Win32_Process, ROOT\cimv2 - Instances

Class | Methods (7) | Properties (45) | Qualifiers (10) | Instances (40) | Namespaces (2)
Samples: VB Script | C# | VB.Net | Search on:Microsoft

Instances of Win32_Process

This section contains sample wmi instances of Win32_Process class with their properties from Microsoft Windows Server 2012 R2 Datacenter Evaluation.

Instance \\W2012SDC\ROOT\cimv2:Win32_Process.Handle="0"

Properties={
   'Caption' : 'System Idle Process' //String
   'CommandLine' : null
   'CreationClassName' : 'Win32_Process' //String
   'CreationDate' : null
   'CSCreationClassName' : 'Win32_ComputerSystem' //String
   'CSName' : '.' //String
   'Description' : 'System Idle Process' //String
   'ExecutablePath' : null
   'ExecutionState' : null
   'Handle' : '0' //String, 0x0
   'HandleCount' : 0 //Long, 0x0
   'InstallDate' : null
   'KernelModeTime' : '3478941250000' //String
   'MaximumWorkingSetSize' : null
   'MinimumWorkingSetSize' : null
   'Name' : 'System Idle Process' //String
   'OSCreationClassName' : 'Win32_OperatingSystem' //String
   'OSName' : 'Microsoft Windows Server 2012 R2 Datacenter Evaluation|C:\Windows|\Device\Harddisk0\Partition1' //String
   'OtherOperationCount' : '0' //String, 0x0
   'OtherTransferCount' : '0' //String, 0x0
   'PageFaults' : 1 //Long, 0x1
   'PageFileUsage' : 0 //Long, 0x0
   'ParentProcessId' : 0 //Long, 0x0
   'PeakPageFileUsage' : 0 //Long, 0x0
   'PeakVirtualSize' : '65536' //String, 0x10000
   'PeakWorkingSetSize' : 4 //Long, 0x4
   'Priority' : 0 //Long, 0x0
   'PrivatePageCount' : '0' //String, 0x0
   'ProcessId' : 0 //Long, 0x0
   'QuotaNonPagedPoolUsage' : 0 //Long, 0x0
   'QuotaPagedPoolUsage' : 0 //Long, 0x0
   'QuotaPeakNonPagedPoolUsage' : 0 //Long, 0x0
   'QuotaPeakPagedPoolUsage' : 0 //Long, 0x0
   'ReadOperationCount' : '0' //String, 0x0
   'ReadTransferCount' : '0' //String, 0x0
   'SessionId' : 0 //Long, 0x0
   'Status' : null
   'TerminationDate' : null
   'ThreadCount' : 4 //Long, 0x4
   'UserModeTime' : '0' //String, 0x0
   'VirtualSize' : '65536' //String, 0x10000
   'WindowsVersion' : '6.3.9600' //String
   'WorkingSetSize' : '4096' //String, 0x1000
   'WriteOperationCount' : '0' //String, 0x0
   'WriteTransferCount' : '0' //String, 0x0
}

Instance \\W2012SDC\ROOT\cimv2:Win32_Process.Handle="4"

Properties={
   'Caption' : 'System' //String
   'CommandLine' : null
   'CreationClassName' : 'Win32_Process' //String
   'CreationDate' : '20141112140907.774544-480' //String
   'CSCreationClassName' : 'Win32_ComputerSystem' //String
   'CSName' : '.' //String
   'Description' : 'System' //String
   'ExecutablePath' : null
   'ExecutionState' : null
   'Handle' : '4' //String, 0x4
   'HandleCount' : 1201 //Long, 0x4B1
   'InstallDate' : null
   'KernelModeTime' : '2630781250' //String
   'MaximumWorkingSetSize' : null
   'MinimumWorkingSetSize' : null
   'Name' : 'System' //String
   'OSCreationClassName' : 'Win32_OperatingSystem' //String
   'OSName' : 'Microsoft Windows Server 2012 R2 Datacenter Evaluation|C:\Windows|\Device\Harddisk0\Partition1' //String
   'OtherOperationCount' : '12360' //String, 0x3048
   'OtherTransferCount' : '344557' //String, 0x541ED
   'PageFaults' : 10069 //Long, 0x2755
   'PageFileUsage' : 104 //Long, 0x68
   'ParentProcessId' : 0 //Long, 0x0
   'PeakPageFileUsage' : 268 //Long, 0x10C
   'PeakVirtualSize' : '12505088' //String, 0xBED000
   'PeakWorkingSetSize' : 5364 //Long, 0x14F4
   'Priority' : 8 //Long, 0x8
   'PrivatePageCount' : '106496' //String, 0x1A000
   'ProcessId' : 4 //Long, 0x4
   'QuotaNonPagedPoolUsage' : 0 //Long, 0x0
   'QuotaPagedPoolUsage' : 0 //Long, 0x0
   'QuotaPeakNonPagedPoolUsage' : 0 //Long, 0x0
   'QuotaPeakPagedPoolUsage' : 0 //Long, 0x0
   'ReadOperationCount' : '396' //String, 0x18C
   'ReadTransferCount' : '174949456' //String, 0xA6D8450
   'SessionId' : 0 //Long, 0x0
   'Status' : null
   'TerminationDate' : null
   'ThreadCount' : 168 //Long, 0xA8
   'UserModeTime' : '0' //String, 0x0
   'VirtualSize' : '11821056' //String, 0xB46000
   'WindowsVersion' : '6.3.9600' //String
   'WorkingSetSize' : '262144' //String, 0x40000
   'WriteOperationCount' : '11019' //String, 0x2B0B
   'WriteTransferCount' : '257425653' //String, 0xF5800F5
}

