CIM_Process, ROOT\cimv2 - Instances

Instances of CIM_Process

This section contains sample wmi instances of CIM_Process class with their properties from Microsoft Windows Server 2012 R2 Datacenter Evaluation.

CIM_Process is an abstract class, so it has only derived instances, see derived child classes.

…

Instance \\W2012SDC\ROOT\cimv2:Win32_Process.Handle="0"

Properties={

'Caption' : 'System Idle Process' //String

'CommandLine' : null

'CreationClassName' : 'Win32_Process' //String

'CreationDate' : null

'CSCreationClassName' : 'Win32_ComputerSystem' //String

'CSName' : '.' //String

'Description' : 'System Idle Process' //String

'ExecutablePath' : null

'ExecutionState' : null

'Handle' : '0' //String, 0x0

'HandleCount' : 0 //Long, 0x0

'InstallDate' : null

'KernelModeTime' : '3274000000000' //String

'MaximumWorkingSetSize' : null

'MinimumWorkingSetSize' : null

'Name' : 'System Idle Process' //String

'OSCreationClassName' : 'Win32_OperatingSystem' //String

'OSName' : 'Microsoft Windows Server 2012 R2 Datacenter Evaluation|C:\Windows|\Device\Harddisk0\Partition1' //String

'OtherOperationCount' : '0' //String, 0x0

'OtherTransferCount' : '0' //String, 0x0

'PageFaults' : 1 //Long, 0x1

'PageFileUsage' : 0 //Long, 0x0

'ParentProcessId' : 0 //Long, 0x0

'PeakPageFileUsage' : 0 //Long, 0x0

'PeakVirtualSize' : '65536' //String, 0x10000

'PeakWorkingSetSize' : 4 //Long, 0x4

'Priority' : 0 //Long, 0x0

'PrivatePageCount' : '0' //String, 0x0

'ProcessId' : 0 //Long, 0x0

'QuotaNonPagedPoolUsage' : 0 //Long, 0x0

'QuotaPagedPoolUsage' : 0 //Long, 0x0

'QuotaPeakNonPagedPoolUsage' : 0 //Long, 0x0

'QuotaPeakPagedPoolUsage' : 0 //Long, 0x0

'ReadOperationCount' : '0' //String, 0x0

'ReadTransferCount' : '0' //String, 0x0

'SessionId' : 0 //Long, 0x0

'Status' : null

'TerminationDate' : null

'ThreadCount' : 4 //Long, 0x4

'UserModeTime' : '0' //String, 0x0

'VirtualSize' : '65536' //String, 0x10000

'WindowsVersion' : '6.3.9600' //String

'WorkingSetSize' : '4096' //String, 0x1000

'WriteOperationCount' : '0' //String, 0x0

'WriteTransferCount' : '0' //String, 0x0

}

Instance \\W2012SDC\ROOT\cimv2:Win32_Process.Handle="4"

Properties={

'Caption' : 'System' //String

'CommandLine' : null

'CreationClassName' : 'Win32_Process' //String

'CreationDate' : '20141112140907.774544-480' //String

'CSCreationClassName' : 'Win32_ComputerSystem' //String

'CSName' : '.' //String

'Description' : 'System' //String

'ExecutablePath' : null

'ExecutionState' : null

'Handle' : '4' //String, 0x4

'HandleCount' : 1202 //Long, 0x4B2

'InstallDate' : null

'KernelModeTime' : '2412656250' //String

'MaximumWorkingSetSize' : null

'MinimumWorkingSetSize' : null

'Name' : 'System' //String

'OSCreationClassName' : 'Win32_OperatingSystem' //String

'OSName' : 'Microsoft Windows Server 2012 R2 Datacenter Evaluation|C:\Windows|\Device\Harddisk0\Partition1' //String

'OtherOperationCount' : '11597' //String, 0x2D4D

'OtherTransferCount' : '331463' //String, 0x50EC7

'PageFaults' : 10069 //Long, 0x2755

'PageFileUsage' : 104 //Long, 0x68

'ParentProcessId' : 0 //Long, 0x0

'PeakPageFileUsage' : 268 //Long, 0x10C

'PeakVirtualSize' : '12505088' //String, 0xBED000

'PeakWorkingSetSize' : 5364 //Long, 0x14F4

'Priority' : 8 //Long, 0x8

'PrivatePageCount' : '106496' //String, 0x1A000

'ProcessId' : 4 //Long, 0x4

'QuotaNonPagedPoolUsage' : 0 //Long, 0x0

'QuotaPagedPoolUsage' : 0 //Long, 0x0

'QuotaPeakNonPagedPoolUsage' : 0 //Long, 0x0

'QuotaPeakPagedPoolUsage' : 0 //Long, 0x0

'ReadOperationCount' : '390' //String, 0x186

'ReadTransferCount' : '165421136' //String, 0x9DC2050

'SessionId' : 0 //Long, 0x0

'Status' : null

'TerminationDate' : null

'ThreadCount' : 170 //Long, 0xAA

'UserModeTime' : '0' //String, 0x0

'VirtualSize' : '11821056' //String, 0xB46000

'WindowsVersion' : '6.3.9600' //String

'WorkingSetSize' : '262144' //String, 0x40000

'WriteOperationCount' : '10713' //String, 0x29D9

'WriteTransferCount' : '253870325' //String, 0xF21C0F5

}

Instance \\W2012SDC\ROOT\cimv2:Win32_Process.Handle="320"

Properties={

'Caption' : 'smss.exe' //String

'CommandLine' : null

'CreationClassName' : 'Win32_Process' //String

'CreationDate' : '20141112140907.915167-480' //String

'CSCreationClassName' : 'Win32_ComputerSystem' //String

'CSName' : '.' //String

'Description' : 'smss.exe' //String

'ExecutablePath' : null

'ExecutionState' : null

'Handle' : '320' //String, 0x140

'HandleCount' : 52 //Long, 0x34

'InstallDate' : null

'KernelModeTime' : '937500' //String, 0xE4E1C

'MaximumWorkingSetSize' : null

'MinimumWorkingSetSize' : null

'Name' : 'smss.exe' //String

'OSCreationClassName' : 'Win32_OperatingSystem' //String

'OSName' : 'Microsoft Windows Server 2012 R2 Datacenter Evaluation|C:\Windows|\Device\Harddisk0\Partition1' //String

'OtherOperationCount' : '276' //String, 0x114

'OtherTransferCount' : '17438' //String, 0x441E

'PageFaults' : 566 //Long, 0x236

'PageFileUsage' : 276 //Long, 0x114

'ParentProcessId' : 4 //Long, 0x4

'PeakPageFileUsage' : 348 //Long, 0x15C

'PeakVirtualSize' : '25460736' //String, 0x1848000

'PeakWorkingSetSize' : 1060 //Long, 0x424

'Priority' : 11 //Long, 0xB

'PrivatePageCount' : '282624' //String, 0x45000

'ProcessId' : 320 //Long, 0x140

'QuotaNonPagedPoolUsage' : 3 //Long, 0x3

'QuotaPagedPoolUsage' : 13 //Long, 0xD

'QuotaPeakNonPagedPoolUsage' : 8 //Long, 0x8

'QuotaPeakPagedPoolUsage' : 53 //Long, 0x35

'ReadOperationCount' : '4' //String, 0x4

'ReadTransferCount' : '29188' //String, 0x7204

'SessionId' : 0 //Long, 0x0

'Status' : null

'TerminationDate' : null

'ThreadCount' : 2 //Long, 0x2

'UserModeTime' : '0' //String, 0x0

'VirtualSize' : '4395008' //String, 0x431000

'WindowsVersion' : '6.3.9600' //String

'WorkingSetSize' : '335872' //String, 0x52000

'WriteOperationCount' : '1' //String, 0x1

'WriteTransferCount' : '32' //String, 0x20

}

Instance \\W2012SDC\ROOT\cimv2:Win32_Process.Handle="456"

Properties={

'Caption' : 'csrss.exe' //String

'CommandLine' : null

'CreationClassName' : 'Win32_Process' //String

'CreationDate' : '20141112140917.083497-480' //String

'CSCreationClassName' : 'Win32_ComputerSystem' //String

'CSName' : '.' //String

'Description' : 'csrss.exe' //String

'ExecutablePath' : null

'ExecutionState' : null

'Handle' : '456' //String, 0x1C8

'HandleCount' : 645 //Long, 0x285

'InstallDate' : null

'KernelModeTime' : '38593750' //String, 0x24CE4D6

'MaximumWorkingSetSize' : null

'MinimumWorkingSetSize' : null

'Name' : 'csrss.exe' //String

'OSCreationClassName' : 'Win32_OperatingSystem' //String

'OSName' : 'Microsoft Windows Server 2012 R2 Datacenter Evaluation|C:\Windows|\Device\Harddisk0\Partition1' //String

'OtherOperationCount' : '21849' //String, 0x5559

'OtherTransferCount' : '682900' //String, 0xA6B94

'PageFaults' : 4134 //Long, 0x1026

'PageFileUsage' : 2084 //Long, 0x824

'ParentProcessId' : 448 //Long, 0x1C0

'PeakPageFileUsage' : 2464 //Long, 0x9A0

'PeakVirtualSize' : '61026304' //String, 0x3A33000

'PeakWorkingSetSize' : 4028 //Long, 0xFBC

'Priority' : 13 //Long, 0xD

'PrivatePageCount' : '2134016' //String, 0x209000

'ProcessId' : 456 //Long, 0x1C8

'QuotaNonPagedPoolUsage' : 23 //Long, 0x17

'QuotaPagedPoolUsage' : 195 //Long, 0xC3

'QuotaPeakNonPagedPoolUsage' : 24 //Long, 0x18

'QuotaPeakPagedPoolUsage' : 204 //Long, 0xCC

'ReadOperationCount' : '444' //String, 0x1BC

'ReadTransferCount' : '597407' //String, 0x91D9F

'SessionId' : 0 //Long, 0x0

'Status' : null

'TerminationDate' : null

'ThreadCount' : 10 //Long, 0xA

'UserModeTime' : '16875000' //String, 0x1017DF8

'VirtualSize' : '60567552' //String, 0x39C3000

'WindowsVersion' : '6.3.9600' //String

'WorkingSetSize' : '2424832' //String, 0x250000

'WriteOperationCount' : '0' //String, 0x0

'WriteTransferCount' : '0' //String, 0x0

}

Instance \\W2012SDC\ROOT\cimv2:Win32_Process.Handle="524"

Properties={

'Caption' : 'csrss.exe' //String

'CommandLine' : null

'CreationClassName' : 'Win32_Process' //String

'CreationDate' : '20141112140918.479233-480' //String

'CSCreationClassName' : 'Win32_ComputerSystem' //String

'CSName' : '.' //String

'Description' : 'csrss.exe' //String

'ExecutablePath' : null

'ExecutionState' : null

'Handle' : '524' //String, 0x20C

'HandleCount' : 172 //Long, 0xAC

'InstallDate' : null

'KernelModeTime' : '27343750' //String, 0x1A13B86

'MaximumWorkingSetSize' : null

'MinimumWorkingSetSize' : null

'Name' : 'csrss.exe' //String

'OSCreationClassName' : 'Win32_OperatingSystem' //String

'OSName' : 'Microsoft Windows Server 2012 R2 Datacenter Evaluation|C:\Windows|\Device\Harddisk0\Partition1' //String

'OtherOperationCount' : '8033' //String, 0x1F61

'OtherTransferCount' : '108002' //String, 0x1A5E2

'PageFaults' : 12577 //Long, 0x3121

'PageFileUsage' : 1672 //Long, 0x688

'ParentProcessId' : 512 //Long, 0x200

'PeakPageFileUsage' : 1732 //Long, 0x6C4

'PeakVirtualSize' : '63275008' //String, 0x3C58000

'PeakWorkingSetSize' : 16796 //Long, 0x419C

'Priority' : 13 //Long, 0xD

'PrivatePageCount' : '1712128' //String, 0x1A2000

'ProcessId' : 524 //Long, 0x20C

'QuotaNonPagedPoolUsage' : 12 //Long, 0xC

'QuotaPagedPoolUsage' : 126 //Long, 0x7E

'QuotaPeakNonPagedPoolUsage' : 14 //Long, 0xE

'QuotaPeakPagedPoolUsage' : 144 //Long, 0x90

'ReadOperationCount' : '13485' //String, 0x34AD

'ReadTransferCount' : '629457' //String, 0x99AD1

'SessionId' : 1 //Long, 0x1

'Status' : null

'TerminationDate' : null

'ThreadCount' : 10 //Long, 0xA

'UserModeTime' : '1250000' //String, 0x1312D0

'VirtualSize' : '54829056' //String, 0x344A000

'WindowsVersion' : '6.3.9600' //String

'WorkingSetSize' : '2637824' //String, 0x284000

'WriteOperationCount' : '0' //String, 0x0

'WriteTransferCount' : '0' //String, 0x0

}

Instance \\W2012SDC\ROOT\cimv2:Win32_Process.Handle="532"

Properties={

'Caption' : 'wininit.exe' //String

'CommandLine' : 'wininit.exe' //String

'CreationClassName' : 'Win32_Process' //String

'CreationDate' : '20141112140918.510498-480' //String

'CSCreationClassName' : 'Win32_ComputerSystem' //String

'CSName' : '.' //String

'Description' : 'wininit.exe' //String

'ExecutablePath' : 'C:\Windows\system32\wininit.exe' //String

'ExecutionState' : null

'Handle' : '532' //String, 0x214

'HandleCount' : 85 //Long, 0x55

'InstallDate' : null

'KernelModeTime' : '468750' //String, 0x7270E

'MaximumWorkingSetSize' : 1380 //Long, 0x564

'MinimumWorkingSetSize' : 200 //Long, 0xC8

'Name' : 'wininit.exe' //String

'OSCreationClassName' : 'Win32_OperatingSystem' //String

'OSName' : 'Microsoft Windows Server 2012 R2 Datacenter Evaluation|C:\Windows|\Device\Harddisk0\Partition1' //String

