blanket a Windows service so it can be called as an executable - and if you use a more robust tool like
Process Explorer then you'll see that that one file (and usually there are like 2-4 instances of it running) can have a whole bevy of services that it is actually loading.