Win32_Process, ROOT\cimv2 - Instances

Instances of Win32_Process

This section contains sample wmi instances of Win32_Process class with their properties from Microsoft Windows Server 2012 R2 Datacenter Evaluation.

…

Instance \\W2012SDC\ROOT\cimv2:Win32_Process.Handle="0"

Properties={

'Caption' : 'System Idle Process' //String

'CommandLine' : null

'CreationClassName' : 'Win32_Process' //String

'CreationDate' : null

'CSCreationClassName' : 'Win32_ComputerSystem' //String

'CSName' : '.' //String

'Description' : 'System Idle Process' //String

'ExecutablePath' : null

'ExecutionState' : null

'Handle' : '0' //String, 0x0

'HandleCount' : 0 //Long, 0x0

'InstallDate' : null

'KernelModeTime' : '3478941250000' //String

'MaximumWorkingSetSize' : null

'MinimumWorkingSetSize' : null

'Name' : 'System Idle Process' //String

'OSCreationClassName' : 'Win32_OperatingSystem' //String

'OSName' : 'Microsoft Windows Server 2012 R2 Datacenter Evaluation|C:\Windows|\Device\Harddisk0\Partition1' //String

'OtherOperationCount' : '0' //String, 0x0

'OtherTransferCount' : '0' //String, 0x0

'PageFaults' : 1 //Long, 0x1

'PageFileUsage' : 0 //Long, 0x0

'ParentProcessId' : 0 //Long, 0x0

'PeakPageFileUsage' : 0 //Long, 0x0

'PeakVirtualSize' : '65536' //String, 0x10000

'PeakWorkingSetSize' : 4 //Long, 0x4

'Priority' : 0 //Long, 0x0

'PrivatePageCount' : '0' //String, 0x0

'ProcessId' : 0 //Long, 0x0

'QuotaNonPagedPoolUsage' : 0 //Long, 0x0

'QuotaPagedPoolUsage' : 0 //Long, 0x0

'QuotaPeakNonPagedPoolUsage' : 0 //Long, 0x0

'QuotaPeakPagedPoolUsage' : 0 //Long, 0x0

'ReadOperationCount' : '0' //String, 0x0

'ReadTransferCount' : '0' //String, 0x0

'SessionId' : 0 //Long, 0x0

'Status' : null

'TerminationDate' : null

'ThreadCount' : 4 //Long, 0x4

'UserModeTime' : '0' //String, 0x0

'VirtualSize' : '65536' //String, 0x10000

'WindowsVersion' : '6.3.9600' //String

'WorkingSetSize' : '4096' //String, 0x1000

'WriteOperationCount' : '0' //String, 0x0

'WriteTransferCount' : '0' //String, 0x0

}

Instance \\W2012SDC\ROOT\cimv2:Win32_Process.Handle="4"

Properties={

'Caption' : 'System' //String

'CommandLine' : null

'CreationClassName' : 'Win32_Process' //String

'CreationDate' : '20141112140907.774544-480' //String

'CSCreationClassName' : 'Win32_ComputerSystem' //String

'CSName' : '.' //String

'Description' : 'System' //String

'ExecutablePath' : null

'ExecutionState' : null

'Handle' : '4' //String, 0x4

'HandleCount' : 1201 //Long, 0x4B1

'InstallDate' : null

'KernelModeTime' : '2630781250' //String

'MaximumWorkingSetSize' : null

'MinimumWorkingSetSize' : null

'Name' : 'System' //String

'OSCreationClassName' : 'Win32_OperatingSystem' //String

'OSName' : 'Microsoft Windows Server 2012 R2 Datacenter Evaluation|C:\Windows|\Device\Harddisk0\Partition1' //String

'OtherOperationCount' : '12360' //String, 0x3048

'OtherTransferCount' : '344557' //String, 0x541ED

'PageFaults' : 10069 //Long, 0x2755

'PageFileUsage' : 104 //Long, 0x68

'ParentProcessId' : 0 //Long, 0x0

'PeakPageFileUsage' : 268 //Long, 0x10C

'PeakVirtualSize' : '12505088' //String, 0xBED000

'PeakWorkingSetSize' : 5364 //Long, 0x14F4

'Priority' : 8 //Long, 0x8

'PrivatePageCount' : '106496' //String, 0x1A000

'ProcessId' : 4 //Long, 0x4

'QuotaNonPagedPoolUsage' : 0 //Long, 0x0

'QuotaPagedPoolUsage' : 0 //Long, 0x0

'QuotaPeakNonPagedPoolUsage' : 0 //Long, 0x0

'QuotaPeakPagedPoolUsage' : 0 //Long, 0x0

'ReadOperationCount' : '396' //String, 0x18C

'ReadTransferCount' : '174949456' //String, 0xA6D8450

'SessionId' : 0 //Long, 0x0

'Status' : null

'TerminationDate' : null

'ThreadCount' : 168 //Long, 0xA8

'UserModeTime' : '0' //String, 0x0

'VirtualSize' : '11821056' //String, 0xB46000

'WindowsVersion' : '6.3.9600' //String

'WorkingSetSize' : '262144' //String, 0x40000

'WriteOperationCount' : '11019' //String, 0x2B0B

'WriteTransferCount' : '257425653' //String, 0xF5800F5

}

Instance \\W2012SDC\ROOT\cimv2:Win32_Process.Handle="320"

Properties={

'Caption' : 'smss.exe' //String

'CommandLine' : null

'CreationClassName' : 'Win32_Process' //String

'CreationDate' : '20141112140907.915167-480' //String

'CSCreationClassName' : 'Win32_ComputerSystem' //String

'CSName' : '.' //String

'Description' : 'smss.exe' //String

'ExecutablePath' : null

'ExecutionState' : null

'Handle' : '320' //String, 0x140

'HandleCount' : 52 //Long, 0x34

'InstallDate' : null

'KernelModeTime' : '937500' //String, 0xE4E1C

'MaximumWorkingSetSize' : null

'MinimumWorkingSetSize' : null

'Name' : 'smss.exe' //String

'OSCreationClassName' : 'Win32_OperatingSystem' //String

'OSName' : 'Microsoft Windows Server 2012 R2 Datacenter Evaluation|C:\Windows|\Device\Harddisk0\Partition1' //String

'OtherOperationCount' : '276' //String, 0x114

'OtherTransferCount' : '17438' //String, 0x441E

'PageFaults' : 566 //Long, 0x236

'PageFileUsage' : 276 //Long, 0x114

'ParentProcessId' : 4 //Long, 0x4

'PeakPageFileUsage' : 348 //Long, 0x15C

'PeakVirtualSize' : '25460736' //String, 0x1848000

'PeakWorkingSetSize' : 1060 //Long, 0x424

'Priority' : 11 //Long, 0xB

'PrivatePageCount' : '282624' //String, 0x45000

'ProcessId' : 320 //Long, 0x140

'QuotaNonPagedPoolUsage' : 3 //Long, 0x3

'QuotaPagedPoolUsage' : 13 //Long, 0xD

'QuotaPeakNonPagedPoolUsage' : 8 //Long, 0x8

'QuotaPeakPagedPoolUsage' : 53 //Long, 0x35

'ReadOperationCount' : '4' //String, 0x4

'ReadTransferCount' : '29188' //String, 0x7204

'SessionId' : 0 //Long, 0x0

'Status' : null

'TerminationDate' : null

'ThreadCount' : 2 //Long, 0x2

'UserModeTime' : '0' //String, 0x0

'VirtualSize' : '4395008' //String, 0x431000

'WindowsVersion' : '6.3.9600' //String

'WorkingSetSize' : '335872' //String, 0x52000

'WriteOperationCount' : '1' //String, 0x1

'WriteTransferCount' : '32' //String, 0x20

}

Instance \\W2012SDC\ROOT\cimv2:Win32_Process.Handle="456"

Properties={

'Caption' : 'csrss.exe' //String

'CommandLine' : null

'CreationClassName' : 'Win32_Process' //String

'CreationDate' : '20141112140917.083497-480' //String

'CSCreationClassName' : 'Win32_ComputerSystem' //String

'CSName' : '.' //String

'Description' : 'csrss.exe' //String

'ExecutablePath' : null

'ExecutionState' : null

'Handle' : '456' //String, 0x1C8

'HandleCount' : 640 //Long, 0x280

'InstallDate' : null

'KernelModeTime' : '42656250' //String, 0x28AE1FA

'MaximumWorkingSetSize' : null

'MinimumWorkingSetSize' : null

'Name' : 'csrss.exe' //String

'OSCreationClassName' : 'Win32_OperatingSystem' //String

'OSName' : 'Microsoft Windows Server 2012 R2 Datacenter Evaluation|C:\Windows|\Device\Harddisk0\Partition1' //String

'OtherOperationCount' : '22633' //String, 0x5869

'OtherTransferCount' : '714586' //String, 0xAE75A

'PageFaults' : 4205 //Long, 0x106D

'PageFileUsage' : 2084 //Long, 0x824

'ParentProcessId' : 448 //Long, 0x1C0

'PeakPageFileUsage' : 2464 //Long, 0x9A0

'PeakVirtualSize' : '61026304' //String, 0x3A33000

'PeakWorkingSetSize' : 4028 //Long, 0xFBC

'Priority' : 13 //Long, 0xD

'PrivatePageCount' : '2134016' //String, 0x209000

'ProcessId' : 456 //Long, 0x1C8

'QuotaNonPagedPoolUsage' : 22 //Long, 0x16

'QuotaPagedPoolUsage' : 194 //Long, 0xC2

'QuotaPeakNonPagedPoolUsage' : 24 //Long, 0x18

'QuotaPeakPagedPoolUsage' : 204 //Long, 0xCC

'ReadOperationCount' : '444' //String, 0x1BC

'ReadTransferCount' : '597407' //String, 0x91D9F

'SessionId' : 0 //Long, 0x0

'Status' : null

'TerminationDate' : null

'ThreadCount' : 10 //Long, 0xA

'UserModeTime' : '18593750' //String, 0x11BB7D6

'VirtualSize' : '60502016' //String, 0x39B3000

'WindowsVersion' : '6.3.9600' //String

'WorkingSetSize' : '2420736' //String, 0x24F000

'WriteOperationCount' : '0' //String, 0x0

'WriteTransferCount' : '0' //String, 0x0

}

Instance \\W2012SDC\ROOT\cimv2:Win32_Process.Handle="524"

Properties={

'Caption' : 'csrss.exe' //String

'CommandLine' : null

'CreationClassName' : 'Win32_Process' //String

'CreationDate' : '20141112140918.479233-480' //String

'CSCreationClassName' : 'Win32_ComputerSystem' //String

'CSName' : '.' //String

'Description' : 'csrss.exe' //String

'ExecutablePath' : null

'ExecutionState' : null

'Handle' : '524' //String, 0x20C

'HandleCount' : 172 //Long, 0xAC

'InstallDate' : null

'KernelModeTime' : '27343750' //String, 0x1A13B86

'MaximumWorkingSetSize' : null

'MinimumWorkingSetSize' : null

'Name' : 'csrss.exe' //String

'OSCreationClassName' : 'Win32_OperatingSystem' //String

'OSName' : 'Microsoft Windows Server 2012 R2 Datacenter Evaluation|C:\Windows|\Device\Harddisk0\Partition1' //String

'OtherOperationCount' : '8033' //String, 0x1F61

'OtherTransferCount' : '108002' //String, 0x1A5E2

'PageFaults' : 12577 //Long, 0x3121

'PageFileUsage' : 1672 //Long, 0x688

'ParentProcessId' : 512 //Long, 0x200

'PeakPageFileUsage' : 1732 //Long, 0x6C4

'PeakVirtualSize' : '63275008' //String, 0x3C58000

'PeakWorkingSetSize' : 16796 //Long, 0x419C

'Priority' : 13 //Long, 0xD

'PrivatePageCount' : '1712128' //String, 0x1A2000

'ProcessId' : 524 //Long, 0x20C

'QuotaNonPagedPoolUsage' : 12 //Long, 0xC

'QuotaPagedPoolUsage' : 126 //Long, 0x7E

'QuotaPeakNonPagedPoolUsage' : 14 //Long, 0xE

'QuotaPeakPagedPoolUsage' : 144 //Long, 0x90

'ReadOperationCount' : '13485' //String, 0x34AD

'ReadTransferCount' : '629457' //String, 0x99AD1

'SessionId' : 1 //Long, 0x1

'Status' : null

'TerminationDate' : null

'ThreadCount' : 10 //Long, 0xA

'UserModeTime' : '1250000' //String, 0x1312D0

'VirtualSize' : '54829056' //String, 0x344A000

'WindowsVersion' : '6.3.9600' //String

'WorkingSetSize' : '2637824' //String, 0x284000

'WriteOperationCount' : '0' //String, 0x0

'WriteTransferCount' : '0' //String, 0x0

}

Instance \\W2012SDC\ROOT\cimv2:Win32_Process.Handle="532"

Properties={

'Caption' : 'wininit.exe' //String

'CommandLine' : 'wininit.exe' //String

'CreationClassName' : 'Win32_Process' //String

'CreationDate' : '20141112140918.510498-480' //String

'CSCreationClassName' : 'Win32_ComputerSystem' //String

'CSName' : '.' //String

'Description' : 'wininit.exe' //String

'ExecutablePath' : 'C:\Windows\system32\wininit.exe' //String

'ExecutionState' : null

'Handle' : '532' //String, 0x214

'HandleCount' : 85 //Long, 0x55

'InstallDate' : null

'KernelModeTime' : '468750' //String, 0x7270E

'MaximumWorkingSetSize' : 1380 //Long, 0x564

'MinimumWorkingSetSize' : 200 //Long, 0xC8

'Name' : 'wininit.exe' //String

'OSCreationClassName' : 'Win32_OperatingSystem' //String

'OSName' : 'Microsoft Windows Server 2012 R2 Datacenter Evaluation|C:\Windows|\Device\Harddisk0\Partition1' //String