'OtherOperationCount' : '1028' //String, 0x404

'OtherTransferCount' : '2620' //String, 0xA3C

'PageFaults' : 1111 //Long, 0x457

'PageFileUsage' : 864 //Long, 0x360

'ParentProcessId' : 448 //Long, 0x1C0

'PeakPageFileUsage' : 1072 //Long, 0x430

'PeakVirtualSize' : '49328128' //String, 0x2F0B000

'PeakWorkingSetSize' : 3700 //Long, 0xE74

'Priority' : 13 //Long, 0xD

'PrivatePageCount' : '884736' //String, 0xD8000

'ProcessId' : 532 //Long, 0x214

'QuotaNonPagedPoolUsage' : 8 //Long, 0x8

'QuotaPagedPoolUsage' : 92 //Long, 0x5C

'QuotaPeakNonPagedPoolUsage' : 10 //Long, 0xA

'QuotaPeakPagedPoolUsage' : 96 //Long, 0x60

'ReadOperationCount' : '1' //String, 0x1

'ReadTransferCount' : '6656' //String, 0x1A00

'SessionId' : 0 //Long, 0x0

'Status' : null

'TerminationDate' : null

'ThreadCount' : 1 //Long, 0x1

'UserModeTime' : '0' //String, 0x0

'VirtualSize' : '43855872' //String, 0x29D3000

'WindowsVersion' : '6.3.9600' //String

'WorkingSetSize' : '151552' //String, 0x25000

'WriteOperationCount' : '0' //String, 0x0

'WriteTransferCount' : '0' //String, 0x0

}

Instance \\W2012SDC\ROOT\cimv2:Win32_Process.Handle="576"

Properties={

'Caption' : 'winlogon.exe' //String

'CommandLine' : 'winlogon.exe' //String

'CreationClassName' : 'Win32_Process' //String

'CreationDate' : '20141112140918.901124-480' //String

'CSCreationClassName' : 'Win32_ComputerSystem' //String

'CSName' : '.' //String

'Description' : 'winlogon.exe' //String

'ExecutablePath' : 'C:\Windows\system32\winlogon.exe' //String

'ExecutionState' : null

'Handle' : '576' //String, 0x240

'HandleCount' : 175 //Long, 0xAF

'InstallDate' : null

'KernelModeTime' : '781250' //String, 0xBEBC2

'MaximumWorkingSetSize' : 1380 //Long, 0x564

'MinimumWorkingSetSize' : 200 //Long, 0xC8

'Name' : 'winlogon.exe' //String

'OSCreationClassName' : 'Win32_OperatingSystem' //String

'OSName' : 'Microsoft Windows Server 2012 R2 Datacenter Evaluation|C:\Windows|\Device\Harddisk0\Partition1' //String

'OtherOperationCount' : '1451' //String, 0x5AB

'OtherTransferCount' : '144834' //String, 0x235C2

'PageFaults' : 5341 //Long, 0x14DD

'PageFileUsage' : 1476 //Long, 0x5C4

'ParentProcessId' : 512 //Long, 0x200

'PeakPageFileUsage' : 2660 //Long, 0xA64

'PeakVirtualSize' : '64933888' //String, 0x3DED000

'PeakWorkingSetSize' : 9324 //Long, 0x246C

'Priority' : 13 //Long, 0xD

'PrivatePageCount' : '1511424' //String, 0x171000

'ProcessId' : 576 //Long, 0x240

'QuotaNonPagedPoolUsage' : 10 //Long, 0xA

'QuotaPagedPoolUsage' : 121 //Long, 0x79

'QuotaPeakNonPagedPoolUsage' : 12 //Long, 0xC

'QuotaPeakPagedPoolUsage' : 127 //Long, 0x7F

'ReadOperationCount' : '7' //String, 0x7

'ReadTransferCount' : '144896' //String, 0x23600

'SessionId' : 1 //Long, 0x1

'Status' : null

'TerminationDate' : null

'ThreadCount' : 2 //Long, 0x2

'UserModeTime' : '156250' //String, 0x2625A

'VirtualSize' : '60657664' //String, 0x39D9000

'WindowsVersion' : '6.3.9600' //String

'WorkingSetSize' : '1400832' //String, 0x156000

'WriteOperationCount' : '5' //String, 0x5

'WriteTransferCount' : '800' //String, 0x320

}

Instance \\W2012SDC\ROOT\cimv2:Win32_Process.Handle="620"

Properties={

'Caption' : 'services.exe' //String

'CommandLine' : null

'CreationClassName' : 'Win32_Process' //String

'CreationDate' : '20141112140919.890457-480' //String

'CSCreationClassName' : 'Win32_ComputerSystem' //String

'CSName' : '.' //String

'Description' : 'services.exe' //String

'ExecutablePath' : null

'ExecutionState' : null

'Handle' : '620' //String, 0x26C

'HandleCount' : 685 //Long, 0x2AD

'InstallDate' : null

'KernelModeTime' : '151093750' //String, 0x90181F6

'MaximumWorkingSetSize' : null

'MinimumWorkingSetSize' : null

'Name' : 'services.exe' //String

'OSCreationClassName' : 'Win32_OperatingSystem' //String

'OSName' : 'Microsoft Windows Server 2012 R2 Datacenter Evaluation|C:\Windows|\Device\Harddisk0\Partition1' //String

'OtherOperationCount' : '150713' //String, 0x24CB9

'OtherTransferCount' : '1299066' //String, 0x13D27A

'PageFaults' : 20816 //Long, 0x5150

'PageFileUsage' : 8360 //Long, 0x20A8

'ParentProcessId' : 532 //Long, 0x214

'PeakPageFileUsage' : 14436 //Long, 0x3864

'PeakVirtualSize' : '624037888' //String, 0x25321000

'PeakWorkingSetSize' : 12316 //Long, 0x301C

'Priority' : 9 //Long, 0x9

'PrivatePageCount' : '8560640' //String, 0x82A000

'ProcessId' : 620 //Long, 0x26C

'QuotaNonPagedPoolUsage' : 16 //Long, 0x10

'QuotaPagedPoolUsage' : 148 //Long, 0x94

'QuotaPeakNonPagedPoolUsage' : 24 //Long, 0x18

'QuotaPeakPagedPoolUsage' : 149 //Long, 0x95

'ReadOperationCount' : '284' //String, 0x11C

'ReadTransferCount' : '6236500' //String, 0x5F2954

'SessionId' : 0 //Long, 0x0

'Status' : null

'TerminationDate' : null

'ThreadCount' : 8 //Long, 0x8

'UserModeTime' : '125156250' //String, 0x775BB9A

'VirtualSize' : '46968832' //String, 0x2CCB000

'WindowsVersion' : '6.3.9600' //String

'WorkingSetSize' : '9912320' //String, 0x974000

'WriteOperationCount' : '458' //String, 0x1CA

'WriteTransferCount' : '2276202' //String, 0x22BB6A

}

Instance \\W2012SDC\ROOT\cimv2:Win32_Process.Handle="628"

Properties={

'Caption' : 'lsass.exe' //String

'CommandLine' : 'C:\Windows\system32\lsass.exe' //String

'CreationClassName' : 'Win32_Process' //String

'CreationDate' : '20141112140920.300242-480' //String

'CSCreationClassName' : 'Win32_ComputerSystem' //String

'CSName' : '.' //String

'Description' : 'lsass.exe' //String

'ExecutablePath' : 'C:\Windows\system32\lsass.exe' //String

'ExecutionState' : null

'Handle' : '628' //String, 0x274

'HandleCount' : 2226 //Long, 0x8B2

'InstallDate' : null

'KernelModeTime' : '4904531250' //String

'MaximumWorkingSetSize' : 1380 //Long, 0x564

'MinimumWorkingSetSize' : 200 //Long, 0xC8

'Name' : 'lsass.exe' //String

'OSCreationClassName' : 'Win32_OperatingSystem' //String

'OSName' : 'Microsoft Windows Server 2012 R2 Datacenter Evaluation|C:\Windows|\Device\Harddisk0\Partition1' //String

'OtherOperationCount' : '1782949' //String, 0x1B34A5

'OtherTransferCount' : '33686333' //String, 0x202033D

'PageFaults' : 161875 //Long, 0x27853

'PageFileUsage' : 54968 //Long, 0xD6B8

'ParentProcessId' : 532 //Long, 0x214

'PeakPageFileUsage' : 84544 //Long, 0x14A40

'PeakVirtualSize' : '1278951424' //String, 0x4C3B4000

'PeakWorkingSetSize' : 82876 //Long, 0x143BC

'Priority' : 9 //Long, 0x9

'PrivatePageCount' : '56287232' //String, 0x35AE000

'ProcessId' : 628 //Long, 0x274

'QuotaNonPagedPoolUsage' : 271 //Long, 0x10F

'QuotaPagedPoolUsage' : 261 //Long, 0x105

'QuotaPeakNonPagedPoolUsage' : 331 //Long, 0x14B

'QuotaPeakPagedPoolUsage' : 263 //Long, 0x107

'ReadOperationCount' : '578545' //String, 0x8D3F1

'ReadTransferCount' : '1204636202' //String, 0x47CD4A2A

'SessionId' : 0 //Long, 0x0

'Status' : null

'TerminationDate' : null

'ThreadCount' : 34 //Long, 0x22

'UserModeTime' : '10006562500' //String

'VirtualSize' : '1256992768' //String, 0x4AEC3000

'WindowsVersion' : '6.3.9600' //String

'WorkingSetSize' : '54628352' //String, 0x3419000

'WriteOperationCount' : '294582' //String, 0x47EB6

'WriteTransferCount' : '70514683' //String, 0x433F7FB

}

Instance \\W2012SDC\ROOT\cimv2:Win32_Process.Handle="784"

Properties={

'Caption' : 'svchost.exe' //String

'CommandLine' : 'C:\Windows\system32\svchost.exe -k DcomLaunch' //String

'CreationClassName' : 'Win32_Process' //String

'CreationDate' : '20141112140930.484421-480' //String

'CSCreationClassName' : 'Win32_ComputerSystem' //String

'CSName' : '.' //String

'Description' : 'svchost.exe' //String

'ExecutablePath' : 'C:\Windows\system32\svchost.exe' //String

'ExecutionState' : null

'Handle' : '784' //String, 0x310

'HandleCount' : 388 //Long, 0x184

'InstallDate' : null

'KernelModeTime' : '346875000' //String, 0x14ACE478

'MaximumWorkingSetSize' : 1380 //Long, 0x564

'MinimumWorkingSetSize' : 200 //Long, 0xC8

'Name' : 'svchost.exe' //String

'OSCreationClassName' : 'Win32_OperatingSystem' //String

'OSName' : 'Microsoft Windows Server 2012 R2 Datacenter Evaluation|C:\Windows|\Device\Harddisk0\Partition1' //String

'OtherOperationCount' : '12162' //String, 0x2F82

'OtherTransferCount' : '369292' //String, 0x5A28C

'PageFaults' : 16337 //Long, 0x3FD1

'PageFileUsage' : 4488 //Long, 0x1188

'ParentProcessId' : 620 //Long, 0x26C

'PeakPageFileUsage' : 4908 //Long, 0x132C

'PeakVirtualSize' : '51724288' //String, 0x3154000

'PeakWorkingSetSize' : 10592 //Long, 0x2960

'Priority' : 8 //Long, 0x8

'PrivatePageCount' : '4595712' //String, 0x462000

'ProcessId' : 784 //Long, 0x310

'QuotaNonPagedPoolUsage' : 16 //Long, 0x10

'QuotaPagedPoolUsage' : 207 //Long, 0xCF

'QuotaPeakNonPagedPoolUsage' : 22 //Long, 0x16

'QuotaPeakPagedPoolUsage' : 207 //Long, 0xCF

'ReadOperationCount' : '2' //String, 0x2

'ReadTransferCount' : '4608' //String, 0x1200

'SessionId' : 0 //Long, 0x0

'Status' : null

'TerminationDate' : null

'ThreadCount' : 12 //Long, 0xC

'UserModeTime' : '469062500' //String, 0x1BF55364

'VirtualSize' : '49594368' //String, 0x2F4C000

'WindowsVersion' : '6.3.9600' //String

'WorkingSetSize' : '7954432' //String, 0x796000

'WriteOperationCount' : '0' //String, 0x0

'WriteTransferCount' : '0' //String, 0x0

}

Instance \\W2012SDC\ROOT\cimv2:Win32_Process.Handle="828"

Properties={

'Caption' : 'svchost.exe' //String

'CommandLine' : 'C:\Windows\system32\svchost.exe -k RPCSS' //String

'CreationClassName' : 'Win32_Process' //String

'CreationDate' : '20141112140930.768982-480' //String

'CSCreationClassName' : 'Win32_ComputerSystem' //String

'CSName' : '.' //String

'Description' : 'svchost.exe' //String

'ExecutablePath' : 'C:\Windows\system32\svchost.exe' //String

'ExecutionState' : null

'Handle' : '828' //String, 0x33C

'HandleCount' : 669 //Long, 0x29D

'InstallDate' : null

'KernelModeTime' : '177968750' //String, 0xA9B966E

'MaximumWorkingSetSize' : 1380 //Long, 0x564

'MinimumWorkingSetSize' : 200 //Long, 0xC8

'Name' : 'svchost.exe' //String

'OSCreationClassName' : 'Win32_OperatingSystem' //String

'OSName' : 'Microsoft Windows Server 2012 R2 Datacenter Evaluation|C:\Windows|\Device\Harddisk0\Partition1' //String