Instance \\W2012SDC\ROOT\cimv2:Win32_Process.Handle="320"

Properties={
   'Caption' : 'smss.exe' //String
   'CommandLine' : null
   'CreationClassName' : 'Win32_Process' //String
   'CreationDate' : '20141112140907.915167-480' //String
   'CSCreationClassName' : 'Win32_ComputerSystem' //String
   'CSName' : '.' //String
   'Description' : 'smss.exe' //String
   'ExecutablePath' : null
   'ExecutionState' : null
   'Handle' : '320' //String, 0x140
   'HandleCount' : 52 //Long, 0x34
   'InstallDate' : null
   'KernelModeTime' : '937500' //String, 0xE4E1C
   'MaximumWorkingSetSize' : null
   'MinimumWorkingSetSize' : null
   'Name' : 'smss.exe' //String
   'OSCreationClassName' : 'Win32_OperatingSystem' //String
   'OSName' : 'Microsoft Windows Server 2012 R2 Datacenter Evaluation|C:\Windows|\Device\Harddisk0\Partition1' //String
   'OtherOperationCount' : '276' //String, 0x114
   'OtherTransferCount' : '17438' //String, 0x441E
   'PageFaults' : 566 //Long, 0x236
   'PageFileUsage' : 276 //Long, 0x114
   'ParentProcessId' : 4 //Long, 0x4
   'PeakPageFileUsage' : 348 //Long, 0x15C
   'PeakVirtualSize' : '25460736' //String, 0x1848000
   'PeakWorkingSetSize' : 1060 //Long, 0x424
   'Priority' : 11 //Long, 0xB
   'PrivatePageCount' : '282624' //String, 0x45000
   'ProcessId' : 320 //Long, 0x140
   'QuotaNonPagedPoolUsage' : 3 //Long, 0x3
   'QuotaPagedPoolUsage' : 13 //Long, 0xD
   'QuotaPeakNonPagedPoolUsage' : 8 //Long, 0x8
   'QuotaPeakPagedPoolUsage' : 53 //Long, 0x35
   'ReadOperationCount' : '4' //String, 0x4
   'ReadTransferCount' : '29188' //String, 0x7204
   'SessionId' : 0 //Long, 0x0
   'Status' : null
   'TerminationDate' : null
   'ThreadCount' : 2 //Long, 0x2
   'UserModeTime' : '0' //String, 0x0
   'VirtualSize' : '4395008' //String, 0x431000
   'WindowsVersion' : '6.3.9600' //String
   'WorkingSetSize' : '335872' //String, 0x52000
   'WriteOperationCount' : '1' //String, 0x1
   'WriteTransferCount' : '32' //String, 0x20
}

Instance \\W2012SDC\ROOT\cimv2:Win32_Process.Handle="456"

Properties={
   'Caption' : 'csrss.exe' //String
   'CommandLine' : null
   'CreationClassName' : 'Win32_Process' //String
   'CreationDate' : '20141112140917.083497-480' //String
   'CSCreationClassName' : 'Win32_ComputerSystem' //String
   'CSName' : '.' //String
   'Description' : 'csrss.exe' //String
   'ExecutablePath' : null
   'ExecutionState' : null
   'Handle' : '456' //String, 0x1C8
   'HandleCount' : 640 //Long, 0x280
   'InstallDate' : null
   'KernelModeTime' : '42656250' //String, 0x28AE1FA
   'MaximumWorkingSetSize' : null
   'MinimumWorkingSetSize' : null
   'Name' : 'csrss.exe' //String
   'OSCreationClassName' : 'Win32_OperatingSystem' //String
   'OSName' : 'Microsoft Windows Server 2012 R2 Datacenter Evaluation|C:\Windows|\Device\Harddisk0\Partition1' //String
   'OtherOperationCount' : '22633' //String, 0x5869
   'OtherTransferCount' : '714586' //String, 0xAE75A
   'PageFaults' : 4205 //Long, 0x106D
   'PageFileUsage' : 2084 //Long, 0x824
   'ParentProcessId' : 448 //Long, 0x1C0
   'PeakPageFileUsage' : 2464 //Long, 0x9A0
   'PeakVirtualSize' : '61026304' //String, 0x3A33000
   'PeakWorkingSetSize' : 4028 //Long, 0xFBC
   'Priority' : 13 //Long, 0xD
   'PrivatePageCount' : '2134016' //String, 0x209000
   'ProcessId' : 456 //Long, 0x1C8
   'QuotaNonPagedPoolUsage' : 22 //Long, 0x16
   'QuotaPagedPoolUsage' : 194 //Long, 0xC2
   'QuotaPeakNonPagedPoolUsage' : 24 //Long, 0x18
   'QuotaPeakPagedPoolUsage' : 204 //Long, 0xCC
   'ReadOperationCount' : '444' //String, 0x1BC
   'ReadTransferCount' : '597407' //String, 0x91D9F
   'SessionId' : 0 //Long, 0x0
   'Status' : null
   'TerminationDate' : null
   'ThreadCount' : 10 //Long, 0xA
   'UserModeTime' : '18593750' //String, 0x11BB7D6
   'VirtualSize' : '60502016' //String, 0x39B3000
   'WindowsVersion' : '6.3.9600' //String
   'WorkingSetSize' : '2420736' //String, 0x24F000
   'WriteOperationCount' : '0' //String, 0x0
   'WriteTransferCount' : '0' //String, 0x0
}

