CIM_Process, ROOT\cimv2 - Instances

Class | Childs (1) | Methods | Properties (18) | Qualifiers (5) | Instances (40) | Namespaces (2)
Samples: VB Script | C# | VB.Net | Search on:Microsoft

Instances of CIM_Process

This section contains sample wmi instances of CIM_Process class with their properties from Microsoft Windows Server 2012 R2 Datacenter Evaluation.
CIM_Process is an abstract class, so it has only derived instances, see derived child classes.

Instance \\W2012SDC\ROOT\cimv2:Win32_Process.Handle="0"

Properties={
   'Caption' : 'System Idle Process' //String
   'CommandLine' : null
   'CreationClassName' : 'Win32_Process' //String
   'CreationDate' : null
   'CSCreationClassName' : 'Win32_ComputerSystem' //String
   'CSName' : '.' //String
   'Description' : 'System Idle Process' //String
   'ExecutablePath' : null
   'ExecutionState' : null
   'Handle' : '0' //String, 0x0
   'HandleCount' : 0 //Long, 0x0
   'InstallDate' : null
   'KernelModeTime' : '3274000000000' //String
   'MaximumWorkingSetSize' : null
   'MinimumWorkingSetSize' : null
   'Name' : 'System Idle Process' //String
   'OSCreationClassName' : 'Win32_OperatingSystem' //String
   'OSName' : 'Microsoft Windows Server 2012 R2 Datacenter Evaluation|C:\Windows|\Device\Harddisk0\Partition1' //String
   'OtherOperationCount' : '0' //String, 0x0
   'OtherTransferCount' : '0' //String, 0x0
   'PageFaults' : 1 //Long, 0x1
   'PageFileUsage' : 0 //Long, 0x0
   'ParentProcessId' : 0 //Long, 0x0
   'PeakPageFileUsage' : 0 //Long, 0x0
   'PeakVirtualSize' : '65536' //String, 0x10000
   'PeakWorkingSetSize' : 4 //Long, 0x4
   'Priority' : 0 //Long, 0x0
   'PrivatePageCount' : '0' //String, 0x0
   'ProcessId' : 0 //Long, 0x0
   'QuotaNonPagedPoolUsage' : 0 //Long, 0x0
   'QuotaPagedPoolUsage' : 0 //Long, 0x0
   'QuotaPeakNonPagedPoolUsage' : 0 //Long, 0x0
   'QuotaPeakPagedPoolUsage' : 0 //Long, 0x0
   'ReadOperationCount' : '0' //String, 0x0
   'ReadTransferCount' : '0' //String, 0x0
   'SessionId' : 0 //Long, 0x0
   'Status' : null
   'TerminationDate' : null
   'ThreadCount' : 4 //Long, 0x4
   'UserModeTime' : '0' //String, 0x0
   'VirtualSize' : '65536' //String, 0x10000
   'WindowsVersion' : '6.3.9600' //String
   'WorkingSetSize' : '4096' //String, 0x1000
   'WriteOperationCount' : '0' //String, 0x0
   'WriteTransferCount' : '0' //String, 0x0
}

Instance \\W2012SDC\ROOT\cimv2:Win32_Process.Handle="4"

Properties={
   'Caption' : 'System' //String
   'CommandLine' : null
   'CreationClassName' : 'Win32_Process' //String
   'CreationDate' : '20141112140907.774544-480' //String
   'CSCreationClassName' : 'Win32_ComputerSystem' //String
   'CSName' : '.' //String
   'Description' : 'System' //String
   'ExecutablePath' : null
   'ExecutionState' : null
   'Handle' : '4' //String, 0x4
   'HandleCount' : 1202 //Long, 0x4B2
   'InstallDate' : null
   'KernelModeTime' : '2412656250' //String
   'MaximumWorkingSetSize' : null
   'MinimumWorkingSetSize' : null
   'Name' : 'System' //String
   'OSCreationClassName' : 'Win32_OperatingSystem' //String
   'OSName' : 'Microsoft Windows Server 2012 R2 Datacenter Evaluation|C:\Windows|\Device\Harddisk0\Partition1' //String
   'OtherOperationCount' : '11597' //String, 0x2D4D
   'OtherTransferCount' : '331463' //String, 0x50EC7
   'PageFaults' : 10069 //Long, 0x2755
   'PageFileUsage' : 104 //Long, 0x68
   'ParentProcessId' : 0 //Long, 0x0
   'PeakPageFileUsage' : 268 //Long, 0x10C
   'PeakVirtualSize' : '12505088' //String, 0xBED000
   'PeakWorkingSetSize' : 5364 //Long, 0x14F4
   'Priority' : 8 //Long, 0x8
   'PrivatePageCount' : '106496' //String, 0x1A000
   'ProcessId' : 4 //Long, 0x4
   'QuotaNonPagedPoolUsage' : 0 //Long, 0x0
   'QuotaPagedPoolUsage' : 0 //Long, 0x0
   'QuotaPeakNonPagedPoolUsage' : 0 //Long, 0x0
   'QuotaPeakPagedPoolUsage' : 0 //Long, 0x0
   'ReadOperationCount' : '390' //String, 0x186
   'ReadTransferCount' : '165421136' //String, 0x9DC2050
   'SessionId' : 0 //Long, 0x0
   'Status' : null
   'TerminationDate' : null
   'ThreadCount' : 170 //Long, 0xAA
   'UserModeTime' : '0' //String, 0x0
   'VirtualSize' : '11821056' //String, 0xB46000
   'WindowsVersion' : '6.3.9600' //String
   'WorkingSetSize' : '262144' //String, 0x40000
   'WriteOperationCount' : '10713' //String, 0x29D9
   'WriteTransferCount' : '253870325' //String, 0xF21C0F5
}

Instance \\W2012SDC\ROOT\cimv2:Win32_Process.Handle="320"

Properties={
   'Caption' : 'smss.exe' //String
   'CommandLine' : null
   'CreationClassName' : 'Win32_Process' //String
   'CreationDate' : '20141112140907.915167-480' //String
   'CSCreationClassName' : 'Win32_ComputerSystem' //String
   'CSName' : '.' //String
   'Description' : 'smss.exe' //String
   'ExecutablePath' : null
   'ExecutionState' : null
   'Handle' : '320' //String, 0x140
   'HandleCount' : 52 //Long, 0x34
   'InstallDate' : null
   'KernelModeTime' : '937500' //String, 0xE4E1C
   'MaximumWorkingSetSize' : null
   'MinimumWorkingSetSize' : null
   'Name' : 'smss.exe' //String
   'OSCreationClassName' : 'Win32_OperatingSystem' //String
   'OSName' : 'Microsoft Windows Server 2012 R2 Datacenter Evaluation|C:\Windows|\Device\Harddisk0\Partition1' //String
   'OtherOperationCount' : '276' //String, 0x114
   'OtherTransferCount' : '17438' //String, 0x441E
   'PageFaults' : 566 //Long, 0x236
   'PageFileUsage' : 276 //Long, 0x114
   'ParentProcessId' : 4 //Long, 0x4
   'PeakPageFileUsage' : 348 //Long, 0x15C
   'PeakVirtualSize' : '25460736' //String, 0x1848000
   'PeakWorkingSetSize' : 1060 //Long, 0x424
   'Priority' : 11 //Long, 0xB
   'PrivatePageCount' : '282624' //String, 0x45000
   'ProcessId' : 320 //Long, 0x140
   'QuotaNonPagedPoolUsage' : 3 //Long, 0x3
   'QuotaPagedPoolUsage' : 13 //Long, 0xD
   'QuotaPeakNonPagedPoolUsage' : 8 //Long, 0x8
   'QuotaPeakPagedPoolUsage' : 53 //Long, 0x35
   'ReadOperationCount' : '4' //String, 0x4
   'ReadTransferCount' : '29188' //String, 0x7204
   'SessionId' : 0 //Long, 0x0
   'Status' : null
   'TerminationDate' : null
   'ThreadCount' : 2 //Long, 0x2
   'UserModeTime' : '0' //String, 0x0
   'VirtualSize' : '4395008' //String, 0x431000
   'WindowsVersion' : '6.3.9600' //String
   'WorkingSetSize' : '335872' //String, 0x52000
   'WriteOperationCount' : '1' //String, 0x1
   'WriteTransferCount' : '32' //String, 0x20
}

Instance \\W2012SDC\ROOT\cimv2:Win32_Process.Handle="456"

Properties={
   'Caption' : 'csrss.exe' //String
   'CommandLine' : null
   'CreationClassName' : 'Win32_Process' //String
   'CreationDate' : '20141112140917.083497-480' //String
   'CSCreationClassName' : 'Win32_ComputerSystem' //String
   'CSName' : '.' //String
   'Description' : 'csrss.exe' //String
   'ExecutablePath' : null
   'ExecutionState' : null
   'Handle' : '456' //String, 0x1C8
   'HandleCount' : 645 //Long, 0x285
   'InstallDate' : null
   'KernelModeTime' : '38593750' //String, 0x24CE4D6
   'MaximumWorkingSetSize' : null
   'MinimumWorkingSetSize' : null
   'Name' : 'csrss.exe' //String
   'OSCreationClassName' : 'Win32_OperatingSystem' //String
   'OSName' : 'Microsoft Windows Server 2012 R2 Datacenter Evaluation|C:\Windows|\Device\Harddisk0\Partition1' //String
   'OtherOperationCount' : '21849' //String, 0x5559
   'OtherTransferCount' : '682900' //String, 0xA6B94
   'PageFaults' : 4134 //Long, 0x1026
   'PageFileUsage' : 2084 //Long, 0x824
   'ParentProcessId' : 448 //Long, 0x1C0
   'PeakPageFileUsage' : 2464 //Long, 0x9A0
   'PeakVirtualSize' : '61026304' //String, 0x3A33000
   'PeakWorkingSetSize' : 4028 //Long, 0xFBC
   'Priority' : 13 //Long, 0xD
   'PrivatePageCount' : '2134016' //String, 0x209000
   'ProcessId' : 456 //Long, 0x1C8
   'QuotaNonPagedPoolUsage' : 23 //Long, 0x17
   'QuotaPagedPoolUsage' : 195 //Long, 0xC3
   'QuotaPeakNonPagedPoolUsage' : 24 //Long, 0x18
   'QuotaPeakPagedPoolUsage' : 204 //Long, 0xCC
   'ReadOperationCount' : '444' //String, 0x1BC
   'ReadTransferCount' : '597407' //String, 0x91D9F
   'SessionId' : 0 //Long, 0x0
   'Status' : null
   'TerminationDate' : null
   'ThreadCount' : 10 //Long, 0xA
   'UserModeTime' : '16875000' //String, 0x1017DF8
   'VirtualSize' : '60567552' //String, 0x39C3000
   'WindowsVersion' : '6.3.9600' //String
   'WorkingSetSize' : '2424832' //String, 0x250000
   'WriteOperationCount' : '0' //String, 0x0
   'WriteTransferCount' : '0' //String, 0x0
}

Instance \\W2012SDC\ROOT\cimv2:Win32_Process.Handle="524"

Properties={
   'Caption' : 'csrss.exe' //String
   'CommandLine' : null
   'CreationClassName' : 'Win32_Process' //String
   'CreationDate' : '20141112140918.479233-480' //String
   'CSCreationClassName' : 'Win32_ComputerSystem' //String
   'CSName' : '.' //String
   'Description' : 'csrss.exe' //String
   'ExecutablePath' : null
   'ExecutionState' : null
   'Handle' : '524' //String, 0x20C
   'HandleCount' : 172 //Long, 0xAC
   'InstallDate' : null
   'KernelModeTime' : '27343750' //String, 0x1A13B86
   'MaximumWorkingSetSize' : null
   'MinimumWorkingSetSize' : null
   'Name' : 'csrss.exe' //String
   'OSCreationClassName' : 'Win32_OperatingSystem' //String
   'OSName' : 'Microsoft Windows Server 2012 R2 Datacenter Evaluation|C:\Windows|\Device\Harddisk0\Partition1' //String
   'OtherOperationCount' : '8033' //String, 0x1F61
   'OtherTransferCount' : '108002' //String, 0x1A5E2
   'PageFaults' : 12577 //Long, 0x3121
   'PageFileUsage' : 1672 //Long, 0x688
   'ParentProcessId' : 512 //Long, 0x200
   'PeakPageFileUsage' : 1732 //Long, 0x6C4
   'PeakVirtualSize' : '63275008' //String, 0x3C58000
   'PeakWorkingSetSize' : 16796 //Long, 0x419C
   'Priority' : 13 //Long, 0xD
   'PrivatePageCount' : '1712128' //String, 0x1A2000
   'ProcessId' : 524 //Long, 0x20C
   'QuotaNonPagedPoolUsage' : 12 //Long, 0xC
   'QuotaPagedPoolUsage' : 126 //Long, 0x7E
   'QuotaPeakNonPagedPoolUsage' : 14 //Long, 0xE
   'QuotaPeakPagedPoolUsage' : 144 //Long, 0x90
   'ReadOperationCount' : '13485' //String, 0x34AD
   'ReadTransferCount' : '629457' //String, 0x99AD1
   'SessionId' : 1 //Long, 0x1
   'Status' : null
   'TerminationDate' : null
   'ThreadCount' : 10 //Long, 0xA
   'UserModeTime' : '1250000' //String, 0x1312D0
   'VirtualSize' : '54829056' //String, 0x344A000
   'WindowsVersion' : '6.3.9600' //String
   'WorkingSetSize' : '2637824' //String, 0x284000
   'WriteOperationCount' : '0' //String, 0x0
   'WriteTransferCount' : '0' //String, 0x0
}

Instance \\W2012SDC\ROOT\cimv2:Win32_Process.Handle="532"