'OtherOperationCount' : '16911' //String, 0x420F

'OtherTransferCount' : '881572' //String, 0xD73A4

'PageFaults' : 17398 //Long, 0x43F6

'PageFileUsage' : 4912 //Long, 0x1330

'ParentProcessId' : 620 //Long, 0x26C

'PeakPageFileUsage' : 5284 //Long, 0x14A4

'PeakVirtualSize' : '41500672' //String, 0x2794000

'PeakWorkingSetSize' : 7992 //Long, 0x1F38

'Priority' : 8 //Long, 0x8

'PrivatePageCount' : '5029888' //String, 0x4CC000

'ProcessId' : 828 //Long, 0x33C

'QuotaNonPagedPoolUsage' : 20 //Long, 0x14

'QuotaPagedPoolUsage' : 97 //Long, 0x61

'QuotaPeakNonPagedPoolUsage' : 29 //Long, 0x1D

'QuotaPeakPagedPoolUsage' : 97 //Long, 0x61

'ReadOperationCount' : '0' //String, 0x0

'ReadTransferCount' : '0' //String, 0x0

'SessionId' : 0 //Long, 0x0

'Status' : null

'TerminationDate' : null

'ThreadCount' : 10 //Long, 0xA

'UserModeTime' : '370937500' //String, 0x161C0E9C

'VirtualSize' : '33697792' //String, 0x2023000

'WindowsVersion' : '6.3.9600' //String

'WorkingSetSize' : '6340608' //String, 0x60C000

'WriteOperationCount' : '0' //String, 0x0

'WriteTransferCount' : '0' //String, 0x0

}

Instance \\W2012SDC\ROOT\cimv2:Win32_Process.Handle="924"

Properties={

'Caption' : 'dwm.exe' //String

'CommandLine' : '"dwm.exe"' //String

'CreationClassName' : 'Win32_Process' //String

'CreationDate' : '20141112140931.974058-480' //String

'CSCreationClassName' : 'Win32_ComputerSystem' //String

'CSName' : '.' //String

'Description' : 'dwm.exe' //String

'ExecutablePath' : 'C:\Windows\system32\dwm.exe' //String

'ExecutionState' : null

'Handle' : '924' //String, 0x39C

'HandleCount' : 190 //Long, 0xBE

'InstallDate' : null

'KernelModeTime' : '12343750' //String, 0xBC59C6

'MaximumWorkingSetSize' : 1380 //Long, 0x564

'MinimumWorkingSetSize' : 200 //Long, 0xC8

'Name' : 'dwm.exe' //String

'OSCreationClassName' : 'Win32_OperatingSystem' //String

'OSName' : 'Microsoft Windows Server 2012 R2 Datacenter Evaluation|C:\Windows|\Device\Harddisk0\Partition1' //String

'OtherOperationCount' : '253' //String, 0xFD

'OtherTransferCount' : '2266' //String, 0x8DA

'PageFaults' : 120508 //Long, 0x1D6BC

'PageFileUsage' : 22392 //Long, 0x5778

'ParentProcessId' : 576 //Long, 0x240

'PeakPageFileUsage' : 26828 //Long, 0x68CC

'PeakVirtualSize' : '147132416' //String, 0x8C51000

'PeakWorkingSetSize' : 46444 //Long, 0xB56C

'Priority' : 13 //Long, 0xD

'PrivatePageCount' : '22929408' //String, 0x15DE000

'ProcessId' : 924 //Long, 0x39C

'QuotaNonPagedPoolUsage' : 22 //Long, 0x16

'QuotaPagedPoolUsage' : 237 //Long, 0xED

'QuotaPeakNonPagedPoolUsage' : 29 //Long, 0x1D

'QuotaPeakPagedPoolUsage' : 259 //Long, 0x103

'ReadOperationCount' : '1' //String, 0x1

'ReadTransferCount' : '60' //String, 0x3C

'SessionId' : 1 //Long, 0x1

'Status' : null

'TerminationDate' : null

'ThreadCount' : 10 //Long, 0xA

'UserModeTime' : '23281250' //String, 0x1633E62

'VirtualSize' : '133636096' //String, 0x7F72000

'WindowsVersion' : '6.3.9600' //String

'WorkingSetSize' : '18792448' //String, 0x11EC000

'WriteOperationCount' : '0' //String, 0x0

'WriteTransferCount' : '0' //String, 0x0

}

Instance \\W2012SDC\ROOT\cimv2:Win32_Process.Handle="1004"

Properties={

'Caption' : 'svchost.exe' //String

'CommandLine' : 'C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted' //String

'CreationClassName' : 'Win32_Process' //String

'CreationDate' : '20141112140933.884835-480' //String

'CSCreationClassName' : 'Win32_ComputerSystem' //String

'CSName' : '.' //String

'Description' : 'svchost.exe' //String

'ExecutablePath' : 'C:\Windows\System32\svchost.exe' //String

'ExecutionState' : null

'Handle' : '1004' //String, 0x3EC

'HandleCount' : 861 //Long, 0x35D

'InstallDate' : null

'KernelModeTime' : '2217968750' //String

'MaximumWorkingSetSize' : 1380 //Long, 0x564

'MinimumWorkingSetSize' : 200 //Long, 0xC8

'Name' : 'svchost.exe' //String

'OSCreationClassName' : 'Win32_OperatingSystem' //String

'OSName' : 'Microsoft Windows Server 2012 R2 Datacenter Evaluation|C:\Windows|\Device\Harddisk0\Partition1' //String

'OtherOperationCount' : '114039' //String, 0x1BD77

'OtherTransferCount' : '1223026' //String, 0x12A972

'PageFaults' : 2394357 //Long, 0x2488F5

'PageFileUsage' : 19712 //Long, 0x4D00

'ParentProcessId' : 620 //Long, 0x26C

'PeakPageFileUsage' : 23080 //Long, 0x5A28

'PeakVirtualSize' : '576622592' //String, 0x225E9000

'PeakWorkingSetSize' : 35680 //Long, 0x8B60

'Priority' : 8 //Long, 0x8

'PrivatePageCount' : '20185088' //String, 0x1340000

'ProcessId' : 1004 //Long, 0x3EC

'QuotaNonPagedPoolUsage' : 27 //Long, 0x1B

'QuotaPagedPoolUsage' : 146 //Long, 0x92

'QuotaPeakNonPagedPoolUsage' : 112 //Long, 0x70

'QuotaPeakPagedPoolUsage' : 1050 //Long, 0x41A

'ReadOperationCount' : '2473696' //String, 0x25BEE0

'ReadTransferCount' : '3687368960' //String

'SessionId' : 0 //Long, 0x0

'Status' : null

'TerminationDate' : null

'ThreadCount' : 22 //Long, 0x16

'UserModeTime' : '2603750000' //String

'VirtualSize' : '103636992' //String, 0x62D6000

'WindowsVersion' : '6.3.9600' //String

'WorkingSetSize' : '16191488' //String, 0xF71000

'WriteOperationCount' : '17095' //String, 0x42C7

'WriteTransferCount' : '184491560' //String, 0xAFF1E28

}

Instance \\W2012SDC\ROOT\cimv2:Win32_Process.Handle="80"

Properties={

'Caption' : 'svchost.exe' //String

'CommandLine' : 'C:\Windows\system32\svchost.exe -k netsvcs' //String

'CreationClassName' : 'Win32_Process' //String

'CreationDate' : '20141112140934.150460-480' //String

'CSCreationClassName' : 'Win32_ComputerSystem' //String

'CSName' : '.' //String

'Description' : 'svchost.exe' //String

'ExecutablePath' : 'C:\Windows\system32\svchost.exe' //String

'ExecutionState' : null

'Handle' : '80' //String, 0x50

'HandleCount' : 2421 //Long, 0x975

'InstallDate' : null

'KernelModeTime' : '22812968750' //String

'MaximumWorkingSetSize' : 1380 //Long, 0x564

'MinimumWorkingSetSize' : 200 //Long, 0xC8

'Name' : 'svchost.exe' //String

'OSCreationClassName' : 'Win32_OperatingSystem' //String

'OSName' : 'Microsoft Windows Server 2012 R2 Datacenter Evaluation|C:\Windows|\Device\Harddisk0\Partition1' //String

'OtherOperationCount' : '15633553' //String, 0xEE8C91

'OtherTransferCount' : '74211597' //String, 0x46C610D

'PageFaults' : 5806361 //Long, 0x589919

'PageFileUsage' : 80824 //Long, 0x13BB8

'ParentProcessId' : 620 //Long, 0x26C

'PeakPageFileUsage' : 177816 //Long, 0x2B698

'PeakVirtualSize' : '538509312' //String, 0x20190000

'PeakWorkingSetSize' : 170788 //Long, 0x29B24

'Priority' : 8 //Long, 0x8

'PrivatePageCount' : '82763776' //String, 0x4EEE000

'ProcessId' : 80 //Long, 0x50

'QuotaNonPagedPoolUsage' : 132 //Long, 0x84

'QuotaPagedPoolUsage' : 455 //Long, 0x1C7

'QuotaPeakNonPagedPoolUsage' : 149 //Long, 0x95

'QuotaPeakPagedPoolUsage' : 476 //Long, 0x1DC

'ReadOperationCount' : '5760187' //String, 0x57E4BB

'ReadTransferCount' : '1583303702' //String, 0x5E5F4C16

'SessionId' : 0 //Long, 0x0

'Status' : null

'TerminationDate' : null

'ThreadCount' : 95 //Long, 0x5F

'UserModeTime' : '71838281250' //String

'VirtualSize' : '365391872' //String, 0x15C77000

'WindowsVersion' : '6.3.9600' //String

'WorkingSetSize' : '66617344' //String, 0x3F88000

'WriteOperationCount' : '3767626' //String, 0x397D4A

'WriteTransferCount' : '598635612' //String, 0x23AE745C

}

Instance \\W2012SDC\ROOT\cimv2:Win32_Process.Handle="376"

Properties={

'Caption' : 'svchost.exe' //String

'CommandLine' : 'C:\Windows\system32\svchost.exe -k LocalService' //String

'CreationClassName' : 'Win32_Process' //String

'CreationDate' : '20141112140934.337961-480' //String

'CSCreationClassName' : 'Win32_ComputerSystem' //String

'CSName' : '.' //String

'Description' : 'svchost.exe' //String

'ExecutablePath' : 'C:\Windows\system32\svchost.exe' //String

'ExecutionState' : null

'Handle' : '376' //String, 0x178

'HandleCount' : 893 //Long, 0x37D

'InstallDate' : null

'KernelModeTime' : '18437500' //String, 0x119557C

'MaximumWorkingSetSize' : 1380 //Long, 0x564

'MinimumWorkingSetSize' : 200 //Long, 0xC8

'Name' : 'svchost.exe' //String

'OSCreationClassName' : 'Win32_OperatingSystem' //String

'OSName' : 'Microsoft Windows Server 2012 R2 Datacenter Evaluation|C:\Windows|\Device\Harddisk0\Partition1' //String

'OtherOperationCount' : '15578' //String, 0x3CDA

'OtherTransferCount' : '768224' //String, 0xBB8E0

'PageFaults' : 9890 //Long, 0x26A2

'PageFileUsage' : 9432 //Long, 0x24D8

'ParentProcessId' : 620 //Long, 0x26C

'PeakPageFileUsage' : 10692 //Long, 0x29C4

'PeakVirtualSize' : '119320576' //String, 0x71CB000

'PeakWorkingSetSize' : 18780 //Long, 0x495C

'Priority' : 8 //Long, 0x8

'PrivatePageCount' : '9658368' //String, 0x936000

'ProcessId' : 376 //Long, 0x178

'QuotaNonPagedPoolUsage' : 33 //Long, 0x21

'QuotaPagedPoolUsage' : 241 //Long, 0xF1

'QuotaPeakNonPagedPoolUsage' : 45 //Long, 0x2D

'QuotaPeakPagedPoolUsage' : 247 //Long, 0xF7

'ReadOperationCount' : '34' //String, 0x22

'ReadTransferCount' : '790' //String, 0x316

'SessionId' : 0 //Long, 0x0

'Status' : null

'TerminationDate' : null

'ThreadCount' : 19 //Long, 0x13

'UserModeTime' : '55156250' //String, 0x3499E1A

'VirtualSize' : '105467904' //String, 0x6495000

'WindowsVersion' : '6.3.9600' //String

'WorkingSetSize' : '10948608' //String, 0xA71000

'WriteOperationCount' : '1' //String, 0x1

'WriteTransferCount' : '160' //String, 0xA0

}

Instance \\W2012SDC\ROOT\cimv2:Win32_Process.Handle="448"

Properties={

'Caption' : 'svchost.exe' //String

'CommandLine' : 'C:\Windows\System32\svchost.exe -k BlockStorageServices' //String

'CreationClassName' : 'Win32_Process' //String

'CreationDate' : '20141112140934.935013-480' //String

'CSCreationClassName' : 'Win32_ComputerSystem' //String

'CSName' : '.' //String

'Description' : 'svchost.exe' //String

'ExecutablePath' : 'C:\Windows\System32\svchost.exe' //String

'ExecutionState' : null

'Handle' : '448' //String, 0x1C0

'HandleCount' : 254 //Long, 0xFE

'InstallDate' : null

'KernelModeTime' : '1250000' //String, 0x1312D0

'MaximumWorkingSetSize' : 1380 //Long, 0x564

'MinimumWorkingSetSize' : 200 //Long, 0xC8

'Name' : 'svchost.exe' //String

'OSCreationClassName' : 'Win32_OperatingSystem' //String

'OSName' : 'Microsoft Windows Server 2012 R2 Datacenter Evaluation|C:\Windows|\Device\Harddisk0\Partition1' //String

'OtherOperationCount' : '617' //String, 0x269

'OtherTransferCount' : '9384' //String, 0x24A8

'PageFaults' : 6358 //Long, 0x18D6

'PageFileUsage' : 3016 //Long, 0xBC8

'ParentProcessId' : 620 //Long, 0x26C

'PeakPageFileUsage' : 3488 //Long, 0xDA0

'PeakVirtualSize' : '78598144' //String, 0x4AF5000

'PeakWorkingSetSize' : 9288 //Long, 0x2448

'Priority' : 8 //Long, 0x8

'PrivatePageCount' : '3088384' //String, 0x2F2000

'ProcessId' : 448 //Long, 0x1C0

'QuotaNonPagedPoolUsage' : 17 //Long, 0x11

'QuotaPagedPoolUsage' : 143 //Long, 0x8F

'QuotaPeakNonPagedPoolUsage' : 19 //Long, 0x13

'QuotaPeakPagedPoolUsage' : 143 //Long, 0x8F

'ReadOperationCount' : '8' //String, 0x8

'ReadTransferCount' : '1517' //String, 0x5ED

'SessionId' : 0 //Long, 0x0

'Status' : null

'TerminationDate' : null

'ThreadCount' : 11 //Long, 0xB

'UserModeTime' : '4062500' //String, 0x3DFD24

'VirtualSize' : '73805824' //String, 0x4663000

'WindowsVersion' : '6.3.9600' //String

'WorkingSetSize' : '3162112' //String, 0x304000

'WriteOperationCount' : '8' //String, 0x8

'WriteTransferCount' : '3599' //String, 0xE0F

}

Instance \\W2012SDC\ROOT\cimv2:Win32_Process.Handle="800"