'OtherOperationCount' : '1028' //String, 0x404

'OtherTransferCount' : '2620' //String, 0xA3C

'PageFaults' : 1111 //Long, 0x457

'PageFileUsage' : 864 //Long, 0x360

'ParentProcessId' : 448 //Long, 0x1C0

'PeakPageFileUsage' : 1072 //Long, 0x430

'PeakVirtualSize' : '49328128' //String, 0x2F0B000

'PeakWorkingSetSize' : 3700 //Long, 0xE74

'Priority' : 13 //Long, 0xD

'PrivatePageCount' : '884736' //String, 0xD8000

'ProcessId' : 532 //Long, 0x214

'QuotaNonPagedPoolUsage' : 8 //Long, 0x8

'QuotaPagedPoolUsage' : 92 //Long, 0x5C

'QuotaPeakNonPagedPoolUsage' : 10 //Long, 0xA

'QuotaPeakPagedPoolUsage' : 96 //Long, 0x60

'ReadOperationCount' : '1' //String, 0x1

'ReadTransferCount' : '6656' //String, 0x1A00

'SessionId' : 0 //Long, 0x0

'Status' : null

'TerminationDate' : null

'ThreadCount' : 1 //Long, 0x1

'UserModeTime' : '0' //String, 0x0

'VirtualSize' : '43855872' //String, 0x29D3000

'WindowsVersion' : '6.3.9600' //String

'WorkingSetSize' : '151552' //String, 0x25000

'WriteOperationCount' : '0' //String, 0x0

'WriteTransferCount' : '0' //String, 0x0

}

Instance \\W2012SDC\ROOT\cimv2:Win32_Process.Handle="576"

Properties={

'Caption' : 'winlogon.exe' //String

'CommandLine' : 'winlogon.exe' //String

'CreationClassName' : 'Win32_Process' //String

'CreationDate' : '20141112140918.901124-480' //String

'CSCreationClassName' : 'Win32_ComputerSystem' //String

'CSName' : '.' //String

'Description' : 'winlogon.exe' //String

'ExecutablePath' : 'C:\Windows\system32\winlogon.exe' //String

'ExecutionState' : null

'Handle' : '576' //String, 0x240

'HandleCount' : 175 //Long, 0xAF

'InstallDate' : null

'KernelModeTime' : '781250' //String, 0xBEBC2

'MaximumWorkingSetSize' : 1380 //Long, 0x564

'MinimumWorkingSetSize' : 200 //Long, 0xC8

'Name' : 'winlogon.exe' //String

'OSCreationClassName' : 'Win32_OperatingSystem' //String

'OSName' : 'Microsoft Windows Server 2012 R2 Datacenter Evaluation|C:\Windows|\Device\Harddisk0\Partition1' //String

'OtherOperationCount' : '1451' //String, 0x5AB

'OtherTransferCount' : '144834' //String, 0x235C2

'PageFaults' : 5341 //Long, 0x14DD

'PageFileUsage' : 1476 //Long, 0x5C4

'ParentProcessId' : 512 //Long, 0x200

'PeakPageFileUsage' : 2660 //Long, 0xA64

'PeakVirtualSize' : '64933888' //String, 0x3DED000

'PeakWorkingSetSize' : 9324 //Long, 0x246C

'Priority' : 13 //Long, 0xD

'PrivatePageCount' : '1511424' //String, 0x171000

'ProcessId' : 576 //Long, 0x240

'QuotaNonPagedPoolUsage' : 10 //Long, 0xA

'QuotaPagedPoolUsage' : 121 //Long, 0x79

'QuotaPeakNonPagedPoolUsage' : 12 //Long, 0xC

'QuotaPeakPagedPoolUsage' : 127 //Long, 0x7F

'ReadOperationCount' : '7' //String, 0x7

'ReadTransferCount' : '144896' //String, 0x23600

'SessionId' : 1 //Long, 0x1

'Status' : null

'TerminationDate' : null

'ThreadCount' : 2 //Long, 0x2

'UserModeTime' : '156250' //String, 0x2625A

'VirtualSize' : '60657664' //String, 0x39D9000

'WindowsVersion' : '6.3.9600' //String

'WorkingSetSize' : '1400832' //String, 0x156000

'WriteOperationCount' : '5' //String, 0x5

'WriteTransferCount' : '800' //String, 0x320

}

Instance \\W2012SDC\ROOT\cimv2:Win32_Process.Handle="620"

Properties={

'Caption' : 'services.exe' //String

'CommandLine' : null

'CreationClassName' : 'Win32_Process' //String

'CreationDate' : '20141112140919.890457-480' //String

'CSCreationClassName' : 'Win32_ComputerSystem' //String

'CSName' : '.' //String

'Description' : 'services.exe' //String

'ExecutablePath' : null

'ExecutionState' : null

'Handle' : '620' //String, 0x26C

'HandleCount' : 674 //Long, 0x2A2

'InstallDate' : null

'KernelModeTime' : '160156250' //String, 0x98BCA5A

'MaximumWorkingSetSize' : null

'MinimumWorkingSetSize' : null

'Name' : 'services.exe' //String

'OSCreationClassName' : 'Win32_OperatingSystem' //String

'OSName' : 'Microsoft Windows Server 2012 R2 Datacenter Evaluation|C:\Windows|\Device\Harddisk0\Partition1' //String

'OtherOperationCount' : '159047' //String, 0x26D47

'OtherTransferCount' : '1362928' //String, 0x14CBF0

'PageFaults' : 21875 //Long, 0x5573

'PageFileUsage' : 8260 //Long, 0x2044

'ParentProcessId' : 532 //Long, 0x214

'PeakPageFileUsage' : 14436 //Long, 0x3864

'PeakVirtualSize' : '624037888' //String, 0x25321000

'PeakWorkingSetSize' : 12316 //Long, 0x301C

'Priority' : 9 //Long, 0x9

'PrivatePageCount' : '8458240' //String, 0x811000

'ProcessId' : 620 //Long, 0x26C

'QuotaNonPagedPoolUsage' : 16 //Long, 0x10

'QuotaPagedPoolUsage' : 148 //Long, 0x94

'QuotaPeakNonPagedPoolUsage' : 24 //Long, 0x18

'QuotaPeakPagedPoolUsage' : 149 //Long, 0x95

'ReadOperationCount' : '284' //String, 0x11C

'ReadTransferCount' : '6236500' //String, 0x5F2954

'SessionId' : 0 //Long, 0x0

'Status' : null

'TerminationDate' : null

'ThreadCount' : 6 //Long, 0x6

'UserModeTime' : '133125000' //String, 0x7EF5388

'VirtualSize' : '45903872' //String, 0x2BC7000

'WindowsVersion' : '6.3.9600' //String

'WorkingSetSize' : '9879552' //String, 0x96C000

'WriteOperationCount' : '458' //String, 0x1CA

'WriteTransferCount' : '2276202' //String, 0x22BB6A

}

Instance \\W2012SDC\ROOT\cimv2:Win32_Process.Handle="628"

Properties={

'Caption' : 'lsass.exe' //String

'CommandLine' : 'C:\Windows\system32\lsass.exe' //String

'CreationClassName' : 'Win32_Process' //String

'CreationDate' : '20141112140920.300242-480' //String

'CSCreationClassName' : 'Win32_ComputerSystem' //String

'CSName' : '.' //String

'Description' : 'lsass.exe' //String

'ExecutablePath' : 'C:\Windows\system32\lsass.exe' //String

'ExecutionState' : null

'Handle' : '628' //String, 0x274

'HandleCount' : 2241 //Long, 0x8C1

'InstallDate' : null

'KernelModeTime' : '5598281250' //String

'MaximumWorkingSetSize' : 1380 //Long, 0x564

'MinimumWorkingSetSize' : 200 //Long, 0xC8

'Name' : 'lsass.exe' //String

'OSCreationClassName' : 'Win32_OperatingSystem' //String

'OSName' : 'Microsoft Windows Server 2012 R2 Datacenter Evaluation|C:\Windows|\Device\Harddisk0\Partition1' //String

'OtherOperationCount' : '2040101' //String, 0x1F2125

'OtherTransferCount' : '35791736' //String, 0x2222378

'PageFaults' : 172756 //Long, 0x2A2D4

'PageFileUsage' : 54932 //Long, 0xD694

'ParentProcessId' : 532 //Long, 0x214

'PeakPageFileUsage' : 84544 //Long, 0x14A40

'PeakVirtualSize' : '1278951424' //String, 0x4C3B4000

'PeakWorkingSetSize' : 82876 //Long, 0x143BC

'Priority' : 9 //Long, 0x9

'PrivatePageCount' : '56250368' //String, 0x35A5000

'ProcessId' : 628 //Long, 0x274

'QuotaNonPagedPoolUsage' : 271 //Long, 0x10F

'QuotaPagedPoolUsage' : 261 //Long, 0x105

'QuotaPeakNonPagedPoolUsage' : 331 //Long, 0x14B

'QuotaPeakPagedPoolUsage' : 263 //Long, 0x107

'ReadOperationCount' : '665153' //String, 0xA2641

'ReadTransferCount' : '1327318200' //String, 0x4F1D44B8

'SessionId' : 0 //Long, 0x0

'Status' : null

'TerminationDate' : null

'ThreadCount' : 34 //Long, 0x22

'UserModeTime' : '11493906250' //String

'VirtualSize' : '1256992768' //String, 0x4AEC3000

'WindowsVersion' : '6.3.9600' //String

'WorkingSetSize' : '51580928' //String, 0x3131000

'WriteOperationCount' : '342984' //String, 0x53BC8

'WriteTransferCount' : '80800542' //String, 0x4D0EB1E

}

Instance \\W2012SDC\ROOT\cimv2:Win32_Process.Handle="784"

Properties={

'Caption' : 'svchost.exe' //String

'CommandLine' : 'C:\Windows\system32\svchost.exe -k DcomLaunch' //String

'CreationClassName' : 'Win32_Process' //String

'CreationDate' : '20141112140930.484421-480' //String

'CSCreationClassName' : 'Win32_ComputerSystem' //String

'CSName' : '.' //String

'Description' : 'svchost.exe' //String

'ExecutablePath' : 'C:\Windows\system32\svchost.exe' //String

'ExecutionState' : null

'Handle' : '784' //String, 0x310

'HandleCount' : 384 //Long, 0x180

'InstallDate' : null

'KernelModeTime' : '406093750' //String, 0x18347FB6

'MaximumWorkingSetSize' : 1380 //Long, 0x564

'MinimumWorkingSetSize' : 200 //Long, 0xC8

'Name' : 'svchost.exe' //String

'OSCreationClassName' : 'Win32_OperatingSystem' //String

'OSName' : 'Microsoft Windows Server 2012 R2 Datacenter Evaluation|C:\Windows|\Device\Harddisk0\Partition1' //String

'OtherOperationCount' : '12855' //String, 0x3237

'OtherTransferCount' : '391900' //String, 0x5FADC

'PageFaults' : 17140 //Long, 0x42F4

'PageFileUsage' : 4272 //Long, 0x10B0

'ParentProcessId' : 620 //Long, 0x26C

'PeakPageFileUsage' : 4908 //Long, 0x132C

'PeakVirtualSize' : '51724288' //String, 0x3154000

'PeakWorkingSetSize' : 10592 //Long, 0x2960

'Priority' : 8 //Long, 0x8

'PrivatePageCount' : '4374528' //String, 0x42C000

'ProcessId' : 784 //Long, 0x310

'QuotaNonPagedPoolUsage' : 15 //Long, 0xF

'QuotaPagedPoolUsage' : 207 //Long, 0xCF

'QuotaPeakNonPagedPoolUsage' : 22 //Long, 0x16

'QuotaPeakPagedPoolUsage' : 208 //Long, 0xD0

'ReadOperationCount' : '2' //String, 0x2

'ReadTransferCount' : '4608' //String, 0x1200

'SessionId' : 0 //Long, 0x0

'Status' : null

'TerminationDate' : null

'ThreadCount' : 8 //Long, 0x8

'UserModeTime' : '548125000' //String, 0x20ABB948

'VirtualSize' : '47464448' //String, 0x2D44000

'WindowsVersion' : '6.3.9600' //String

'WorkingSetSize' : '7839744' //String, 0x77A000

'WriteOperationCount' : '0' //String, 0x0

'WriteTransferCount' : '0' //String, 0x0

}

Instance \\W2012SDC\ROOT\cimv2:Win32_Process.Handle="828"

Properties={

'Caption' : 'svchost.exe' //String

'CommandLine' : 'C:\Windows\system32\svchost.exe -k RPCSS' //String

'CreationClassName' : 'Win32_Process' //String

'CreationDate' : '20141112140930.768982-480' //String

'CSCreationClassName' : 'Win32_ComputerSystem' //String

'CSName' : '.' //String

'Description' : 'svchost.exe' //String

'ExecutablePath' : 'C:\Windows\system32\svchost.exe' //String

'ExecutionState' : null

'Handle' : '828' //String, 0x33C

'HandleCount' : 663 //Long, 0x297

'InstallDate' : null

'KernelModeTime' : '191406250' //String, 0xB68A0AA

'MaximumWorkingSetSize' : 1380 //Long, 0x564

'MinimumWorkingSetSize' : 200 //Long, 0xC8

'Name' : 'svchost.exe' //String

'OSCreationClassName' : 'Win32_OperatingSystem' //String

'OSName' : 'Microsoft Windows Server 2012 R2 Datacenter Evaluation|C:\Windows|\Device\Harddisk0\Partition1' //String

'OtherOperationCount' : '18056' //String, 0x4688

'OtherTransferCount' : '939396' //String, 0xE5584

'PageFaults' : 18170 //Long, 0x46FA

'PageFileUsage' : 5036 //Long, 0x13AC

'ParentProcessId' : 620 //Long, 0x26C

'PeakPageFileUsage' : 5284 //Long, 0x14A4

'PeakVirtualSize' : '41500672' //String, 0x2794000

'PeakWorkingSetSize' : 7992 //Long, 0x1F38

'Priority' : 8 //Long, 0x8

'PrivatePageCount' : '5156864' //String, 0x4EB000

'ProcessId' : 828 //Long, 0x33C

'QuotaNonPagedPoolUsage' : 20 //Long, 0x14

'QuotaPagedPoolUsage' : 97 //Long, 0x61

'QuotaPeakNonPagedPoolUsage' : 29 //Long, 0x1D

'QuotaPeakPagedPoolUsage' : 97 //Long, 0x61

'ReadOperationCount' : '0' //String, 0x0

'ReadTransferCount' : '0' //String, 0x0

'SessionId' : 0 //Long, 0x0

'Status' : null

'TerminationDate' : null

'ThreadCount' : 11 //Long, 0xB

'UserModeTime' : '401250000' //String, 0x17EA96D0

'VirtualSize' : '34230272' //String, 0x20A5000

'WindowsVersion' : '6.3.9600' //String

'WorkingSetSize' : '6504448' //String, 0x634000

'WriteOperationCount' : '0' //String, 0x0

'WriteTransferCount' : '0' //String, 0x0

}

Instance \\W2012SDC\ROOT\cimv2:Win32_Process.Handle="924"