Properties={
   'Caption' : 'wininit.exe' //String
   'CommandLine' : 'wininit.exe' //String
   'CreationClassName' : 'Win32_Process' //String
   'CreationDate' : '20141112140918.510498-480' //String
   'CSCreationClassName' : 'Win32_ComputerSystem' //String
   'CSName' : '.' //String
   'Description' : 'wininit.exe' //String
   'ExecutablePath' : 'C:\Windows\system32\wininit.exe' //String
   'ExecutionState' : null
   'Handle' : '532' //String, 0x214
   'HandleCount' : 85 //Long, 0x55
   'InstallDate' : null
   'KernelModeTime' : '468750' //String, 0x7270E
   'MaximumWorkingSetSize' : 1380 //Long, 0x564
   'MinimumWorkingSetSize' : 200 //Long, 0xC8
   'Name' : 'wininit.exe' //String
   'OSCreationClassName' : 'Win32_OperatingSystem' //String
   'OSName' : 'Microsoft Windows Server 2012 R2 Datacenter Evaluation|C:\Windows|\Device\Harddisk0\Partition1' //String
   'OtherOperationCount' : '1028' //String, 0x404
   'OtherTransferCount' : '2620' //String, 0xA3C
   'PageFaults' : 1111 //Long, 0x457
   'PageFileUsage' : 864 //Long, 0x360
   'ParentProcessId' : 448 //Long, 0x1C0
   'PeakPageFileUsage' : 1072 //Long, 0x430
   'PeakVirtualSize' : '49328128' //String, 0x2F0B000
   'PeakWorkingSetSize' : 3700 //Long, 0xE74
   'Priority' : 13 //Long, 0xD
   'PrivatePageCount' : '884736' //String, 0xD8000
   'ProcessId' : 532 //Long, 0x214
   'QuotaNonPagedPoolUsage' : 8 //Long, 0x8
   'QuotaPagedPoolUsage' : 92 //Long, 0x5C
   'QuotaPeakNonPagedPoolUsage' : 10 //Long, 0xA
   'QuotaPeakPagedPoolUsage' : 96 //Long, 0x60
   'ReadOperationCount' : '1' //String, 0x1
   'ReadTransferCount' : '6656' //String, 0x1A00
   'SessionId' : 0 //Long, 0x0
   'Status' : null
   'TerminationDate' : null
   'ThreadCount' : 1 //Long, 0x1
   'UserModeTime' : '0' //String, 0x0
   'VirtualSize' : '43855872' //String, 0x29D3000
   'WindowsVersion' : '6.3.9600' //String
   'WorkingSetSize' : '151552' //String, 0x25000
   'WriteOperationCount' : '0' //String, 0x0
   'WriteTransferCount' : '0' //String, 0x0
}

Instance \\W2012SDC\ROOT\cimv2:Win32_Process.Handle="576"

Properties={
   'Caption' : 'winlogon.exe' //String
   'CommandLine' : 'winlogon.exe' //String
   'CreationClassName' : 'Win32_Process' //String
   'CreationDate' : '20141112140918.901124-480' //String
   'CSCreationClassName' : 'Win32_ComputerSystem' //String
   'CSName' : '.' //String
   'Description' : 'winlogon.exe' //String
   'ExecutablePath' : 'C:\Windows\system32\winlogon.exe' //String
   'ExecutionState' : null
   'Handle' : '576' //String, 0x240
   'HandleCount' : 175 //Long, 0xAF
   'InstallDate' : null
   'KernelModeTime' : '781250' //String, 0xBEBC2
   'MaximumWorkingSetSize' : 1380 //Long, 0x564
   'MinimumWorkingSetSize' : 200 //Long, 0xC8
   'Name' : 'winlogon.exe' //String
   'OSCreationClassName' : 'Win32_OperatingSystem' //String
   'OSName' : 'Microsoft Windows Server 2012 R2 Datacenter Evaluation|C:\Windows|\Device\Harddisk0\Partition1' //String
   'OtherOperationCount' : '1451' //String, 0x5AB
   'OtherTransferCount' : '144834' //String, 0x235C2
   'PageFaults' : 5341 //Long, 0x14DD
   'PageFileUsage' : 1476 //Long, 0x5C4
   'ParentProcessId' : 512 //Long, 0x200
   'PeakPageFileUsage' : 2660 //Long, 0xA64
   'PeakVirtualSize' : '64933888' //String, 0x3DED000
   'PeakWorkingSetSize' : 9324 //Long, 0x246C
   'Priority' : 13 //Long, 0xD
   'PrivatePageCount' : '1511424' //String, 0x171000
   'ProcessId' : 576 //Long, 0x240
   'QuotaNonPagedPoolUsage' : 10 //Long, 0xA
   'QuotaPagedPoolUsage' : 121 //Long, 0x79
   'QuotaPeakNonPagedPoolUsage' : 12 //Long, 0xC
   'QuotaPeakPagedPoolUsage' : 127 //Long, 0x7F
   'ReadOperationCount' : '7' //String, 0x7
   'ReadTransferCount' : '144896' //String, 0x23600
   'SessionId' : 1 //Long, 0x1
   'Status' : null
   'TerminationDate' : null
   'ThreadCount' : 2 //Long, 0x2
   'UserModeTime' : '156250' //String, 0x2625A
   'VirtualSize' : '60657664' //String, 0x39D9000
   'WindowsVersion' : '6.3.9600' //String
   'WorkingSetSize' : '1400832' //String, 0x156000
   'WriteOperationCount' : '5' //String, 0x5
   'WriteTransferCount' : '800' //String, 0x320
}

Instance \\W2012SDC\ROOT\cimv2:Win32_Process.Handle="620"

Properties={
   'Caption' : 'services.exe' //String
   'CommandLine' : null
   'CreationClassName' : 'Win32_Process' //String
   'CreationDate' : '20141112140919.890457-480' //String
   'CSCreationClassName' : 'Win32_ComputerSystem' //String
   'CSName' : '.' //String
   'Description' : 'services.exe' //String
   'ExecutablePath' : null
   'ExecutionState' : null
   'Handle' : '620' //String, 0x26C
   'HandleCount' : 685 //Long, 0x2AD
   'InstallDate' : null
   'KernelModeTime' : '151093750' //String, 0x90181F6
   'MaximumWorkingSetSize' : null
   'MinimumWorkingSetSize' : null
   'Name' : 'services.exe' //String
   'OSCreationClassName' : 'Win32_OperatingSystem' //String
   'OSName' : 'Microsoft Windows Server 2012 R2 Datacenter Evaluation|C:\Windows|\Device\Harddisk0\Partition1' //String
   'OtherOperationCount' : '150713' //String, 0x24CB9
   'OtherTransferCount' : '1299066' //String, 0x13D27A
   'PageFaults' : 20816 //Long, 0x5150
   'PageFileUsage' : 8360 //Long, 0x20A8
   'ParentProcessId' : 532 //Long, 0x214
   'PeakPageFileUsage' : 14436 //Long, 0x3864
   'PeakVirtualSize' : '624037888' //String, 0x25321000
   'PeakWorkingSetSize' : 12316 //Long, 0x301C
   'Priority' : 9 //Long, 0x9
   'PrivatePageCount' : '8560640' //String, 0x82A000
   'ProcessId' : 620 //Long, 0x26C
   'QuotaNonPagedPoolUsage' : 16 //Long, 0x10
   'QuotaPagedPoolUsage' : 148 //Long, 0x94
   'QuotaPeakNonPagedPoolUsage' : 24 //Long, 0x18
   'QuotaPeakPagedPoolUsage' : 149 //Long, 0x95
   'ReadOperationCount' : '284' //String, 0x11C
   'ReadTransferCount' : '6236500' //String, 0x5F2954
   'SessionId' : 0 //Long, 0x0
   'Status' : null
   'TerminationDate' : null
   'ThreadCount' : 8 //Long, 0x8
   'UserModeTime' : '125156250' //String, 0x775BB9A
   'VirtualSize' : '46968832' //String, 0x2CCB000
   'WindowsVersion' : '6.3.9600' //String
   'WorkingSetSize' : '9912320' //String, 0x974000
   'WriteOperationCount' : '458' //String, 0x1CA
   'WriteTransferCount' : '2276202' //String, 0x22BB6A
}

Instance \\W2012SDC\ROOT\cimv2:Win32_Process.Handle="628"

Properties={
   'Caption' : 'lsass.exe' //String
   'CommandLine' : 'C:\Windows\system32\lsass.exe' //String
   'CreationClassName' : 'Win32_Process' //String
   'CreationDate' : '20141112140920.300242-480' //String
   'CSCreationClassName' : 'Win32_ComputerSystem' //String
   'CSName' : '.' //String
   'Description' : 'lsass.exe' //String
   'ExecutablePath' : 'C:\Windows\system32\lsass.exe' //String
   'ExecutionState' : null
   'Handle' : '628' //String, 0x274
   'HandleCount' : 2226 //Long, 0x8B2
   'InstallDate' : null
   'KernelModeTime' : '4904531250' //String
   'MaximumWorkingSetSize' : 1380 //Long, 0x564
   'MinimumWorkingSetSize' : 200 //Long, 0xC8
   'Name' : 'lsass.exe' //String
   'OSCreationClassName' : 'Win32_OperatingSystem' //String
   'OSName' : 'Microsoft Windows Server 2012 R2 Datacenter Evaluation|C:\Windows|\Device\Harddisk0\Partition1' //String
   'OtherOperationCount' : '1782949' //String, 0x1B34A5
   'OtherTransferCount' : '33686333' //String, 0x202033D
   'PageFaults' : 161875 //Long, 0x27853
   'PageFileUsage' : 54968 //Long, 0xD6B8
   'ParentProcessId' : 532 //Long, 0x214
   'PeakPageFileUsage' : 84544 //Long, 0x14A40
   'PeakVirtualSize' : '1278951424' //String, 0x4C3B4000
   'PeakWorkingSetSize' : 82876 //Long, 0x143BC
   'Priority' : 9 //Long, 0x9
   'PrivatePageCount' : '56287232' //String, 0x35AE000
   'ProcessId' : 628 //Long, 0x274
   'QuotaNonPagedPoolUsage' : 271 //Long, 0x10F
   'QuotaPagedPoolUsage' : 261 //Long, 0x105
   'QuotaPeakNonPagedPoolUsage' : 331 //Long, 0x14B
   'QuotaPeakPagedPoolUsage' : 263 //Long, 0x107
   'ReadOperationCount' : '578545' //String, 0x8D3F1
   'ReadTransferCount' : '1204636202' //String, 0x47CD4A2A
   'SessionId' : 0 //Long, 0x0
   'Status' : null
   'TerminationDate' : null
   'ThreadCount' : 34 //Long, 0x22
   'UserModeTime' : '10006562500' //String
   'VirtualSize' : '1256992768' //String, 0x4AEC3000
   'WindowsVersion' : '6.3.9600' //String
   'WorkingSetSize' : '54628352' //String, 0x3419000
   'WriteOperationCount' : '294582' //String, 0x47EB6
   'WriteTransferCount' : '70514683' //String, 0x433F7FB
}

Instance \\W2012SDC\ROOT\cimv2:Win32_Process.Handle="784"

Properties={
   'Caption' : 'svchost.exe' //String
   'CommandLine' : 'C:\Windows\system32\svchost.exe -k DcomLaunch' //String
   'CreationClassName' : 'Win32_Process' //String
   'CreationDate' : '20141112140930.484421-480' //String
   'CSCreationClassName' : 'Win32_ComputerSystem' //String
   'CSName' : '.' //String
   'Description' : 'svchost.exe' //String
   'ExecutablePath' : 'C:\Windows\system32\svchost.exe' //String
   'ExecutionState' : null
   'Handle' : '784' //String, 0x310
   'HandleCount' : 388 //Long, 0x184
   'InstallDate' : null
   'KernelModeTime' : '346875000' //String, 0x14ACE478
   'MaximumWorkingSetSize' : 1380 //Long, 0x564
   'MinimumWorkingSetSize' : 200 //Long, 0xC8
   'Name' : 'svchost.exe' //String
   'OSCreationClassName' : 'Win32_OperatingSystem' //String
   'OSName' : 'Microsoft Windows Server 2012 R2 Datacenter Evaluation|C:\Windows|\Device\Harddisk0\Partition1' //String
   'OtherOperationCount' : '12162' //String, 0x2F82
   'OtherTransferCount' : '369292' //String, 0x5A28C
   'PageFaults' : 16337 //Long, 0x3FD1
   'PageFileUsage' : 4488 //Long, 0x1188
   'ParentProcessId' : 620 //Long, 0x26C
   'PeakPageFileUsage' : 4908 //Long, 0x132C
   'PeakVirtualSize' : '51724288' //String, 0x3154000
   'PeakWorkingSetSize' : 10592 //Long, 0x2960
   'Priority' : 8 //Long, 0x8
   'PrivatePageCount' : '4595712' //String, 0x462000
   'ProcessId' : 784 //Long, 0x310
   'QuotaNonPagedPoolUsage' : 16 //Long, 0x10
   'QuotaPagedPoolUsage' : 207 //Long, 0xCF
   'QuotaPeakNonPagedPoolUsage' : 22 //Long, 0x16
   'QuotaPeakPagedPoolUsage' : 207 //Long, 0xCF
   'ReadOperationCount' : '2' //String, 0x2
   'ReadTransferCount' : '4608' //String, 0x1200
   'SessionId' : 0 //Long, 0x0
   'Status' : null
   'TerminationDate' : null
   'ThreadCount' : 12 //Long, 0xC
   'UserModeTime' : '469062500' //String, 0x1BF55364
   'VirtualSize' : '49594368' //String, 0x2F4C000
   'WindowsVersion' : '6.3.9600' //String
   'WorkingSetSize' : '7954432' //String, 0x796000
   'WriteOperationCount' : '0' //String, 0x0
   'WriteTransferCount' : '0' //String, 0x0
}

Instance \\W2012SDC\ROOT\cimv2:Win32_Process.Handle="828"