Instance \\W2012SDC\ROOT\cimv2:Win32_Process.Handle="524"

Properties={
   'Caption' : 'csrss.exe' //String
   'CommandLine' : null
   'CreationClassName' : 'Win32_Process' //String
   'CreationDate' : '20141112140918.479233-480' //String
   'CSCreationClassName' : 'Win32_ComputerSystem' //String
   'CSName' : '.' //String
   'Description' : 'csrss.exe' //String
   'ExecutablePath' : null
   'ExecutionState' : null
   'Handle' : '524' //String, 0x20C
   'HandleCount' : 172 //Long, 0xAC
   'InstallDate' : null
   'KernelModeTime' : '27343750' //String, 0x1A13B86
   'MaximumWorkingSetSize' : null
   'MinimumWorkingSetSize' : null
   'Name' : 'csrss.exe' //String
   'OSCreationClassName' : 'Win32_OperatingSystem' //String
   'OSName' : 'Microsoft Windows Server 2012 R2 Datacenter Evaluation|C:\Windows|\Device\Harddisk0\Partition1' //String
   'OtherOperationCount' : '8033' //String, 0x1F61
   'OtherTransferCount' : '108002' //String, 0x1A5E2
   'PageFaults' : 12577 //Long, 0x3121
   'PageFileUsage' : 1672 //Long, 0x688
   'ParentProcessId' : 512 //Long, 0x200
   'PeakPageFileUsage' : 1732 //Long, 0x6C4
   'PeakVirtualSize' : '63275008' //String, 0x3C58000
   'PeakWorkingSetSize' : 16796 //Long, 0x419C
   'Priority' : 13 //Long, 0xD
   'PrivatePageCount' : '1712128' //String, 0x1A2000
   'ProcessId' : 524 //Long, 0x20C
   'QuotaNonPagedPoolUsage' : 12 //Long, 0xC
   'QuotaPagedPoolUsage' : 126 //Long, 0x7E
   'QuotaPeakNonPagedPoolUsage' : 14 //Long, 0xE
   'QuotaPeakPagedPoolUsage' : 144 //Long, 0x90
   'ReadOperationCount' : '13485' //String, 0x34AD
   'ReadTransferCount' : '629457' //String, 0x99AD1
   'SessionId' : 1 //Long, 0x1
   'Status' : null
   'TerminationDate' : null
   'ThreadCount' : 10 //Long, 0xA
   'UserModeTime' : '1250000' //String, 0x1312D0
   'VirtualSize' : '54829056' //String, 0x344A000
   'WindowsVersion' : '6.3.9600' //String
   'WorkingSetSize' : '2637824' //String, 0x284000
   'WriteOperationCount' : '0' //String, 0x0
   'WriteTransferCount' : '0' //String, 0x0
}

Instance \\W2012SDC\ROOT\cimv2:Win32_Process.Handle="532"

Properties={
   'Caption' : 'wininit.exe' //String
   'CommandLine' : 'wininit.exe' //String
   'CreationClassName' : 'Win32_Process' //String
   'CreationDate' : '20141112140918.510498-480' //String
   'CSCreationClassName' : 'Win32_ComputerSystem' //String
   'CSName' : '.' //String
   'Description' : 'wininit.exe' //String
   'ExecutablePath' : 'C:\Windows\system32\wininit.exe' //String
   'ExecutionState' : null
   'Handle' : '532' //String, 0x214
   'HandleCount' : 85 //Long, 0x55
   'InstallDate' : null
   'KernelModeTime' : '468750' //String, 0x7270E
   'MaximumWorkingSetSize' : 1380 //Long, 0x564
   'MinimumWorkingSetSize' : 200 //Long, 0xC8
   'Name' : 'wininit.exe' //String
   'OSCreationClassName' : 'Win32_OperatingSystem' //String
   'OSName' : 'Microsoft Windows Server 2012 R2 Datacenter Evaluation|C:\Windows|\Device\Harddisk0\Partition1' //String
   'OtherOperationCount' : '1028' //String, 0x404
   'OtherTransferCount' : '2620' //String, 0xA3C
   'PageFaults' : 1111 //Long, 0x457
   'PageFileUsage' : 864 //Long, 0x360
   'ParentProcessId' : 448 //Long, 0x1C0
   'PeakPageFileUsage' : 1072 //Long, 0x430
   'PeakVirtualSize' : '49328128' //String, 0x2F0B000
   'PeakWorkingSetSize' : 3700 //Long, 0xE74
   'Priority' : 13 //Long, 0xD
   'PrivatePageCount' : '884736' //String, 0xD8000
   'ProcessId' : 532 //Long, 0x214
   'QuotaNonPagedPoolUsage' : 8 //Long, 0x8
   'QuotaPagedPoolUsage' : 92 //Long, 0x5C
   'QuotaPeakNonPagedPoolUsage' : 10 //Long, 0xA
   'QuotaPeakPagedPoolUsage' : 96 //Long, 0x60
   'ReadOperationCount' : '1' //String, 0x1
   'ReadTransferCount' : '6656' //String, 0x1A00
   'SessionId' : 0 //Long, 0x0
   'Status' : null
   'TerminationDate' : null
   'ThreadCount' : 1 //Long, 0x1
   'UserModeTime' : '0' //String, 0x0
   'VirtualSize' : '43855872' //String, 0x29D3000
   'WindowsVersion' : '6.3.9600' //String
   'WorkingSetSize' : '151552' //String, 0x25000
   'WriteOperationCount' : '0' //String, 0x0
   'WriteTransferCount' : '0' //String, 0x0
}