Properties={

'Caption' : 'dwm.exe' //String

'CommandLine' : '"dwm.exe"' //String

'CreationClassName' : 'Win32_Process' //String

'CreationDate' : '20141112140931.974058-480' //String

'CSCreationClassName' : 'Win32_ComputerSystem' //String

'CSName' : '.' //String

'Description' : 'dwm.exe' //String

'ExecutablePath' : 'C:\Windows\system32\dwm.exe' //String

'ExecutionState' : null

'Handle' : '924' //String, 0x39C

'HandleCount' : 190 //Long, 0xBE

'InstallDate' : null

'KernelModeTime' : '12343750' //String, 0xBC59C6

'MaximumWorkingSetSize' : 1380 //Long, 0x564

'MinimumWorkingSetSize' : 200 //Long, 0xC8

'Name' : 'dwm.exe' //String

'OSCreationClassName' : 'Win32_OperatingSystem' //String

'OSName' : 'Microsoft Windows Server 2012 R2 Datacenter Evaluation|C:\Windows|\Device\Harddisk0\Partition1' //String

'OtherOperationCount' : '253' //String, 0xFD

'OtherTransferCount' : '2266' //String, 0x8DA

'PageFaults' : 121731 //Long, 0x1DB83

'PageFileUsage' : 22448 //Long, 0x57B0

'ParentProcessId' : 576 //Long, 0x240

'PeakPageFileUsage' : 26828 //Long, 0x68CC

'PeakVirtualSize' : '147132416' //String, 0x8C51000

'PeakWorkingSetSize' : 46444 //Long, 0xB56C

'Priority' : 13 //Long, 0xD

'PrivatePageCount' : '22986752' //String, 0x15EC000

'ProcessId' : 924 //Long, 0x39C

'QuotaNonPagedPoolUsage' : 22 //Long, 0x16

'QuotaPagedPoolUsage' : 237 //Long, 0xED

'QuotaPeakNonPagedPoolUsage' : 29 //Long, 0x1D

'QuotaPeakPagedPoolUsage' : 259 //Long, 0x103

'ReadOperationCount' : '1' //String, 0x1

'ReadTransferCount' : '60' //String, 0x3C

'SessionId' : 1 //Long, 0x1

'Status' : null

'TerminationDate' : null

'ThreadCount' : 12 //Long, 0xC

'UserModeTime' : '23281250' //String, 0x1633E62

'VirtualSize' : '134701056' //String, 0x8076000

'WindowsVersion' : '6.3.9600' //String

'WorkingSetSize' : '18825216' //String, 0x11F4000

'WriteOperationCount' : '0' //String, 0x0

'WriteTransferCount' : '0' //String, 0x0

}

Instance \\W2012SDC\ROOT\cimv2:Win32_Process.Handle="1004"

Properties={

'Caption' : 'svchost.exe' //String

'CommandLine' : 'C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted' //String

'CreationClassName' : 'Win32_Process' //String

'CreationDate' : '20141112140933.884835-480' //String

'CSCreationClassName' : 'Win32_ComputerSystem' //String

'CSName' : '.' //String

'Description' : 'svchost.exe' //String

'ExecutablePath' : 'C:\Windows\System32\svchost.exe' //String

'ExecutionState' : null

'Handle' : '1004' //String, 0x3EC

'HandleCount' : 848 //Long, 0x350

'InstallDate' : null

'KernelModeTime' : '2514218750' //String

'MaximumWorkingSetSize' : 1380 //Long, 0x564

'MinimumWorkingSetSize' : 200 //Long, 0xC8

'Name' : 'svchost.exe' //String

'OSCreationClassName' : 'Win32_OperatingSystem' //String

'OSName' : 'Microsoft Windows Server 2012 R2 Datacenter Evaluation|C:\Windows|\Device\Harddisk0\Partition1' //String

'OtherOperationCount' : '118035' //String, 0x1CD13

'OtherTransferCount' : '1280832' //String, 0x138B40

'PageFaults' : 2558535 //Long, 0x270A47

'PageFileUsage' : 20076 //Long, 0x4E6C

'ParentProcessId' : 620 //Long, 0x26C

'PeakPageFileUsage' : 23128 //Long, 0x5A58

'PeakVirtualSize' : '576622592' //String, 0x225E9000

'PeakWorkingSetSize' : 35680 //Long, 0x8B60

'Priority' : 8 //Long, 0x8

'PrivatePageCount' : '20557824' //String, 0x139B000

'ProcessId' : 1004 //Long, 0x3EC

'QuotaNonPagedPoolUsage' : 25 //Long, 0x19

'QuotaPagedPoolUsage' : 146 //Long, 0x92

'QuotaPeakNonPagedPoolUsage' : 112 //Long, 0x70

'QuotaPeakPagedPoolUsage' : 1050 //Long, 0x41A

'ReadOperationCount' : '2648418' //String, 0x286962

'ReadTransferCount' : '4082493568' //String

'SessionId' : 0 //Long, 0x0

'Status' : null

'TerminationDate' : null

'ThreadCount' : 18 //Long, 0x12

'UserModeTime' : '2993437500' //String

'VirtualSize' : '101507072' //String, 0x60CE000

'WindowsVersion' : '6.3.9600' //String

'WorkingSetSize' : '16502784' //String, 0xFBD000

'WriteOperationCount' : '18318' //String, 0x478E

'WriteTransferCount' : '196767752' //String, 0xBBA7008

}

Instance \\W2012SDC\ROOT\cimv2:Win32_Process.Handle="80"

Properties={

'Caption' : 'svchost.exe' //String

'CommandLine' : 'C:\Windows\system32\svchost.exe -k netsvcs' //String

'CreationClassName' : 'Win32_Process' //String

'CreationDate' : '20141112140934.150460-480' //String

'CSCreationClassName' : 'Win32_ComputerSystem' //String

'CSName' : '.' //String

'Description' : 'svchost.exe' //String

'ExecutablePath' : 'C:\Windows\system32\svchost.exe' //String

'ExecutionState' : null

'Handle' : '80' //String, 0x50

'HandleCount' : 2433 //Long, 0x981

'InstallDate' : null

'KernelModeTime' : '26333281250' //String

'MaximumWorkingSetSize' : 1380 //Long, 0x564

'MinimumWorkingSetSize' : 200 //Long, 0xC8

'Name' : 'svchost.exe' //String

'OSCreationClassName' : 'Win32_OperatingSystem' //String

'OSName' : 'Microsoft Windows Server 2012 R2 Datacenter Evaluation|C:\Windows|\Device\Harddisk0\Partition1' //String

'OtherOperationCount' : '18146722' //String, 0x114E5A2

'OtherTransferCount' : '84832217' //String, 0x50E6FD9

'PageFaults' : 6023817 //Long, 0x5BEA89

'PageFileUsage' : 76600 //Long, 0x12B38

'ParentProcessId' : 620 //Long, 0x26C

'PeakPageFileUsage' : 177816 //Long, 0x2B698

'PeakVirtualSize' : '538509312' //String, 0x20190000

'PeakWorkingSetSize' : 170788 //Long, 0x29B24

'Priority' : 8 //Long, 0x8

'PrivatePageCount' : '78438400' //String, 0x4ACE000

'ProcessId' : 80 //Long, 0x50

'QuotaNonPagedPoolUsage' : 130 //Long, 0x82

'QuotaPagedPoolUsage' : 455 //Long, 0x1C7

'QuotaPeakNonPagedPoolUsage' : 149 //Long, 0x95

'QuotaPeakPagedPoolUsage' : 476 //Long, 0x1DC

'ReadOperationCount' : '6690356' //String, 0x661634

'ReadTransferCount' : '1660213300' //String, 0x62F4D834

'SessionId' : 0 //Long, 0x0

'Status' : null

'TerminationDate' : null

'ThreadCount' : 89 //Long, 0x59

'UserModeTime' : '83190937500' //String

'VirtualSize' : '362160128' //String, 0x15962000

'WindowsVersion' : '6.3.9600' //String

'WorkingSetSize' : '56352768' //String, 0x35BE000

'WriteOperationCount' : '4388146' //String, 0x42F532

'WriteTransferCount' : '695504628' //String, 0x29748EF4

}

Instance \\W2012SDC\ROOT\cimv2:Win32_Process.Handle="376"

Properties={

'Caption' : 'svchost.exe' //String

'CommandLine' : 'C:\Windows\system32\svchost.exe -k LocalService' //String

'CreationClassName' : 'Win32_Process' //String

'CreationDate' : '20141112140934.337961-480' //String

'CSCreationClassName' : 'Win32_ComputerSystem' //String

'CSName' : '.' //String

'Description' : 'svchost.exe' //String

'ExecutablePath' : 'C:\Windows\system32\svchost.exe' //String

'ExecutionState' : null

'Handle' : '376' //String, 0x178

'HandleCount' : 907 //Long, 0x38B

'InstallDate' : null

'KernelModeTime' : '19687500' //String, 0x12C684C

'MaximumWorkingSetSize' : 1380 //Long, 0x564

'MinimumWorkingSetSize' : 200 //Long, 0xC8

'Name' : 'svchost.exe' //String

'OSCreationClassName' : 'Win32_OperatingSystem' //String

'OSName' : 'Microsoft Windows Server 2012 R2 Datacenter Evaluation|C:\Windows|\Device\Harddisk0\Partition1' //String

'OtherOperationCount' : '16056' //String, 0x3EB8

'OtherTransferCount' : '790696' //String, 0xC10A8

'PageFaults' : 10092 //Long, 0x276C

'PageFileUsage' : 9380 //Long, 0x24A4

'ParentProcessId' : 620 //Long, 0x26C

'PeakPageFileUsage' : 10692 //Long, 0x29C4

'PeakVirtualSize' : '119320576' //String, 0x71CB000

'PeakWorkingSetSize' : 18780 //Long, 0x495C

'Priority' : 8 //Long, 0x8

'PrivatePageCount' : '9605120' //String, 0x929000

'ProcessId' : 376 //Long, 0x178

'QuotaNonPagedPoolUsage' : 33 //Long, 0x21

'QuotaPagedPoolUsage' : 241 //Long, 0xF1

'QuotaPeakNonPagedPoolUsage' : 45 //Long, 0x2D

'QuotaPeakPagedPoolUsage' : 247 //Long, 0xF7

'ReadOperationCount' : '34' //String, 0x22

'ReadTransferCount' : '790' //String, 0x316

'SessionId' : 0 //Long, 0x0

'Status' : null

'TerminationDate' : null

'ThreadCount' : 18 //Long, 0x12

'UserModeTime' : '58437500' //String, 0x37BAF7C

'VirtualSize' : '104935424' //String, 0x6413000

'WindowsVersion' : '6.3.9600' //String

'WorkingSetSize' : '10969088' //String, 0xA76000

'WriteOperationCount' : '1' //String, 0x1

'WriteTransferCount' : '160' //String, 0xA0

}

Instance \\W2012SDC\ROOT\cimv2:Win32_Process.Handle="448"

Properties={

'Caption' : 'svchost.exe' //String

'CommandLine' : 'C:\Windows\System32\svchost.exe -k BlockStorageServices' //String

'CreationClassName' : 'Win32_Process' //String

'CreationDate' : '20141112140934.935013-480' //String

'CSCreationClassName' : 'Win32_ComputerSystem' //String

'CSName' : '.' //String

'Description' : 'svchost.exe' //String

'ExecutablePath' : 'C:\Windows\System32\svchost.exe' //String

'ExecutionState' : null

'Handle' : '448' //String, 0x1C0

'HandleCount' : 248 //Long, 0xF8

'InstallDate' : null

'KernelModeTime' : '1250000' //String, 0x1312D0

'MaximumWorkingSetSize' : 1380 //Long, 0x564

'MinimumWorkingSetSize' : 200 //Long, 0xC8

'Name' : 'svchost.exe' //String

'OSCreationClassName' : 'Win32_OperatingSystem' //String

'OSName' : 'Microsoft Windows Server 2012 R2 Datacenter Evaluation|C:\Windows|\Device\Harddisk0\Partition1' //String

'OtherOperationCount' : '617' //String, 0x269

'OtherTransferCount' : '9384' //String, 0x24A8

'PageFaults' : 6577 //Long, 0x19B1

'PageFileUsage' : 2964 //Long, 0xB94

'ParentProcessId' : 620 //Long, 0x26C

'PeakPageFileUsage' : 3488 //Long, 0xDA0

'PeakVirtualSize' : '78598144' //String, 0x4AF5000

'PeakWorkingSetSize' : 9288 //Long, 0x2448

'Priority' : 8 //Long, 0x8

'PrivatePageCount' : '3035136' //String, 0x2E5000

'ProcessId' : 448 //Long, 0x1C0

'QuotaNonPagedPoolUsage' : 17 //Long, 0x11

'QuotaPagedPoolUsage' : 143 //Long, 0x8F

'QuotaPeakNonPagedPoolUsage' : 19 //Long, 0x13

'QuotaPeakPagedPoolUsage' : 143 //Long, 0x8F

'ReadOperationCount' : '8' //String, 0x8

'ReadTransferCount' : '1517' //String, 0x5ED

'SessionId' : 0 //Long, 0x0

'Status' : null

'TerminationDate' : null

'ThreadCount' : 10 //Long, 0xA

'UserModeTime' : '4062500' //String, 0x3DFD24

'VirtualSize' : '73273344' //String, 0x45E1000

'WindowsVersion' : '6.3.9600' //String

'WorkingSetSize' : '3145728' //String, 0x300000

'WriteOperationCount' : '8' //String, 0x8

'WriteTransferCount' : '3599' //String, 0xE0F

}

Instance \\W2012SDC\ROOT\cimv2:Win32_Process.Handle="800"