Properties={
   'Caption' : 'svchost.exe' //String
   'CommandLine' : 'C:\Windows\system32\svchost.exe -k RPCSS' //String
   'CreationClassName' : 'Win32_Process' //String
   'CreationDate' : '20141112140930.768982-480' //String
   'CSCreationClassName' : 'Win32_ComputerSystem' //String
   'CSName' : '.' //String
   'Description' : 'svchost.exe' //String
   'ExecutablePath' : 'C:\Windows\system32\svchost.exe' //String
   'ExecutionState' : null
   'Handle' : '828' //String, 0x33C
   'HandleCount' : 669 //Long, 0x29D
   'InstallDate' : null
   'KernelModeTime' : '177968750' //String, 0xA9B966E
   'MaximumWorkingSetSize' : 1380 //Long, 0x564
   'MinimumWorkingSetSize' : 200 //Long, 0xC8
   'Name' : 'svchost.exe' //String
   'OSCreationClassName' : 'Win32_OperatingSystem' //String
   'OSName' : 'Microsoft Windows Server 2012 R2 Datacenter Evaluation|C:\Windows|\Device\Harddisk0\Partition1' //String
   'OtherOperationCount' : '16911' //String, 0x420F
   'OtherTransferCount' : '881572' //String, 0xD73A4
   'PageFaults' : 17398 //Long, 0x43F6
   'PageFileUsage' : 4912 //Long, 0x1330
   'ParentProcessId' : 620 //Long, 0x26C
   'PeakPageFileUsage' : 5284 //Long, 0x14A4
   'PeakVirtualSize' : '41500672' //String, 0x2794000
   'PeakWorkingSetSize' : 7992 //Long, 0x1F38
   'Priority' : 8 //Long, 0x8
   'PrivatePageCount' : '5029888' //String, 0x4CC000
   'ProcessId' : 828 //Long, 0x33C
   'QuotaNonPagedPoolUsage' : 20 //Long, 0x14
   'QuotaPagedPoolUsage' : 97 //Long, 0x61
   'QuotaPeakNonPagedPoolUsage' : 29 //Long, 0x1D
   'QuotaPeakPagedPoolUsage' : 97 //Long, 0x61
   'ReadOperationCount' : '0' //String, 0x0
   'ReadTransferCount' : '0' //String, 0x0
   'SessionId' : 0 //Long, 0x0
   'Status' : null
   'TerminationDate' : null
   'ThreadCount' : 10 //Long, 0xA
   'UserModeTime' : '370937500' //String, 0x161C0E9C
   'VirtualSize' : '33697792' //String, 0x2023000
   'WindowsVersion' : '6.3.9600' //String
   'WorkingSetSize' : '6340608' //String, 0x60C000
   'WriteOperationCount' : '0' //String, 0x0
   'WriteTransferCount' : '0' //String, 0x0
}

Instance \\W2012SDC\ROOT\cimv2:Win32_Process.Handle="924"

Properties={
   'Caption' : 'dwm.exe' //String
   'CommandLine' : '"dwm.exe"' //String
   'CreationClassName' : 'Win32_Process' //String
   'CreationDate' : '20141112140931.974058-480' //String
   'CSCreationClassName' : 'Win32_ComputerSystem' //String
   'CSName' : '.' //String
   'Description' : 'dwm.exe' //String
   'ExecutablePath' : 'C:\Windows\system32\dwm.exe' //String
   'ExecutionState' : null
   'Handle' : '924' //String, 0x39C
   'HandleCount' : 190 //Long, 0xBE
   'InstallDate' : null
   'KernelModeTime' : '12343750' //String, 0xBC59C6
   'MaximumWorkingSetSize' : 1380 //Long, 0x564
   'MinimumWorkingSetSize' : 200 //Long, 0xC8
   'Name' : 'dwm.exe' //String
   'OSCreationClassName' : 'Win32_OperatingSystem' //String
   'OSName' : 'Microsoft Windows Server 2012 R2 Datacenter Evaluation|C:\Windows|\Device\Harddisk0\Partition1' //String
   'OtherOperationCount' : '253' //String, 0xFD
   'OtherTransferCount' : '2266' //String, 0x8DA
   'PageFaults' : 120508 //Long, 0x1D6BC
   'PageFileUsage' : 22392 //Long, 0x5778
   'ParentProcessId' : 576 //Long, 0x240
   'PeakPageFileUsage' : 26828 //Long, 0x68CC
   'PeakVirtualSize' : '147132416' //String, 0x8C51000
   'PeakWorkingSetSize' : 46444 //Long, 0xB56C
   'Priority' : 13 //Long, 0xD
   'PrivatePageCount' : '22929408' //String, 0x15DE000
   'ProcessId' : 924 //Long, 0x39C
   'QuotaNonPagedPoolUsage' : 22 //Long, 0x16
   'QuotaPagedPoolUsage' : 237 //Long, 0xED
   'QuotaPeakNonPagedPoolUsage' : 29 //Long, 0x1D
   'QuotaPeakPagedPoolUsage' : 259 //Long, 0x103
   'ReadOperationCount' : '1' //String, 0x1
   'ReadTransferCount' : '60' //String, 0x3C
   'SessionId' : 1 //Long, 0x1
   'Status' : null
   'TerminationDate' : null
   'ThreadCount' : 10 //Long, 0xA
   'UserModeTime' : '23281250' //String, 0x1633E62
   'VirtualSize' : '133636096' //String, 0x7F72000
   'WindowsVersion' : '6.3.9600' //String
   'WorkingSetSize' : '18792448' //String, 0x11EC000
   'WriteOperationCount' : '0' //String, 0x0
   'WriteTransferCount' : '0' //String, 0x0
}

Instance \\W2012SDC\ROOT\cimv2:Win32_Process.Handle="1004"

Properties={
   'Caption' : 'svchost.exe' //String
   'CommandLine' : 'C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted' //String
   'CreationClassName' : 'Win32_Process' //String
   'CreationDate' : '20141112140933.884835-480' //String
   'CSCreationClassName' : 'Win32_ComputerSystem' //String
   'CSName' : '.' //String
   'Description' : 'svchost.exe' //String
   'ExecutablePath' : 'C:\Windows\System32\svchost.exe' //String
   'ExecutionState' : null
   'Handle' : '1004' //String, 0x3EC
   'HandleCount' : 861 //Long, 0x35D
   'InstallDate' : null
   'KernelModeTime' : '2217968750' //String
   'MaximumWorkingSetSize' : 1380 //Long, 0x564
   'MinimumWorkingSetSize' : 200 //Long, 0xC8
   'Name' : 'svchost.exe' //String
   'OSCreationClassName' : 'Win32_OperatingSystem' //String
   'OSName' : 'Microsoft Windows Server 2012 R2 Datacenter Evaluation|C:\Windows|\Device\Harddisk0\Partition1' //String
   'OtherOperationCount' : '114039' //String, 0x1BD77
   'OtherTransferCount' : '1223026' //String, 0x12A972
   'PageFaults' : 2394357 //Long, 0x2488F5
   'PageFileUsage' : 19712 //Long, 0x4D00
   'ParentProcessId' : 620 //Long, 0x26C
   'PeakPageFileUsage' : 23080 //Long, 0x5A28
   'PeakVirtualSize' : '576622592' //String, 0x225E9000
   'PeakWorkingSetSize' : 35680 //Long, 0x8B60
   'Priority' : 8 //Long, 0x8
   'PrivatePageCount' : '20185088' //String, 0x1340000
   'ProcessId' : 1004 //Long, 0x3EC
   'QuotaNonPagedPoolUsage' : 27 //Long, 0x1B
   'QuotaPagedPoolUsage' : 146 //Long, 0x92
   'QuotaPeakNonPagedPoolUsage' : 112 //Long, 0x70
   'QuotaPeakPagedPoolUsage' : 1050 //Long, 0x41A
   'ReadOperationCount' : '2473696' //String, 0x25BEE0
   'ReadTransferCount' : '3687368960' //String
   'SessionId' : 0 //Long, 0x0
   'Status' : null
   'TerminationDate' : null
   'ThreadCount' : 22 //Long, 0x16
   'UserModeTime' : '2603750000' //String
   'VirtualSize' : '103636992' //String, 0x62D6000
   'WindowsVersion' : '6.3.9600' //String
   'WorkingSetSize' : '16191488' //String, 0xF71000
   'WriteOperationCount' : '17095' //String, 0x42C7
   'WriteTransferCount' : '184491560' //String, 0xAFF1E28
}

Instance \\W2012SDC\ROOT\cimv2:Win32_Process.Handle="80"

Properties={
   'Caption' : 'svchost.exe' //String
   'CommandLine' : 'C:\Windows\system32\svchost.exe -k netsvcs' //String
   'CreationClassName' : 'Win32_Process' //String
   'CreationDate' : '20141112140934.150460-480' //String
   'CSCreationClassName' : 'Win32_ComputerSystem' //String
   'CSName' : '.' //String
   'Description' : 'svchost.exe' //String
   'ExecutablePath' : 'C:\Windows\system32\svchost.exe' //String
   'ExecutionState' : null
   'Handle' : '80' //String, 0x50
   'HandleCount' : 2421 //Long, 0x975
   'InstallDate' : null
   'KernelModeTime' : '22812968750' //String
   'MaximumWorkingSetSize' : 1380 //Long, 0x564
   'MinimumWorkingSetSize' : 200 //Long, 0xC8
   'Name' : 'svchost.exe' //String
   'OSCreationClassName' : 'Win32_OperatingSystem' //String
   'OSName' : 'Microsoft Windows Server 2012 R2 Datacenter Evaluation|C:\Windows|\Device\Harddisk0\Partition1' //String
   'OtherOperationCount' : '15633553' //String, 0xEE8C91
   'OtherTransferCount' : '74211597' //String, 0x46C610D
   'PageFaults' : 5806361 //Long, 0x589919
   'PageFileUsage' : 80824 //Long, 0x13BB8
   'ParentProcessId' : 620 //Long, 0x26C
   'PeakPageFileUsage' : 177816 //Long, 0x2B698
   'PeakVirtualSize' : '538509312' //String, 0x20190000
   'PeakWorkingSetSize' : 170788 //Long, 0x29B24
   'Priority' : 8 //Long, 0x8
   'PrivatePageCount' : '82763776' //String, 0x4EEE000
   'ProcessId' : 80 //Long, 0x50
   'QuotaNonPagedPoolUsage' : 132 //Long, 0x84
   'QuotaPagedPoolUsage' : 455 //Long, 0x1C7
   'QuotaPeakNonPagedPoolUsage' : 149 //Long, 0x95
   'QuotaPeakPagedPoolUsage' : 476 //Long, 0x1DC
   'ReadOperationCount' : '5760187' //String, 0x57E4BB
   'ReadTransferCount' : '1583303702' //String, 0x5E5F4C16
   'SessionId' : 0 //Long, 0x0
   'Status' : null
   'TerminationDate' : null
   'ThreadCount' : 95 //Long, 0x5F
   'UserModeTime' : '71838281250' //String
   'VirtualSize' : '365391872' //String, 0x15C77000
   'WindowsVersion' : '6.3.9600' //String
   'WorkingSetSize' : '66617344' //String, 0x3F88000
   'WriteOperationCount' : '3767626' //String, 0x397D4A
   'WriteTransferCount' : '598635612' //String, 0x23AE745C
}

Instance \\W2012SDC\ROOT\cimv2:Win32_Process.Handle="376"

Properties={
   'Caption' : 'svchost.exe' //String
   'CommandLine' : 'C:\Windows\system32\svchost.exe -k LocalService' //String
   'CreationClassName' : 'Win32_Process' //String
   'CreationDate' : '20141112140934.337961-480' //String
   'CSCreationClassName' : 'Win32_ComputerSystem' //String
   'CSName' : '.' //String
   'Description' : 'svchost.exe' //String
   'ExecutablePath' : 'C:\Windows\system32\svchost.exe' //String
   'ExecutionState' : null
   'Handle' : '376' //String, 0x178
   'HandleCount' : 893 //Long, 0x37D
   'InstallDate' : null
   'KernelModeTime' : '18437500' //String, 0x119557C
   'MaximumWorkingSetSize' : 1380 //Long, 0x564
   'MinimumWorkingSetSize' : 200 //Long, 0xC8
   'Name' : 'svchost.exe' //String
   'OSCreationClassName' : 'Win32_OperatingSystem' //String
   'OSName' : 'Microsoft Windows Server 2012 R2 Datacenter Evaluation|C:\Windows|\Device\Harddisk0\Partition1' //String
   'OtherOperationCount' : '15578' //String, 0x3CDA
   'OtherTransferCount' : '768224' //String, 0xBB8E0
   'PageFaults' : 9890 //Long, 0x26A2
   'PageFileUsage' : 9432 //Long, 0x24D8
   'ParentProcessId' : 620 //Long, 0x26C
   'PeakPageFileUsage' : 10692 //Long, 0x29C4
   'PeakVirtualSize' : '119320576' //String, 0x71CB000
   'PeakWorkingSetSize' : 18780 //Long, 0x495C
   'Priority' : 8 //Long, 0x8
   'PrivatePageCount' : '9658368' //String, 0x936000
   'ProcessId' : 376 //Long, 0x178
   'QuotaNonPagedPoolUsage' : 33 //Long, 0x21
   'QuotaPagedPoolUsage' : 241 //Long, 0xF1
   'QuotaPeakNonPagedPoolUsage' : 45 //Long, 0x2D
   'QuotaPeakPagedPoolUsage' : 247 //Long, 0xF7
   'ReadOperationCount' : '34' //String, 0x22
   'ReadTransferCount' : '790' //String, 0x316
   'SessionId' : 0 //Long, 0x0
   'Status' : null
   'TerminationDate' : null
   'ThreadCount' : 19 //Long, 0x13
   'UserModeTime' : '55156250' //String, 0x3499E1A
   'VirtualSize' : '105467904' //String, 0x6495000
   'WindowsVersion' : '6.3.9600' //String
   'WorkingSetSize' : '10948608' //String, 0xA71000
   'WriteOperationCount' : '1' //String, 0x1
   'WriteTransferCount' : '160' //String, 0xA0
}

Instance \\W2012SDC\ROOT\cimv2:Win32_Process.Handle="448"

