How are you identifying them as the Publishing Tools service? Did you scrub out the command line column for security reasons? The command line column will have a -Dservice parameter that associates the SOC process with the service name:
20190927000011.528837-420 ArcSOC.exe 16376 "C:\Program Files\ArcGIS\Server\bin\ArcSOC.exe" -XX:-CreateMinidumpOnCrash -Xmx64M -XX:+UseParallelGC -Dservice=System.PublishingTools.GPServerSync....
In your screenshot, I don't see the command line information.