Properties={

'Caption' : 'svchost.exe' //String

'CommandLine' : 'C:\Windows\system32\svchost.exe -k WlansvcGroup' //String

'CreationClassName' : 'Win32_Process' //String

'CreationDate' : '20141112140936.586248-480' //String

'CSCreationClassName' : 'Win32_ComputerSystem' //String

'CSName' : '.' //String

'Description' : 'svchost.exe' //String

'ExecutablePath' : 'C:\Windows\system32\svchost.exe' //String

'ExecutionState' : null

'Handle' : '800' //String, 0x320

'HandleCount' : 245 //Long, 0xF5

'InstallDate' : null

'KernelModeTime' : '625000' //String, 0x98968

'MaximumWorkingSetSize' : 1380 //Long, 0x564

'MinimumWorkingSetSize' : 200 //Long, 0xC8

'Name' : 'svchost.exe' //String

'OSCreationClassName' : 'Win32_OperatingSystem' //String

'OSName' : 'Microsoft Windows Server 2012 R2 Datacenter Evaluation|C:\Windows|\Device\Harddisk0\Partition1' //String

'OtherOperationCount' : '332' //String, 0x14C

'OtherTransferCount' : '10670' //String, 0x29AE

'PageFaults' : 3027 //Long, 0xBD3

'PageFileUsage' : 3580 //Long, 0xDFC

'ParentProcessId' : 620 //Long, 0x26C

'PeakPageFileUsage' : 3652 //Long, 0xE44

'PeakVirtualSize' : '49754112' //String, 0x2F73000

'PeakWorkingSetSize' : 8912 //Long, 0x22D0

'Priority' : 8 //Long, 0x8

'PrivatePageCount' : '3665920' //String, 0x37F000

'ProcessId' : 800 //Long, 0x320

'QuotaNonPagedPoolUsage' : 13 //Long, 0xD

'QuotaPagedPoolUsage' : 87 //Long, 0x57

'QuotaPeakNonPagedPoolUsage' : 15 //Long, 0xF

'QuotaPeakPagedPoolUsage' : 88 //Long, 0x58

'ReadOperationCount' : '58' //String, 0x3A

'ReadTransferCount' : '142892' //String, 0x22E2C

'SessionId' : 0 //Long, 0x0

'Status' : null

'TerminationDate' : null

'ThreadCount' : 5 //Long, 0x5

'UserModeTime' : '156250' //String, 0x2625A

'VirtualSize' : '48685056' //String, 0x2E6E000

'WindowsVersion' : '6.3.9600' //String

'WorkingSetSize' : '1966080' //String, 0x1E0000

'WriteOperationCount' : '1' //String, 0x1

'WriteTransferCount' : '160' //String, 0xA0

}

Instance \\W2012SDC\ROOT\cimv2:Win32_Process.Handle="880"

Properties={

'Caption' : 'svchost.exe' //String

'CommandLine' : 'C:\Windows\system32\svchost.exe -k NetworkService' //String

'CreationClassName' : 'Win32_Process' //String

'CreationDate' : '20141112140936.605572-480' //String

'CSCreationClassName' : 'Win32_ComputerSystem' //String

'CSName' : '.' //String

'Description' : 'svchost.exe' //String

'ExecutablePath' : 'C:\Windows\system32\svchost.exe' //String

'ExecutionState' : null

'Handle' : '880' //String, 0x370

'HandleCount' : 761 //Long, 0x2F9

'InstallDate' : null

'KernelModeTime' : '18906250' //String, 0x1207C8A

'MaximumWorkingSetSize' : 1380 //Long, 0x564

'MinimumWorkingSetSize' : 200 //Long, 0xC8

'Name' : 'svchost.exe' //String

'OSCreationClassName' : 'Win32_OperatingSystem' //String

'OSName' : 'Microsoft Windows Server 2012 R2 Datacenter Evaluation|C:\Windows|\Device\Harddisk0\Partition1' //String

'OtherOperationCount' : '222795' //String, 0x3664B

'OtherTransferCount' : '16257174' //String, 0xF81096

'PageFaults' : 26274 //Long, 0x66A2

'PageFileUsage' : 8960 //Long, 0x2300

'ParentProcessId' : 620 //Long, 0x26C

'PeakPageFileUsage' : 10004 //Long, 0x2714

'PeakVirtualSize' : '1207242752' //String, 0x47F51000

'PeakWorkingSetSize' : 18788 //Long, 0x4964

'Priority' : 8 //Long, 0x8

'PrivatePageCount' : '9175040' //String, 0x8C0000

'ProcessId' : 880 //Long, 0x370

'QuotaNonPagedPoolUsage' : 41 //Long, 0x29

'QuotaPagedPoolUsage' : 201 //Long, 0xC9

'QuotaPeakNonPagedPoolUsage' : 50 //Long, 0x32

'QuotaPeakPagedPoolUsage' : 208 //Long, 0xD0

'ReadOperationCount' : '5037' //String, 0x13AD

'ReadTransferCount' : '5042835' //String, 0x4CF293

'SessionId' : 0 //Long, 0x0

'Status' : null

'TerminationDate' : null

'ThreadCount' : 23 //Long, 0x17

'UserModeTime' : '10625000' //String, 0xA21FE8

'VirtualSize' : '1202036736' //String, 0x47A5A000

'WindowsVersion' : '6.3.9600' //String

'WorkingSetSize' : '11431936' //String, 0xAE7000

'WriteOperationCount' : '3314' //String, 0xCF2

'WriteTransferCount' : '398443' //String, 0x6146B

}

Instance \\W2012SDC\ROOT\cimv2:Win32_Process.Handle="1180"

Properties={

'Caption' : 'svchost.exe' //String

'CommandLine' : 'C:\Windows\system32\svchost.exe -k LocalServiceNoNetwork' //String

'CreationClassName' : 'Win32_Process' //String

'CreationDate' : '20141112140939.365450-480' //String

'CSCreationClassName' : 'Win32_ComputerSystem' //String

'CSName' : '.' //String

'Description' : 'svchost.exe' //String

'ExecutablePath' : 'C:\Windows\system32\svchost.exe' //String

'ExecutionState' : null

'Handle' : '1180' //String, 0x49C

'HandleCount' : 406 //Long, 0x196

'InstallDate' : null

'KernelModeTime' : '13281250' //String, 0xCAA7E2

'MaximumWorkingSetSize' : 1380 //Long, 0x564

'MinimumWorkingSetSize' : 200 //Long, 0xC8

'Name' : 'svchost.exe' //String

'OSCreationClassName' : 'Win32_OperatingSystem' //String

'OSName' : 'Microsoft Windows Server 2012 R2 Datacenter Evaluation|C:\Windows|\Device\Harddisk0\Partition1' //String

'OtherOperationCount' : '17071' //String, 0x42AF

'OtherTransferCount' : '3668510' //String, 0x37FA1E

'PageFaults' : 189119 //Long, 0x2E2BF

'PageFileUsage' : 15008 //Long, 0x3AA0

'ParentProcessId' : 620 //Long, 0x26C

'PeakPageFileUsage' : 17440 //Long, 0x4420

'PeakVirtualSize' : '89284608' //String, 0x5526000

'PeakWorkingSetSize' : 20716 //Long, 0x50EC

'Priority' : 8 //Long, 0x8

'PrivatePageCount' : '15368192' //String, 0xEA8000

'ProcessId' : 1180 //Long, 0x49C

'QuotaNonPagedPoolUsage' : 35 //Long, 0x23

'QuotaPagedPoolUsage' : 122 //Long, 0x7A

'QuotaPeakNonPagedPoolUsage' : 39 //Long, 0x27

'QuotaPeakPagedPoolUsage' : 134 //Long, 0x86

'ReadOperationCount' : '0' //String, 0x0

'ReadTransferCount' : '0' //String, 0x0

'SessionId' : 0 //Long, 0x0

'Status' : null

'TerminationDate' : null

'ThreadCount' : 16 //Long, 0x10

'UserModeTime' : '20156250' //String, 0x1338F5A

'VirtualSize' : '85684224' //String, 0x51B7000

'WindowsVersion' : '6.3.9600' //String

'WorkingSetSize' : '13398016' //String, 0xCC7000

'WriteOperationCount' : '1' //String, 0x1

'WriteTransferCount' : '32768' //String, 0x8000

}

Instance \\W2012SDC\ROOT\cimv2:Win32_Process.Handle="1500"

Properties={

'Caption' : 'spoolsv.exe' //String

'CommandLine' : 'C:\Windows\System32\spoolsv.exe' //String

'CreationClassName' : 'Win32_Process' //String

'CreationDate' : '20141112141006.496560-480' //String

'CSCreationClassName' : 'Win32_ComputerSystem' //String

'CSName' : '.' //String

'Description' : 'spoolsv.exe' //String

'ExecutablePath' : 'C:\Windows\System32\spoolsv.exe' //String

'ExecutionState' : null

'Handle' : '1500' //String, 0x5DC

'HandleCount' : 421 //Long, 0x1A5

'InstallDate' : null

'KernelModeTime' : '6875000' //String, 0x68E778

'MaximumWorkingSetSize' : 1380 //Long, 0x564

'MinimumWorkingSetSize' : 200 //Long, 0xC8

'Name' : 'spoolsv.exe' //String

'OSCreationClassName' : 'Win32_OperatingSystem' //String

'OSName' : 'Microsoft Windows Server 2012 R2 Datacenter Evaluation|C:\Windows|\Device\Harddisk0\Partition1' //String

'OtherOperationCount' : '1399' //String, 0x577

'OtherTransferCount' : '39482' //String, 0x9A3A

'PageFaults' : 24264 //Long, 0x5EC8

'PageFileUsage' : 4348 //Long, 0x10FC

'ParentProcessId' : 620 //Long, 0x26C

'PeakPageFileUsage' : 4544 //Long, 0x11C0

'PeakVirtualSize' : '88711168' //String, 0x549A000

'PeakWorkingSetSize' : 9544 //Long, 0x2548

'Priority' : 8 //Long, 0x8

'PrivatePageCount' : '4452352' //String, 0x43F000

'ProcessId' : 1500 //Long, 0x5DC

'QuotaNonPagedPoolUsage' : 26 //Long, 0x1A

'QuotaPagedPoolUsage' : 174 //Long, 0xAE

'QuotaPeakNonPagedPoolUsage' : 28 //Long, 0x1C

'QuotaPeakPagedPoolUsage' : 175 //Long, 0xAF

'ReadOperationCount' : '54' //String, 0x36

'ReadTransferCount' : '4042' //String, 0xFCA

'SessionId' : 0 //Long, 0x0

'Status' : null

'TerminationDate' : null

'ThreadCount' : 13 //Long, 0xD

'UserModeTime' : '7500000' //String, 0x7270E0

'VirtualSize' : '87605248' //String, 0x538C000

'WindowsVersion' : '6.3.9600' //String

'WorkingSetSize' : '4763648' //String, 0x48B000

'WriteOperationCount' : '13' //String, 0xD

'WriteTransferCount' : '4051' //String, 0xFD3

}

Instance \\W2012SDC\ROOT\cimv2:Win32_Process.Handle="1612"

Properties={

'Caption' : 'Microsoft.ActiveDirectory.WebServices.exe' //String

'CommandLine' : 'C:\Windows\ADWS\Microsoft.ActiveDirectory.WebServices.exe' //String

'CreationClassName' : 'Win32_Process' //String

'CreationDate' : '20141112141012.973985-480' //String

'CSCreationClassName' : 'Win32_ComputerSystem' //String

'CSName' : '.' //String

'Description' : 'Microsoft.ActiveDirectory.WebServices.exe' //String

'ExecutablePath' : 'C:\Windows\ADWS\Microsoft.ActiveDirectory.WebServices.exe' //String

'ExecutionState' : null

'Handle' : '1612' //String, 0x64C

'HandleCount' : 326 //Long, 0x146

'InstallDate' : null

'KernelModeTime' : '2031250' //String, 0x1EFE92

'MaximumWorkingSetSize' : 1380 //Long, 0x564

'MinimumWorkingSetSize' : 200 //Long, 0xC8

'Name' : 'Microsoft.ActiveDirectory.WebServices.exe' //String

'OSCreationClassName' : 'Win32_OperatingSystem' //String

'OSName' : 'Microsoft Windows Server 2012 R2 Datacenter Evaluation|C:\Windows|\Device\Harddisk0\Partition1' //String

'OtherOperationCount' : '92604' //String, 0x169BC

'OtherTransferCount' : '2567070' //String, 0x272B9E

'PageFaults' : 74166 //Long, 0x121B6

'PageFileUsage' : 31356 //Long, 0x7A7C

'ParentProcessId' : 620 //Long, 0x26C

'PeakPageFileUsage' : 32344 //Long, 0x7E58

'PeakVirtualSize' : '609386496' //String, 0x24528000

'PeakWorkingSetSize' : 40928 //Long, 0x9FE0

'Priority' : 8 //Long, 0x8

'PrivatePageCount' : '32108544' //String, 0x1E9F000

'ProcessId' : 1612 //Long, 0x64C

'QuotaNonPagedPoolUsage' : 38 //Long, 0x26

'QuotaPagedPoolUsage' : 359 //Long, 0x167

'QuotaPeakNonPagedPoolUsage' : 43 //Long, 0x2B

'QuotaPeakPagedPoolUsage' : 360 //Long, 0x168

'ReadOperationCount' : '127' //String, 0x7F

'ReadTransferCount' : '426064' //String, 0x68050

'SessionId' : 0 //Long, 0x0

'Status' : null

'TerminationDate' : null

'ThreadCount' : 10 //Long, 0xA

'UserModeTime' : '5468750' //String, 0x53724E

'VirtualSize' : '603308032' //String, 0x23F5C000

'WindowsVersion' : '6.3.9600' //String

'WorkingSetSize' : '10801152' //String, 0xA4D000

'WriteOperationCount' : '0' //String, 0x0

'WriteTransferCount' : '0' //String, 0x0

}

Instance \\W2012SDC\ROOT\cimv2:Win32_Process.Handle="1648"