Properties={
   'Caption' : 'svchost.exe' //String
   'CommandLine' : 'C:\Windows\System32\svchost.exe -k BlockStorageServices' //String
   'CreationClassName' : 'Win32_Process' //String
   'CreationDate' : '20141112140934.935013-480' //String
   'CSCreationClassName' : 'Win32_ComputerSystem' //String
   'CSName' : '.' //String
   'Description' : 'svchost.exe' //String
   'ExecutablePath' : 'C:\Windows\System32\svchost.exe' //String
   'ExecutionState' : null
   'Handle' : '448' //String, 0x1C0
   'HandleCount' : 254 //Long, 0xFE
   'InstallDate' : null
   'KernelModeTime' : '1250000' //String, 0x1312D0
   'MaximumWorkingSetSize' : 1380 //Long, 0x564
   'MinimumWorkingSetSize' : 200 //Long, 0xC8
   'Name' : 'svchost.exe' //String
   'OSCreationClassName' : 'Win32_OperatingSystem' //String
   'OSName' : 'Microsoft Windows Server 2012 R2 Datacenter Evaluation|C:\Windows|\Device\Harddisk0\Partition1' //String
   'OtherOperationCount' : '617' //String, 0x269
   'OtherTransferCount' : '9384' //String, 0x24A8
   'PageFaults' : 6358 //Long, 0x18D6
   'PageFileUsage' : 3016 //Long, 0xBC8
   'ParentProcessId' : 620 //Long, 0x26C
   'PeakPageFileUsage' : 3488 //Long, 0xDA0
   'PeakVirtualSize' : '78598144' //String, 0x4AF5000
   'PeakWorkingSetSize' : 9288 //Long, 0x2448
   'Priority' : 8 //Long, 0x8
   'PrivatePageCount' : '3088384' //String, 0x2F2000
   'ProcessId' : 448 //Long, 0x1C0
   'QuotaNonPagedPoolUsage' : 17 //Long, 0x11
   'QuotaPagedPoolUsage' : 143 //Long, 0x8F
   'QuotaPeakNonPagedPoolUsage' : 19 //Long, 0x13
   'QuotaPeakPagedPoolUsage' : 143 //Long, 0x8F
   'ReadOperationCount' : '8' //String, 0x8
   'ReadTransferCount' : '1517' //String, 0x5ED
   'SessionId' : 0 //Long, 0x0
   'Status' : null
   'TerminationDate' : null
   'ThreadCount' : 11 //Long, 0xB
   'UserModeTime' : '4062500' //String, 0x3DFD24
   'VirtualSize' : '73805824' //String, 0x4663000
   'WindowsVersion' : '6.3.9600' //String
   'WorkingSetSize' : '3162112' //String, 0x304000
   'WriteOperationCount' : '8' //String, 0x8
   'WriteTransferCount' : '3599' //String, 0xE0F
}

Instance \\W2012SDC\ROOT\cimv2:Win32_Process.Handle="800"

Properties={
   'Caption' : 'svchost.exe' //String
   'CommandLine' : 'C:\Windows\system32\svchost.exe -k WlansvcGroup' //String
   'CreationClassName' : 'Win32_Process' //String
   'CreationDate' : '20141112140936.586248-480' //String
   'CSCreationClassName' : 'Win32_ComputerSystem' //String
   'CSName' : '.' //String
   'Description' : 'svchost.exe' //String
   'ExecutablePath' : 'C:\Windows\system32\svchost.exe' //String
   'ExecutionState' : null
   'Handle' : '800' //String, 0x320
   'HandleCount' : 243 //Long, 0xF3
   'InstallDate' : null
   'KernelModeTime' : '625000' //String, 0x98968
   'MaximumWorkingSetSize' : 1380 //Long, 0x564
   'MinimumWorkingSetSize' : 200 //Long, 0xC8
   'Name' : 'svchost.exe' //String
   'OSCreationClassName' : 'Win32_OperatingSystem' //String
   'OSName' : 'Microsoft Windows Server 2012 R2 Datacenter Evaluation|C:\Windows|\Device\Harddisk0\Partition1' //String
   'OtherOperationCount' : '332' //String, 0x14C
   'OtherTransferCount' : '10670' //String, 0x29AE
   'PageFaults' : 3027 //Long, 0xBD3
   'PageFileUsage' : 3580 //Long, 0xDFC
   'ParentProcessId' : 620 //Long, 0x26C
   'PeakPageFileUsage' : 3652 //Long, 0xE44
   'PeakVirtualSize' : '49754112' //String, 0x2F73000
   'PeakWorkingSetSize' : 8912 //Long, 0x22D0
   'Priority' : 8 //Long, 0x8
   'PrivatePageCount' : '3665920' //String, 0x37F000
   'ProcessId' : 800 //Long, 0x320
   'QuotaNonPagedPoolUsage' : 13 //Long, 0xD
   'QuotaPagedPoolUsage' : 87 //Long, 0x57
   'QuotaPeakNonPagedPoolUsage' : 15 //Long, 0xF
   'QuotaPeakPagedPoolUsage' : 88 //Long, 0x58
   'ReadOperationCount' : '58' //String, 0x3A
   'ReadTransferCount' : '142892' //String, 0x22E2C
   'SessionId' : 0 //Long, 0x0
   'Status' : null
   'TerminationDate' : null
   'ThreadCount' : 5 //Long, 0x5
   'UserModeTime' : '156250' //String, 0x2625A
   'VirtualSize' : '48685056' //String, 0x2E6E000
   'WindowsVersion' : '6.3.9600' //String
   'WorkingSetSize' : '1966080' //String, 0x1E0000
   'WriteOperationCount' : '1' //String, 0x1
   'WriteTransferCount' : '160' //String, 0xA0
}

Instance \\W2012SDC\ROOT\cimv2:Win32_Process.Handle="880"

Properties={
   'Caption' : 'svchost.exe' //String
   'CommandLine' : 'C:\Windows\system32\svchost.exe -k NetworkService' //String
   'CreationClassName' : 'Win32_Process' //String
   'CreationDate' : '20141112140936.605572-480' //String
   'CSCreationClassName' : 'Win32_ComputerSystem' //String
   'CSName' : '.' //String
   'Description' : 'svchost.exe' //String
   'ExecutablePath' : 'C:\Windows\system32\svchost.exe' //String
   'ExecutionState' : null
   'Handle' : '880' //String, 0x370
   'HandleCount' : 767 //Long, 0x2FF
   'InstallDate' : null
   'KernelModeTime' : '17812500' //String, 0x10FCC14
   'MaximumWorkingSetSize' : 1380 //Long, 0x564
   'MinimumWorkingSetSize' : 200 //Long, 0xC8
   'Name' : 'svchost.exe' //String
   'OSCreationClassName' : 'Win32_OperatingSystem' //String
   'OSName' : 'Microsoft Windows Server 2012 R2 Datacenter Evaluation|C:\Windows|\Device\Harddisk0\Partition1' //String
   'OtherOperationCount' : '206767' //String, 0x327AF
   'OtherTransferCount' : '15165091' //String, 0xE766A3
   'PageFaults' : 25169 //Long, 0x6251
   'PageFileUsage' : 9264 //Long, 0x2430
   'ParentProcessId' : 620 //Long, 0x26C
   'PeakPageFileUsage' : 10004 //Long, 0x2714
   'PeakVirtualSize' : '1207242752' //String, 0x47F51000
   'PeakWorkingSetSize' : 18788 //Long, 0x4964
   'Priority' : 8 //Long, 0x8
   'PrivatePageCount' : '9486336' //String, 0x90C000
   'ProcessId' : 880 //Long, 0x370
   'QuotaNonPagedPoolUsage' : 42 //Long, 0x2A
   'QuotaPagedPoolUsage' : 201 //Long, 0xC9
   'QuotaPeakNonPagedPoolUsage' : 50 //Long, 0x32
   'QuotaPeakPagedPoolUsage' : 208 //Long, 0xD0
   'ReadOperationCount' : '4737' //String, 0x1281
   'ReadTransferCount' : '5019623' //String, 0x4C97E7
   'SessionId' : 0 //Long, 0x0
   'Status' : null
   'TerminationDate' : null
   'ThreadCount' : 25 //Long, 0x19
   'UserModeTime' : '10312500' //String, 0x9D5B34
   'VirtualSize' : '1203298304' //String, 0x47B8E000
   'WindowsVersion' : '6.3.9600' //String
   'WorkingSetSize' : '11161600' //String, 0xAA5000
   'WriteOperationCount' : '3103' //String, 0xC1F
   'WriteTransferCount' : '373743' //String, 0x5B3EF
}

Instance \\W2012SDC\ROOT\cimv2:Win32_Process.Handle="1180"

Properties={
   'Caption' : 'svchost.exe' //String
   'CommandLine' : 'C:\Windows\system32\svchost.exe -k LocalServiceNoNetwork' //String
   'CreationClassName' : 'Win32_Process' //String
   'CreationDate' : '20141112140939.365450-480' //String
   'CSCreationClassName' : 'Win32_ComputerSystem' //String
   'CSName' : '.' //String
   'Description' : 'svchost.exe' //String
   'ExecutablePath' : 'C:\Windows\system32\svchost.exe' //String
   'ExecutionState' : null
   'Handle' : '1180' //String, 0x49C
   'HandleCount' : 411 //Long, 0x19B
   'InstallDate' : null
   'KernelModeTime' : '12656250' //String, 0xC11E7A
   'MaximumWorkingSetSize' : 1380 //Long, 0x564
   'MinimumWorkingSetSize' : 200 //Long, 0xC8
   'Name' : 'svchost.exe' //String
   'OSCreationClassName' : 'Win32_OperatingSystem' //String
   'OSName' : 'Microsoft Windows Server 2012 R2 Datacenter Evaluation|C:\Windows|\Device\Harddisk0\Partition1' //String
   'OtherOperationCount' : '16406' //String, 0x4016
   'OtherTransferCount' : '3495024' //String, 0x355470
   'PageFaults' : 178818 //Long, 0x2BA82
   'PageFileUsage' : 15056 //Long, 0x3AD0
   'ParentProcessId' : 620 //Long, 0x26C
   'PeakPageFileUsage' : 17440 //Long, 0x4420
   'PeakVirtualSize' : '89284608' //String, 0x5526000
   'PeakWorkingSetSize' : 20716 //Long, 0x50EC
   'Priority' : 8 //Long, 0x8
   'PrivatePageCount' : '15417344' //String, 0xEB4000
   'ProcessId' : 1180 //Long, 0x49C
   'QuotaNonPagedPoolUsage' : 35 //Long, 0x23
   'QuotaPagedPoolUsage' : 122 //Long, 0x7A
   'QuotaPeakNonPagedPoolUsage' : 39 //Long, 0x27
   'QuotaPeakPagedPoolUsage' : 134 //Long, 0x86
   'ReadOperationCount' : '0' //String, 0x0
   'ReadTransferCount' : '0' //String, 0x0
   'SessionId' : 0 //Long, 0x0
   'Status' : null
   'TerminationDate' : null
   'ThreadCount' : 18 //Long, 0x12
   'UserModeTime' : '19375000' //String, 0x127A398
   'VirtualSize' : '86749184' //String, 0x52BB000
   'WindowsVersion' : '6.3.9600' //String
   'WorkingSetSize' : '13225984' //String, 0xC9D000
   'WriteOperationCount' : '1' //String, 0x1
   'WriteTransferCount' : '32768' //String, 0x8000
}

Instance \\W2012SDC\ROOT\cimv2:Win32_Process.Handle="1500"

Properties={
   'Caption' : 'spoolsv.exe' //String
   'CommandLine' : 'C:\Windows\System32\spoolsv.exe' //String
   'CreationClassName' : 'Win32_Process' //String
   'CreationDate' : '20141112141006.496560-480' //String
   'CSCreationClassName' : 'Win32_ComputerSystem' //String
   'CSName' : '.' //String
   'Description' : 'spoolsv.exe' //String
   'ExecutablePath' : 'C:\Windows\System32\spoolsv.exe' //String
   'ExecutionState' : null
   'Handle' : '1500' //String, 0x5DC
   'HandleCount' : 419 //Long, 0x1A3
   'InstallDate' : null
   'KernelModeTime' : '6250000' //String, 0x5F5E10
   'MaximumWorkingSetSize' : 1380 //Long, 0x564
   'MinimumWorkingSetSize' : 200 //Long, 0xC8
   'Name' : 'spoolsv.exe' //String
   'OSCreationClassName' : 'Win32_OperatingSystem' //String
   'OSName' : 'Microsoft Windows Server 2012 R2 Datacenter Evaluation|C:\Windows|\Device\Harddisk0\Partition1' //String
   'OtherOperationCount' : '1398' //String, 0x576
   'OtherTransferCount' : '39450' //String, 0x9A1A
   'PageFaults' : 23088 //Long, 0x5A30
   'PageFileUsage' : 4340 //Long, 0x10F4
   'ParentProcessId' : 620 //Long, 0x26C
   'PeakPageFileUsage' : 4544 //Long, 0x11C0
   'PeakVirtualSize' : '88711168' //String, 0x549A000
   'PeakWorkingSetSize' : 9544 //Long, 0x2548
   'Priority' : 8 //Long, 0x8
   'PrivatePageCount' : '4444160' //String, 0x43D000
   'ProcessId' : 1500 //Long, 0x5DC
   'QuotaNonPagedPoolUsage' : 26 //Long, 0x1A
   'QuotaPagedPoolUsage' : 174 //Long, 0xAE
   'QuotaPeakNonPagedPoolUsage' : 28 //Long, 0x1C
   'QuotaPeakPagedPoolUsage' : 175 //Long, 0xAF
   'ReadOperationCount' : '54' //String, 0x36
   'ReadTransferCount' : '4042' //String, 0xFCA
   'SessionId' : 0 //Long, 0x0
   'Status' : null
   'TerminationDate' : null
   'ThreadCount' : 13 //Long, 0xD
   'UserModeTime' : '7031250' //String, 0x6B49D2
   'VirtualSize' : '87605248' //String, 0x538C000
   'WindowsVersion' : '6.3.9600' //String
   'WorkingSetSize' : '4354048' //String, 0x427000
   'WriteOperationCount' : '13' //String, 0xD
   'WriteTransferCount' : '4051' //String, 0xFD3
}

Instance \\W2012SDC\ROOT\cimv2:Win32_Process.Handle="1612"