Properties={

'Caption' : 'svchost.exe' //String

'CommandLine' : 'C:\Windows\system32\svchost.exe -k WlansvcGroup' //String

'CreationClassName' : 'Win32_Process' //String

'CreationDate' : '20141112140936.586248-480' //String

'CSCreationClassName' : 'Win32_ComputerSystem' //String

'CSName' : '.' //String

'Description' : 'svchost.exe' //String

'ExecutablePath' : 'C:\Windows\system32\svchost.exe' //String

'ExecutionState' : null

'Handle' : '800' //String, 0x320

'HandleCount' : 243 //Long, 0xF3

'InstallDate' : null

'KernelModeTime' : '625000' //String, 0x98968

'MaximumWorkingSetSize' : 1380 //Long, 0x564

'MinimumWorkingSetSize' : 200 //Long, 0xC8

'Name' : 'svchost.exe' //String

'OSCreationClassName' : 'Win32_OperatingSystem' //String

'OSName' : 'Microsoft Windows Server 2012 R2 Datacenter Evaluation|C:\Windows|\Device\Harddisk0\Partition1' //String

'OtherOperationCount' : '332' //String, 0x14C

'OtherTransferCount' : '10670' //String, 0x29AE

'PageFaults' : 3027 //Long, 0xBD3

'PageFileUsage' : 3580 //Long, 0xDFC

'ParentProcessId' : 620 //Long, 0x26C

'PeakPageFileUsage' : 3652 //Long, 0xE44

'PeakVirtualSize' : '49754112' //String, 0x2F73000

'PeakWorkingSetSize' : 8912 //Long, 0x22D0

'Priority' : 8 //Long, 0x8

'PrivatePageCount' : '3665920' //String, 0x37F000

'ProcessId' : 800 //Long, 0x320

'QuotaNonPagedPoolUsage' : 13 //Long, 0xD

'QuotaPagedPoolUsage' : 87 //Long, 0x57

'QuotaPeakNonPagedPoolUsage' : 15 //Long, 0xF

'QuotaPeakPagedPoolUsage' : 88 //Long, 0x58

'ReadOperationCount' : '58' //String, 0x3A

'ReadTransferCount' : '142892' //String, 0x22E2C

'SessionId' : 0 //Long, 0x0

'Status' : null

'TerminationDate' : null

'ThreadCount' : 5 //Long, 0x5

'UserModeTime' : '156250' //String, 0x2625A

'VirtualSize' : '48685056' //String, 0x2E6E000

'WindowsVersion' : '6.3.9600' //String

'WorkingSetSize' : '1966080' //String, 0x1E0000

'WriteOperationCount' : '1' //String, 0x1

'WriteTransferCount' : '160' //String, 0xA0

}

Instance \\W2012SDC\ROOT\cimv2:Win32_Process.Handle="880"

Properties={

'Caption' : 'svchost.exe' //String

'CommandLine' : 'C:\Windows\system32\svchost.exe -k NetworkService' //String

'CreationClassName' : 'Win32_Process' //String

'CreationDate' : '20141112140936.605572-480' //String

'CSCreationClassName' : 'Win32_ComputerSystem' //String

'CSName' : '.' //String

'Description' : 'svchost.exe' //String

'ExecutablePath' : 'C:\Windows\system32\svchost.exe' //String

'ExecutionState' : null

'Handle' : '880' //String, 0x370

'HandleCount' : 767 //Long, 0x2FF

'InstallDate' : null

'KernelModeTime' : '17812500' //String, 0x10FCC14

'MaximumWorkingSetSize' : 1380 //Long, 0x564

'MinimumWorkingSetSize' : 200 //Long, 0xC8

'Name' : 'svchost.exe' //String

'OSCreationClassName' : 'Win32_OperatingSystem' //String

'OSName' : 'Microsoft Windows Server 2012 R2 Datacenter Evaluation|C:\Windows|\Device\Harddisk0\Partition1' //String

'OtherOperationCount' : '206767' //String, 0x327AF

'OtherTransferCount' : '15165091' //String, 0xE766A3

'PageFaults' : 25169 //Long, 0x6251

'PageFileUsage' : 9264 //Long, 0x2430

'ParentProcessId' : 620 //Long, 0x26C

'PeakPageFileUsage' : 10004 //Long, 0x2714

'PeakVirtualSize' : '1207242752' //String, 0x47F51000

'PeakWorkingSetSize' : 18788 //Long, 0x4964

'Priority' : 8 //Long, 0x8

'PrivatePageCount' : '9486336' //String, 0x90C000

'ProcessId' : 880 //Long, 0x370

'QuotaNonPagedPoolUsage' : 42 //Long, 0x2A

'QuotaPagedPoolUsage' : 201 //Long, 0xC9

'QuotaPeakNonPagedPoolUsage' : 50 //Long, 0x32

'QuotaPeakPagedPoolUsage' : 208 //Long, 0xD0

'ReadOperationCount' : '4737' //String, 0x1281

'ReadTransferCount' : '5019623' //String, 0x4C97E7

'SessionId' : 0 //Long, 0x0

'Status' : null

'TerminationDate' : null

'ThreadCount' : 25 //Long, 0x19

'UserModeTime' : '10312500' //String, 0x9D5B34

'VirtualSize' : '1203298304' //String, 0x47B8E000

'WindowsVersion' : '6.3.9600' //String

'WorkingSetSize' : '11161600' //String, 0xAA5000

'WriteOperationCount' : '3103' //String, 0xC1F

'WriteTransferCount' : '373743' //String, 0x5B3EF

}

Instance \\W2012SDC\ROOT\cimv2:Win32_Process.Handle="1180"

Properties={

'Caption' : 'svchost.exe' //String

'CommandLine' : 'C:\Windows\system32\svchost.exe -k LocalServiceNoNetwork' //String

'CreationClassName' : 'Win32_Process' //String

'CreationDate' : '20141112140939.365450-480' //String

'CSCreationClassName' : 'Win32_ComputerSystem' //String

'CSName' : '.' //String

'Description' : 'svchost.exe' //String

'ExecutablePath' : 'C:\Windows\system32\svchost.exe' //String

'ExecutionState' : null

'Handle' : '1180' //String, 0x49C

'HandleCount' : 411 //Long, 0x19B

'InstallDate' : null

'KernelModeTime' : '12656250' //String, 0xC11E7A

'MaximumWorkingSetSize' : 1380 //Long, 0x564

'MinimumWorkingSetSize' : 200 //Long, 0xC8

'Name' : 'svchost.exe' //String

'OSCreationClassName' : 'Win32_OperatingSystem' //String

'OSName' : 'Microsoft Windows Server 2012 R2 Datacenter Evaluation|C:\Windows|\Device\Harddisk0\Partition1' //String

'OtherOperationCount' : '16406' //String, 0x4016

'OtherTransferCount' : '3495024' //String, 0x355470

'PageFaults' : 178818 //Long, 0x2BA82

'PageFileUsage' : 15056 //Long, 0x3AD0

'ParentProcessId' : 620 //Long, 0x26C

'PeakPageFileUsage' : 17440 //Long, 0x4420

'PeakVirtualSize' : '89284608' //String, 0x5526000

'PeakWorkingSetSize' : 20716 //Long, 0x50EC

'Priority' : 8 //Long, 0x8

'PrivatePageCount' : '15417344' //String, 0xEB4000

'ProcessId' : 1180 //Long, 0x49C

'QuotaNonPagedPoolUsage' : 35 //Long, 0x23

'QuotaPagedPoolUsage' : 122 //Long, 0x7A

'QuotaPeakNonPagedPoolUsage' : 39 //Long, 0x27

'QuotaPeakPagedPoolUsage' : 134 //Long, 0x86

'ReadOperationCount' : '0' //String, 0x0

'ReadTransferCount' : '0' //String, 0x0

'SessionId' : 0 //Long, 0x0

'Status' : null

'TerminationDate' : null

'ThreadCount' : 18 //Long, 0x12

'UserModeTime' : '19375000' //String, 0x127A398

'VirtualSize' : '86749184' //String, 0x52BB000

'WindowsVersion' : '6.3.9600' //String

'WorkingSetSize' : '13225984' //String, 0xC9D000

'WriteOperationCount' : '1' //String, 0x1

'WriteTransferCount' : '32768' //String, 0x8000

}

Instance \\W2012SDC\ROOT\cimv2:Win32_Process.Handle="1500"

Properties={

'Caption' : 'spoolsv.exe' //String

'CommandLine' : 'C:\Windows\System32\spoolsv.exe' //String

'CreationClassName' : 'Win32_Process' //String

'CreationDate' : '20141112141006.496560-480' //String

'CSCreationClassName' : 'Win32_ComputerSystem' //String

'CSName' : '.' //String

'Description' : 'spoolsv.exe' //String

'ExecutablePath' : 'C:\Windows\System32\spoolsv.exe' //String

'ExecutionState' : null

'Handle' : '1500' //String, 0x5DC

'HandleCount' : 419 //Long, 0x1A3

'InstallDate' : null

'KernelModeTime' : '6250000' //String, 0x5F5E10

'MaximumWorkingSetSize' : 1380 //Long, 0x564

'MinimumWorkingSetSize' : 200 //Long, 0xC8

'Name' : 'spoolsv.exe' //String

'OSCreationClassName' : 'Win32_OperatingSystem' //String

'OSName' : 'Microsoft Windows Server 2012 R2 Datacenter Evaluation|C:\Windows|\Device\Harddisk0\Partition1' //String

'OtherOperationCount' : '1398' //String, 0x576

'OtherTransferCount' : '39450' //String, 0x9A1A

'PageFaults' : 23088 //Long, 0x5A30

'PageFileUsage' : 4340 //Long, 0x10F4

'ParentProcessId' : 620 //Long, 0x26C

'PeakPageFileUsage' : 4544 //Long, 0x11C0

'PeakVirtualSize' : '88711168' //String, 0x549A000

'PeakWorkingSetSize' : 9544 //Long, 0x2548

'Priority' : 8 //Long, 0x8

'PrivatePageCount' : '4444160' //String, 0x43D000

'ProcessId' : 1500 //Long, 0x5DC

'QuotaNonPagedPoolUsage' : 26 //Long, 0x1A

'QuotaPagedPoolUsage' : 174 //Long, 0xAE

'QuotaPeakNonPagedPoolUsage' : 28 //Long, 0x1C

'QuotaPeakPagedPoolUsage' : 175 //Long, 0xAF

'ReadOperationCount' : '54' //String, 0x36

'ReadTransferCount' : '4042' //String, 0xFCA

'SessionId' : 0 //Long, 0x0

'Status' : null

'TerminationDate' : null

'ThreadCount' : 13 //Long, 0xD

'UserModeTime' : '7031250' //String, 0x6B49D2

'VirtualSize' : '87605248' //String, 0x538C000

'WindowsVersion' : '6.3.9600' //String

'WorkingSetSize' : '4354048' //String, 0x427000

'WriteOperationCount' : '13' //String, 0xD

'WriteTransferCount' : '4051' //String, 0xFD3

}

Instance \\W2012SDC\ROOT\cimv2:Win32_Process.Handle="1612"

Properties={

'Caption' : 'Microsoft.ActiveDirectory.WebServices.exe' //String

'CommandLine' : 'C:\Windows\ADWS\Microsoft.ActiveDirectory.WebServices.exe' //String

'CreationClassName' : 'Win32_Process' //String

'CreationDate' : '20141112141012.973985-480' //String

'CSCreationClassName' : 'Win32_ComputerSystem' //String

'CSName' : '.' //String

'Description' : 'Microsoft.ActiveDirectory.WebServices.exe' //String

'ExecutablePath' : 'C:\Windows\ADWS\Microsoft.ActiveDirectory.WebServices.exe' //String

'ExecutionState' : null

'Handle' : '1612' //String, 0x64C

'HandleCount' : 360 //Long, 0x168

'InstallDate' : null

'KernelModeTime' : '1562500' //String, 0x17D784

'MaximumWorkingSetSize' : 1380 //Long, 0x564

'MinimumWorkingSetSize' : 200 //Long, 0xC8

'Name' : 'Microsoft.ActiveDirectory.WebServices.exe' //String

'OSCreationClassName' : 'Win32_OperatingSystem' //String

'OSName' : 'Microsoft Windows Server 2012 R2 Datacenter Evaluation|C:\Windows|\Device\Harddisk0\Partition1' //String

'OtherOperationCount' : '86863' //String, 0x1534F

'OtherTransferCount' : '2406838' //String, 0x24B9B6

'PageFaults' : 71246 //Long, 0x1164E

'PageFileUsage' : 31452 //Long, 0x7ADC

'ParentProcessId' : 620 //Long, 0x26C

'PeakPageFileUsage' : 32344 //Long, 0x7E58

'PeakVirtualSize' : '609386496' //String, 0x24528000

'PeakWorkingSetSize' : 40928 //Long, 0x9FE0

'Priority' : 8 //Long, 0x8

'PrivatePageCount' : '32206848' //String, 0x1EB7000

'ProcessId' : 1612 //Long, 0x64C

'QuotaNonPagedPoolUsage' : 39 //Long, 0x27

'QuotaPagedPoolUsage' : 359 //Long, 0x167

'QuotaPeakNonPagedPoolUsage' : 43 //Long, 0x2B

'QuotaPeakPagedPoolUsage' : 360 //Long, 0x168

'ReadOperationCount' : '127' //String, 0x7F

'ReadTransferCount' : '426064' //String, 0x68050

'SessionId' : 0 //Long, 0x0

'Status' : null

'TerminationDate' : null

'ThreadCount' : 12 //Long, 0xC

'UserModeTime' : '5156250' //String, 0x4EAD9A

'VirtualSize' : '605421568' //String, 0x24160000

'WindowsVersion' : '6.3.9600' //String

'WorkingSetSize' : '10850304' //String, 0xA59000

'WriteOperationCount' : '0' //String, 0x0

'WriteTransferCount' : '0' //String, 0x0

}

Instance \\W2012SDC\ROOT\cimv2:Win32_Process.Handle="1648"