Properties={

'Caption' : 'svchost.exe' //String

'CommandLine' : 'C:\Windows\system32\svchost.exe -k apphost' //String

'CreationClassName' : 'Win32_Process' //String

'CreationDate' : '20141112141014.967743-480' //String

'CSCreationClassName' : 'Win32_ComputerSystem' //String

'CSName' : '.' //String

'Description' : 'svchost.exe' //String

'ExecutablePath' : 'C:\Windows\system32\svchost.exe' //String

'ExecutionState' : null

'Handle' : '1648' //String, 0x670

'HandleCount' : 152 //Long, 0x98

'InstallDate' : null

'KernelModeTime' : '625000' //String, 0x98968

'MaximumWorkingSetSize' : 1380 //Long, 0x564

'MinimumWorkingSetSize' : 200 //Long, 0xC8

'Name' : 'svchost.exe' //String

'OSCreationClassName' : 'Win32_OperatingSystem' //String

'OSName' : 'Microsoft Windows Server 2012 R2 Datacenter Evaluation|C:\Windows|\Device\Harddisk0\Partition1' //String

'OtherOperationCount' : '505' //String, 0x1F9

'OtherTransferCount' : '9886' //String, 0x269E

'PageFaults' : 6982 //Long, 0x1B46

'PageFileUsage' : 7428 //Long, 0x1D04

'ParentProcessId' : 620 //Long, 0x26C

'PeakPageFileUsage' : 7604 //Long, 0x1DB4

'PeakVirtualSize' : '74858496' //String, 0x4764000

'PeakWorkingSetSize' : 11676 //Long, 0x2D9C

'Priority' : 8 //Long, 0x8

'PrivatePageCount' : '7606272' //String, 0x741000

'ProcessId' : 1648 //Long, 0x670

'QuotaNonPagedPoolUsage' : 13 //Long, 0xD

'QuotaPagedPoolUsage' : 117 //Long, 0x75

'QuotaPeakNonPagedPoolUsage' : 14 //Long, 0xE

'QuotaPeakPagedPoolUsage' : 120 //Long, 0x78

'ReadOperationCount' : '243' //String, 0xF3

'ReadTransferCount' : '933895' //String, 0xE4007

'SessionId' : 0 //Long, 0x0

'Status' : null

'TerminationDate' : null

'ThreadCount' : 12 //Long, 0xC

'UserModeTime' : '312500' //String, 0x4C4B4

'VirtualSize' : '73728000' //String, 0x4650000

'WindowsVersion' : '6.3.9600' //String

'WorkingSetSize' : '2351104' //String, 0x23E000

'WriteOperationCount' : '0' //String, 0x0

'WriteTransferCount' : '0' //String, 0x0

}

Instance \\W2012SDC\ROOT\cimv2:Win32_Process.Handle="1704"

Properties={

'Caption' : 'certsrv.exe' //String

'CommandLine' : 'C:\Windows\system32\certsrv.exe' //String

'CreationClassName' : 'Win32_Process' //String

'CreationDate' : '20141112141018.131395-480' //String

'CSCreationClassName' : 'Win32_ComputerSystem' //String

'CSName' : '.' //String

'Description' : 'certsrv.exe' //String

'ExecutablePath' : 'C:\Windows\system32\certsrv.exe' //String

'ExecutionState' : null

'Handle' : '1704' //String, 0x6A8

'HandleCount' : 363 //Long, 0x16B

'InstallDate' : null

'KernelModeTime' : '1562500' //String, 0x17D784

'MaximumWorkingSetSize' : 1380 //Long, 0x564

'MinimumWorkingSetSize' : 200 //Long, 0xC8

'Name' : 'certsrv.exe' //String

'OSCreationClassName' : 'Win32_OperatingSystem' //String

'OSName' : 'Microsoft Windows Server 2012 R2 Datacenter Evaluation|C:\Windows|\Device\Harddisk0\Partition1' //String

'OtherOperationCount' : '2238' //String, 0x8BE

'OtherTransferCount' : '51248' //String, 0xC830

'PageFaults' : 7902 //Long, 0x1EDE

'PageFileUsage' : 12308 //Long, 0x3014

'ParentProcessId' : 620 //Long, 0x26C

'PeakPageFileUsage' : 12660 //Long, 0x3174

'PeakVirtualSize' : '1214898176' //String, 0x4869E000

'PeakWorkingSetSize' : 16048 //Long, 0x3EB0

'Priority' : 8 //Long, 0x8

'PrivatePageCount' : '12603392' //String, 0xC05000

'ProcessId' : 1704 //Long, 0x6A8

'QuotaNonPagedPoolUsage' : 29 //Long, 0x1D

'QuotaPagedPoolUsage' : 180 //Long, 0xB4

'QuotaPeakNonPagedPoolUsage' : 33 //Long, 0x21

'QuotaPeakPagedPoolUsage' : 181 //Long, 0xB5

'ReadOperationCount' : '84' //String, 0x54

'ReadTransferCount' : '2523516' //String, 0x26817C

'SessionId' : 0 //Long, 0x0

'Status' : null

'TerminationDate' : null

'ThreadCount' : 8 //Long, 0x8

'UserModeTime' : '2187500' //String, 0x2160EC

'VirtualSize' : '1206435840' //String, 0x47E8C000

'WindowsVersion' : '6.3.9600' //String

'WorkingSetSize' : '6991872' //String, 0x6AB000

'WriteOperationCount' : '83' //String, 0x53

'WriteTransferCount' : '1137083' //String, 0x1159BB

}

Instance \\W2012SDC\ROOT\cimv2:Win32_Process.Handle="1752"

Properties={

'Caption' : 'svchost.exe' //String

'CommandLine' : 'C:\Windows\system32\svchost -k ddpvssvc' //String

'CreationClassName' : 'Win32_Process' //String

'CreationDate' : '20141112141019.990774-480' //String

'CSCreationClassName' : 'Win32_ComputerSystem' //String

'CSName' : '.' //String

'Description' : 'svchost.exe' //String

'ExecutablePath' : 'C:\Windows\system32\svchost.exe' //String

'ExecutionState' : null

'Handle' : '1752' //String, 0x6D8

'HandleCount' : 100 //Long, 0x64

'InstallDate' : null

'KernelModeTime' : '156250' //String, 0x2625A

'MaximumWorkingSetSize' : 1380 //Long, 0x564

'MinimumWorkingSetSize' : 200 //Long, 0xC8

'Name' : 'svchost.exe' //String

'OSCreationClassName' : 'Win32_OperatingSystem' //String

'OSName' : 'Microsoft Windows Server 2012 R2 Datacenter Evaluation|C:\Windows|\Device\Harddisk0\Partition1' //String

'OtherOperationCount' : '106' //String, 0x6A

'OtherTransferCount' : '206' //String, 0xCE

'PageFaults' : 1611 //Long, 0x64B

'PageFileUsage' : 1188 //Long, 0x4A4

'ParentProcessId' : 620 //Long, 0x26C

'PeakPageFileUsage' : 1344 //Long, 0x540

'PeakVirtualSize' : '39354368' //String, 0x2588000

'PeakWorkingSetSize' : 5180 //Long, 0x143C

'Priority' : 8 //Long, 0x8

'PrivatePageCount' : '1216512' //String, 0x129000

'ProcessId' : 1752 //Long, 0x6D8

'QuotaNonPagedPoolUsage' : 9 //Long, 0x9

'QuotaPagedPoolUsage' : 75 //Long, 0x4B

'QuotaPeakNonPagedPoolUsage' : 10 //Long, 0xA

'QuotaPeakPagedPoolUsage' : 75 //Long, 0x4B

'ReadOperationCount' : '0' //String, 0x0

'ReadTransferCount' : '0' //String, 0x0

'SessionId' : 0 //Long, 0x0

'Status' : null

'TerminationDate' : null

'ThreadCount' : 2 //Long, 0x2

'UserModeTime' : '312500' //String, 0x4C4B4

'VirtualSize' : '37756928' //String, 0x2402000

'WindowsVersion' : '6.3.9600' //String

'WorkingSetSize' : '1167360' //String, 0x11D000

'WriteOperationCount' : '0' //String, 0x0

'WriteTransferCount' : '0' //String, 0x0

}

Instance \\W2012SDC\ROOT\cimv2:Win32_Process.Handle="1788"

Properties={

'Caption' : 'dfsrs.exe' //String

'CommandLine' : 'C:\Windows\system32\DFSRs.exe' //String

'CreationClassName' : 'Win32_Process' //String

'CreationDate' : '20141112141020.178273-480' //String

'CSCreationClassName' : 'Win32_ComputerSystem' //String

'CSName' : '.' //String

'Description' : 'dfsrs.exe' //String

'ExecutablePath' : 'C:\Windows\system32\DFSRs.exe' //String

'ExecutionState' : null

'Handle' : '1788' //String, 0x6FC

'HandleCount' : 337 //Long, 0x151

'InstallDate' : null

'KernelModeTime' : '95312500' //String, 0x5AE5A74

'MaximumWorkingSetSize' : 1380 //Long, 0x564

'MinimumWorkingSetSize' : 200 //Long, 0xC8

'Name' : 'dfsrs.exe' //String

'OSCreationClassName' : 'Win32_OperatingSystem' //String

'OSName' : 'Microsoft Windows Server 2012 R2 Datacenter Evaluation|C:\Windows|\Device\Harddisk0\Partition1' //String

'OtherOperationCount' : '497916' //String, 0x798FC

'OtherTransferCount' : '12700790' //String, 0xC1CC76

'PageFaults' : 34715 //Long, 0x879B

'PageFileUsage' : 16096 //Long, 0x3EE0

'ParentProcessId' : 620 //Long, 0x26C

'PeakPageFileUsage' : 18104 //Long, 0x46B8

'PeakVirtualSize' : '657481728' //String, 0x27306000

'PeakWorkingSetSize' : 20612 //Long, 0x5084

'Priority' : 8 //Long, 0x8

'PrivatePageCount' : '16482304' //String, 0xFB8000

'ProcessId' : 1788 //Long, 0x6FC

'QuotaNonPagedPoolUsage' : 32 //Long, 0x20

'QuotaPagedPoolUsage' : 135 //Long, 0x87

'QuotaPeakNonPagedPoolUsage' : 36 //Long, 0x24

'QuotaPeakPagedPoolUsage' : 136 //Long, 0x88

'ReadOperationCount' : '10151' //String, 0x27A7

'ReadTransferCount' : '38521101' //String, 0x24BC90D

'SessionId' : 0 //Long, 0x0

'Status' : null

'TerminationDate' : null

'ThreadCount' : 17 //Long, 0x11

'UserModeTime' : '74218750' //String, 0x46C7CFE

'VirtualSize' : '656932864' //String, 0x27280000

'WindowsVersion' : '6.3.9600' //String

'WorkingSetSize' : '12181504' //String, 0xB9E000

'WriteOperationCount' : '29750' //String, 0x7436

'WriteTransferCount' : '16285027' //String, 0xF87D63

}

Instance \\W2012SDC\ROOT\cimv2:Win32_Process.Handle="1804"

Properties={

'Caption' : 'svchost.exe' //String

'CommandLine' : 'C:\Windows\system32\svchost.exe -k DHCPServer' //String

'CreationClassName' : 'Win32_Process' //String

'CreationDate' : '20141112141020.490773-480' //String

'CSCreationClassName' : 'Win32_ComputerSystem' //String

'CSName' : '.' //String

'Description' : 'svchost.exe' //String

'ExecutablePath' : 'C:\Windows\system32\svchost.exe' //String

'ExecutionState' : null

'Handle' : '1804' //String, 0x70C

'HandleCount' : 284 //Long, 0x11C

'InstallDate' : null

'KernelModeTime' : '62812500' //String, 0x3BE7154

'MaximumWorkingSetSize' : 1380 //Long, 0x564

'MinimumWorkingSetSize' : 200 //Long, 0xC8

'Name' : 'svchost.exe' //String

'OSCreationClassName' : 'Win32_OperatingSystem' //String

'OSName' : 'Microsoft Windows Server 2012 R2 Datacenter Evaluation|C:\Windows|\Device\Harddisk0\Partition1' //String

'OtherOperationCount' : '88555' //String, 0x159EB

'OtherTransferCount' : '1737418' //String, 0x1A82CA

'PageFaults' : 396835 //Long, 0x60E23

'PageFileUsage' : 128888 //Long, 0x1F778

'ParentProcessId' : 620 //Long, 0x26C

'PeakPageFileUsage' : 129948 //Long, 0x1FB9C

'PeakVirtualSize' : '1314181120' //String, 0x4E54D000

'PeakWorkingSetSize' : 29028 //Long, 0x7164

'Priority' : 8 //Long, 0x8

'PrivatePageCount' : '131981312' //String, 0x7DDE000

'ProcessId' : 1804 //Long, 0x70C

'QuotaNonPagedPoolUsage' : 31 //Long, 0x1F

'QuotaPagedPoolUsage' : 148 //Long, 0x94

'QuotaPeakNonPagedPoolUsage' : 35 //Long, 0x23

'QuotaPeakPagedPoolUsage' : 148 //Long, 0x94

'ReadOperationCount' : '6153' //String, 0x1809

'ReadTransferCount' : '1559965376' //String, 0x5CFB2EC0

'SessionId' : 0 //Long, 0x0

'Status' : null

'TerminationDate' : null

'ThreadCount' : 21 //Long, 0x15

'UserModeTime' : '8593750' //String, 0x832156

'VirtualSize' : '1313046528' //String, 0x4E438000

'WindowsVersion' : '6.3.9600' //String

'WorkingSetSize' : '6115328' //String, 0x5D5000

'WriteOperationCount' : '2242' //String, 0x8C2

'WriteTransferCount' : '1613808620' //String, 0x6030C3EC

}

Instance \\W2012SDC\ROOT\cimv2:Win32_Process.Handle="1820"