Properties={
   'Caption' : 'Microsoft.ActiveDirectory.WebServices.exe' //String
   'CommandLine' : 'C:\Windows\ADWS\Microsoft.ActiveDirectory.WebServices.exe' //String
   'CreationClassName' : 'Win32_Process' //String
   'CreationDate' : '20141112141012.973985-480' //String
   'CSCreationClassName' : 'Win32_ComputerSystem' //String
   'CSName' : '.' //String
   'Description' : 'Microsoft.ActiveDirectory.WebServices.exe' //String
   'ExecutablePath' : 'C:\Windows\ADWS\Microsoft.ActiveDirectory.WebServices.exe' //String
   'ExecutionState' : null
   'Handle' : '1612' //String, 0x64C
   'HandleCount' : 360 //Long, 0x168
   'InstallDate' : null
   'KernelModeTime' : '1562500' //String, 0x17D784
   'MaximumWorkingSetSize' : 1380 //Long, 0x564
   'MinimumWorkingSetSize' : 200 //Long, 0xC8
   'Name' : 'Microsoft.ActiveDirectory.WebServices.exe' //String
   'OSCreationClassName' : 'Win32_OperatingSystem' //String
   'OSName' : 'Microsoft Windows Server 2012 R2 Datacenter Evaluation|C:\Windows|\Device\Harddisk0\Partition1' //String
   'OtherOperationCount' : '86863' //String, 0x1534F
   'OtherTransferCount' : '2406838' //String, 0x24B9B6
   'PageFaults' : 71246 //Long, 0x1164E
   'PageFileUsage' : 31452 //Long, 0x7ADC
   'ParentProcessId' : 620 //Long, 0x26C
   'PeakPageFileUsage' : 32344 //Long, 0x7E58
   'PeakVirtualSize' : '609386496' //String, 0x24528000
   'PeakWorkingSetSize' : 40928 //Long, 0x9FE0
   'Priority' : 8 //Long, 0x8
   'PrivatePageCount' : '32206848' //String, 0x1EB7000
   'ProcessId' : 1612 //Long, 0x64C
   'QuotaNonPagedPoolUsage' : 39 //Long, 0x27
   'QuotaPagedPoolUsage' : 359 //Long, 0x167
   'QuotaPeakNonPagedPoolUsage' : 43 //Long, 0x2B
   'QuotaPeakPagedPoolUsage' : 360 //Long, 0x168
   'ReadOperationCount' : '127' //String, 0x7F
   'ReadTransferCount' : '426064' //String, 0x68050
   'SessionId' : 0 //Long, 0x0
   'Status' : null
   'TerminationDate' : null
   'ThreadCount' : 12 //Long, 0xC
   'UserModeTime' : '5156250' //String, 0x4EAD9A
   'VirtualSize' : '605421568' //String, 0x24160000
   'WindowsVersion' : '6.3.9600' //String
   'WorkingSetSize' : '10850304' //String, 0xA59000
   'WriteOperationCount' : '0' //String, 0x0
   'WriteTransferCount' : '0' //String, 0x0
}

Instance \\W2012SDC\ROOT\cimv2:Win32_Process.Handle="1648"

Properties={
   'Caption' : 'svchost.exe' //String
   'CommandLine' : 'C:\Windows\system32\svchost.exe -k apphost' //String
   'CreationClassName' : 'Win32_Process' //String
   'CreationDate' : '20141112141014.967743-480' //String
   'CSCreationClassName' : 'Win32_ComputerSystem' //String
   'CSName' : '.' //String
   'Description' : 'svchost.exe' //String
   'ExecutablePath' : 'C:\Windows\system32\svchost.exe' //String
   'ExecutionState' : null
   'Handle' : '1648' //String, 0x670
   'HandleCount' : 152 //Long, 0x98
   'InstallDate' : null
   'KernelModeTime' : '625000' //String, 0x98968
   'MaximumWorkingSetSize' : 1380 //Long, 0x564
   'MinimumWorkingSetSize' : 200 //Long, 0xC8
   'Name' : 'svchost.exe' //String
   'OSCreationClassName' : 'Win32_OperatingSystem' //String
   'OSName' : 'Microsoft Windows Server 2012 R2 Datacenter Evaluation|C:\Windows|\Device\Harddisk0\Partition1' //String
   'OtherOperationCount' : '505' //String, 0x1F9
   'OtherTransferCount' : '9886' //String, 0x269E
   'PageFaults' : 6776 //Long, 0x1A78
   'PageFileUsage' : 7480 //Long, 0x1D38
   'ParentProcessId' : 620 //Long, 0x26C
   'PeakPageFileUsage' : 7604 //Long, 0x1DB4
   'PeakVirtualSize' : '74858496' //String, 0x4764000
   'PeakWorkingSetSize' : 11676 //Long, 0x2D9C
   'Priority' : 8 //Long, 0x8
   'PrivatePageCount' : '7659520' //String, 0x74E000
   'ProcessId' : 1648 //Long, 0x670
   'QuotaNonPagedPoolUsage' : 13 //Long, 0xD
   'QuotaPagedPoolUsage' : 117 //Long, 0x75
   'QuotaPeakNonPagedPoolUsage' : 14 //Long, 0xE
   'QuotaPeakPagedPoolUsage' : 120 //Long, 0x78
   'ReadOperationCount' : '243' //String, 0xF3
   'ReadTransferCount' : '933895' //String, 0xE4007
   'SessionId' : 0 //Long, 0x0
   'Status' : null
   'TerminationDate' : null
   'ThreadCount' : 13 //Long, 0xD
   'UserModeTime' : '312500' //String, 0x4C4B4
   'VirtualSize' : '74260480' //String, 0x46D2000
   'WindowsVersion' : '6.3.9600' //String
   'WorkingSetSize' : '2351104' //String, 0x23E000
   'WriteOperationCount' : '0' //String, 0x0
   'WriteTransferCount' : '0' //String, 0x0
}

Instance \\W2012SDC\ROOT\cimv2:Win32_Process.Handle="1704"

Properties={
   'Caption' : 'certsrv.exe' //String
   'CommandLine' : 'C:\Windows\system32\certsrv.exe' //String
   'CreationClassName' : 'Win32_Process' //String
   'CreationDate' : '20141112141018.131395-480' //String
   'CSCreationClassName' : 'Win32_ComputerSystem' //String
   'CSName' : '.' //String
   'Description' : 'certsrv.exe' //String
   'ExecutablePath' : 'C:\Windows\system32\certsrv.exe' //String
   'ExecutionState' : null
   'Handle' : '1704' //String, 0x6A8
   'HandleCount' : 363 //Long, 0x16B
   'InstallDate' : null
   'KernelModeTime' : '1562500' //String, 0x17D784
   'MaximumWorkingSetSize' : 1380 //Long, 0x564
   'MinimumWorkingSetSize' : 200 //Long, 0xC8
   'Name' : 'certsrv.exe' //String
   'OSCreationClassName' : 'Win32_OperatingSystem' //String
   'OSName' : 'Microsoft Windows Server 2012 R2 Datacenter Evaluation|C:\Windows|\Device\Harddisk0\Partition1' //String
   'OtherOperationCount' : '2238' //String, 0x8BE
   'OtherTransferCount' : '51248' //String, 0xC830
   'PageFaults' : 7785 //Long, 0x1E69
   'PageFileUsage' : 12360 //Long, 0x3048
   'ParentProcessId' : 620 //Long, 0x26C
   'PeakPageFileUsage' : 12660 //Long, 0x3174
   'PeakVirtualSize' : '1214898176' //String, 0x4869E000
   'PeakWorkingSetSize' : 16048 //Long, 0x3EB0
   'Priority' : 8 //Long, 0x8
   'PrivatePageCount' : '12656640' //String, 0xC12000
   'ProcessId' : 1704 //Long, 0x6A8
   'QuotaNonPagedPoolUsage' : 30 //Long, 0x1E
   'QuotaPagedPoolUsage' : 180 //Long, 0xB4
   'QuotaPeakNonPagedPoolUsage' : 33 //Long, 0x21
   'QuotaPeakPagedPoolUsage' : 181 //Long, 0xB5
   'ReadOperationCount' : '84' //String, 0x54
   'ReadTransferCount' : '2523516' //String, 0x26817C
   'SessionId' : 0 //Long, 0x0
   'Status' : null
   'TerminationDate' : null
   'ThreadCount' : 9 //Long, 0x9
   'UserModeTime' : '2187500' //String, 0x2160EC
   'VirtualSize' : '1207492608' //String, 0x47F8E000
   'WindowsVersion' : '6.3.9600' //String
   'WorkingSetSize' : '6836224' //String, 0x685000
   'WriteOperationCount' : '83' //String, 0x53
   'WriteTransferCount' : '1137083' //String, 0x1159BB
}

Instance \\W2012SDC\ROOT\cimv2:Win32_Process.Handle="1752"

Properties={
   'Caption' : 'svchost.exe' //String
   'CommandLine' : 'C:\Windows\system32\svchost -k ddpvssvc' //String
   'CreationClassName' : 'Win32_Process' //String
   'CreationDate' : '20141112141019.990774-480' //String
   'CSCreationClassName' : 'Win32_ComputerSystem' //String
   'CSName' : '.' //String
   'Description' : 'svchost.exe' //String
   'ExecutablePath' : 'C:\Windows\system32\svchost.exe' //String
   'ExecutionState' : null
   'Handle' : '1752' //String, 0x6D8
   'HandleCount' : 100 //Long, 0x64
   'InstallDate' : null
   'KernelModeTime' : '156250' //String, 0x2625A
   'MaximumWorkingSetSize' : 1380 //Long, 0x564
   'MinimumWorkingSetSize' : 200 //Long, 0xC8
   'Name' : 'svchost.exe' //String
   'OSCreationClassName' : 'Win32_OperatingSystem' //String
   'OSName' : 'Microsoft Windows Server 2012 R2 Datacenter Evaluation|C:\Windows|\Device\Harddisk0\Partition1' //String
   'OtherOperationCount' : '106' //String, 0x6A
   'OtherTransferCount' : '206' //String, 0xCE
   'PageFaults' : 1565 //Long, 0x61D
   'PageFileUsage' : 1188 //Long, 0x4A4
   'ParentProcessId' : 620 //Long, 0x26C
   'PeakPageFileUsage' : 1344 //Long, 0x540
   'PeakVirtualSize' : '39354368' //String, 0x2588000
   'PeakWorkingSetSize' : 5180 //Long, 0x143C
   'Priority' : 8 //Long, 0x8
   'PrivatePageCount' : '1216512' //String, 0x129000
   'ProcessId' : 1752 //Long, 0x6D8
   'QuotaNonPagedPoolUsage' : 9 //Long, 0x9
   'QuotaPagedPoolUsage' : 75 //Long, 0x4B
   'QuotaPeakNonPagedPoolUsage' : 10 //Long, 0xA
   'QuotaPeakPagedPoolUsage' : 75 //Long, 0x4B
   'ReadOperationCount' : '0' //String, 0x0
   'ReadTransferCount' : '0' //String, 0x0
   'SessionId' : 0 //Long, 0x0
   'Status' : null
   'TerminationDate' : null
   'ThreadCount' : 2 //Long, 0x2
   'UserModeTime' : '312500' //String, 0x4C4B4
   'VirtualSize' : '37756928' //String, 0x2402000
   'WindowsVersion' : '6.3.9600' //String
   'WorkingSetSize' : '1011712' //String, 0xF7000
   'WriteOperationCount' : '0' //String, 0x0
   'WriteTransferCount' : '0' //String, 0x0
}

Instance \\W2012SDC\ROOT\cimv2:Win32_Process.Handle="1788"

Properties={
   'Caption' : 'dfsrs.exe' //String
   'CommandLine' : 'C:\Windows\system32\DFSRs.exe' //String
   'CreationClassName' : 'Win32_Process' //String
   'CreationDate' : '20141112141020.178273-480' //String
   'CSCreationClassName' : 'Win32_ComputerSystem' //String
   'CSName' : '.' //String
   'Description' : 'dfsrs.exe' //String
   'ExecutablePath' : 'C:\Windows\system32\DFSRs.exe' //String
   'ExecutionState' : null
   'Handle' : '1788' //String, 0x6FC
   'HandleCount' : 335 //Long, 0x14F
   'InstallDate' : null
   'KernelModeTime' : '90468750' //String, 0x564718E
   'MaximumWorkingSetSize' : 1380 //Long, 0x564
   'MinimumWorkingSetSize' : 200 //Long, 0xC8
   'Name' : 'dfsrs.exe' //String
   'OSCreationClassName' : 'Win32_OperatingSystem' //String
   'OSName' : 'Microsoft Windows Server 2012 R2 Datacenter Evaluation|C:\Windows|\Device\Harddisk0\Partition1' //String
   'OtherOperationCount' : '468185' //String, 0x724D9
   'OtherTransferCount' : '12017078' //String, 0xB75DB6
   'PageFaults' : 32810 //Long, 0x802A
   'PageFileUsage' : 15924 //Long, 0x3E34
   'ParentProcessId' : 620 //Long, 0x26C
   'PeakPageFileUsage' : 18104 //Long, 0x46B8
   'PeakVirtualSize' : '657481728' //String, 0x27306000
   'PeakWorkingSetSize' : 20612 //Long, 0x5084
   'Priority' : 8 //Long, 0x8
   'PrivatePageCount' : '16306176' //String, 0xF8D000
   'ProcessId' : 1788 //Long, 0x6FC
   'QuotaNonPagedPoolUsage' : 32 //Long, 0x20
   'QuotaPagedPoolUsage' : 135 //Long, 0x87
   'QuotaPeakNonPagedPoolUsage' : 36 //Long, 0x24
   'QuotaPeakPagedPoolUsage' : 136 //Long, 0x88
   'ReadOperationCount' : '9532' //String, 0x253C
   'ReadTransferCount' : '38273984' //String, 0x24803C0
   'SessionId' : 0 //Long, 0x0
   'Status' : null
   'TerminationDate' : null
   'ThreadCount' : 16 //Long, 0x10
   'UserModeTime' : '70000000' //String, 0x42C1D80
   'VirtualSize' : '656400384' //String, 0x271FE000
   'WindowsVersion' : '6.3.9600' //String
   'WorkingSetSize' : '11771904' //String, 0xB3A000
   'WriteOperationCount' : '27862' //String, 0x6CD6
   'WriteTransferCount' : '15919972' //String, 0xF2EB64
}

Instance \\W2012SDC\ROOT\cimv2:Win32_Process.Handle="1804"