Properties={

'Caption' : 'svchost.exe' //String

'CommandLine' : 'C:\Windows\system32\svchost.exe -k apphost' //String

'CreationClassName' : 'Win32_Process' //String

'CreationDate' : '20141112141014.967743-480' //String

'CSCreationClassName' : 'Win32_ComputerSystem' //String

'CSName' : '.' //String

'Description' : 'svchost.exe' //String

'ExecutablePath' : 'C:\Windows\system32\svchost.exe' //String

'ExecutionState' : null

'Handle' : '1648' //String, 0x670

'HandleCount' : 152 //Long, 0x98

'InstallDate' : null

'KernelModeTime' : '625000' //String, 0x98968

'MaximumWorkingSetSize' : 1380 //Long, 0x564

'MinimumWorkingSetSize' : 200 //Long, 0xC8

'Name' : 'svchost.exe' //String

'OSCreationClassName' : 'Win32_OperatingSystem' //String

'OSName' : 'Microsoft Windows Server 2012 R2 Datacenter Evaluation|C:\Windows|\Device\Harddisk0\Partition1' //String

'OtherOperationCount' : '505' //String, 0x1F9

'OtherTransferCount' : '9886' //String, 0x269E

'PageFaults' : 6776 //Long, 0x1A78

'PageFileUsage' : 7480 //Long, 0x1D38

'ParentProcessId' : 620 //Long, 0x26C

'PeakPageFileUsage' : 7604 //Long, 0x1DB4

'PeakVirtualSize' : '74858496' //String, 0x4764000

'PeakWorkingSetSize' : 11676 //Long, 0x2D9C

'Priority' : 8 //Long, 0x8

'PrivatePageCount' : '7659520' //String, 0x74E000

'ProcessId' : 1648 //Long, 0x670

'QuotaNonPagedPoolUsage' : 13 //Long, 0xD

'QuotaPagedPoolUsage' : 117 //Long, 0x75

'QuotaPeakNonPagedPoolUsage' : 14 //Long, 0xE

'QuotaPeakPagedPoolUsage' : 120 //Long, 0x78

'ReadOperationCount' : '243' //String, 0xF3

'ReadTransferCount' : '933895' //String, 0xE4007

'SessionId' : 0 //Long, 0x0

'Status' : null

'TerminationDate' : null

'ThreadCount' : 13 //Long, 0xD

'UserModeTime' : '312500' //String, 0x4C4B4

'VirtualSize' : '74260480' //String, 0x46D2000

'WindowsVersion' : '6.3.9600' //String

'WorkingSetSize' : '2351104' //String, 0x23E000

'WriteOperationCount' : '0' //String, 0x0

'WriteTransferCount' : '0' //String, 0x0

}

Instance \\W2012SDC\ROOT\cimv2:Win32_Process.Handle="1704"

Properties={

'Caption' : 'certsrv.exe' //String

'CommandLine' : 'C:\Windows\system32\certsrv.exe' //String

'CreationClassName' : 'Win32_Process' //String

'CreationDate' : '20141112141018.131395-480' //String

'CSCreationClassName' : 'Win32_ComputerSystem' //String

'CSName' : '.' //String

'Description' : 'certsrv.exe' //String

'ExecutablePath' : 'C:\Windows\system32\certsrv.exe' //String

'ExecutionState' : null

'Handle' : '1704' //String, 0x6A8

'HandleCount' : 363 //Long, 0x16B

'InstallDate' : null

'KernelModeTime' : '1562500' //String, 0x17D784

'MaximumWorkingSetSize' : 1380 //Long, 0x564

'MinimumWorkingSetSize' : 200 //Long, 0xC8

'Name' : 'certsrv.exe' //String

'OSCreationClassName' : 'Win32_OperatingSystem' //String

'OSName' : 'Microsoft Windows Server 2012 R2 Datacenter Evaluation|C:\Windows|\Device\Harddisk0\Partition1' //String

'OtherOperationCount' : '2238' //String, 0x8BE

'OtherTransferCount' : '51248' //String, 0xC830

'PageFaults' : 7785 //Long, 0x1E69

'PageFileUsage' : 12360 //Long, 0x3048

'ParentProcessId' : 620 //Long, 0x26C

'PeakPageFileUsage' : 12660 //Long, 0x3174

'PeakVirtualSize' : '1214898176' //String, 0x4869E000

'PeakWorkingSetSize' : 16048 //Long, 0x3EB0

'Priority' : 8 //Long, 0x8

'PrivatePageCount' : '12656640' //String, 0xC12000

'ProcessId' : 1704 //Long, 0x6A8

'QuotaNonPagedPoolUsage' : 30 //Long, 0x1E

'QuotaPagedPoolUsage' : 180 //Long, 0xB4

'QuotaPeakNonPagedPoolUsage' : 33 //Long, 0x21

'QuotaPeakPagedPoolUsage' : 181 //Long, 0xB5

'ReadOperationCount' : '84' //String, 0x54

'ReadTransferCount' : '2523516' //String, 0x26817C

'SessionId' : 0 //Long, 0x0

'Status' : null

'TerminationDate' : null

'ThreadCount' : 9 //Long, 0x9

'UserModeTime' : '2187500' //String, 0x2160EC

'VirtualSize' : '1207492608' //String, 0x47F8E000

'WindowsVersion' : '6.3.9600' //String

'WorkingSetSize' : '6836224' //String, 0x685000

'WriteOperationCount' : '83' //String, 0x53

'WriteTransferCount' : '1137083' //String, 0x1159BB

}

Instance \\W2012SDC\ROOT\cimv2:Win32_Process.Handle="1752"

Properties={

'Caption' : 'svchost.exe' //String

'CommandLine' : 'C:\Windows\system32\svchost -k ddpvssvc' //String

'CreationClassName' : 'Win32_Process' //String

'CreationDate' : '20141112141019.990774-480' //String

'CSCreationClassName' : 'Win32_ComputerSystem' //String

'CSName' : '.' //String

'Description' : 'svchost.exe' //String

'ExecutablePath' : 'C:\Windows\system32\svchost.exe' //String

'ExecutionState' : null

'Handle' : '1752' //String, 0x6D8

'HandleCount' : 100 //Long, 0x64

'InstallDate' : null

'KernelModeTime' : '156250' //String, 0x2625A

'MaximumWorkingSetSize' : 1380 //Long, 0x564

'MinimumWorkingSetSize' : 200 //Long, 0xC8

'Name' : 'svchost.exe' //String

'OSCreationClassName' : 'Win32_OperatingSystem' //String

'OSName' : 'Microsoft Windows Server 2012 R2 Datacenter Evaluation|C:\Windows|\Device\Harddisk0\Partition1' //String

'OtherOperationCount' : '106' //String, 0x6A

'OtherTransferCount' : '206' //String, 0xCE

'PageFaults' : 1565 //Long, 0x61D

'PageFileUsage' : 1188 //Long, 0x4A4

'ParentProcessId' : 620 //Long, 0x26C

'PeakPageFileUsage' : 1344 //Long, 0x540

'PeakVirtualSize' : '39354368' //String, 0x2588000

'PeakWorkingSetSize' : 5180 //Long, 0x143C

'Priority' : 8 //Long, 0x8

'PrivatePageCount' : '1216512' //String, 0x129000

'ProcessId' : 1752 //Long, 0x6D8

'QuotaNonPagedPoolUsage' : 9 //Long, 0x9

'QuotaPagedPoolUsage' : 75 //Long, 0x4B

'QuotaPeakNonPagedPoolUsage' : 10 //Long, 0xA

'QuotaPeakPagedPoolUsage' : 75 //Long, 0x4B

'ReadOperationCount' : '0' //String, 0x0

'ReadTransferCount' : '0' //String, 0x0

'SessionId' : 0 //Long, 0x0

'Status' : null

'TerminationDate' : null

'ThreadCount' : 2 //Long, 0x2

'UserModeTime' : '312500' //String, 0x4C4B4

'VirtualSize' : '37756928' //String, 0x2402000

'WindowsVersion' : '6.3.9600' //String

'WorkingSetSize' : '1011712' //String, 0xF7000

'WriteOperationCount' : '0' //String, 0x0

'WriteTransferCount' : '0' //String, 0x0

}

Instance \\W2012SDC\ROOT\cimv2:Win32_Process.Handle="1788"

Properties={

'Caption' : 'dfsrs.exe' //String

'CommandLine' : 'C:\Windows\system32\DFSRs.exe' //String

'CreationClassName' : 'Win32_Process' //String

'CreationDate' : '20141112141020.178273-480' //String

'CSCreationClassName' : 'Win32_ComputerSystem' //String

'CSName' : '.' //String

'Description' : 'dfsrs.exe' //String

'ExecutablePath' : 'C:\Windows\system32\DFSRs.exe' //String

'ExecutionState' : null

'Handle' : '1788' //String, 0x6FC

'HandleCount' : 335 //Long, 0x14F

'InstallDate' : null

'KernelModeTime' : '90468750' //String, 0x564718E

'MaximumWorkingSetSize' : 1380 //Long, 0x564

'MinimumWorkingSetSize' : 200 //Long, 0xC8

'Name' : 'dfsrs.exe' //String

'OSCreationClassName' : 'Win32_OperatingSystem' //String

'OSName' : 'Microsoft Windows Server 2012 R2 Datacenter Evaluation|C:\Windows|\Device\Harddisk0\Partition1' //String

'OtherOperationCount' : '468185' //String, 0x724D9

'OtherTransferCount' : '12017078' //String, 0xB75DB6

'PageFaults' : 32810 //Long, 0x802A

'PageFileUsage' : 15924 //Long, 0x3E34

'ParentProcessId' : 620 //Long, 0x26C

'PeakPageFileUsage' : 18104 //Long, 0x46B8

'PeakVirtualSize' : '657481728' //String, 0x27306000

'PeakWorkingSetSize' : 20612 //Long, 0x5084

'Priority' : 8 //Long, 0x8

'PrivatePageCount' : '16306176' //String, 0xF8D000

'ProcessId' : 1788 //Long, 0x6FC

'QuotaNonPagedPoolUsage' : 32 //Long, 0x20

'QuotaPagedPoolUsage' : 135 //Long, 0x87

'QuotaPeakNonPagedPoolUsage' : 36 //Long, 0x24

'QuotaPeakPagedPoolUsage' : 136 //Long, 0x88

'ReadOperationCount' : '9532' //String, 0x253C

'ReadTransferCount' : '38273984' //String, 0x24803C0

'SessionId' : 0 //Long, 0x0

'Status' : null

'TerminationDate' : null

'ThreadCount' : 16 //Long, 0x10

'UserModeTime' : '70000000' //String, 0x42C1D80

'VirtualSize' : '656400384' //String, 0x271FE000

'WindowsVersion' : '6.3.9600' //String

'WorkingSetSize' : '11771904' //String, 0xB3A000

'WriteOperationCount' : '27862' //String, 0x6CD6

'WriteTransferCount' : '15919972' //String, 0xF2EB64

}

Instance \\W2012SDC\ROOT\cimv2:Win32_Process.Handle="1804"

Properties={

'Caption' : 'svchost.exe' //String

'CommandLine' : 'C:\Windows\system32\svchost.exe -k DHCPServer' //String

'CreationClassName' : 'Win32_Process' //String

'CreationDate' : '20141112141020.490773-480' //String

'CSCreationClassName' : 'Win32_ComputerSystem' //String

'CSName' : '.' //String

'Description' : 'svchost.exe' //String

'ExecutablePath' : 'C:\Windows\system32\svchost.exe' //String

'ExecutionState' : null

'Handle' : '1804' //String, 0x70C

'HandleCount' : 286 //Long, 0x11E

'InstallDate' : null

'KernelModeTime' : '58906250' //String, 0x382D68A

'MaximumWorkingSetSize' : 1380 //Long, 0x564

'MinimumWorkingSetSize' : 200 //Long, 0xC8

'Name' : 'svchost.exe' //String

'OSCreationClassName' : 'Win32_OperatingSystem' //String

'OSName' : 'Microsoft Windows Server 2012 R2 Datacenter Evaluation|C:\Windows|\Device\Harddisk0\Partition1' //String

'OtherOperationCount' : '83751' //String, 0x14727

'OtherTransferCount' : '1641552' //String, 0x190C50

'PageFaults' : 369054 //Long, 0x5A19E

'PageFileUsage' : 128888 //Long, 0x1F778

'ParentProcessId' : 620 //Long, 0x26C

'PeakPageFileUsage' : 129944 //Long, 0x1FB98

'PeakVirtualSize' : '1314181120' //String, 0x4E54D000

'PeakWorkingSetSize' : 29028 //Long, 0x7164

'Priority' : 8 //Long, 0x8

'PrivatePageCount' : '131981312' //String, 0x7DDE000

'ProcessId' : 1804 //Long, 0x70C

'QuotaNonPagedPoolUsage' : 31 //Long, 0x1F

'QuotaPagedPoolUsage' : 148 //Long, 0x94

'QuotaPeakNonPagedPoolUsage' : 35 //Long, 0x23

'QuotaPeakPagedPoolUsage' : 148 //Long, 0x94

'ReadOperationCount' : '5719' //String, 0x1657

'ReadTransferCount' : '1447734976' //String, 0x564AAEC0

'SessionId' : 0 //Long, 0x0

'Status' : null

'TerminationDate' : null

'ThreadCount' : 21 //Long, 0x15

'UserModeTime' : '8281250' //String, 0x7E5CA2

'VirtualSize' : '1313046528' //String, 0x4E438000

'WindowsVersion' : '6.3.9600' //String

'WorkingSetSize' : '6119424' //String, 0x5D6000

'WriteOperationCount' : '2107' //String, 0x83B

'WriteTransferCount' : '1499434329' //String, 0x595F8D59

}

Instance \\W2012SDC\ROOT\cimv2:Win32_Process.Handle="1820"