Properties={

'Caption' : 'dns.exe' //String

'CommandLine' : 'C:\Windows\system32\dns.exe' //String

'CreationClassName' : 'Win32_Process' //String

'CreationDate' : '20141112141020.522023-480' //String

'CSCreationClassName' : 'Win32_ComputerSystem' //String

'CSName' : '.' //String

'Description' : 'dns.exe' //String

'ExecutablePath' : 'C:\Windows\system32\dns.exe' //String

'ExecutionState' : null

'Handle' : '1820' //String, 0x71C

'HandleCount' : 323 //Long, 0x143

'InstallDate' : null

'KernelModeTime' : '13906250' //String, 0xD4314A

'MaximumWorkingSetSize' : 1380 //Long, 0x564

'MinimumWorkingSetSize' : 200 //Long, 0xC8

'Name' : 'dns.exe' //String

'OSCreationClassName' : 'Win32_OperatingSystem' //String

'OSName' : 'Microsoft Windows Server 2012 R2 Datacenter Evaluation|C:\Windows|\Device\Harddisk0\Partition1' //String

'OtherOperationCount' : '44792' //String, 0xAEF8

'OtherTransferCount' : '1323381' //String, 0x143175

'PageFaults' : 14706 //Long, 0x3972

'PageFileUsage' : 10376 //Long, 0x2888

'ParentProcessId' : 620 //Long, 0x26C

'PeakPageFileUsage' : 11672 //Long, 0x2D98

'PeakVirtualSize' : '60485632' //String, 0x39AF000

'PeakWorkingSetSize' : 9632 //Long, 0x25A0

'Priority' : 8 //Long, 0x8

'PrivatePageCount' : '10625024' //String, 0xA22000

'ProcessId' : 1820 //Long, 0x71C

'QuotaNonPagedPoolUsage' : 36 //Long, 0x24

'QuotaPagedPoolUsage' : 98 //Long, 0x62

'QuotaPeakNonPagedPoolUsage' : 43 //Long, 0x2B

'QuotaPeakPagedPoolUsage' : 98 //Long, 0x62

'ReadOperationCount' : '535' //String, 0x217

'ReadTransferCount' : '62060' //String, 0xF26C

'SessionId' : 0 //Long, 0x0

'Status' : null

'TerminationDate' : null

'ThreadCount' : 20 //Long, 0x14

'UserModeTime' : '13125000' //String, 0xC84588

'VirtualSize' : '58322944' //String, 0x379F000

'WindowsVersion' : '6.3.9600' //String

'WorkingSetSize' : '6586368' //String, 0x648000

'WriteOperationCount' : '628' //String, 0x274

'WriteTransferCount' : '1769440' //String, 0x1AFFE0

}

Instance \\W2012SDC\ROOT\cimv2:Win32_Process.Handle="1840"

Properties={

'Caption' : 'svchost.exe' //String

'CommandLine' : 'C:\Windows\system32\svchost.exe -k ftpsvc' //String

'CreationClassName' : 'Win32_Process' //String

'CreationDate' : '20141112141020.881400-480' //String

'CSCreationClassName' : 'Win32_ComputerSystem' //String

'CSName' : '.' //String

'Description' : 'svchost.exe' //String

'ExecutablePath' : 'C:\Windows\system32\svchost.exe' //String

'ExecutionState' : null

'Handle' : '1840' //String, 0x730

'HandleCount' : 273 //Long, 0x111

'InstallDate' : null

'KernelModeTime' : '156250' //String, 0x2625A

'MaximumWorkingSetSize' : 1380 //Long, 0x564

'MinimumWorkingSetSize' : 200 //Long, 0xC8

'Name' : 'svchost.exe' //String

'OSCreationClassName' : 'Win32_OperatingSystem' //String

'OSName' : 'Microsoft Windows Server 2012 R2 Datacenter Evaluation|C:\Windows|\Device\Harddisk0\Partition1' //String

'OtherOperationCount' : '278' //String, 0x116

'OtherTransferCount' : '3638' //String, 0xE36

'PageFaults' : 7687 //Long, 0x1E07

'PageFileUsage' : 4624 //Long, 0x1210

'ParentProcessId' : 620 //Long, 0x26C

'PeakPageFileUsage' : 4696 //Long, 0x1258

'PeakVirtualSize' : '49913856' //String, 0x2F9A000

'PeakWorkingSetSize' : 8848 //Long, 0x2290

'Priority' : 8 //Long, 0x8

'PrivatePageCount' : '4734976' //String, 0x484000

'ProcessId' : 1840 //Long, 0x730

'QuotaNonPagedPoolUsage' : 15 //Long, 0xF

'QuotaPagedPoolUsage' : 88 //Long, 0x58

'QuotaPeakNonPagedPoolUsage' : 15 //Long, 0xF

'QuotaPeakPagedPoolUsage' : 88 //Long, 0x58

'ReadOperationCount' : '121' //String, 0x79

'ReadTransferCount' : '457500' //String, 0x6FB1C

'SessionId' : 0 //Long, 0x0

'Status' : null

'TerminationDate' : null

'ThreadCount' : 13 //Long, 0xD

'UserModeTime' : '0' //String, 0x0

'VirtualSize' : '49381376' //String, 0x2F18000

'WindowsVersion' : '6.3.9600' //String

'WorkingSetSize' : '5206016' //String, 0x4F7000

'WriteOperationCount' : '0' //String, 0x0

'WriteTransferCount' : '0' //String, 0x0

}

Instance \\W2012SDC\ROOT\cimv2:Win32_Process.Handle="1856"

Properties={

'Caption' : 'inetinfo.exe' //String

'CommandLine' : 'C:\Windows\system32\inetsrv\inetinfo.exe' //String

'CreationClassName' : 'Win32_Process' //String

'CreationDate' : '20141112141021.137283-480' //String

'CSCreationClassName' : 'Win32_ComputerSystem' //String

'CSName' : '.' //String

'Description' : 'inetinfo.exe' //String

'ExecutablePath' : 'C:\Windows\system32\inetsrv\inetinfo.exe' //String

'ExecutionState' : null

'Handle' : '1856' //String, 0x740

'HandleCount' : 452 //Long, 0x1C4

'InstallDate' : null

'KernelModeTime' : '922968750' //String, 0x370362AE

'MaximumWorkingSetSize' : 1380 //Long, 0x564

'MinimumWorkingSetSize' : 200 //Long, 0xC8

'Name' : 'inetinfo.exe' //String

'OSCreationClassName' : 'Win32_OperatingSystem' //String

'OSName' : 'Microsoft Windows Server 2012 R2 Datacenter Evaluation|C:\Windows|\Device\Harddisk0\Partition1' //String

'OtherOperationCount' : '978773' //String, 0xEEF55

'OtherTransferCount' : '15987422' //String, 0xF3F2DE

'PageFaults' : 327548 //Long, 0x4FF7C

'PageFileUsage' : 17728 //Long, 0x4540

'ParentProcessId' : 620 //Long, 0x26C

'PeakPageFileUsage' : 18124 //Long, 0x46CC

'PeakVirtualSize' : '130600960' //String, 0x7C8D000

'PeakWorkingSetSize' : 26404 //Long, 0x6724

'Priority' : 8 //Long, 0x8

'PrivatePageCount' : '18153472' //String, 0x1150000

'ProcessId' : 1856 //Long, 0x740

'QuotaNonPagedPoolUsage' : 45 //Long, 0x2D

'QuotaPagedPoolUsage' : 127 //Long, 0x7F

'QuotaPeakNonPagedPoolUsage' : 49 //Long, 0x31

'QuotaPeakPagedPoolUsage' : 133 //Long, 0x85

'ReadOperationCount' : '119' //String, 0x77

'ReadTransferCount' : '1669263' //String, 0x19788F

'SessionId' : 0 //Long, 0x0

'Status' : null

'TerminationDate' : null

'ThreadCount' : 20 //Long, 0x14

'UserModeTime' : '1221093750' //String, 0x48C86976

'VirtualSize' : '112443392' //String, 0x6B3C000

'WindowsVersion' : '6.3.9600' //String

'WorkingSetSize' : '2625536' //String, 0x281000

'WriteOperationCount' : '38' //String, 0x26

'WriteTransferCount' : '1241926' //String, 0x12F346

}

Instance \\W2012SDC\ROOT\cimv2:Win32_Process.Handle="1912"

Properties={

'Caption' : 'ismserv.exe' //String

'CommandLine' : 'C:\Windows\System32\ismserv.exe' //String

'CreationClassName' : 'Win32_Process' //String

'CreationDate' : '20141112141021.820814-480' //String

'CSCreationClassName' : 'Win32_ComputerSystem' //String

'CSName' : '.' //String

'Description' : 'ismserv.exe' //String

'ExecutablePath' : 'C:\Windows\System32\ismserv.exe' //String

'ExecutionState' : null

'Handle' : '1912' //String, 0x778

'HandleCount' : 108 //Long, 0x6C

'InstallDate' : null

'KernelModeTime' : '312500' //String, 0x4C4B4

'MaximumWorkingSetSize' : 1380 //Long, 0x564

'MinimumWorkingSetSize' : 200 //Long, 0xC8

'Name' : 'ismserv.exe' //String

'OSCreationClassName' : 'Win32_OperatingSystem' //String

'OSName' : 'Microsoft Windows Server 2012 R2 Datacenter Evaluation|C:\Windows|\Device\Harddisk0\Partition1' //String

'OtherOperationCount' : '2875' //String, 0xB3B

'OtherTransferCount' : '16998' //String, 0x4266

'PageFaults' : 5292 //Long, 0x14AC

'PageFileUsage' : 1932 //Long, 0x78C

'ParentProcessId' : 620 //Long, 0x26C

'PeakPageFileUsage' : 2004 //Long, 0x7D4

'PeakVirtualSize' : '32768000' //String, 0x1F40000

'PeakWorkingSetSize' : 4508 //Long, 0x119C

'Priority' : 8 //Long, 0x8

'PrivatePageCount' : '1978368' //String, 0x1E3000

'ProcessId' : 1912 //Long, 0x778

'QuotaNonPagedPoolUsage' : 12 //Long, 0xC

'QuotaPagedPoolUsage' : 48 //Long, 0x30

'QuotaPeakNonPagedPoolUsage' : 14 //Long, 0xE

'QuotaPeakPagedPoolUsage' : 48 //Long, 0x30

'ReadOperationCount' : '0' //String, 0x0

'ReadTransferCount' : '0' //String, 0x0

'SessionId' : 0 //Long, 0x0

'Status' : null

'TerminationDate' : null

'ThreadCount' : 8 //Long, 0x8

'UserModeTime' : '156250' //String, 0x2625A

'VirtualSize' : '32702464' //String, 0x1F30000

'WindowsVersion' : '6.3.9600' //String

'WorkingSetSize' : '2301952' //String, 0x232000

'WriteOperationCount' : '0' //String, 0x0

'WriteTransferCount' : '0' //String, 0x0

}

Instance \\W2012SDC\ROOT\cimv2:Win32_Process.Handle="1944"

Properties={

'Caption' : 'svchost.exe' //String

'CommandLine' : 'C:\Windows\system32\svchost.exe -k KpsSvcGroup' //String

'CreationClassName' : 'Win32_Process' //String

'CreationDate' : '20141112141021.987272-480' //String

'CSCreationClassName' : 'Win32_ComputerSystem' //String

'CSName' : '.' //String

'Description' : 'svchost.exe' //String

'ExecutablePath' : 'C:\Windows\system32\svchost.exe' //String

'ExecutionState' : null

'Handle' : '1944' //String, 0x798

'HandleCount' : 75 //Long, 0x4B

'InstallDate' : null

'KernelModeTime' : '0' //String, 0x0

'MaximumWorkingSetSize' : 1380 //Long, 0x564

'MinimumWorkingSetSize' : 200 //Long, 0xC8

'Name' : 'svchost.exe' //String

'OSCreationClassName' : 'Win32_OperatingSystem' //String

'OSName' : 'Microsoft Windows Server 2012 R2 Datacenter Evaluation|C:\Windows|\Device\Harddisk0\Partition1' //String

'OtherOperationCount' : '68' //String, 0x44

'OtherTransferCount' : '166' //String, 0xA6

'PageFaults' : 1071 //Long, 0x42F

'PageFileUsage' : 828 //Long, 0x33C

'ParentProcessId' : 620 //Long, 0x26C

'PeakPageFileUsage' : 900 //Long, 0x384

'PeakVirtualSize' : '19378176' //String, 0x127B000

'PeakWorkingSetSize' : 3068 //Long, 0xBFC

'Priority' : 8 //Long, 0x8

'PrivatePageCount' : '847872' //String, 0xCF000

'ProcessId' : 1944 //Long, 0x798

'QuotaNonPagedPoolUsage' : 6 //Long, 0x6

'QuotaPagedPoolUsage' : 34 //Long, 0x22

'QuotaPeakNonPagedPoolUsage' : 7 //Long, 0x7

'QuotaPeakPagedPoolUsage' : 34 //Long, 0x22

'ReadOperationCount' : '0' //String, 0x0

'ReadTransferCount' : '0' //String, 0x0

'SessionId' : 0 //Long, 0x0

'Status' : null

'TerminationDate' : null

'ThreadCount' : 3 //Long, 0x3

'UserModeTime' : '0' //String, 0x0

'VirtualSize' : '17502208' //String, 0x10B1000

'WindowsVersion' : '6.3.9600' //String

'WorkingSetSize' : '774144' //String, 0xBD000

'WriteOperationCount' : '0' //String, 0x0

'WriteTransferCount' : '0' //String, 0x0

}

Instance \\W2012SDC\ROOT\cimv2:Win32_Process.Handle="1964"

Properties={

'Caption' : 'svchost.exe' //String

'CommandLine' : 'C:\Windows\System32\svchost.exe -k LPDService' //String

'CreationClassName' : 'Win32_Process' //String

'CreationDate' : '20141112141021.987272-480' //String

'CSCreationClassName' : 'Win32_ComputerSystem' //String

'CSName' : '.' //String

'Description' : 'svchost.exe' //String

'ExecutablePath' : 'C:\Windows\System32\svchost.exe' //String

'ExecutionState' : null

'Handle' : '1964' //String, 0x7AC

'HandleCount' : 130 //Long, 0x82

'InstallDate' : null

'KernelModeTime' : '156250' //String, 0x2625A

'MaximumWorkingSetSize' : 1380 //Long, 0x564

'MinimumWorkingSetSize' : 200 //Long, 0xC8

'Name' : 'svchost.exe' //String

'OSCreationClassName' : 'Win32_OperatingSystem' //String

'OSName' : 'Microsoft Windows Server 2012 R2 Datacenter Evaluation|C:\Windows|\Device\Harddisk0\Partition1' //String