Properties={
   'Caption' : 'svchost.exe' //String
   'CommandLine' : 'C:\Windows\system32\svchost.exe -k DHCPServer' //String
   'CreationClassName' : 'Win32_Process' //String
   'CreationDate' : '20141112141020.490773-480' //String
   'CSCreationClassName' : 'Win32_ComputerSystem' //String
   'CSName' : '.' //String
   'Description' : 'svchost.exe' //String
   'ExecutablePath' : 'C:\Windows\system32\svchost.exe' //String
   'ExecutionState' : null
   'Handle' : '1804' //String, 0x70C
   'HandleCount' : 286 //Long, 0x11E
   'InstallDate' : null
   'KernelModeTime' : '58906250' //String, 0x382D68A
   'MaximumWorkingSetSize' : 1380 //Long, 0x564
   'MinimumWorkingSetSize' : 200 //Long, 0xC8
   'Name' : 'svchost.exe' //String
   'OSCreationClassName' : 'Win32_OperatingSystem' //String
   'OSName' : 'Microsoft Windows Server 2012 R2 Datacenter Evaluation|C:\Windows|\Device\Harddisk0\Partition1' //String
   'OtherOperationCount' : '83751' //String, 0x14727
   'OtherTransferCount' : '1641552' //String, 0x190C50
   'PageFaults' : 369054 //Long, 0x5A19E
   'PageFileUsage' : 128888 //Long, 0x1F778
   'ParentProcessId' : 620 //Long, 0x26C
   'PeakPageFileUsage' : 129944 //Long, 0x1FB98
   'PeakVirtualSize' : '1314181120' //String, 0x4E54D000
   'PeakWorkingSetSize' : 29028 //Long, 0x7164
   'Priority' : 8 //Long, 0x8
   'PrivatePageCount' : '131981312' //String, 0x7DDE000
   'ProcessId' : 1804 //Long, 0x70C
   'QuotaNonPagedPoolUsage' : 31 //Long, 0x1F
   'QuotaPagedPoolUsage' : 148 //Long, 0x94
   'QuotaPeakNonPagedPoolUsage' : 35 //Long, 0x23
   'QuotaPeakPagedPoolUsage' : 148 //Long, 0x94
   'ReadOperationCount' : '5719' //String, 0x1657
   'ReadTransferCount' : '1447734976' //String, 0x564AAEC0
   'SessionId' : 0 //Long, 0x0
   'Status' : null
   'TerminationDate' : null
   'ThreadCount' : 21 //Long, 0x15
   'UserModeTime' : '8281250' //String, 0x7E5CA2
   'VirtualSize' : '1313046528' //String, 0x4E438000
   'WindowsVersion' : '6.3.9600' //String
   'WorkingSetSize' : '6119424' //String, 0x5D6000
   'WriteOperationCount' : '2107' //String, 0x83B
   'WriteTransferCount' : '1499434329' //String, 0x595F8D59
}

Instance \\W2012SDC\ROOT\cimv2:Win32_Process.Handle="1820"

Properties={
   'Caption' : 'dns.exe' //String
   'CommandLine' : 'C:\Windows\system32\dns.exe' //String
   'CreationClassName' : 'Win32_Process' //String
   'CreationDate' : '20141112141020.522023-480' //String
   'CSCreationClassName' : 'Win32_ComputerSystem' //String
   'CSName' : '.' //String
   'Description' : 'dns.exe' //String
   'ExecutablePath' : 'C:\Windows\system32\dns.exe' //String
   'ExecutionState' : null
   'Handle' : '1820' //String, 0x71C
   'HandleCount' : 325 //Long, 0x145
   'InstallDate' : null
   'KernelModeTime' : '13750000' //String, 0xD1CEF0
   'MaximumWorkingSetSize' : 1380 //Long, 0x564
   'MinimumWorkingSetSize' : 200 //Long, 0xC8
   'Name' : 'dns.exe' //String
   'OSCreationClassName' : 'Win32_OperatingSystem' //String
   'OSName' : 'Microsoft Windows Server 2012 R2 Datacenter Evaluation|C:\Windows|\Device\Harddisk0\Partition1' //String
   'OtherOperationCount' : '42041' //String, 0xA439
   'OtherTransferCount' : '1245369' //String, 0x1300B9
   'PageFaults' : 14307 //Long, 0x37E3
   'PageFileUsage' : 10376 //Long, 0x2888
   'ParentProcessId' : 620 //Long, 0x26C
   'PeakPageFileUsage' : 11672 //Long, 0x2D98
   'PeakVirtualSize' : '60485632' //String, 0x39AF000
   'PeakWorkingSetSize' : 9632 //Long, 0x25A0
   'Priority' : 8 //Long, 0x8
   'PrivatePageCount' : '10625024' //String, 0xA22000
   'ProcessId' : 1820 //Long, 0x71C
   'QuotaNonPagedPoolUsage' : 36 //Long, 0x24
   'QuotaPagedPoolUsage' : 98 //Long, 0x62
   'QuotaPeakNonPagedPoolUsage' : 43 //Long, 0x2B
   'QuotaPeakPagedPoolUsage' : 98 //Long, 0x62
   'ReadOperationCount' : '501' //String, 0x1F5
   'ReadTransferCount' : '58116' //String, 0xE304
   'SessionId' : 0 //Long, 0x0
   'Status' : null
   'TerminationDate' : null
   'ThreadCount' : 20 //Long, 0x14
   'UserModeTime' : '12031250' //String, 0xB79512
   'VirtualSize' : '58322944' //String, 0x379F000
   'WindowsVersion' : '6.3.9600' //String
   'WorkingSetSize' : '6447104' //String, 0x626000
   'WriteOperationCount' : '588' //String, 0x24C
   'WriteTransferCount' : '1651744' //String, 0x193420
}

Instance \\W2012SDC\ROOT\cimv2:Win32_Process.Handle="1840"

Properties={
   'Caption' : 'svchost.exe' //String
   'CommandLine' : 'C:\Windows\system32\svchost.exe -k ftpsvc' //String
   'CreationClassName' : 'Win32_Process' //String
   'CreationDate' : '20141112141020.881400-480' //String
   'CSCreationClassName' : 'Win32_ComputerSystem' //String
   'CSName' : '.' //String
   'Description' : 'svchost.exe' //String
   'ExecutablePath' : 'C:\Windows\system32\svchost.exe' //String
   'ExecutionState' : null
   'Handle' : '1840' //String, 0x730
   'HandleCount' : 273 //Long, 0x111
   'InstallDate' : null
   'KernelModeTime' : '156250' //String, 0x2625A
   'MaximumWorkingSetSize' : 1380 //Long, 0x564
   'MinimumWorkingSetSize' : 200 //Long, 0xC8
   'Name' : 'svchost.exe' //String
   'OSCreationClassName' : 'Win32_OperatingSystem' //String
   'OSName' : 'Microsoft Windows Server 2012 R2 Datacenter Evaluation|C:\Windows|\Device\Harddisk0\Partition1' //String
   'OtherOperationCount' : '278' //String, 0x116
   'OtherTransferCount' : '3638' //String, 0xE36
   'PageFaults' : 7280 //Long, 0x1C70
   'PageFileUsage' : 4624 //Long, 0x1210
   'ParentProcessId' : 620 //Long, 0x26C
   'PeakPageFileUsage' : 4696 //Long, 0x1258
   'PeakVirtualSize' : '49913856' //String, 0x2F9A000
   'PeakWorkingSetSize' : 8848 //Long, 0x2290
   'Priority' : 8 //Long, 0x8
   'PrivatePageCount' : '4734976' //String, 0x484000
   'ProcessId' : 1840 //Long, 0x730
   'QuotaNonPagedPoolUsage' : 15 //Long, 0xF
   'QuotaPagedPoolUsage' : 88 //Long, 0x58
   'QuotaPeakNonPagedPoolUsage' : 15 //Long, 0xF
   'QuotaPeakPagedPoolUsage' : 88 //Long, 0x58
   'ReadOperationCount' : '121' //String, 0x79
   'ReadTransferCount' : '457500' //String, 0x6FB1C
   'SessionId' : 0 //Long, 0x0
   'Status' : null
   'TerminationDate' : null
   'ThreadCount' : 13 //Long, 0xD
   'UserModeTime' : '0' //String, 0x0
   'VirtualSize' : '49381376' //String, 0x2F18000
   'WindowsVersion' : '6.3.9600' //String
   'WorkingSetSize' : '4898816' //String, 0x4AC000
   'WriteOperationCount' : '0' //String, 0x0
   'WriteTransferCount' : '0' //String, 0x0
}

Instance \\W2012SDC\ROOT\cimv2:Win32_Process.Handle="1856"

Properties={
   'Caption' : 'inetinfo.exe' //String
   'CommandLine' : 'C:\Windows\system32\inetsrv\inetinfo.exe' //String
   'CreationClassName' : 'Win32_Process' //String
   'CreationDate' : '20141112141021.137283-480' //String
   'CSCreationClassName' : 'Win32_ComputerSystem' //String
   'CSName' : '.' //String
   'Description' : 'inetinfo.exe' //String
   'ExecutablePath' : 'C:\Windows\system32\inetsrv\inetinfo.exe' //String
   'ExecutionState' : null
   'Handle' : '1856' //String, 0x740
   'HandleCount' : 451 //Long, 0x1C3
   'InstallDate' : null
   'KernelModeTime' : '922812500' //String, 0x37010054
   'MaximumWorkingSetSize' : 1380 //Long, 0x564
   'MinimumWorkingSetSize' : 200 //Long, 0xC8
   'Name' : 'inetinfo.exe' //String
   'OSCreationClassName' : 'Win32_OperatingSystem' //String
   'OSName' : 'Microsoft Windows Server 2012 R2 Datacenter Evaluation|C:\Windows|\Device\Harddisk0\Partition1' //String
   'OtherOperationCount' : '978773' //String, 0xEEF55
   'OtherTransferCount' : '15987422' //String, 0xF3F2DE
   'PageFaults' : 327303 //Long, 0x4FE87
   'PageFileUsage' : 17728 //Long, 0x4540
   'ParentProcessId' : 620 //Long, 0x26C
   'PeakPageFileUsage' : 18124 //Long, 0x46CC
   'PeakVirtualSize' : '130600960' //String, 0x7C8D000
   'PeakWorkingSetSize' : 26404 //Long, 0x6724
   'Priority' : 8 //Long, 0x8
   'PrivatePageCount' : '18153472' //String, 0x1150000
   'ProcessId' : 1856 //Long, 0x740
   'QuotaNonPagedPoolUsage' : 45 //Long, 0x2D
   'QuotaPagedPoolUsage' : 127 //Long, 0x7F
   'QuotaPeakNonPagedPoolUsage' : 49 //Long, 0x31
   'QuotaPeakPagedPoolUsage' : 133 //Long, 0x85
   'ReadOperationCount' : '119' //String, 0x77
   'ReadTransferCount' : '1669263' //String, 0x19788F
   'SessionId' : 0 //Long, 0x0
   'Status' : null
   'TerminationDate' : null
   'ThreadCount' : 20 //Long, 0x14
   'UserModeTime' : '1221093750' //String, 0x48C86976
   'VirtualSize' : '112443392' //String, 0x6B3C000
   'WindowsVersion' : '6.3.9600' //String
   'WorkingSetSize' : '5124096' //String, 0x4E3000
   'WriteOperationCount' : '38' //String, 0x26
   'WriteTransferCount' : '1241926' //String, 0x12F346
}

Instance \\W2012SDC\ROOT\cimv2:Win32_Process.Handle="1912"

Properties={
   'Caption' : 'ismserv.exe' //String
   'CommandLine' : 'C:\Windows\System32\ismserv.exe' //String
   'CreationClassName' : 'Win32_Process' //String
   'CreationDate' : '20141112141021.820814-480' //String
   'CSCreationClassName' : 'Win32_ComputerSystem' //String
   'CSName' : '.' //String
   'Description' : 'ismserv.exe' //String
   'ExecutablePath' : 'C:\Windows\System32\ismserv.exe' //String
   'ExecutionState' : null
   'Handle' : '1912' //String, 0x778
   'HandleCount' : 108 //Long, 0x6C
   'InstallDate' : null
   'KernelModeTime' : '312500' //String, 0x4C4B4
   'MaximumWorkingSetSize' : 1380 //Long, 0x564
   'MinimumWorkingSetSize' : 200 //Long, 0xC8
   'Name' : 'ismserv.exe' //String
   'OSCreationClassName' : 'Win32_OperatingSystem' //String
   'OSName' : 'Microsoft Windows Server 2012 R2 Datacenter Evaluation|C:\Windows|\Device\Harddisk0\Partition1' //String
   'OtherOperationCount' : '2716' //String, 0xA9C
   'OtherTransferCount' : '16182' //String, 0x3F36
   'PageFaults' : 5073 //Long, 0x13D1
   'PageFileUsage' : 1932 //Long, 0x78C
   'ParentProcessId' : 620 //Long, 0x26C
   'PeakPageFileUsage' : 2004 //Long, 0x7D4
   'PeakVirtualSize' : '32768000' //String, 0x1F40000
   'PeakWorkingSetSize' : 4508 //Long, 0x119C
   'Priority' : 8 //Long, 0x8
   'PrivatePageCount' : '1978368' //String, 0x1E3000
   'ProcessId' : 1912 //Long, 0x778
   'QuotaNonPagedPoolUsage' : 12 //Long, 0xC
   'QuotaPagedPoolUsage' : 48 //Long, 0x30
   'QuotaPeakNonPagedPoolUsage' : 14 //Long, 0xE
   'QuotaPeakPagedPoolUsage' : 48 //Long, 0x30
   'ReadOperationCount' : '0' //String, 0x0
   'ReadTransferCount' : '0' //String, 0x0
   'SessionId' : 0 //Long, 0x0
   'Status' : null
   'TerminationDate' : null
   'ThreadCount' : 8 //Long, 0x8
   'UserModeTime' : '156250' //String, 0x2625A
   'VirtualSize' : '32702464' //String, 0x1F30000
   'WindowsVersion' : '6.3.9600' //String
   'WorkingSetSize' : '3371008' //String, 0x337000
   'WriteOperationCount' : '0' //String, 0x0
   'WriteTransferCount' : '0' //String, 0x0
}

Instance \\W2012SDC\ROOT\cimv2:Win32_Process.Handle="1944"