Instance \\W2012SDC\ROOT\cimv2:Win32_Process.Handle="576"

Properties={
   'Caption' : 'winlogon.exe' //String
   'CommandLine' : 'winlogon.exe' //String
   'CreationClassName' : 'Win32_Process' //String
   'CreationDate' : '20141112140918.901124-480' //String
   'CSCreationClassName' : 'Win32_ComputerSystem' //String
   'CSName' : '.' //String
   'Description' : 'winlogon.exe' //String
   'ExecutablePath' : 'C:\Windows\system32\winlogon.exe' //String
   'ExecutionState' : null
   'Handle' : '576' //String, 0x240
   'HandleCount' : 175 //Long, 0xAF
   'InstallDate' : null
   'KernelModeTime' : '781250' //String, 0xBEBC2
   'MaximumWorkingSetSize' : 1380 //Long, 0x564
   'MinimumWorkingSetSize' : 200 //Long, 0xC8
   'Name' : 'winlogon.exe' //String
   'OSCreationClassName' : 'Win32_OperatingSystem' //String
   'OSName' : 'Microsoft Windows Server 2012 R2 Datacenter Evaluation|C:\Windows|\Device\Harddisk0\Partition1' //String
   'OtherOperationCount' : '1451' //String, 0x5AB
   'OtherTransferCount' : '144834' //String, 0x235C2
   'PageFaults' : 5341 //Long, 0x14DD
   'PageFileUsage' : 1476 //Long, 0x5C4
   'ParentProcessId' : 512 //Long, 0x200
   'PeakPageFileUsage' : 2660 //Long, 0xA64
   'PeakVirtualSize' : '64933888' //String, 0x3DED000
   'PeakWorkingSetSize' : 9324 //Long, 0x246C
   'Priority' : 13 //Long, 0xD
   'PrivatePageCount' : '1511424' //String, 0x171000
   'ProcessId' : 576 //Long, 0x240
   'QuotaNonPagedPoolUsage' : 10 //Long, 0xA
   'QuotaPagedPoolUsage' : 121 //Long, 0x79
   'QuotaPeakNonPagedPoolUsage' : 12 //Long, 0xC
   'QuotaPeakPagedPoolUsage' : 127 //Long, 0x7F
   'ReadOperationCount' : '7' //String, 0x7
   'ReadTransferCount' : '144896' //String, 0x23600
   'SessionId' : 1 //Long, 0x1
   'Status' : null
   'TerminationDate' : null
   'ThreadCount' : 2 //Long, 0x2
   'UserModeTime' : '156250' //String, 0x2625A
   'VirtualSize' : '60657664' //String, 0x39D9000
   'WindowsVersion' : '6.3.9600' //String
   'WorkingSetSize' : '1400832' //String, 0x156000
   'WriteOperationCount' : '5' //String, 0x5
   'WriteTransferCount' : '800' //String, 0x320
}

Instance \\W2012SDC\ROOT\cimv2:Win32_Process.Handle="620"

Properties={
   'Caption' : 'services.exe' //String
   'CommandLine' : null
   'CreationClassName' : 'Win32_Process' //String
   'CreationDate' : '20141112140919.890457-480' //String
   'CSCreationClassName' : 'Win32_ComputerSystem' //String
   'CSName' : '.' //String
   'Description' : 'services.exe' //String
   'ExecutablePath' : null
   'ExecutionState' : null
   'Handle' : '620' //String, 0x26C
   'HandleCount' : 674 //Long, 0x2A2
   'InstallDate' : null
   'KernelModeTime' : '160156250' //String, 0x98BCA5A
   'MaximumWorkingSetSize' : null
   'MinimumWorkingSetSize' : null
   'Name' : 'services.exe' //String
   'OSCreationClassName' : 'Win32_OperatingSystem' //String
   'OSName' : 'Microsoft Windows Server 2012 R2 Datacenter Evaluation|C:\Windows|\Device\Harddisk0\Partition1' //String
   'OtherOperationCount' : '159047' //String, 0x26D47
   'OtherTransferCount' : '1362928' //String, 0x14CBF0
   'PageFaults' : 21875 //Long, 0x5573
   'PageFileUsage' : 8260 //Long, 0x2044
   'ParentProcessId' : 532 //Long, 0x214
   'PeakPageFileUsage' : 14436 //Long, 0x3864
   'PeakVirtualSize' : '624037888' //String, 0x25321000
   'PeakWorkingSetSize' : 12316 //Long, 0x301C
   'Priority' : 9 //Long, 0x9
   'PrivatePageCount' : '8458240' //String, 0x811000
   'ProcessId' : 620 //Long, 0x26C
   'QuotaNonPagedPoolUsage' : 16 //Long, 0x10
   'QuotaPagedPoolUsage' : 148 //Long, 0x94
   'QuotaPeakNonPagedPoolUsage' : 24 //Long, 0x18
   'QuotaPeakPagedPoolUsage' : 149 //Long, 0x95
   'ReadOperationCount' : '284' //String, 0x11C
   'ReadTransferCount' : '6236500' //String, 0x5F2954
   'SessionId' : 0 //Long, 0x0
   'Status' : null
   'TerminationDate' : null
   'ThreadCount' : 6 //Long, 0x6
   'UserModeTime' : '133125000' //String, 0x7EF5388
   'VirtualSize' : '45903872' //String, 0x2BC7000
   'WindowsVersion' : '6.3.9600' //String
   'WorkingSetSize' : '9879552' //String, 0x96C000
   'WriteOperationCount' : '458' //String, 0x1CA
   'WriteTransferCount' : '2276202' //String, 0x22BB6A
}