Properties={

'Caption' : 'dns.exe' //String

'CommandLine' : 'C:\Windows\system32\dns.exe' //String

'CreationClassName' : 'Win32_Process' //String

'CreationDate' : '20141112141020.522023-480' //String

'CSCreationClassName' : 'Win32_ComputerSystem' //String

'CSName' : '.' //String

'Description' : 'dns.exe' //String

'ExecutablePath' : 'C:\Windows\system32\dns.exe' //String

'ExecutionState' : null

'Handle' : '1820' //String, 0x71C

'HandleCount' : 325 //Long, 0x145

'InstallDate' : null

'KernelModeTime' : '13750000' //String, 0xD1CEF0

'MaximumWorkingSetSize' : 1380 //Long, 0x564

'MinimumWorkingSetSize' : 200 //Long, 0xC8

'Name' : 'dns.exe' //String

'OSCreationClassName' : 'Win32_OperatingSystem' //String

'OSName' : 'Microsoft Windows Server 2012 R2 Datacenter Evaluation|C:\Windows|\Device\Harddisk0\Partition1' //String

'OtherOperationCount' : '42041' //String, 0xA439

'OtherTransferCount' : '1245369' //String, 0x1300B9

'PageFaults' : 14307 //Long, 0x37E3

'PageFileUsage' : 10376 //Long, 0x2888

'ParentProcessId' : 620 //Long, 0x26C

'PeakPageFileUsage' : 11672 //Long, 0x2D98

'PeakVirtualSize' : '60485632' //String, 0x39AF000

'PeakWorkingSetSize' : 9632 //Long, 0x25A0

'Priority' : 8 //Long, 0x8

'PrivatePageCount' : '10625024' //String, 0xA22000

'ProcessId' : 1820 //Long, 0x71C

'QuotaNonPagedPoolUsage' : 36 //Long, 0x24

'QuotaPagedPoolUsage' : 98 //Long, 0x62

'QuotaPeakNonPagedPoolUsage' : 43 //Long, 0x2B

'QuotaPeakPagedPoolUsage' : 98 //Long, 0x62

'ReadOperationCount' : '501' //String, 0x1F5

'ReadTransferCount' : '58116' //String, 0xE304

'SessionId' : 0 //Long, 0x0

'Status' : null

'TerminationDate' : null

'ThreadCount' : 20 //Long, 0x14

'UserModeTime' : '12031250' //String, 0xB79512

'VirtualSize' : '58322944' //String, 0x379F000

'WindowsVersion' : '6.3.9600' //String

'WorkingSetSize' : '6447104' //String, 0x626000

'WriteOperationCount' : '588' //String, 0x24C

'WriteTransferCount' : '1651744' //String, 0x193420

}

Instance \\W2012SDC\ROOT\cimv2:Win32_Process.Handle="1840"

Properties={

'Caption' : 'svchost.exe' //String

'CommandLine' : 'C:\Windows\system32\svchost.exe -k ftpsvc' //String

'CreationClassName' : 'Win32_Process' //String

'CreationDate' : '20141112141020.881400-480' //String

'CSCreationClassName' : 'Win32_ComputerSystem' //String

'CSName' : '.' //String

'Description' : 'svchost.exe' //String

'ExecutablePath' : 'C:\Windows\system32\svchost.exe' //String

'ExecutionState' : null

'Handle' : '1840' //String, 0x730

'HandleCount' : 273 //Long, 0x111

'InstallDate' : null

'KernelModeTime' : '156250' //String, 0x2625A

'MaximumWorkingSetSize' : 1380 //Long, 0x564

'MinimumWorkingSetSize' : 200 //Long, 0xC8

'Name' : 'svchost.exe' //String

'OSCreationClassName' : 'Win32_OperatingSystem' //String

'OSName' : 'Microsoft Windows Server 2012 R2 Datacenter Evaluation|C:\Windows|\Device\Harddisk0\Partition1' //String

'OtherOperationCount' : '278' //String, 0x116

'OtherTransferCount' : '3638' //String, 0xE36

'PageFaults' : 7280 //Long, 0x1C70

'PageFileUsage' : 4624 //Long, 0x1210

'ParentProcessId' : 620 //Long, 0x26C

'PeakPageFileUsage' : 4696 //Long, 0x1258

'PeakVirtualSize' : '49913856' //String, 0x2F9A000

'PeakWorkingSetSize' : 8848 //Long, 0x2290

'Priority' : 8 //Long, 0x8

'PrivatePageCount' : '4734976' //String, 0x484000

'ProcessId' : 1840 //Long, 0x730

'QuotaNonPagedPoolUsage' : 15 //Long, 0xF

'QuotaPagedPoolUsage' : 88 //Long, 0x58

'QuotaPeakNonPagedPoolUsage' : 15 //Long, 0xF

'QuotaPeakPagedPoolUsage' : 88 //Long, 0x58

'ReadOperationCount' : '121' //String, 0x79

'ReadTransferCount' : '457500' //String, 0x6FB1C

'SessionId' : 0 //Long, 0x0

'Status' : null

'TerminationDate' : null

'ThreadCount' : 13 //Long, 0xD

'UserModeTime' : '0' //String, 0x0

'VirtualSize' : '49381376' //String, 0x2F18000

'WindowsVersion' : '6.3.9600' //String

'WorkingSetSize' : '4898816' //String, 0x4AC000

'WriteOperationCount' : '0' //String, 0x0

'WriteTransferCount' : '0' //String, 0x0

}

Instance \\W2012SDC\ROOT\cimv2:Win32_Process.Handle="1856"

Properties={

'Caption' : 'inetinfo.exe' //String

'CommandLine' : 'C:\Windows\system32\inetsrv\inetinfo.exe' //String

'CreationClassName' : 'Win32_Process' //String

'CreationDate' : '20141112141021.137283-480' //String

'CSCreationClassName' : 'Win32_ComputerSystem' //String

'CSName' : '.' //String

'Description' : 'inetinfo.exe' //String

'ExecutablePath' : 'C:\Windows\system32\inetsrv\inetinfo.exe' //String

'ExecutionState' : null

'Handle' : '1856' //String, 0x740

'HandleCount' : 451 //Long, 0x1C3

'InstallDate' : null

'KernelModeTime' : '922812500' //String, 0x37010054

'MaximumWorkingSetSize' : 1380 //Long, 0x564

'MinimumWorkingSetSize' : 200 //Long, 0xC8

'Name' : 'inetinfo.exe' //String

'OSCreationClassName' : 'Win32_OperatingSystem' //String

'OSName' : 'Microsoft Windows Server 2012 R2 Datacenter Evaluation|C:\Windows|\Device\Harddisk0\Partition1' //String

'OtherOperationCount' : '978773' //String, 0xEEF55

'OtherTransferCount' : '15987422' //String, 0xF3F2DE

'PageFaults' : 327303 //Long, 0x4FE87

'PageFileUsage' : 17728 //Long, 0x4540

'ParentProcessId' : 620 //Long, 0x26C

'PeakPageFileUsage' : 18124 //Long, 0x46CC

'PeakVirtualSize' : '130600960' //String, 0x7C8D000

'PeakWorkingSetSize' : 26404 //Long, 0x6724

'Priority' : 8 //Long, 0x8

'PrivatePageCount' : '18153472' //String, 0x1150000

'ProcessId' : 1856 //Long, 0x740

'QuotaNonPagedPoolUsage' : 45 //Long, 0x2D

'QuotaPagedPoolUsage' : 127 //Long, 0x7F

'QuotaPeakNonPagedPoolUsage' : 49 //Long, 0x31

'QuotaPeakPagedPoolUsage' : 133 //Long, 0x85

'ReadOperationCount' : '119' //String, 0x77

'ReadTransferCount' : '1669263' //String, 0x19788F

'SessionId' : 0 //Long, 0x0

'Status' : null

'TerminationDate' : null

'ThreadCount' : 20 //Long, 0x14

'UserModeTime' : '1221093750' //String, 0x48C86976

'VirtualSize' : '112443392' //String, 0x6B3C000

'WindowsVersion' : '6.3.9600' //String

'WorkingSetSize' : '5124096' //String, 0x4E3000

'WriteOperationCount' : '38' //String, 0x26

'WriteTransferCount' : '1241926' //String, 0x12F346

}

Instance \\W2012SDC\ROOT\cimv2:Win32_Process.Handle="1912"

Properties={

'Caption' : 'ismserv.exe' //String

'CommandLine' : 'C:\Windows\System32\ismserv.exe' //String

'CreationClassName' : 'Win32_Process' //String

'CreationDate' : '20141112141021.820814-480' //String

'CSCreationClassName' : 'Win32_ComputerSystem' //String

'CSName' : '.' //String

'Description' : 'ismserv.exe' //String

'ExecutablePath' : 'C:\Windows\System32\ismserv.exe' //String

'ExecutionState' : null

'Handle' : '1912' //String, 0x778

'HandleCount' : 108 //Long, 0x6C

'InstallDate' : null

'KernelModeTime' : '312500' //String, 0x4C4B4

'MaximumWorkingSetSize' : 1380 //Long, 0x564

'MinimumWorkingSetSize' : 200 //Long, 0xC8

'Name' : 'ismserv.exe' //String

'OSCreationClassName' : 'Win32_OperatingSystem' //String

'OSName' : 'Microsoft Windows Server 2012 R2 Datacenter Evaluation|C:\Windows|\Device\Harddisk0\Partition1' //String

'OtherOperationCount' : '2716' //String, 0xA9C

'OtherTransferCount' : '16182' //String, 0x3F36

'PageFaults' : 5073 //Long, 0x13D1

'PageFileUsage' : 1932 //Long, 0x78C

'ParentProcessId' : 620 //Long, 0x26C

'PeakPageFileUsage' : 2004 //Long, 0x7D4

'PeakVirtualSize' : '32768000' //String, 0x1F40000

'PeakWorkingSetSize' : 4508 //Long, 0x119C

'Priority' : 8 //Long, 0x8

'PrivatePageCount' : '1978368' //String, 0x1E3000

'ProcessId' : 1912 //Long, 0x778

'QuotaNonPagedPoolUsage' : 12 //Long, 0xC

'QuotaPagedPoolUsage' : 48 //Long, 0x30

'QuotaPeakNonPagedPoolUsage' : 14 //Long, 0xE

'QuotaPeakPagedPoolUsage' : 48 //Long, 0x30

'ReadOperationCount' : '0' //String, 0x0

'ReadTransferCount' : '0' //String, 0x0

'SessionId' : 0 //Long, 0x0

'Status' : null

'TerminationDate' : null

'ThreadCount' : 8 //Long, 0x8

'UserModeTime' : '156250' //String, 0x2625A

'VirtualSize' : '32702464' //String, 0x1F30000

'WindowsVersion' : '6.3.9600' //String

'WorkingSetSize' : '3371008' //String, 0x337000

'WriteOperationCount' : '0' //String, 0x0

'WriteTransferCount' : '0' //String, 0x0

}

Instance \\W2012SDC\ROOT\cimv2:Win32_Process.Handle="1944"

Properties={

'Caption' : 'svchost.exe' //String

'CommandLine' : 'C:\Windows\system32\svchost.exe -k KpsSvcGroup' //String

'CreationClassName' : 'Win32_Process' //String

'CreationDate' : '20141112141021.987272-480' //String

'CSCreationClassName' : 'Win32_ComputerSystem' //String

'CSName' : '.' //String

'Description' : 'svchost.exe' //String

'ExecutablePath' : 'C:\Windows\system32\svchost.exe' //String

'ExecutionState' : null

'Handle' : '1944' //String, 0x798

'HandleCount' : 75 //Long, 0x4B

'InstallDate' : null

'KernelModeTime' : '0' //String, 0x0

'MaximumWorkingSetSize' : 1380 //Long, 0x564

'MinimumWorkingSetSize' : 200 //Long, 0xC8

'Name' : 'svchost.exe' //String

'OSCreationClassName' : 'Win32_OperatingSystem' //String

'OSName' : 'Microsoft Windows Server 2012 R2 Datacenter Evaluation|C:\Windows|\Device\Harddisk0\Partition1' //String

'OtherOperationCount' : '68' //String, 0x44

'OtherTransferCount' : '166' //String, 0xA6

'PageFaults' : 1054 //Long, 0x41E

'PageFileUsage' : 776 //Long, 0x308

'ParentProcessId' : 620 //Long, 0x26C

'PeakPageFileUsage' : 900 //Long, 0x384

'PeakVirtualSize' : '19378176' //String, 0x127B000

'PeakWorkingSetSize' : 3068 //Long, 0xBFC

'Priority' : 8 //Long, 0x8

'PrivatePageCount' : '794624' //String, 0xC2000

'ProcessId' : 1944 //Long, 0x798

'QuotaNonPagedPoolUsage' : 6 //Long, 0x6

'QuotaPagedPoolUsage' : 34 //Long, 0x22

'QuotaPeakNonPagedPoolUsage' : 7 //Long, 0x7

'QuotaPeakPagedPoolUsage' : 34 //Long, 0x22

'ReadOperationCount' : '0' //String, 0x0

'ReadTransferCount' : '0' //String, 0x0

'SessionId' : 0 //Long, 0x0

'Status' : null

'TerminationDate' : null

'ThreadCount' : 2 //Long, 0x2

'UserModeTime' : '0' //String, 0x0

'VirtualSize' : '16969728' //String, 0x102F000

'WindowsVersion' : '6.3.9600' //String

'WorkingSetSize' : '757760' //String, 0xB9000

'WriteOperationCount' : '0' //String, 0x0

'WriteTransferCount' : '0' //String, 0x0

}

Instance \\W2012SDC\ROOT\cimv2:Win32_Process.Handle="1964"

Properties={

'Caption' : 'svchost.exe' //String

'CommandLine' : 'C:\Windows\System32\svchost.exe -k LPDService' //String

'CreationClassName' : 'Win32_Process' //String

'CreationDate' : '20141112141021.987272-480' //String

'CSCreationClassName' : 'Win32_ComputerSystem' //String

'CSName' : '.' //String

'Description' : 'svchost.exe' //String

'ExecutablePath' : 'C:\Windows\System32\svchost.exe' //String

'ExecutionState' : null

'Handle' : '1964' //String, 0x7AC

'HandleCount' : 130 //Long, 0x82

'InstallDate' : null

'KernelModeTime' : '156250' //String, 0x2625A

'MaximumWorkingSetSize' : 1380 //Long, 0x564

'MinimumWorkingSetSize' : 200 //Long, 0xC8

'Name' : 'svchost.exe' //String

'OSCreationClassName' : 'Win32_OperatingSystem' //String

'OSName' : 'Microsoft Windows Server 2012 R2 Datacenter Evaluation|C:\Windows|\Device\Harddisk0\Partition1' //String