Properties={
   'Caption' : 'svchost.exe' //String
   'CommandLine' : 'C:\Windows\system32\svchost.exe -k KpsSvcGroup' //String
   'CreationClassName' : 'Win32_Process' //String
   'CreationDate' : '20141112141021.987272-480' //String
   'CSCreationClassName' : 'Win32_ComputerSystem' //String
   'CSName' : '.' //String
   'Description' : 'svchost.exe' //String
   'ExecutablePath' : 'C:\Windows\system32\svchost.exe' //String
   'ExecutionState' : null
   'Handle' : '1944' //String, 0x798
   'HandleCount' : 75 //Long, 0x4B
   'InstallDate' : null
   'KernelModeTime' : '0' //String, 0x0
   'MaximumWorkingSetSize' : 1380 //Long, 0x564
   'MinimumWorkingSetSize' : 200 //Long, 0xC8
   'Name' : 'svchost.exe' //String
   'OSCreationClassName' : 'Win32_OperatingSystem' //String
   'OSName' : 'Microsoft Windows Server 2012 R2 Datacenter Evaluation|C:\Windows|\Device\Harddisk0\Partition1' //String
   'OtherOperationCount' : '68' //String, 0x44
   'OtherTransferCount' : '166' //String, 0xA6
   'PageFaults' : 1054 //Long, 0x41E
   'PageFileUsage' : 776 //Long, 0x308
   'ParentProcessId' : 620 //Long, 0x26C
   'PeakPageFileUsage' : 900 //Long, 0x384
   'PeakVirtualSize' : '19378176' //String, 0x127B000
   'PeakWorkingSetSize' : 3068 //Long, 0xBFC
   'Priority' : 8 //Long, 0x8
   'PrivatePageCount' : '794624' //String, 0xC2000
   'ProcessId' : 1944 //Long, 0x798
   'QuotaNonPagedPoolUsage' : 6 //Long, 0x6
   'QuotaPagedPoolUsage' : 34 //Long, 0x22
   'QuotaPeakNonPagedPoolUsage' : 7 //Long, 0x7
   'QuotaPeakPagedPoolUsage' : 34 //Long, 0x22
   'ReadOperationCount' : '0' //String, 0x0
   'ReadTransferCount' : '0' //String, 0x0
   'SessionId' : 0 //Long, 0x0
   'Status' : null
   'TerminationDate' : null
   'ThreadCount' : 2 //Long, 0x2
   'UserModeTime' : '0' //String, 0x0
   'VirtualSize' : '16969728' //String, 0x102F000
   'WindowsVersion' : '6.3.9600' //String
   'WorkingSetSize' : '757760' //String, 0xB9000
   'WriteOperationCount' : '0' //String, 0x0
   'WriteTransferCount' : '0' //String, 0x0
}

Instance \\W2012SDC\ROOT\cimv2:Win32_Process.Handle="1964"

Properties={
   'Caption' : 'svchost.exe' //String
   'CommandLine' : 'C:\Windows\System32\svchost.exe -k LPDService' //String
   'CreationClassName' : 'Win32_Process' //String
   'CreationDate' : '20141112141021.987272-480' //String
   'CSCreationClassName' : 'Win32_ComputerSystem' //String
   'CSName' : '.' //String
   'Description' : 'svchost.exe' //String
   'ExecutablePath' : 'C:\Windows\System32\svchost.exe' //String
   'ExecutionState' : null
   'Handle' : '1964' //String, 0x7AC
   'HandleCount' : 130 //Long, 0x82
   'InstallDate' : null
   'KernelModeTime' : '156250' //String, 0x2625A
   'MaximumWorkingSetSize' : 1380 //Long, 0x564
   'MinimumWorkingSetSize' : 200 //Long, 0xC8
   'Name' : 'svchost.exe' //String
   'OSCreationClassName' : 'Win32_OperatingSystem' //String
   'OSName' : 'Microsoft Windows Server 2012 R2 Datacenter Evaluation|C:\Windows|\Device\Harddisk0\Partition1' //String
   'OtherOperationCount' : '72' //String, 0x48
   'OtherTransferCount' : '3082' //String, 0xC0A
   'PageFaults' : 1276 //Long, 0x4FC
   'PageFileUsage' : 1244 //Long, 0x4DC
   'ParentProcessId' : 620 //Long, 0x26C
   'PeakPageFileUsage' : 1344 //Long, 0x540
   'PeakVirtualSize' : '58740736' //String, 0x3805000
   'PeakWorkingSetSize' : 4340 //Long, 0x10F4
   'Priority' : 8 //Long, 0x8
   'PrivatePageCount' : '1273856' //String, 0x137000
   'ProcessId' : 1964 //Long, 0x7AC
   'QuotaNonPagedPoolUsage' : 10 //Long, 0xA
   'QuotaPagedPoolUsage' : 107 //Long, 0x6B
   'QuotaPeakNonPagedPoolUsage' : 10 //Long, 0xA
   'QuotaPeakPagedPoolUsage' : 108 //Long, 0x6C
   'ReadOperationCount' : '186' //String, 0xBA
   'ReadTransferCount' : '95046' //String, 0x17346
   'SessionId' : 0 //Long, 0x0
   'Status' : null
   'TerminationDate' : null
   'ThreadCount' : 4 //Long, 0x4
   'UserModeTime' : '156250' //String, 0x2625A
   'VirtualSize' : '57675776' //String, 0x3701000
   'WindowsVersion' : '6.3.9600' //String
   'WorkingSetSize' : '872448' //String, 0xD5000
   'WriteOperationCount' : '0' //String, 0x0
   'WriteTransferCount' : '0' //String, 0x0
}

Instance \\W2012SDC\ROOT\cimv2:Win32_Process.Handle="2004"

Properties={
   'Caption' : 'svchost.exe' //String
   'CommandLine' : 'C:\Windows\system32\svchost.exe -k MSiSNS' //String
   'CreationClassName' : 'Win32_Process' //String
   'CreationDate' : '20141112141022.409146-480' //String
   'CSCreationClassName' : 'Win32_ComputerSystem' //String
   'CSName' : '.' //String
   'Description' : 'svchost.exe' //String
   'ExecutablePath' : 'C:\Windows\system32\svchost.exe' //String
   'ExecutionState' : null
   'Handle' : '2004' //String, 0x7D4
   'HandleCount' : 70 //Long, 0x46
   'InstallDate' : null
   'KernelModeTime' : '156250' //String, 0x2625A
   'MaximumWorkingSetSize' : 1380 //Long, 0x564
   'MinimumWorkingSetSize' : 200 //Long, 0xC8
   'Name' : 'svchost.exe' //String
   'OSCreationClassName' : 'Win32_OperatingSystem' //String
   'OSName' : 'Microsoft Windows Server 2012 R2 Datacenter Evaluation|C:\Windows|\Device\Harddisk0\Partition1' //String
   'OtherOperationCount' : '144' //String, 0x90
   'OtherTransferCount' : '2490' //String, 0x9BA
   'PageFaults' : 1926 //Long, 0x786
   'PageFileUsage' : 824 //Long, 0x338
   'ParentProcessId' : 620 //Long, 0x26C
   'PeakPageFileUsage' : 896 //Long, 0x380
   'PeakVirtualSize' : '18833408' //String, 0x11F6000
   'PeakWorkingSetSize' : 3084 //Long, 0xC0C
   'Priority' : 8 //Long, 0x8
   'PrivatePageCount' : '843776' //String, 0xCE000
   'ProcessId' : 2004 //Long, 0x7D4
   'QuotaNonPagedPoolUsage' : 7 //Long, 0x7
   'QuotaPagedPoolUsage' : 32 //Long, 0x20
   'QuotaPeakNonPagedPoolUsage' : 7 //Long, 0x7
   'QuotaPeakPagedPoolUsage' : 32 //Long, 0x20
   'ReadOperationCount' : '21' //String, 0x15
   'ReadTransferCount' : '448' //String, 0x1C0
   'SessionId' : 0 //Long, 0x0
   'Status' : null
   'TerminationDate' : null
   'ThreadCount' : 5 //Long, 0x5
   'UserModeTime' : '156250' //String, 0x2625A
   'VirtualSize' : '18300928' //String, 0x1174000
   'WindowsVersion' : '6.3.9600' //String
   'WorkingSetSize' : '815104' //String, 0xC7000
   'WriteOperationCount' : '10' //String, 0xA
   'WriteTransferCount' : '448' //String, 0x1C0
}

Instance \\W2012SDC\ROOT\cimv2:Win32_Process.Handle="2032"

Properties={
   'Caption' : 'mqsvc.exe' //String
   'CommandLine' : 'C:\Windows\system32\mqsvc.exe' //String
   'CreationClassName' : 'Win32_Process' //String
   'CreationDate' : '20141112141022.612272-480' //String
   'CSCreationClassName' : 'Win32_ComputerSystem' //String
   'CSName' : '.' //String
   'Description' : 'mqsvc.exe' //String
   'ExecutablePath' : 'C:\Windows\system32\mqsvc.exe' //String
   'ExecutionState' : null
   'Handle' : '2032' //String, 0x7F0
   'HandleCount' : 375 //Long, 0x177
   'InstallDate' : null
   'KernelModeTime' : '625000' //String, 0x98968
   'MaximumWorkingSetSize' : 1380 //Long, 0x564
   'MinimumWorkingSetSize' : 200 //Long, 0xC8
   'Name' : 'mqsvc.exe' //String
   'OSCreationClassName' : 'Win32_OperatingSystem' //String
   'OSName' : 'Microsoft Windows Server 2012 R2 Datacenter Evaluation|C:\Windows|\Device\Harddisk0\Partition1' //String
   'OtherOperationCount' : '1382' //String, 0x566
   'OtherTransferCount' : '24156' //String, 0x5E5C
   'PageFaults' : 4493 //Long, 0x118D
   'PageFileUsage' : 6996 //Long, 0x1B54
   'ParentProcessId' : 620 //Long, 0x26C
   'PeakPageFileUsage' : 7508 //Long, 0x1D54
   'PeakVirtualSize' : '101085184' //String, 0x6067000
   'PeakWorkingSetSize' : 12928 //Long, 0x3280
   'Priority' : 8 //Long, 0x8
   'PrivatePageCount' : '7163904' //String, 0x6D5000
   'ProcessId' : 2032 //Long, 0x7F0
   'QuotaNonPagedPoolUsage' : 42 //Long, 0x2A
   'QuotaPagedPoolUsage' : 162 //Long, 0xA2
   'QuotaPeakNonPagedPoolUsage' : 45 //Long, 0x2D
   'QuotaPeakPagedPoolUsage' : 163 //Long, 0xA3
   'ReadOperationCount' : '221' //String, 0xDD
   'ReadTransferCount' : '742292' //String, 0xB5394
   'SessionId' : 0 //Long, 0x0
   'Status' : null
   'TerminationDate' : null
   'ThreadCount' : 31 //Long, 0x1F
   'UserModeTime' : '156250' //String, 0x2625A
   'VirtualSize' : '96837632' //String, 0x5C5A000
   'WindowsVersion' : '6.3.9600' //String
   'WorkingSetSize' : '1806336' //String, 0x1B9000
   'WriteOperationCount' : '23' //String, 0x17
   'WriteTransferCount' : '68003' //String, 0x109A3
}

Instance \\W2012SDC\ROOT\cimv2:Win32_Process.Handle="2228"

Properties={
   'Caption' : 'sqlservr.exe' //String
   'CommandLine' : '"C:\Program Files\Microsoft SQL Server\MSSQL12.MSSQLSERVER\MSSQL\Binn\sqlservr.exe" -sMSSQLSERVER' //String
   'CreationClassName' : 'Win32_Process' //String
   'CreationDate' : '20141112141033.172411-480' //String
   'CSCreationClassName' : 'Win32_ComputerSystem' //String
   'CSName' : '.' //String
   'Description' : 'sqlservr.exe' //String
   'ExecutablePath' : 'C:\Program Files\Microsoft SQL Server\MSSQL12.MSSQLSERVER\MSSQL\Binn\sqlservr.exe' //String
   'ExecutionState' : null
   'Handle' : '2228' //String, 0x8B4
   'HandleCount' : 652 //Long, 0x28C
   'InstallDate' : null
   'KernelModeTime' : '12492968750' //String
   'MaximumWorkingSetSize' : 1380 //Long, 0x564
   'MinimumWorkingSetSize' : 200 //Long, 0xC8
   'Name' : 'sqlservr.exe' //String
   'OSCreationClassName' : 'Win32_OperatingSystem' //String
   'OSName' : 'Microsoft Windows Server 2012 R2 Datacenter Evaluation|C:\Windows|\Device\Harddisk0\Partition1' //String
   'OtherOperationCount' : '575202' //String, 0x8C6E2
   'OtherTransferCount' : '5506978' //String, 0x5407A2
   'PageFaults' : 269028 //Long, 0x41AE4
   'PageFileUsage' : 239940 //Long, 0x3A944
   'ParentProcessId' : 620 //Long, 0x26C
   'PeakPageFileUsage' : 255220 //Long, 0x3E4F4
   'PeakVirtualSize' : '8787750912' //String
   'PeakWorkingSetSize' : 136196 //Long, 0x21404
   'Priority' : 8 //Long, 0x8
   'PrivatePageCount' : '245698560' //String, 0xEA51000
   'ProcessId' : 2228 //Long, 0x8B4
   'QuotaNonPagedPoolUsage' : 61 //Long, 0x3D
   'QuotaPagedPoolUsage' : 481 //Long, 0x1E1
   'QuotaPeakNonPagedPoolUsage' : 63 //Long, 0x3F
   'QuotaPeakPagedPoolUsage' : 483 //Long, 0x1E3
   'ReadOperationCount' : '27935' //String, 0x6D1F
   'ReadTransferCount' : '285610199' //String, 0x110610D7
   'SessionId' : 0 //Long, 0x0
   'Status' : null
   'TerminationDate' : null
   'ThreadCount' : 63 //Long, 0x3F
   'UserModeTime' : '26304375000' //String
   'VirtualSize' : '8772554752' //String
   'WindowsVersion' : '6.3.9600' //String
   'WorkingSetSize' : '62623744' //String, 0x3BB9000
   'WriteOperationCount' : '12313' //String, 0x3019
   'WriteTransferCount' : '84176535' //String, 0x5046E97
}

Instance \\W2012SDC\ROOT\cimv2:Win32_Process.Handle="2404"