Instance \\W2012SDC\ROOT\cimv2:Win32_Process.Handle="628"

Properties={
   'Caption' : 'lsass.exe' //String
   'CommandLine' : 'C:\Windows\system32\lsass.exe' //String
   'CreationClassName' : 'Win32_Process' //String
   'CreationDate' : '20141112140920.300242-480' //String
   'CSCreationClassName' : 'Win32_ComputerSystem' //String
   'CSName' : '.' //String
   'Description' : 'lsass.exe' //String
   'ExecutablePath' : 'C:\Windows\system32\lsass.exe' //String
   'ExecutionState' : null
   'Handle' : '628' //String, 0x274
   'HandleCount' : 2241 //Long, 0x8C1
   'InstallDate' : null
   'KernelModeTime' : '5598281250' //String
   'MaximumWorkingSetSize' : 1380 //Long, 0x564
   'MinimumWorkingSetSize' : 200 //Long, 0xC8
   'Name' : 'lsass.exe' //String
   'OSCreationClassName' : 'Win32_OperatingSystem' //String
   'OSName' : 'Microsoft Windows Server 2012 R2 Datacenter Evaluation|C:\Windows|\Device\Harddisk0\Partition1' //String
   'OtherOperationCount' : '2040101' //String, 0x1F2125
   'OtherTransferCount' : '35791736' //String, 0x2222378
   'PageFaults' : 172756 //Long, 0x2A2D4
   'PageFileUsage' : 54932 //Long, 0xD694
   'ParentProcessId' : 532 //Long, 0x214
   'PeakPageFileUsage' : 84544 //Long, 0x14A40
   'PeakVirtualSize' : '1278951424' //String, 0x4C3B4000
   'PeakWorkingSetSize' : 82876 //Long, 0x143BC
   'Priority' : 9 //Long, 0x9
   'PrivatePageCount' : '56250368' //String, 0x35A5000
   'ProcessId' : 628 //Long, 0x274
   'QuotaNonPagedPoolUsage' : 271 //Long, 0x10F
   'QuotaPagedPoolUsage' : 261 //Long, 0x105
   'QuotaPeakNonPagedPoolUsage' : 331 //Long, 0x14B
   'QuotaPeakPagedPoolUsage' : 263 //Long, 0x107
   'ReadOperationCount' : '665153' //String, 0xA2641
   'ReadTransferCount' : '1327318200' //String, 0x4F1D44B8
   'SessionId' : 0 //Long, 0x0
   'Status' : null
   'TerminationDate' : null
   'ThreadCount' : 34 //Long, 0x22
   'UserModeTime' : '11493906250' //String
   'VirtualSize' : '1256992768' //String, 0x4AEC3000
   'WindowsVersion' : '6.3.9600' //String
   'WorkingSetSize' : '51580928' //String, 0x3131000
   'WriteOperationCount' : '342984' //String, 0x53BC8
   'WriteTransferCount' : '80800542' //String, 0x4D0EB1E
}

Instance \\W2012SDC\ROOT\cimv2:Win32_Process.Handle="784"

Properties={
   'Caption' : 'svchost.exe' //String
   'CommandLine' : 'C:\Windows\system32\svchost.exe -k DcomLaunch' //String
   'CreationClassName' : 'Win32_Process' //String
   'CreationDate' : '20141112140930.484421-480' //String
   'CSCreationClassName' : 'Win32_ComputerSystem' //String
   'CSName' : '.' //String
   'Description' : 'svchost.exe' //String
   'ExecutablePath' : 'C:\Windows\system32\svchost.exe' //String
   'ExecutionState' : null
   'Handle' : '784' //String, 0x310
   'HandleCount' : 384 //Long, 0x180
   'InstallDate' : null
   'KernelModeTime' : '406093750' //String, 0x18347FB6
   'MaximumWorkingSetSize' : 1380 //Long, 0x564
   'MinimumWorkingSetSize' : 200 //Long, 0xC8
   'Name' : 'svchost.exe' //String
   'OSCreationClassName' : 'Win32_OperatingSystem' //String
   'OSName' : 'Microsoft Windows Server 2012 R2 Datacenter Evaluation|C:\Windows|\Device\Harddisk0\Partition1' //String
   'OtherOperationCount' : '12855' //String, 0x3237
   'OtherTransferCount' : '391900' //String, 0x5FADC
   'PageFaults' : 17140 //Long, 0x42F4
   'PageFileUsage' : 4272 //Long, 0x10B0
   'ParentProcessId' : 620 //Long, 0x26C
   'PeakPageFileUsage' : 4908 //Long, 0x132C
   'PeakVirtualSize' : '51724288' //String, 0x3154000
   'PeakWorkingSetSize' : 10592 //Long, 0x2960
   'Priority' : 8 //Long, 0x8
   'PrivatePageCount' : '4374528' //String, 0x42C000
   'ProcessId' : 784 //Long, 0x310
   'QuotaNonPagedPoolUsage' : 15 //Long, 0xF
   'QuotaPagedPoolUsage' : 207 //Long, 0xCF
   'QuotaPeakNonPagedPoolUsage' : 22 //Long, 0x16
   'QuotaPeakPagedPoolUsage' : 208 //Long, 0xD0
   'ReadOperationCount' : '2' //String, 0x2
   'ReadTransferCount' : '4608' //String, 0x1200
   'SessionId' : 0 //Long, 0x0
   'Status' : null
   'TerminationDate' : null
   'ThreadCount' : 8 //Long, 0x8
   'UserModeTime' : '548125000' //String, 0x20ABB948
   'VirtualSize' : '47464448' //String, 0x2D44000
   'WindowsVersion' : '6.3.9600' //String
   'WorkingSetSize' : '7839744' //String, 0x77A000
   'WriteOperationCount' : '0' //String, 0x0
   'WriteTransferCount' : '0' //String, 0x0
}