'OtherOperationCount' : '72' //String, 0x48

'OtherTransferCount' : '3082' //String, 0xC0A

'PageFaults' : 1276 //Long, 0x4FC

'PageFileUsage' : 1244 //Long, 0x4DC

'ParentProcessId' : 620 //Long, 0x26C

'PeakPageFileUsage' : 1344 //Long, 0x540

'PeakVirtualSize' : '58740736' //String, 0x3805000

'PeakWorkingSetSize' : 4340 //Long, 0x10F4

'Priority' : 8 //Long, 0x8

'PrivatePageCount' : '1273856' //String, 0x137000

'ProcessId' : 1964 //Long, 0x7AC

'QuotaNonPagedPoolUsage' : 10 //Long, 0xA

'QuotaPagedPoolUsage' : 107 //Long, 0x6B

'QuotaPeakNonPagedPoolUsage' : 10 //Long, 0xA

'QuotaPeakPagedPoolUsage' : 108 //Long, 0x6C

'ReadOperationCount' : '186' //String, 0xBA

'ReadTransferCount' : '95046' //String, 0x17346

'SessionId' : 0 //Long, 0x0

'Status' : null

'TerminationDate' : null

'ThreadCount' : 4 //Long, 0x4

'UserModeTime' : '156250' //String, 0x2625A

'VirtualSize' : '57675776' //String, 0x3701000

'WindowsVersion' : '6.3.9600' //String

'WorkingSetSize' : '872448' //String, 0xD5000

'WriteOperationCount' : '0' //String, 0x0

'WriteTransferCount' : '0' //String, 0x0

}

Instance \\W2012SDC\ROOT\cimv2:Win32_Process.Handle="2004"

Properties={

'Caption' : 'svchost.exe' //String

'CommandLine' : 'C:\Windows\system32\svchost.exe -k MSiSNS' //String

'CreationClassName' : 'Win32_Process' //String

'CreationDate' : '20141112141022.409146-480' //String

'CSCreationClassName' : 'Win32_ComputerSystem' //String

'CSName' : '.' //String

'Description' : 'svchost.exe' //String

'ExecutablePath' : 'C:\Windows\system32\svchost.exe' //String

'ExecutionState' : null

'Handle' : '2004' //String, 0x7D4

'HandleCount' : 70 //Long, 0x46

'InstallDate' : null

'KernelModeTime' : '156250' //String, 0x2625A

'MaximumWorkingSetSize' : 1380 //Long, 0x564

'MinimumWorkingSetSize' : 200 //Long, 0xC8

'Name' : 'svchost.exe' //String

'OSCreationClassName' : 'Win32_OperatingSystem' //String

'OSName' : 'Microsoft Windows Server 2012 R2 Datacenter Evaluation|C:\Windows|\Device\Harddisk0\Partition1' //String

'OtherOperationCount' : '144' //String, 0x90

'OtherTransferCount' : '2490' //String, 0x9BA

'PageFaults' : 1926 //Long, 0x786

'PageFileUsage' : 824 //Long, 0x338

'ParentProcessId' : 620 //Long, 0x26C

'PeakPageFileUsage' : 896 //Long, 0x380

'PeakVirtualSize' : '18833408' //String, 0x11F6000

'PeakWorkingSetSize' : 3084 //Long, 0xC0C

'Priority' : 8 //Long, 0x8

'PrivatePageCount' : '843776' //String, 0xCE000

'ProcessId' : 2004 //Long, 0x7D4

'QuotaNonPagedPoolUsage' : 7 //Long, 0x7

'QuotaPagedPoolUsage' : 32 //Long, 0x20

'QuotaPeakNonPagedPoolUsage' : 7 //Long, 0x7

'QuotaPeakPagedPoolUsage' : 32 //Long, 0x20

'ReadOperationCount' : '21' //String, 0x15

'ReadTransferCount' : '448' //String, 0x1C0

'SessionId' : 0 //Long, 0x0

'Status' : null

'TerminationDate' : null

'ThreadCount' : 5 //Long, 0x5

'UserModeTime' : '156250' //String, 0x2625A

'VirtualSize' : '18300928' //String, 0x1174000

'WindowsVersion' : '6.3.9600' //String

'WorkingSetSize' : '815104' //String, 0xC7000

'WriteOperationCount' : '10' //String, 0xA

'WriteTransferCount' : '448' //String, 0x1C0

}

Instance \\W2012SDC\ROOT\cimv2:Win32_Process.Handle="2032"

Properties={

'Caption' : 'mqsvc.exe' //String

'CommandLine' : 'C:\Windows\system32\mqsvc.exe' //String

'CreationClassName' : 'Win32_Process' //String

'CreationDate' : '20141112141022.612272-480' //String

'CSCreationClassName' : 'Win32_ComputerSystem' //String

'CSName' : '.' //String

'Description' : 'mqsvc.exe' //String

'ExecutablePath' : 'C:\Windows\system32\mqsvc.exe' //String

'ExecutionState' : null

'Handle' : '2032' //String, 0x7F0

'HandleCount' : 375 //Long, 0x177

'InstallDate' : null

'KernelModeTime' : '625000' //String, 0x98968

'MaximumWorkingSetSize' : 1380 //Long, 0x564

'MinimumWorkingSetSize' : 200 //Long, 0xC8

'Name' : 'mqsvc.exe' //String

'OSCreationClassName' : 'Win32_OperatingSystem' //String

'OSName' : 'Microsoft Windows Server 2012 R2 Datacenter Evaluation|C:\Windows|\Device\Harddisk0\Partition1' //String

'OtherOperationCount' : '1382' //String, 0x566

'OtherTransferCount' : '24156' //String, 0x5E5C

'PageFaults' : 4493 //Long, 0x118D

'PageFileUsage' : 6996 //Long, 0x1B54

'ParentProcessId' : 620 //Long, 0x26C

'PeakPageFileUsage' : 7508 //Long, 0x1D54

'PeakVirtualSize' : '101085184' //String, 0x6067000

'PeakWorkingSetSize' : 12928 //Long, 0x3280

'Priority' : 8 //Long, 0x8

'PrivatePageCount' : '7163904' //String, 0x6D5000

'ProcessId' : 2032 //Long, 0x7F0

'QuotaNonPagedPoolUsage' : 42 //Long, 0x2A

'QuotaPagedPoolUsage' : 162 //Long, 0xA2

'QuotaPeakNonPagedPoolUsage' : 45 //Long, 0x2D

'QuotaPeakPagedPoolUsage' : 163 //Long, 0xA3

'ReadOperationCount' : '221' //String, 0xDD

'ReadTransferCount' : '742292' //String, 0xB5394

'SessionId' : 0 //Long, 0x0

'Status' : null

'TerminationDate' : null

'ThreadCount' : 31 //Long, 0x1F

'UserModeTime' : '156250' //String, 0x2625A

'VirtualSize' : '96837632' //String, 0x5C5A000

'WindowsVersion' : '6.3.9600' //String

'WorkingSetSize' : '1806336' //String, 0x1B9000

'WriteOperationCount' : '23' //String, 0x17

'WriteTransferCount' : '68003' //String, 0x109A3

}

Instance \\W2012SDC\ROOT\cimv2:Win32_Process.Handle="2228"

Properties={

'Caption' : 'sqlservr.exe' //String

'CommandLine' : '"C:\Program Files\Microsoft SQL Server\MSSQL12.MSSQLSERVER\MSSQL\Binn\sqlservr.exe" -sMSSQLSERVER' //String

'CreationClassName' : 'Win32_Process' //String

'CreationDate' : '20141112141033.172411-480' //String

'CSCreationClassName' : 'Win32_ComputerSystem' //String

'CSName' : '.' //String

'Description' : 'sqlservr.exe' //String

'ExecutablePath' : 'C:\Program Files\Microsoft SQL Server\MSSQL12.MSSQLSERVER\MSSQL\Binn\sqlservr.exe' //String

'ExecutionState' : null

'Handle' : '2228' //String, 0x8B4

'HandleCount' : 652 //Long, 0x28C

'InstallDate' : null

'KernelModeTime' : '12492968750' //String

'MaximumWorkingSetSize' : 1380 //Long, 0x564

'MinimumWorkingSetSize' : 200 //Long, 0xC8

'Name' : 'sqlservr.exe' //String

'OSCreationClassName' : 'Win32_OperatingSystem' //String

'OSName' : 'Microsoft Windows Server 2012 R2 Datacenter Evaluation|C:\Windows|\Device\Harddisk0\Partition1' //String

'OtherOperationCount' : '575202' //String, 0x8C6E2

'OtherTransferCount' : '5506978' //String, 0x5407A2

'PageFaults' : 269028 //Long, 0x41AE4

'PageFileUsage' : 239940 //Long, 0x3A944

'ParentProcessId' : 620 //Long, 0x26C

'PeakPageFileUsage' : 255220 //Long, 0x3E4F4

'PeakVirtualSize' : '8787750912' //String

'PeakWorkingSetSize' : 136196 //Long, 0x21404

'Priority' : 8 //Long, 0x8

'PrivatePageCount' : '245698560' //String, 0xEA51000

'ProcessId' : 2228 //Long, 0x8B4

'QuotaNonPagedPoolUsage' : 61 //Long, 0x3D

'QuotaPagedPoolUsage' : 481 //Long, 0x1E1

'QuotaPeakNonPagedPoolUsage' : 63 //Long, 0x3F

'QuotaPeakPagedPoolUsage' : 483 //Long, 0x1E3

'ReadOperationCount' : '27935' //String, 0x6D1F

'ReadTransferCount' : '285610199' //String, 0x110610D7

'SessionId' : 0 //Long, 0x0

'Status' : null

'TerminationDate' : null

'ThreadCount' : 63 //Long, 0x3F

'UserModeTime' : '26304375000' //String

'VirtualSize' : '8772554752' //String

'WindowsVersion' : '6.3.9600' //String

'WorkingSetSize' : '62623744' //String, 0x3BB9000

'WriteOperationCount' : '12313' //String, 0x3019

'WriteTransferCount' : '84176535' //String, 0x5046E97

}

Instance \\W2012SDC\ROOT\cimv2:Win32_Process.Handle="2404"

Properties={

'Caption' : 'SMSvcHost.exe' //String

'CommandLine' : 'C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe' //String

'CreationClassName' : 'Win32_Process' //String

'CreationDate' : '20141112141043.515235-480' //String

'CSCreationClassName' : 'Win32_ComputerSystem' //String

'CSName' : '.' //String

'Description' : 'SMSvcHost.exe' //String

'ExecutablePath' : 'C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe' //String

'ExecutionState' : null

'Handle' : '2404' //String, 0x964

'HandleCount' : 280 //Long, 0x118

'InstallDate' : null

'KernelModeTime' : '625000' //String, 0x98968

'MaximumWorkingSetSize' : 1380 //Long, 0x564

'MinimumWorkingSetSize' : 200 //Long, 0xC8

'Name' : 'SMSvcHost.exe' //String

'OSCreationClassName' : 'Win32_OperatingSystem' //String

'OSName' : 'Microsoft Windows Server 2012 R2 Datacenter Evaluation|C:\Windows|\Device\Harddisk0\Partition1' //String

'OtherOperationCount' : '940' //String, 0x3AC

'OtherTransferCount' : '12151' //String, 0x2F77

'PageFaults' : 9146 //Long, 0x23BA

'PageFileUsage' : 29492 //Long, 0x7334

'ParentProcessId' : 620 //Long, 0x26C

'PeakPageFileUsage' : 30320 //Long, 0x7670

'PeakVirtualSize' : '610156544' //String, 0x245E4000

'PeakWorkingSetSize' : 30172 //Long, 0x75DC

'Priority' : 8 //Long, 0x8

'PrivatePageCount' : '30199808' //String, 0x1CCD000

'ProcessId' : 2404 //Long, 0x964

'QuotaNonPagedPoolUsage' : 35 //Long, 0x23

'QuotaPagedPoolUsage' : 374 //Long, 0x176

'QuotaPeakNonPagedPoolUsage' : 40 //Long, 0x28

'QuotaPeakPagedPoolUsage' : 374 //Long, 0x176

'ReadOperationCount' : '148' //String, 0x94

'ReadTransferCount' : '238784' //String, 0x3A4C0

'SessionId' : 0 //Long, 0x0

'Status' : null

'TerminationDate' : null

'ThreadCount' : 8 //Long, 0x8

'UserModeTime' : '2031250' //String, 0x1EFE92

'VirtualSize' : '598794240' //String, 0x23B0E000

'WindowsVersion' : '6.3.9600' //String

'WorkingSetSize' : '2994176' //String, 0x2DB000

'WriteOperationCount' : '56' //String, 0x38

'WriteTransferCount' : '35319' //String, 0x89F7

}

Instance \\W2012SDC\ROOT\cimv2:Win32_Process.Handle="2480"

Properties={

'Caption' : 'svchost.exe' //String

'CommandLine' : 'C:\Windows\System32\svchost.exe -k PeerDist' //String

'CreationClassName' : 'Win32_Process' //String

'CreationDate' : '20141112141043.862091-480' //String

'CSCreationClassName' : 'Win32_ComputerSystem' //String

'CSName' : '.' //String

'Description' : 'svchost.exe' //String

'ExecutablePath' : 'C:\Windows\System32\svchost.exe' //String

'ExecutionState' : null

'Handle' : '2480' //String, 0x9B0

'HandleCount' : 342 //Long, 0x156

'InstallDate' : null

'KernelModeTime' : '2500000' //String, 0x2625A0

'MaximumWorkingSetSize' : 1380 //Long, 0x564

'MinimumWorkingSetSize' : 200 //Long, 0xC8

'Name' : 'svchost.exe' //String

'OSCreationClassName' : 'Win32_OperatingSystem' //String

'OSName' : 'Microsoft Windows Server 2012 R2 Datacenter Evaluation|C:\Windows|\Device\Harddisk0\Partition1' //String