Properties={
   'Caption' : 'SMSvcHost.exe' //String
   'CommandLine' : 'C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe' //String
   'CreationClassName' : 'Win32_Process' //String
   'CreationDate' : '20141112141043.515235-480' //String
   'CSCreationClassName' : 'Win32_ComputerSystem' //String
   'CSName' : '.' //String
   'Description' : 'SMSvcHost.exe' //String
   'ExecutablePath' : 'C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe' //String
   'ExecutionState' : null
   'Handle' : '2404' //String, 0x964
   'HandleCount' : 280 //Long, 0x118
   'InstallDate' : null
   'KernelModeTime' : '625000' //String, 0x98968
   'MaximumWorkingSetSize' : 1380 //Long, 0x564
   'MinimumWorkingSetSize' : 200 //Long, 0xC8
   'Name' : 'SMSvcHost.exe' //String
   'OSCreationClassName' : 'Win32_OperatingSystem' //String
   'OSName' : 'Microsoft Windows Server 2012 R2 Datacenter Evaluation|C:\Windows|\Device\Harddisk0\Partition1' //String
   'OtherOperationCount' : '940' //String, 0x3AC
   'OtherTransferCount' : '12151' //String, 0x2F77
   'PageFaults' : 9146 //Long, 0x23BA
   'PageFileUsage' : 29492 //Long, 0x7334
   'ParentProcessId' : 620 //Long, 0x26C
   'PeakPageFileUsage' : 30320 //Long, 0x7670
   'PeakVirtualSize' : '610156544' //String, 0x245E4000
   'PeakWorkingSetSize' : 30172 //Long, 0x75DC
   'Priority' : 8 //Long, 0x8
   'PrivatePageCount' : '30199808' //String, 0x1CCD000
   'ProcessId' : 2404 //Long, 0x964
   'QuotaNonPagedPoolUsage' : 35 //Long, 0x23
   'QuotaPagedPoolUsage' : 374 //Long, 0x176
   'QuotaPeakNonPagedPoolUsage' : 40 //Long, 0x28
   'QuotaPeakPagedPoolUsage' : 374 //Long, 0x176
   'ReadOperationCount' : '148' //String, 0x94
   'ReadTransferCount' : '238784' //String, 0x3A4C0
   'SessionId' : 0 //Long, 0x0
   'Status' : null
   'TerminationDate' : null
   'ThreadCount' : 8 //Long, 0x8
   'UserModeTime' : '2031250' //String, 0x1EFE92
   'VirtualSize' : '598794240' //String, 0x23B0E000
   'WindowsVersion' : '6.3.9600' //String
   'WorkingSetSize' : '2994176' //String, 0x2DB000
   'WriteOperationCount' : '56' //String, 0x38
   'WriteTransferCount' : '35319' //String, 0x89F7
}

Instance \\W2012SDC\ROOT\cimv2:Win32_Process.Handle="2480"

Properties={
   'Caption' : 'svchost.exe' //String
   'CommandLine' : 'C:\Windows\System32\svchost.exe -k PeerDist' //String
   'CreationClassName' : 'Win32_Process' //String
   'CreationDate' : '20141112141043.862091-480' //String
   'CSCreationClassName' : 'Win32_ComputerSystem' //String
   'CSName' : '.' //String
   'Description' : 'svchost.exe' //String
   'ExecutablePath' : 'C:\Windows\System32\svchost.exe' //String
   'ExecutionState' : null
   'Handle' : '2480' //String, 0x9B0
   'HandleCount' : 342 //Long, 0x156
   'InstallDate' : null
   'KernelModeTime' : '2500000' //String, 0x2625A0
   'MaximumWorkingSetSize' : 1380 //Long, 0x564
   'MinimumWorkingSetSize' : 200 //Long, 0xC8
   'Name' : 'svchost.exe' //String
   'OSCreationClassName' : 'Win32_OperatingSystem' //String
   'OSName' : 'Microsoft Windows Server 2012 R2 Datacenter Evaluation|C:\Windows|\Device\Harddisk0\Partition1' //String
   'OtherOperationCount' : '1531' //String, 0x5FB
   'OtherTransferCount' : '38158' //String, 0x950E
   'PageFaults' : 14046 //Long, 0x36DE
   'PageFileUsage' : 53224 //Long, 0xCFE8
   'ParentProcessId' : 620 //Long, 0x26C
   'PeakPageFileUsage' : 54844 //Long, 0xD63C
   'PeakVirtualSize' : '433553408' //String, 0x19D78000
   'PeakWorkingSetSize' : 20776 //Long, 0x5128
   'Priority' : 8 //Long, 0x8
   'PrivatePageCount' : '54501376' //String, 0x33FA000
   'ProcessId' : 2480 //Long, 0x9B0
   'QuotaNonPagedPoolUsage' : 43 //Long, 0x2B
   'QuotaPagedPoolUsage' : 158 //Long, 0x9E
   'QuotaPeakNonPagedPoolUsage' : 45 //Long, 0x2D
   'QuotaPeakPagedPoolUsage' : 158 //Long, 0x9E
   'ReadOperationCount' : '203' //String, 0xCB
   'ReadTransferCount' : '22484286' //String, 0x157153E
   'SessionId' : 0 //Long, 0x0
   'Status' : null
   'TerminationDate' : null
   'ThreadCount' : 13 //Long, 0xD
   'UserModeTime' : '2656250' //String, 0x2887FA
   'VirtualSize' : '430989312' //String, 0x19B06000
   'WindowsVersion' : '6.3.9600' //String
   'WorkingSetSize' : '802816' //String, 0xC4000
   'WriteOperationCount' : '6' //String, 0x6
   'WriteTransferCount' : '139264' //String, 0x22000
}

Instance \\W2012SDC\ROOT\cimv2:Win32_Process.Handle="2544"

Properties={
   'Caption' : 'ReportingServicesService.exe' //String
   'CommandLine' : '"C:\Program Files\Microsoft SQL Server\MSRS12.MSSQLSERVER\Reporting Services\ReportServer\bin\ReportingServicesService.exe"' //String
   'CreationClassName' : 'Win32_Process' //String
   'CreationDate' : '20141112141046.896445-480' //String
   'CSCreationClassName' : 'Win32_ComputerSystem' //String
   'CSName' : '.' //String
   'Description' : 'ReportingServicesService.exe' //String
   'ExecutablePath' : 'C:\Program Files\Microsoft SQL Server\MSRS12.MSSQLSERVER\Reporting Services\ReportServer\bin\ReportingServicesService.exe' //String
   'ExecutionState' : null
   'Handle' : '2544' //String, 0x9F0
   'HandleCount' : 701 //Long, 0x2BD
   'InstallDate' : null
   'KernelModeTime' : '427187500' //String, 0x19765D2C
   'MaximumWorkingSetSize' : 1380 //Long, 0x564
   'MinimumWorkingSetSize' : 200 //Long, 0xC8
   'Name' : 'ReportingServicesService.exe' //String
   'OSCreationClassName' : 'Win32_OperatingSystem' //String
   'OSName' : 'Microsoft Windows Server 2012 R2 Datacenter Evaluation|C:\Windows|\Device\Harddisk0\Partition1' //String
   'OtherOperationCount' : '21533' //String, 0x541D
   'OtherTransferCount' : '4239408' //String, 0x40B030
   'PageFaults' : 218903 //Long, 0x35717
   'PageFileUsage' : 140160 //Long, 0x22380
   'ParentProcessId' : 620 //Long, 0x26C
   'PeakPageFileUsage' : 140672 //Long, 0x22580
   'PeakVirtualSize' : '8758919168' //String
   'PeakWorkingSetSize' : 103352 //Long, 0x193B8
   'Priority' : 8 //Long, 0x8
   'PrivatePageCount' : '143523840' //String, 0x88E0000
   'ProcessId' : 2544 //Long, 0x9F0
   'QuotaNonPagedPoolUsage' : 58 //Long, 0x3A
   'QuotaPagedPoolUsage' : 426 //Long, 0x1AA
   'QuotaPeakNonPagedPoolUsage' : 66 //Long, 0x42
   'QuotaPeakPagedPoolUsage' : 429 //Long, 0x1AD
   'ReadOperationCount' : '5793' //String, 0x16A1
   'ReadTransferCount' : '12223826' //String, 0xBA8552
   'SessionId' : 0 //Long, 0x0
   'Status' : null
   'TerminationDate' : null
   'ThreadCount' : 45 //Long, 0x2D
   'UserModeTime' : '1950781250' //String, 0x74468F42
   'VirtualSize' : '8751898624' //String
   'WindowsVersion' : '6.3.9600' //String
   'WorkingSetSize' : '46194688' //String, 0x2C0E000
   'WriteOperationCount' : '6399' //String, 0x18FF
   'WriteTransferCount' : '898691' //String, 0xDB683
}

Instance \\W2012SDC\ROOT\cimv2:Win32_Process.Handle="2748"

Properties={
   'Caption' : 'ProviderRegistryService.exe' //String
   'CommandLine' : 'C:\Windows\System32\Essentials\ProviderRegistryService.exe' //String
   'CreationClassName' : 'Win32_Process' //String
   'CreationDate' : '20141112141049.443322-480' //String
   'CSCreationClassName' : 'Win32_ComputerSystem' //String
   'CSName' : '.' //String
   'Description' : 'ProviderRegistryService.exe' //String
   'ExecutablePath' : 'C:\Windows\System32\Essentials\ProviderRegistryService.exe' //String
   'ExecutionState' : null
   'Handle' : '2748' //String, 0xABC
   'HandleCount' : 428 //Long, 0x1AC
   'InstallDate' : null
   'KernelModeTime' : '2500000' //String, 0x2625A0
   'MaximumWorkingSetSize' : 1380 //Long, 0x564
   'MinimumWorkingSetSize' : 200 //Long, 0xC8
   'Name' : 'ProviderRegistryService.exe' //String
   'OSCreationClassName' : 'Win32_OperatingSystem' //String
   'OSName' : 'Microsoft Windows Server 2012 R2 Datacenter Evaluation|C:\Windows|\Device\Harddisk0\Partition1' //String
   'OtherOperationCount' : '52034' //String, 0xCB42
   'OtherTransferCount' : '660081' //String, 0xA1271
   'PageFaults' : 85984 //Long, 0x14FE0
   'PageFileUsage' : 32636 //Long, 0x7F7C
   'ParentProcessId' : 620 //Long, 0x26C
   'PeakPageFileUsage' : 35856 //Long, 0x8C10
   'PeakVirtualSize' : '620924928' //String, 0x25029000
   'PeakWorkingSetSize' : 41464 //Long, 0xA1F8
   'Priority' : 8 //Long, 0x8
   'PrivatePageCount' : '33419264' //String, 0x1FDF000
   'ProcessId' : 2748 //Long, 0xABC
   'QuotaNonPagedPoolUsage' : 32 //Long, 0x20
   'QuotaPagedPoolUsage' : 388 //Long, 0x184
   'QuotaPeakNonPagedPoolUsage' : 42 //Long, 0x2A
   'QuotaPeakPagedPoolUsage' : 388 //Long, 0x184
   'ReadOperationCount' : '117' //String, 0x75
   'ReadTransferCount' : '300599' //String, 0x49637
   'SessionId' : 0 //Long, 0x0
   'Status' : null
   'TerminationDate' : null
   'ThreadCount' : 9 //Long, 0x9
   'UserModeTime' : '7343750' //String, 0x700E86
   'VirtualSize' : '616427520' //String, 0x24BDF000
   'WindowsVersion' : '6.3.9600' //String
   'WorkingSetSize' : '10711040' //String, 0xA37000
   'WriteOperationCount' : '54953' //String, 0xD6A9
   'WriteTransferCount' : '8359821' //String, 0x7F8F8D
}

Instance \\W2012SDC\ROOT\cimv2:Win32_Process.Handle="2852"

Properties={
   'Caption' : 'TCPSVCS.EXE' //String
   'CommandLine' : 'C:\Windows\System32\tcpsvcs.exe' //String
   'CreationClassName' : 'Win32_Process' //String
   'CreationDate' : '20141112141051.186685-480' //String
   'CSCreationClassName' : 'Win32_ComputerSystem' //String
   'CSName' : '.' //String
   'Description' : 'TCPSVCS.EXE' //String
   'ExecutablePath' : 'C:\Windows\System32\tcpsvcs.exe' //String
   'ExecutionState' : null
   'Handle' : '2852' //String, 0xB24
   'HandleCount' : 86 //Long, 0x56
   'InstallDate' : null
   'KernelModeTime' : '156250' //String, 0x2625A
   'MaximumWorkingSetSize' : 1380 //Long, 0x564
   'MinimumWorkingSetSize' : 200 //Long, 0xC8
   'Name' : 'TCPSVCS.EXE' //String
   'OSCreationClassName' : 'Win32_OperatingSystem' //String
   'OSName' : 'Microsoft Windows Server 2012 R2 Datacenter Evaluation|C:\Windows|\Device\Harddisk0\Partition1' //String
   'OtherOperationCount' : '425' //String, 0x1A9
   'OtherTransferCount' : '7984' //String, 0x1F30
   'PageFaults' : 860 //Long, 0x35C
   'PageFileUsage' : 736 //Long, 0x2E0
   'ParentProcessId' : 620 //Long, 0x26C
   'PeakPageFileUsage' : 832 //Long, 0x340
   'PeakVirtualSize' : '15405056' //String, 0xEB1000
   'PeakWorkingSetSize' : 2920 //Long, 0xB68
   'Priority' : 8 //Long, 0x8
   'PrivatePageCount' : '753664' //String, 0xB8000
   'ProcessId' : 2852 //Long, 0xB24
   'QuotaNonPagedPoolUsage' : 17 //Long, 0x11
   'QuotaPagedPoolUsage' : 31 //Long, 0x1F
   'QuotaPeakNonPagedPoolUsage' : 18 //Long, 0x12
   'QuotaPeakPagedPoolUsage' : 31 //Long, 0x1F
   'ReadOperationCount' : '157' //String, 0x9D
   'ReadTransferCount' : '80227' //String, 0x13963
   'SessionId' : 0 //Long, 0x0
   'Status' : null
   'TerminationDate' : null
   'ThreadCount' : 2 //Long, 0x2
   'UserModeTime' : '0' //String, 0x0
   'VirtualSize' : '14340096' //String, 0xDAD000
   'WindowsVersion' : '6.3.9600' //String
   'WorkingSetSize' : '1929216' //String, 0x1D7000
   'WriteOperationCount' : '0' //String, 0x0
   'WriteTransferCount' : '0' //String, 0x0
}
comments powered by Disqus
WUtils.com