Instance \\W2012SDC\ROOT\cimv2:Win32_Process.Handle="828"

Properties={
   'Caption' : 'svchost.exe' //String
   'CommandLine' : 'C:\Windows\system32\svchost.exe -k RPCSS' //String
   'CreationClassName' : 'Win32_Process' //String
   'CreationDate' : '20141112140930.768982-480' //String
   'CSCreationClassName' : 'Win32_ComputerSystem' //String
   'CSName' : '.' //String
   'Description' : 'svchost.exe' //String
   'ExecutablePath' : 'C:\Windows\system32\svchost.exe' //String
   'ExecutionState' : null
   'Handle' : '828' //String, 0x33C
   'HandleCount' : 663 //Long, 0x297
   'InstallDate' : null
   'KernelModeTime' : '191406250' //String, 0xB68A0AA
   'MaximumWorkingSetSize' : 1380 //Long, 0x564
   'MinimumWorkingSetSize' : 200 //Long, 0xC8
   'Name' : 'svchost.exe' //String
   'OSCreationClassName' : 'Win32_OperatingSystem' //String
   'OSName' : 'Microsoft Windows Server 2012 R2 Datacenter Evaluation|C:\Windows|\Device\Harddisk0\Partition1' //String
   'OtherOperationCount' : '18056' //String, 0x4688
   'OtherTransferCount' : '939396' //String, 0xE5584
   'PageFaults' : 18170 //Long, 0x46FA
   'PageFileUsage' : 5036 //Long, 0x13AC
   'ParentProcessId' : 620 //Long, 0x26C
   'PeakPageFileUsage' : 5284 //Long, 0x14A4
   'PeakVirtualSize' : '41500672' //String, 0x2794000
   'PeakWorkingSetSize' : 7992 //Long, 0x1F38
   'Priority' : 8 //Long, 0x8
   'PrivatePageCount' : '5156864' //String, 0x4EB000
   'ProcessId' : 828 //Long, 0x33C
   'QuotaNonPagedPoolUsage' : 20 //Long, 0x14
   'QuotaPagedPoolUsage' : 97 //Long, 0x61
   'QuotaPeakNonPagedPoolUsage' : 29 //Long, 0x1D
   'QuotaPeakPagedPoolUsage' : 97 //Long, 0x61
   'ReadOperationCount' : '0' //String, 0x0
   'ReadTransferCount' : '0' //String, 0x0
   'SessionId' : 0 //Long, 0x0
   'Status' : null
   'TerminationDate' : null
   'ThreadCount' : 11 //Long, 0xB
   'UserModeTime' : '401250000' //String, 0x17EA96D0
   'VirtualSize' : '34230272' //String, 0x20A5000
   'WindowsVersion' : '6.3.9600' //String
   'WorkingSetSize' : '6504448' //String, 0x634000
   'WriteOperationCount' : '0' //String, 0x0
   'WriteTransferCount' : '0' //String, 0x0
}

Instance \\W2012SDC\ROOT\cimv2:Win32_Process.Handle="924"