'OtherOperationCount' : '72' //String, 0x48

'OtherTransferCount' : '3082' //String, 0xC0A

'PageFaults' : 1282 //Long, 0x502

'PageFileUsage' : 1244 //Long, 0x4DC

'ParentProcessId' : 620 //Long, 0x26C

'PeakPageFileUsage' : 1344 //Long, 0x540

'PeakVirtualSize' : '58740736' //String, 0x3805000

'PeakWorkingSetSize' : 4340 //Long, 0x10F4

'Priority' : 8 //Long, 0x8

'PrivatePageCount' : '1273856' //String, 0x137000

'ProcessId' : 1964 //Long, 0x7AC

'QuotaNonPagedPoolUsage' : 10 //Long, 0xA

'QuotaPagedPoolUsage' : 107 //Long, 0x6B

'QuotaPeakNonPagedPoolUsage' : 10 //Long, 0xA

'QuotaPeakPagedPoolUsage' : 108 //Long, 0x6C

'ReadOperationCount' : '186' //String, 0xBA

'ReadTransferCount' : '95046' //String, 0x17346

'SessionId' : 0 //Long, 0x0

'Status' : null

'TerminationDate' : null

'ThreadCount' : 4 //Long, 0x4

'UserModeTime' : '156250' //String, 0x2625A

'VirtualSize' : '57675776' //String, 0x3701000

'WindowsVersion' : '6.3.9600' //String

'WorkingSetSize' : '872448' //String, 0xD5000

'WriteOperationCount' : '0' //String, 0x0

'WriteTransferCount' : '0' //String, 0x0

}

Instance \\W2012SDC\ROOT\cimv2:Win32_Process.Handle="2004"

Properties={

'Caption' : 'svchost.exe' //String

'CommandLine' : 'C:\Windows\system32\svchost.exe -k MSiSNS' //String

'CreationClassName' : 'Win32_Process' //String

'CreationDate' : '20141112141022.409146-480' //String

'CSCreationClassName' : 'Win32_ComputerSystem' //String

'CSName' : '.' //String

'Description' : 'svchost.exe' //String

'ExecutablePath' : 'C:\Windows\system32\svchost.exe' //String

'ExecutionState' : null

'Handle' : '2004' //String, 0x7D4

'HandleCount' : 70 //Long, 0x46

'InstallDate' : null

'KernelModeTime' : '156250' //String, 0x2625A

'MaximumWorkingSetSize' : 1380 //Long, 0x564

'MinimumWorkingSetSize' : 200 //Long, 0xC8

'Name' : 'svchost.exe' //String

'OSCreationClassName' : 'Win32_OperatingSystem' //String

'OSName' : 'Microsoft Windows Server 2012 R2 Datacenter Evaluation|C:\Windows|\Device\Harddisk0\Partition1' //String

'OtherOperationCount' : '144' //String, 0x90

'OtherTransferCount' : '2490' //String, 0x9BA

'PageFaults' : 1993 //Long, 0x7C9

'PageFileUsage' : 772 //Long, 0x304

'ParentProcessId' : 620 //Long, 0x26C

'PeakPageFileUsage' : 896 //Long, 0x380

'PeakVirtualSize' : '18833408' //String, 0x11F6000

'PeakWorkingSetSize' : 3084 //Long, 0xC0C

'Priority' : 8 //Long, 0x8

'PrivatePageCount' : '790528' //String, 0xC1000

'ProcessId' : 2004 //Long, 0x7D4

'QuotaNonPagedPoolUsage' : 7 //Long, 0x7

'QuotaPagedPoolUsage' : 32 //Long, 0x20

'QuotaPeakNonPagedPoolUsage' : 7 //Long, 0x7

'QuotaPeakPagedPoolUsage' : 32 //Long, 0x20

'ReadOperationCount' : '21' //String, 0x15

'ReadTransferCount' : '448' //String, 0x1C0

'SessionId' : 0 //Long, 0x0

'Status' : null

'TerminationDate' : null

'ThreadCount' : 4 //Long, 0x4

'UserModeTime' : '156250' //String, 0x2625A

'VirtualSize' : '17768448' //String, 0x10F2000

'WindowsVersion' : '6.3.9600' //String

'WorkingSetSize' : '802816' //String, 0xC4000

'WriteOperationCount' : '10' //String, 0xA

'WriteTransferCount' : '448' //String, 0x1C0

}

Instance \\W2012SDC\ROOT\cimv2:Win32_Process.Handle="2032"

Properties={

'Caption' : 'mqsvc.exe' //String

'CommandLine' : 'C:\Windows\system32\mqsvc.exe' //String

'CreationClassName' : 'Win32_Process' //String

'CreationDate' : '20141112141022.612272-480' //String

'CSCreationClassName' : 'Win32_ComputerSystem' //String

'CSName' : '.' //String

'Description' : 'mqsvc.exe' //String

'ExecutablePath' : 'C:\Windows\system32\mqsvc.exe' //String

'ExecutionState' : null

'Handle' : '2032' //String, 0x7F0

'HandleCount' : 375 //Long, 0x177

'InstallDate' : null

'KernelModeTime' : '625000' //String, 0x98968

'MaximumWorkingSetSize' : 1380 //Long, 0x564

'MinimumWorkingSetSize' : 200 //Long, 0xC8

'Name' : 'mqsvc.exe' //String

'OSCreationClassName' : 'Win32_OperatingSystem' //String

'OSName' : 'Microsoft Windows Server 2012 R2 Datacenter Evaluation|C:\Windows|\Device\Harddisk0\Partition1' //String

'OtherOperationCount' : '1382' //String, 0x566

'OtherTransferCount' : '24156' //String, 0x5E5C

'PageFaults' : 4507 //Long, 0x119B

'PageFileUsage' : 6996 //Long, 0x1B54

'ParentProcessId' : 620 //Long, 0x26C

'PeakPageFileUsage' : 7508 //Long, 0x1D54

'PeakVirtualSize' : '101085184' //String, 0x6067000

'PeakWorkingSetSize' : 12928 //Long, 0x3280

'Priority' : 8 //Long, 0x8

'PrivatePageCount' : '7163904' //String, 0x6D5000

'ProcessId' : 2032 //Long, 0x7F0

'QuotaNonPagedPoolUsage' : 42 //Long, 0x2A

'QuotaPagedPoolUsage' : 162 //Long, 0xA2

'QuotaPeakNonPagedPoolUsage' : 45 //Long, 0x2D

'QuotaPeakPagedPoolUsage' : 163 //Long, 0xA3

'ReadOperationCount' : '221' //String, 0xDD

'ReadTransferCount' : '742292' //String, 0xB5394

'SessionId' : 0 //Long, 0x0

'Status' : null

'TerminationDate' : null

'ThreadCount' : 31 //Long, 0x1F

'UserModeTime' : '156250' //String, 0x2625A

'VirtualSize' : '96837632' //String, 0x5C5A000

'WindowsVersion' : '6.3.9600' //String

'WorkingSetSize' : '1806336' //String, 0x1B9000

'WriteOperationCount' : '23' //String, 0x17

'WriteTransferCount' : '68003' //String, 0x109A3

}

Instance \\W2012SDC\ROOT\cimv2:Win32_Process.Handle="2228"

Properties={

'Caption' : 'sqlservr.exe' //String

'CommandLine' : '"C:\Program Files\Microsoft SQL Server\MSSQL12.MSSQLSERVER\MSSQL\Binn\sqlservr.exe" -sMSSQLSERVER' //String

'CreationClassName' : 'Win32_Process' //String

'CreationDate' : '20141112141033.172411-480' //String

'CSCreationClassName' : 'Win32_ComputerSystem' //String

'CSName' : '.' //String

'Description' : 'sqlservr.exe' //String

'ExecutablePath' : 'C:\Program Files\Microsoft SQL Server\MSSQL12.MSSQLSERVER\MSSQL\Binn\sqlservr.exe' //String

'ExecutionState' : null

'Handle' : '2228' //String, 0x8B4

'HandleCount' : 666 //Long, 0x29A

'InstallDate' : null

'KernelModeTime' : '13914687500' //String

'MaximumWorkingSetSize' : 1380 //Long, 0x564

'MinimumWorkingSetSize' : 200 //Long, 0xC8

'Name' : 'sqlservr.exe' //String

'OSCreationClassName' : 'Win32_OperatingSystem' //String

'OSName' : 'Microsoft Windows Server 2012 R2 Datacenter Evaluation|C:\Windows|\Device\Harddisk0\Partition1' //String

'OtherOperationCount' : '614169' //String, 0x95F19

'OtherTransferCount' : '5877930' //String, 0x59B0AA

'PageFaults' : 282834 //Long, 0x450D2

'PageFileUsage' : 241208 //Long, 0x3AE38

'ParentProcessId' : 620 //Long, 0x26C

'PeakPageFileUsage' : 255220 //Long, 0x3E4F4

'PeakVirtualSize' : '8787750912' //String

'PeakWorkingSetSize' : 136196 //Long, 0x21404

'Priority' : 8 //Long, 0x8

'PrivatePageCount' : '246996992' //String, 0xEB8E000

'ProcessId' : 2228 //Long, 0x8B4

'QuotaNonPagedPoolUsage' : 61 //Long, 0x3D

'QuotaPagedPoolUsage' : 481 //Long, 0x1E1

'QuotaPeakNonPagedPoolUsage' : 63 //Long, 0x3F

'QuotaPeakPagedPoolUsage' : 483 //Long, 0x1E3

'ReadOperationCount' : '29861' //String, 0x74A5

'ReadTransferCount' : '302650857' //String, 0x120A15E9

'SessionId' : 0 //Long, 0x0

'Status' : null

'TerminationDate' : null

'ThreadCount' : 63 //Long, 0x3F

'UserModeTime' : '29289531250' //String

'VirtualSize' : '8772554752' //String

'WindowsVersion' : '6.3.9600' //String

'WorkingSetSize' : '64561152' //String, 0x3D92000

'WriteOperationCount' : '13179' //String, 0x337B

'WriteTransferCount' : '89829539' //String, 0x55AB0A3

}

Instance \\W2012SDC\ROOT\cimv2:Win32_Process.Handle="2404"

Properties={

'Caption' : 'SMSvcHost.exe' //String

'CommandLine' : 'C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe' //String

'CreationClassName' : 'Win32_Process' //String

'CreationDate' : '20141112141043.515235-480' //String

'CSCreationClassName' : 'Win32_ComputerSystem' //String

'CSName' : '.' //String

'Description' : 'SMSvcHost.exe' //String

'ExecutablePath' : 'C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe' //String

'ExecutionState' : null

'Handle' : '2404' //String, 0x964

'HandleCount' : 280 //Long, 0x118

'InstallDate' : null

'KernelModeTime' : '625000' //String, 0x98968

'MaximumWorkingSetSize' : 1380 //Long, 0x564

'MinimumWorkingSetSize' : 200 //Long, 0xC8

'Name' : 'SMSvcHost.exe' //String

'OSCreationClassName' : 'Win32_OperatingSystem' //String

'OSName' : 'Microsoft Windows Server 2012 R2 Datacenter Evaluation|C:\Windows|\Device\Harddisk0\Partition1' //String

'OtherOperationCount' : '940' //String, 0x3AC

'OtherTransferCount' : '12151' //String, 0x2F77

'PageFaults' : 9157 //Long, 0x23C5

'PageFileUsage' : 29492 //Long, 0x7334

'ParentProcessId' : 620 //Long, 0x26C

'PeakPageFileUsage' : 30320 //Long, 0x7670

'PeakVirtualSize' : '610156544' //String, 0x245E4000

'PeakWorkingSetSize' : 30172 //Long, 0x75DC

'Priority' : 8 //Long, 0x8

'PrivatePageCount' : '30199808' //String, 0x1CCD000

'ProcessId' : 2404 //Long, 0x964

'QuotaNonPagedPoolUsage' : 35 //Long, 0x23

'QuotaPagedPoolUsage' : 374 //Long, 0x176

'QuotaPeakNonPagedPoolUsage' : 40 //Long, 0x28

'QuotaPeakPagedPoolUsage' : 374 //Long, 0x176

'ReadOperationCount' : '148' //String, 0x94

'ReadTransferCount' : '238784' //String, 0x3A4C0

'SessionId' : 0 //Long, 0x0

'Status' : null

'TerminationDate' : null

'ThreadCount' : 8 //Long, 0x8

'UserModeTime' : '2031250' //String, 0x1EFE92

'VirtualSize' : '598794240' //String, 0x23B0E000

'WindowsVersion' : '6.3.9600' //String

'WorkingSetSize' : '2994176' //String, 0x2DB000

'WriteOperationCount' : '56' //String, 0x38

'WriteTransferCount' : '35319' //String, 0x89F7

}

Instance \\W2012SDC\ROOT\cimv2:Win32_Process.Handle="2480"

Properties={

'Caption' : 'svchost.exe' //String

'CommandLine' : 'C:\Windows\System32\svchost.exe -k PeerDist' //String

'CreationClassName' : 'Win32_Process' //String

'CreationDate' : '20141112141043.862091-480' //String

'CSCreationClassName' : 'Win32_ComputerSystem' //String

'CSName' : '.' //String

'Description' : 'svchost.exe' //String

'ExecutablePath' : 'C:\Windows\System32\svchost.exe' //String

'ExecutionState' : null

'Handle' : '2480' //String, 0x9B0

'HandleCount' : 342 //Long, 0x156

'InstallDate' : null

'KernelModeTime' : '2500000' //String, 0x2625A0

'MaximumWorkingSetSize' : 1380 //Long, 0x564

'MinimumWorkingSetSize' : 200 //Long, 0xC8

'Name' : 'svchost.exe' //String

'OSCreationClassName' : 'Win32_OperatingSystem' //String

'OSName' : 'Microsoft Windows Server 2012 R2 Datacenter Evaluation|C:\Windows|\Device\Harddisk0\Partition1' //String