'OtherOperationCount' : '1531' //String, 0x5FB

'OtherTransferCount' : '38158' //String, 0x950E

'PageFaults' : 14046 //Long, 0x36DE

'PageFileUsage' : 53224 //Long, 0xCFE8

'ParentProcessId' : 620 //Long, 0x26C

'PeakPageFileUsage' : 54844 //Long, 0xD63C

'PeakVirtualSize' : '433553408' //String, 0x19D78000

'PeakWorkingSetSize' : 20776 //Long, 0x5128

'Priority' : 8 //Long, 0x8

'PrivatePageCount' : '54501376' //String, 0x33FA000

'ProcessId' : 2480 //Long, 0x9B0

'QuotaNonPagedPoolUsage' : 43 //Long, 0x2B

'QuotaPagedPoolUsage' : 158 //Long, 0x9E

'QuotaPeakNonPagedPoolUsage' : 45 //Long, 0x2D

'QuotaPeakPagedPoolUsage' : 158 //Long, 0x9E

'ReadOperationCount' : '203' //String, 0xCB

'ReadTransferCount' : '22484286' //String, 0x157153E

'SessionId' : 0 //Long, 0x0

'Status' : null

'TerminationDate' : null

'ThreadCount' : 13 //Long, 0xD

'UserModeTime' : '2656250' //String, 0x2887FA

'VirtualSize' : '430989312' //String, 0x19B06000

'WindowsVersion' : '6.3.9600' //String

'WorkingSetSize' : '802816' //String, 0xC4000

'WriteOperationCount' : '6' //String, 0x6

'WriteTransferCount' : '139264' //String, 0x22000

}

Instance \\W2012SDC\ROOT\cimv2:Win32_Process.Handle="2544"

Properties={

'Caption' : 'ReportingServicesService.exe' //String

'CommandLine' : '"C:\Program Files\Microsoft SQL Server\MSRS12.MSSQLSERVER\Reporting Services\ReportServer\bin\ReportingServicesService.exe"' //String

'CreationClassName' : 'Win32_Process' //String

'CreationDate' : '20141112141046.896445-480' //String

'CSCreationClassName' : 'Win32_ComputerSystem' //String

'CSName' : '.' //String

'Description' : 'ReportingServicesService.exe' //String

'ExecutablePath' : 'C:\Program Files\Microsoft SQL Server\MSRS12.MSSQLSERVER\Reporting Services\ReportServer\bin\ReportingServicesService.exe' //String

'ExecutionState' : null

'Handle' : '2544' //String, 0x9F0

'HandleCount' : 701 //Long, 0x2BD

'InstallDate' : null

'KernelModeTime' : '427187500' //String, 0x19765D2C

'MaximumWorkingSetSize' : 1380 //Long, 0x564

'MinimumWorkingSetSize' : 200 //Long, 0xC8

'Name' : 'ReportingServicesService.exe' //String

'OSCreationClassName' : 'Win32_OperatingSystem' //String

'OSName' : 'Microsoft Windows Server 2012 R2 Datacenter Evaluation|C:\Windows|\Device\Harddisk0\Partition1' //String

'OtherOperationCount' : '21533' //String, 0x541D

'OtherTransferCount' : '4239408' //String, 0x40B030

'PageFaults' : 218903 //Long, 0x35717

'PageFileUsage' : 140160 //Long, 0x22380

'ParentProcessId' : 620 //Long, 0x26C

'PeakPageFileUsage' : 140672 //Long, 0x22580

'PeakVirtualSize' : '8758919168' //String

'PeakWorkingSetSize' : 103352 //Long, 0x193B8

'Priority' : 8 //Long, 0x8

'PrivatePageCount' : '143523840' //String, 0x88E0000

'ProcessId' : 2544 //Long, 0x9F0

'QuotaNonPagedPoolUsage' : 58 //Long, 0x3A

'QuotaPagedPoolUsage' : 426 //Long, 0x1AA

'QuotaPeakNonPagedPoolUsage' : 66 //Long, 0x42

'QuotaPeakPagedPoolUsage' : 429 //Long, 0x1AD

'ReadOperationCount' : '5793' //String, 0x16A1

'ReadTransferCount' : '12223826' //String, 0xBA8552

'SessionId' : 0 //Long, 0x0

'Status' : null

'TerminationDate' : null

'ThreadCount' : 45 //Long, 0x2D

'UserModeTime' : '1950781250' //String, 0x74468F42

'VirtualSize' : '8751898624' //String

'WindowsVersion' : '6.3.9600' //String

'WorkingSetSize' : '46194688' //String, 0x2C0E000

'WriteOperationCount' : '6399' //String, 0x18FF

'WriteTransferCount' : '898691' //String, 0xDB683

}

Instance \\W2012SDC\ROOT\cimv2:Win32_Process.Handle="2748"

Properties={

'Caption' : 'ProviderRegistryService.exe' //String

'CommandLine' : 'C:\Windows\System32\Essentials\ProviderRegistryService.exe' //String

'CreationClassName' : 'Win32_Process' //String

'CreationDate' : '20141112141049.443322-480' //String

'CSCreationClassName' : 'Win32_ComputerSystem' //String

'CSName' : '.' //String

'Description' : 'ProviderRegistryService.exe' //String

'ExecutablePath' : 'C:\Windows\System32\Essentials\ProviderRegistryService.exe' //String

'ExecutionState' : null

'Handle' : '2748' //String, 0xABC

'HandleCount' : 428 //Long, 0x1AC

'InstallDate' : null

'KernelModeTime' : '2500000' //String, 0x2625A0

'MaximumWorkingSetSize' : 1380 //Long, 0x564

'MinimumWorkingSetSize' : 200 //Long, 0xC8

'Name' : 'ProviderRegistryService.exe' //String

'OSCreationClassName' : 'Win32_OperatingSystem' //String

'OSName' : 'Microsoft Windows Server 2012 R2 Datacenter Evaluation|C:\Windows|\Device\Harddisk0\Partition1' //String

'OtherOperationCount' : '52034' //String, 0xCB42

'OtherTransferCount' : '660081' //String, 0xA1271

'PageFaults' : 85984 //Long, 0x14FE0

'PageFileUsage' : 32636 //Long, 0x7F7C

'ParentProcessId' : 620 //Long, 0x26C

'PeakPageFileUsage' : 35856 //Long, 0x8C10

'PeakVirtualSize' : '620924928' //String, 0x25029000

'PeakWorkingSetSize' : 41464 //Long, 0xA1F8

'Priority' : 8 //Long, 0x8

'PrivatePageCount' : '33419264' //String, 0x1FDF000

'ProcessId' : 2748 //Long, 0xABC

'QuotaNonPagedPoolUsage' : 32 //Long, 0x20

'QuotaPagedPoolUsage' : 388 //Long, 0x184

'QuotaPeakNonPagedPoolUsage' : 42 //Long, 0x2A

'QuotaPeakPagedPoolUsage' : 388 //Long, 0x184

'ReadOperationCount' : '117' //String, 0x75

'ReadTransferCount' : '300599' //String, 0x49637

'SessionId' : 0 //Long, 0x0

'Status' : null

'TerminationDate' : null

'ThreadCount' : 9 //Long, 0x9

'UserModeTime' : '7343750' //String, 0x700E86

'VirtualSize' : '616427520' //String, 0x24BDF000

'WindowsVersion' : '6.3.9600' //String

'WorkingSetSize' : '10711040' //String, 0xA37000

'WriteOperationCount' : '54953' //String, 0xD6A9

'WriteTransferCount' : '8359821' //String, 0x7F8F8D

}

Instance \\W2012SDC\ROOT\cimv2:Win32_Process.Handle="2852"

Properties={

'Caption' : 'TCPSVCS.EXE' //String

'CommandLine' : 'C:\Windows\System32\tcpsvcs.exe' //String

'CreationClassName' : 'Win32_Process' //String

'CreationDate' : '20141112141051.186685-480' //String

'CSCreationClassName' : 'Win32_ComputerSystem' //String

'CSName' : '.' //String

'Description' : 'TCPSVCS.EXE' //String

'ExecutablePath' : 'C:\Windows\System32\tcpsvcs.exe' //String

'ExecutionState' : null

'Handle' : '2852' //String, 0xB24

'HandleCount' : 86 //Long, 0x56

'InstallDate' : null

'KernelModeTime' : '156250' //String, 0x2625A

'MaximumWorkingSetSize' : 1380 //Long, 0x564

'MinimumWorkingSetSize' : 200 //Long, 0xC8

'Name' : 'TCPSVCS.EXE' //String

'OSCreationClassName' : 'Win32_OperatingSystem' //String

'OSName' : 'Microsoft Windows Server 2012 R2 Datacenter Evaluation|C:\Windows|\Device\Harddisk0\Partition1' //String

'OtherOperationCount' : '425' //String, 0x1A9

'OtherTransferCount' : '7984' //String, 0x1F30

'PageFaults' : 860 //Long, 0x35C

'PageFileUsage' : 736 //Long, 0x2E0

'ParentProcessId' : 620 //Long, 0x26C

'PeakPageFileUsage' : 832 //Long, 0x340

'PeakVirtualSize' : '15405056' //String, 0xEB1000

'PeakWorkingSetSize' : 2920 //Long, 0xB68

'Priority' : 8 //Long, 0x8

'PrivatePageCount' : '753664' //String, 0xB8000

'ProcessId' : 2852 //Long, 0xB24

'QuotaNonPagedPoolUsage' : 17 //Long, 0x11

'QuotaPagedPoolUsage' : 31 //Long, 0x1F

'QuotaPeakNonPagedPoolUsage' : 18 //Long, 0x12

'QuotaPeakPagedPoolUsage' : 31 //Long, 0x1F

'ReadOperationCount' : '157' //String, 0x9D

'ReadTransferCount' : '80227' //String, 0x13963

'SessionId' : 0 //Long, 0x0

'Status' : null

'TerminationDate' : null

'ThreadCount' : 2 //Long, 0x2

'UserModeTime' : '0' //String, 0x0

'VirtualSize' : '14340096' //String, 0xDAD000

'WindowsVersion' : '6.3.9600' //String

'WorkingSetSize' : '1929216' //String, 0x1D7000

'WriteOperationCount' : '0' //String, 0x0

'WriteTransferCount' : '0' //String, 0x0

}

WUtils.com

Includes&Samples

CIM_Process, ROOT\cimv2 - Instances

Instances of CIM_Process

Instance \\W2012SDC\ROOT\cimv2:Win32_Process.Handle="0"

Instance \\W2012SDC\ROOT\cimv2:Win32_Process.Handle="4"

Instance \\W2012SDC\ROOT\cimv2:Win32_Process.Handle="320"

Instance \\W2012SDC\ROOT\cimv2:Win32_Process.Handle="456"

Instance \\W2012SDC\ROOT\cimv2:Win32_Process.Handle="524"

Instance \\W2012SDC\ROOT\cimv2:Win32_Process.Handle="532"

Instance \\W2012SDC\ROOT\cimv2:Win32_Process.Handle="576"

Instance \\W2012SDC\ROOT\cimv2:Win32_Process.Handle="620"

Instance \\W2012SDC\ROOT\cimv2:Win32_Process.Handle="628"

Instance \\W2012SDC\ROOT\cimv2:Win32_Process.Handle="784"

Instance \\W2012SDC\ROOT\cimv2:Win32_Process.Handle="828"

Instance \\W2012SDC\ROOT\cimv2:Win32_Process.Handle="924"

Instance \\W2012SDC\ROOT\cimv2:Win32_Process.Handle="1004"

Instance \\W2012SDC\ROOT\cimv2:Win32_Process.Handle="80"

Instance \\W2012SDC\ROOT\cimv2:Win32_Process.Handle="376"

Instance \\W2012SDC\ROOT\cimv2:Win32_Process.Handle="448"

Instance \\W2012SDC\ROOT\cimv2:Win32_Process.Handle="800"

Instance \\W2012SDC\ROOT\cimv2:Win32_Process.Handle="880"

Instance \\W2012SDC\ROOT\cimv2:Win32_Process.Handle="1180"

Instance \\W2012SDC\ROOT\cimv2:Win32_Process.Handle="1500"

Instance \\W2012SDC\ROOT\cimv2:Win32_Process.Handle="1612"

Instance \\W2012SDC\ROOT\cimv2:Win32_Process.Handle="1648"

Instance \\W2012SDC\ROOT\cimv2:Win32_Process.Handle="1704"

Instance \\W2012SDC\ROOT\cimv2:Win32_Process.Handle="1752"

Instance \\W2012SDC\ROOT\cimv2:Win32_Process.Handle="1788"

Instance \\W2012SDC\ROOT\cimv2:Win32_Process.Handle="1804"

Instance \\W2012SDC\ROOT\cimv2:Win32_Process.Handle="1820"

Instance \\W2012SDC\ROOT\cimv2:Win32_Process.Handle="1840"

Instance \\W2012SDC\ROOT\cimv2:Win32_Process.Handle="1856"

Instance \\W2012SDC\ROOT\cimv2:Win32_Process.Handle="1912"

Instance \\W2012SDC\ROOT\cimv2:Win32_Process.Handle="1944"

Instance \\W2012SDC\ROOT\cimv2:Win32_Process.Handle="1964"

Instance \\W2012SDC\ROOT\cimv2:Win32_Process.Handle="2004"

Instance \\W2012SDC\ROOT\cimv2:Win32_Process.Handle="2032"

Instance \\W2012SDC\ROOT\cimv2:Win32_Process.Handle="2228"

Instance \\W2012SDC\ROOT\cimv2:Win32_Process.Handle="2404"

Instance \\W2012SDC\ROOT\cimv2:Win32_Process.Handle="2480"

Instance \\W2012SDC\ROOT\cimv2:Win32_Process.Handle="2544"

Instance \\W2012SDC\ROOT\cimv2:Win32_Process.Handle="2748"

Instance \\W2012SDC\ROOT\cimv2:Win32_Process.Handle="2852"