Properties={
   'Caption' : 'dwm.exe' //String
   'CommandLine' : '"dwm.exe"' //String
   'CreationClassName' : 'Win32_Process' //String
   'CreationDate' : '20141112140931.974058-480' //String
   'CSCreationClassName' : 'Win32_ComputerSystem' //String
   'CSName' : '.' //String
   'Description' : 'dwm.exe' //String
   'ExecutablePath' : 'C:\Windows\system32\dwm.exe' //String
   'ExecutionState' : null
   'Handle' : '924' //String, 0x39C
   'HandleCount' : 190 //Long, 0xBE
   'InstallDate' : null
   'KernelModeTime' : '12343750' //String, 0xBC59C6
   'MaximumWorkingSetSize' : 1380 //Long, 0x564
   'MinimumWorkingSetSize' : 200 //Long, 0xC8
   'Name' : 'dwm.exe' //String
   'OSCreationClassName' : 'Win32_OperatingSystem' //String
   'OSName' : 'Microsoft Windows Server 2012 R2 Datacenter Evaluation|C:\Windows|\Device\Harddisk0\Partition1' //String
   'OtherOperationCount' : '253' //String, 0xFD
   'OtherTransferCount' : '2266' //String, 0x8DA
   'PageFaults' : 121731 //Long, 0x1DB83
   'PageFileUsage' : 22448 //Long, 0x57B0
   'ParentProcessId' : 576 //Long, 0x240
   'PeakPageFileUsage' : 26828 //Long, 0x68CC
   'PeakVirtualSize' : '147132416' //String, 0x8C51000
   'PeakWorkingSetSize' : 46444 //Long, 0xB56C
   'Priority' : 13 //Long, 0xD
   'PrivatePageCount' : '22986752' //String, 0x15EC000
   'ProcessId' : 924 //Long, 0x39C
   'QuotaNonPagedPoolUsage' : 22 //Long, 0x16
   'QuotaPagedPoolUsage' : 237 //Long, 0xED
   'QuotaPeakNonPagedPoolUsage' : 29 //Long, 0x1D
   'QuotaPeakPagedPoolUsage' : 259 //Long, 0x103
   'ReadOperationCount' : '1' //String, 0x1
   'ReadTransferCount' : '60' //String, 0x3C
   'SessionId' : 1 //Long, 0x1
   'Status' : null
   'TerminationDate' : null
   'ThreadCount' : 12 //Long, 0xC
   'UserModeTime' : '23281250' //String, 0x1633E62
   'VirtualSize' : '134701056' //String, 0x8076000
   'WindowsVersion' : '6.3.9600' //String
   'WorkingSetSize' : '18825216' //String, 0x11F4000
   'WriteOperationCount' : '0' //String, 0x0
   'WriteTransferCount' : '0' //String, 0x0
}

Instance \\W2012SDC\ROOT\cimv2:Win32_Process.Handle="1004"

Properties={
   'Caption' : 'svchost.exe' //String
   'CommandLine' : 'C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted' //String
   'CreationClassName' : 'Win32_Process' //String
   'CreationDate' : '20141112140933.884835-480' //String
   'CSCreationClassName' : 'Win32_ComputerSystem' //String
   'CSName' : '.' //String
   'Description' : 'svchost.exe' //String
   'ExecutablePath' : 'C:\Windows\System32\svchost.exe' //String
   'ExecutionState' : null
   'Handle' : '1004' //String, 0x3EC
   'HandleCount' : 848 //Long, 0x350
   'InstallDate' : null
   'KernelModeTime' : '2514218750' //String
   'MaximumWorkingSetSize' : 1380 //Long, 0x564
   'MinimumWorkingSetSize' : 200 //Long, 0xC8
   'Name' : 'svchost.exe' //String
   'OSCreationClassName' : 'Win32_OperatingSystem' //String
   'OSName' : 'Microsoft Windows Server 2012 R2 Datacenter Evaluation|C:\Windows|\Device\Harddisk0\Partition1' //String
   'OtherOperationCount' : '118035' //String, 0x1CD13
   'OtherTransferCount' : '1280832' //String, 0x138B40
   'PageFaults' : 2558535 //Long, 0x270A47
   'PageFileUsage' : 20076 //Long, 0x4E6C
   'ParentProcessId' : 620 //Long, 0x26C
   'PeakPageFileUsage' : 23128 //Long, 0x5A58
   'PeakVirtualSize' : '576622592' //String, 0x225E9000
   'PeakWorkingSetSize' : 35680 //Long, 0x8B60
   'Priority' : 8 //Long, 0x8
   'PrivatePageCount' : '20557824' //String, 0x139B000
   'ProcessId' : 1004 //Long, 0x3EC
   'QuotaNonPagedPoolUsage' : 25 //Long, 0x19
   'QuotaPagedPoolUsage' : 146 //Long, 0x92
   'QuotaPeakNonPagedPoolUsage' : 112 //Long, 0x70
   'QuotaPeakPagedPoolUsage' : 1050 //Long, 0x41A
   'ReadOperationCount' : '2648418' //String, 0x286962
   'ReadTransferCount' : '4082493568' //String
   'SessionId' : 0 //Long, 0x0
   'Status' : null
   'TerminationDate' : null
   'ThreadCount' : 18 //Long, 0x12
   'UserModeTime' : '2993437500' //String
   'VirtualSize' : '101507072' //String, 0x60CE000
   'WindowsVersion' : '6.3.9600' //String
   'WorkingSetSize' : '16502784' //String, 0xFBD000
   'WriteOperationCount' : '18318' //String, 0x478E
   'WriteTransferCount' : '196767752' //String, 0xBBA7008
}

Instance \\W2012SDC\ROOT\cimv2:Win32_Process.Handle="80"