'OtherOperationCount' : '1531' //String, 0x5FB

'OtherTransferCount' : '38158' //String, 0x950E

'PageFaults' : 14912 //Long, 0x3A40

'PageFileUsage' : 53224 //Long, 0xCFE8

'ParentProcessId' : 620 //Long, 0x26C

'PeakPageFileUsage' : 54844 //Long, 0xD63C

'PeakVirtualSize' : '433553408' //String, 0x19D78000

'PeakWorkingSetSize' : 20776 //Long, 0x5128

'Priority' : 8 //Long, 0x8

'PrivatePageCount' : '54501376' //String, 0x33FA000

'ProcessId' : 2480 //Long, 0x9B0

'QuotaNonPagedPoolUsage' : 43 //Long, 0x2B

'QuotaPagedPoolUsage' : 158 //Long, 0x9E

'QuotaPeakNonPagedPoolUsage' : 45 //Long, 0x2D

'QuotaPeakPagedPoolUsage' : 158 //Long, 0x9E

'ReadOperationCount' : '203' //String, 0xCB

'ReadTransferCount' : '22484286' //String, 0x157153E

'SessionId' : 0 //Long, 0x0

'Status' : null

'TerminationDate' : null

'ThreadCount' : 13 //Long, 0xD

'UserModeTime' : '2656250' //String, 0x2887FA

'VirtualSize' : '430989312' //String, 0x19B06000

'WindowsVersion' : '6.3.9600' //String

'WorkingSetSize' : '1843200' //String, 0x1C2000

'WriteOperationCount' : '6' //String, 0x6

'WriteTransferCount' : '139264' //String, 0x22000

}

Instance \\W2012SDC\ROOT\cimv2:Win32_Process.Handle="2544"

Properties={

'Caption' : 'ReportingServicesService.exe' //String

'CommandLine' : '"C:\Program Files\Microsoft SQL Server\MSRS12.MSSQLSERVER\Reporting Services\ReportServer\bin\ReportingServicesService.exe"' //String

'CreationClassName' : 'Win32_Process' //String

'CreationDate' : '20141112141046.896445-480' //String

'CSCreationClassName' : 'Win32_ComputerSystem' //String

'CSName' : '.' //String

'Description' : 'ReportingServicesService.exe' //String

'ExecutablePath' : 'C:\Program Files\Microsoft SQL Server\MSRS12.MSSQLSERVER\Reporting Services\ReportServer\bin\ReportingServicesService.exe' //String

'ExecutionState' : null

'Handle' : '2544' //String, 0x9F0

'HandleCount' : 699 //Long, 0x2BB

'InstallDate' : null

'KernelModeTime' : '440312500' //String, 0x1A3EA2B4

'MaximumWorkingSetSize' : 1380 //Long, 0x564

'MinimumWorkingSetSize' : 200 //Long, 0xC8

'Name' : 'ReportingServicesService.exe' //String

'OSCreationClassName' : 'Win32_OperatingSystem' //String

'OSName' : 'Microsoft Windows Server 2012 R2 Datacenter Evaluation|C:\Windows|\Device\Harddisk0\Partition1' //String

'OtherOperationCount' : '22620' //String, 0x585C

'OtherTransferCount' : '4504656' //String, 0x44BC50

'PageFaults' : 226983 //Long, 0x376A7

'PageFileUsage' : 131252 //Long, 0x200B4

'ParentProcessId' : 620 //Long, 0x26C

'PeakPageFileUsage' : 141256 //Long, 0x227C8

'PeakVirtualSize' : '8758919168' //String

'PeakWorkingSetSize' : 103352 //Long, 0x193B8

'Priority' : 8 //Long, 0x8

'PrivatePageCount' : '134402048' //String, 0x802D000

'ProcessId' : 2544 //Long, 0x9F0

'QuotaNonPagedPoolUsage' : 58 //Long, 0x3A

'QuotaPagedPoolUsage' : 427 //Long, 0x1AB

'QuotaPeakNonPagedPoolUsage' : 66 //Long, 0x42

'QuotaPeakPagedPoolUsage' : 429 //Long, 0x1AD

'ReadOperationCount' : '6197' //String, 0x1835

'ReadTransferCount' : '12316036' //String, 0xBBED84

'SessionId' : 0 //Long, 0x0

'Status' : null

'TerminationDate' : null

'ThreadCount' : 45 //Long, 0x2D

'UserModeTime' : '1996093750' //String, 0x76F9F936

'VirtualSize' : '8751898624' //String

'WindowsVersion' : '6.3.9600' //String

'WorkingSetSize' : '23429120' //String, 0x1658000

'WriteOperationCount' : '6853' //String, 0x1AC5

'WriteTransferCount' : '959009' //String, 0xEA221

}

Instance \\W2012SDC\ROOT\cimv2:Win32_Process.Handle="2748"

Properties={

'Caption' : 'ProviderRegistryService.exe' //String

'CommandLine' : 'C:\Windows\System32\Essentials\ProviderRegistryService.exe' //String

'CreationClassName' : 'Win32_Process' //String

'CreationDate' : '20141112141049.443322-480' //String

'CSCreationClassName' : 'Win32_ComputerSystem' //String

'CSName' : '.' //String

'Description' : 'ProviderRegistryService.exe' //String

'ExecutablePath' : 'C:\Windows\System32\Essentials\ProviderRegistryService.exe' //String

'ExecutionState' : null

'Handle' : '2748' //String, 0xABC

'HandleCount' : 481 //Long, 0x1E1

'InstallDate' : null

'KernelModeTime' : '2500000' //String, 0x2625A0

'MaximumWorkingSetSize' : 1380 //Long, 0x564

'MinimumWorkingSetSize' : 200 //Long, 0xC8

'Name' : 'ProviderRegistryService.exe' //String

'OSCreationClassName' : 'Win32_OperatingSystem' //String

'OSName' : 'Microsoft Windows Server 2012 R2 Datacenter Evaluation|C:\Windows|\Device\Harddisk0\Partition1' //String

'OtherOperationCount' : '55455' //String, 0xD89F

'OtherTransferCount' : '703237' //String, 0xABB05

'PageFaults' : 91181 //Long, 0x1642D

'PageFileUsage' : 32908 //Long, 0x808C

'ParentProcessId' : 620 //Long, 0x26C

'PeakPageFileUsage' : 35856 //Long, 0x8C10

'PeakVirtualSize' : '620924928' //String, 0x25029000

'PeakWorkingSetSize' : 41464 //Long, 0xA1F8

'Priority' : 8 //Long, 0x8

'PrivatePageCount' : '33697792' //String, 0x2023000

'ProcessId' : 2748 //Long, 0xABC

'QuotaNonPagedPoolUsage' : 32 //Long, 0x20

'QuotaPagedPoolUsage' : 388 //Long, 0x184

'QuotaPeakNonPagedPoolUsage' : 42 //Long, 0x2A

'QuotaPeakPagedPoolUsage' : 388 //Long, 0x184

'ReadOperationCount' : '117' //String, 0x75

'ReadTransferCount' : '300599' //String, 0x49637

'SessionId' : 0 //Long, 0x0

'Status' : null

'TerminationDate' : null

'ThreadCount' : 7 //Long, 0x7

'UserModeTime' : '7812500' //String, 0x773594

'VirtualSize' : '614313984' //String, 0x249DB000

'WindowsVersion' : '6.3.9600' //String

'WorkingSetSize' : '10493952' //String, 0xA02000

'WriteOperationCount' : '58637' //String, 0xE50D

'WriteTransferCount' : '8920882' //String, 0x881F32

}

Instance \\W2012SDC\ROOT\cimv2:Win32_Process.Handle="2852"

Properties={

'Caption' : 'TCPSVCS.EXE' //String

'CommandLine' : 'C:\Windows\System32\tcpsvcs.exe' //String

'CreationClassName' : 'Win32_Process' //String

'CreationDate' : '20141112141051.186685-480' //String

'CSCreationClassName' : 'Win32_ComputerSystem' //String

'CSName' : '.' //String

'Description' : 'TCPSVCS.EXE' //String

'ExecutablePath' : 'C:\Windows\System32\tcpsvcs.exe' //String

'ExecutionState' : null

'Handle' : '2852' //String, 0xB24

'HandleCount' : 86 //Long, 0x56

'InstallDate' : null

'KernelModeTime' : '156250' //String, 0x2625A

'MaximumWorkingSetSize' : 1380 //Long, 0x564

'MinimumWorkingSetSize' : 200 //Long, 0xC8

'Name' : 'TCPSVCS.EXE' //String

'OSCreationClassName' : 'Win32_OperatingSystem' //String

'OSName' : 'Microsoft Windows Server 2012 R2 Datacenter Evaluation|C:\Windows|\Device\Harddisk0\Partition1' //String

'OtherOperationCount' : '446' //String, 0x1BE

'OtherTransferCount' : '8320' //String, 0x2080

'PageFaults' : 867 //Long, 0x363

'PageFileUsage' : 736 //Long, 0x2E0

'ParentProcessId' : 620 //Long, 0x26C

'PeakPageFileUsage' : 832 //Long, 0x340

'PeakVirtualSize' : '15405056' //String, 0xEB1000

'PeakWorkingSetSize' : 2920 //Long, 0xB68

'Priority' : 8 //Long, 0x8

'PrivatePageCount' : '753664' //String, 0xB8000

'ProcessId' : 2852 //Long, 0xB24

'QuotaNonPagedPoolUsage' : 17 //Long, 0x11

'QuotaPagedPoolUsage' : 31 //Long, 0x1F

'QuotaPeakNonPagedPoolUsage' : 18 //Long, 0x12

'QuotaPeakPagedPoolUsage' : 31 //Long, 0x1F

'ReadOperationCount' : '157' //String, 0x9D

'ReadTransferCount' : '80227' //String, 0x13963

'SessionId' : 0 //Long, 0x0

'Status' : null

'TerminationDate' : null

'ThreadCount' : 2 //Long, 0x2

'UserModeTime' : '0' //String, 0x0

'VirtualSize' : '14340096' //String, 0xDAD000

'WindowsVersion' : '6.3.9600' //String

'WorkingSetSize' : '1929216' //String, 0x1D7000

'WriteOperationCount' : '0' //String, 0x0

'WriteTransferCount' : '0' //String, 0x0

}

WUtils.com

Includes&Samples

Win32_Process, ROOT\cimv2 - Instances

Instances of Win32_Process

Instance \\W2012SDC\ROOT\cimv2:Win32_Process.Handle="0"

Instance \\W2012SDC\ROOT\cimv2:Win32_Process.Handle="4"

Instance \\W2012SDC\ROOT\cimv2:Win32_Process.Handle="320"

Instance \\W2012SDC\ROOT\cimv2:Win32_Process.Handle="456"

Instance \\W2012SDC\ROOT\cimv2:Win32_Process.Handle="524"

Instance \\W2012SDC\ROOT\cimv2:Win32_Process.Handle="532"

Instance \\W2012SDC\ROOT\cimv2:Win32_Process.Handle="576"

Instance \\W2012SDC\ROOT\cimv2:Win32_Process.Handle="620"

Instance \\W2012SDC\ROOT\cimv2:Win32_Process.Handle="628"

Instance \\W2012SDC\ROOT\cimv2:Win32_Process.Handle="784"

Instance \\W2012SDC\ROOT\cimv2:Win32_Process.Handle="828"

Instance \\W2012SDC\ROOT\cimv2:Win32_Process.Handle="924"

Instance \\W2012SDC\ROOT\cimv2:Win32_Process.Handle="1004"

Instance \\W2012SDC\ROOT\cimv2:Win32_Process.Handle="80"

Instance \\W2012SDC\ROOT\cimv2:Win32_Process.Handle="376"

Instance \\W2012SDC\ROOT\cimv2:Win32_Process.Handle="448"

Instance \\W2012SDC\ROOT\cimv2:Win32_Process.Handle="800"

Instance \\W2012SDC\ROOT\cimv2:Win32_Process.Handle="880"

Instance \\W2012SDC\ROOT\cimv2:Win32_Process.Handle="1180"

Instance \\W2012SDC\ROOT\cimv2:Win32_Process.Handle="1500"

Instance \\W2012SDC\ROOT\cimv2:Win32_Process.Handle="1612"

Instance \\W2012SDC\ROOT\cimv2:Win32_Process.Handle="1648"

Instance \\W2012SDC\ROOT\cimv2:Win32_Process.Handle="1704"

Instance \\W2012SDC\ROOT\cimv2:Win32_Process.Handle="1752"

Instance \\W2012SDC\ROOT\cimv2:Win32_Process.Handle="1788"

Instance \\W2012SDC\ROOT\cimv2:Win32_Process.Handle="1804"

Instance \\W2012SDC\ROOT\cimv2:Win32_Process.Handle="1820"

Instance \\W2012SDC\ROOT\cimv2:Win32_Process.Handle="1840"

Instance \\W2012SDC\ROOT\cimv2:Win32_Process.Handle="1856"

Instance \\W2012SDC\ROOT\cimv2:Win32_Process.Handle="1912"

Instance \\W2012SDC\ROOT\cimv2:Win32_Process.Handle="1944"

Instance \\W2012SDC\ROOT\cimv2:Win32_Process.Handle="1964"

Instance \\W2012SDC\ROOT\cimv2:Win32_Process.Handle="2004"

Instance \\W2012SDC\ROOT\cimv2:Win32_Process.Handle="2032"

Instance \\W2012SDC\ROOT\cimv2:Win32_Process.Handle="2228"

Instance \\W2012SDC\ROOT\cimv2:Win32_Process.Handle="2404"

Instance \\W2012SDC\ROOT\cimv2:Win32_Process.Handle="2480"

Instance \\W2012SDC\ROOT\cimv2:Win32_Process.Handle="2544"

Instance \\W2012SDC\ROOT\cimv2:Win32_Process.Handle="2748"

Instance \\W2012SDC\ROOT\cimv2:Win32_Process.Handle="2852"