Properties={
   'Caption' : 'svchost.exe' //String
   'CommandLine' : 'C:\Windows\system32\svchost.exe -k netsvcs' //String
   'CreationClassName' : 'Win32_Process' //String
   'CreationDate' : '20141112140934.150460-480' //String
   'CSCreationClassName' : 'Win32_ComputerSystem' //String
   'CSName' : '.' //String
   'Description' : 'svchost.exe' //String
   'ExecutablePath' : 'C:\Windows\system32\svchost.exe' //String
   'ExecutionState' : null
   'Handle' : '80' //String, 0x50
   'HandleCount' : 2433 //Long, 0x981
   'InstallDate' : null
   'KernelModeTime' : '26333281250' //String
   'MaximumWorkingSetSize' : 1380 //Long, 0x564
   'MinimumWorkingSetSize' : 200 //Long, 0xC8
   'Name' : 'svchost.exe' //String
   'OSCreationClassName' : 'Win32_OperatingSystem' //String
   'OSName' : 'Microsoft Windows Server 2012 R2 Datacenter Evaluation|C:\Windows|\Device\Harddisk0\Partition1' //String
   'OtherOperationCount' : '18146722' //String, 0x114E5A2
   'OtherTransferCount' : '84832217' //String, 0x50E6FD9
   'PageFaults' : 6023817 //Long, 0x5BEA89
   'PageFileUsage' : 76600 //Long, 0x12B38
   'ParentProcessId' : 620 //Long, 0x26C
   'PeakPageFileUsage' : 177816 //Long, 0x2B698
   'PeakVirtualSize' : '538509312' //String, 0x20190000
   'PeakWorkingSetSize' : 170788 //Long, 0x29B24
   'Priority' : 8 //Long, 0x8
   'PrivatePageCount' : '78438400' //String, 0x4ACE000
   'ProcessId' : 80 //Long, 0x50
   'QuotaNonPagedPoolUsage' : 130 //Long, 0x82
   'QuotaPagedPoolUsage' : 455 //Long, 0x1C7
   'QuotaPeakNonPagedPoolUsage' : 149 //Long, 0x95
   'QuotaPeakPagedPoolUsage' : 476 //Long, 0x1DC
   'ReadOperationCount' : '6690356' //String, 0x661634
   'ReadTransferCount' : '1660213300' //String, 0x62F4D834
   'SessionId' : 0 //Long, 0x0
   'Status' : null
   'TerminationDate' : null
   'ThreadCount' : 89 //Long, 0x59
   'UserModeTime' : '83190937500' //String
   'VirtualSize' : '362160128' //String, 0x15962000
   'WindowsVersion' : '6.3.9600' //String
   'WorkingSetSize' : '56352768' //String, 0x35BE000
   'WriteOperationCount' : '4388146' //String, 0x42F532
   'WriteTransferCount' : '695504628' //String, 0x29748EF4
}

Instance \\W2012SDC\ROOT\cimv2:Win32_Process.Handle="376"

Properties={
   'Caption' : 'svchost.exe' //String
   'CommandLine' : 'C:\Windows\system32\svchost.exe -k LocalService' //String
   'CreationClassName' : 'Win32_Process' //String
   'CreationDate' : '20141112140934.337961-480' //String
   'CSCreationClassName' : 'Win32_ComputerSystem' //String
   'CSName' : '.' //String
   'Description' : 'svchost.exe' //String
   'ExecutablePath' : 'C:\Windows\system32\svchost.exe' //String
   'ExecutionState' : null
   'Handle' : '376' //String, 0x178
   'HandleCount' : 907 //Long, 0x38B
   'InstallDate' : null
   'KernelModeTime' : '19687500' //String, 0x12C684C
   'MaximumWorkingSetSize' : 1380 //Long, 0x564
   'MinimumWorkingSetSize' : 200 //Long, 0xC8
   'Name' : 'svchost.exe' //String
   'OSCreationClassName' : 'Win32_OperatingSystem' //String
   'OSName' : 'Microsoft Windows Server 2012 R2 Datacenter Evaluation|C:\Windows|\Device\Harddisk0\Partition1' //String
   'OtherOperationCount' : '16056' //String, 0x3EB8
   'OtherTransferCount' : '790696' //String, 0xC10A8
   'PageFaults' : 10092 //Long, 0x276C
   'PageFileUsage' : 9380 //Long, 0x24A4
   'ParentProcessId' : 620 //Long, 0x26C
   'PeakPageFileUsage' : 10692 //Long, 0x29C4
   'PeakVirtualSize' : '119320576' //String, 0x71CB000
   'PeakWorkingSetSize' : 18780 //Long, 0x495C
   'Priority' : 8 //Long, 0x8
   'PrivatePageCount' : '9605120' //String, 0x929000
   'ProcessId' : 376 //Long, 0x178
   'QuotaNonPagedPoolUsage' : 33 //Long, 0x21
   'QuotaPagedPoolUsage' : 241 //Long, 0xF1
   'QuotaPeakNonPagedPoolUsage' : 45 //Long, 0x2D
   'QuotaPeakPagedPoolUsage' : 247 //Long, 0xF7
   'ReadOperationCount' : '34' //String, 0x22
   'ReadTransferCount' : '790' //String, 0x316
   'SessionId' : 0 //Long, 0x0
   'Status' : null
   'TerminationDate' : null
   'ThreadCount' : 18 //Long, 0x12
   'UserModeTime' : '58437500' //String, 0x37BAF7C
   'VirtualSize' : '104935424' //String, 0x6413000
   'WindowsVersion' : '6.3.9600' //String
   'WorkingSetSize' : '10969088' //String, 0xA76000
   'WriteOperationCount' : '1' //String, 0x1
   'WriteTransferCount' : '160' //String, 0xA0
}

Instance \\W2012SDC\ROOT\cimv2:Win32_Process.Handle="448"

Properties={
   'Caption' : 'svchost.exe' //String
   'CommandLine' : 'C:\Windows\System32\svchost.exe -k BlockStorageServices' //String
   'CreationClassName' : 'Win32_Process' //String
   'CreationDate' : '20141112140934.935013-480' //String
   'CSCreationClassName' : 'Win32_ComputerSystem' //String
   'CSName' : '.' //String
   'Description' : 'svchost.exe' //String
   'ExecutablePath' : 'C:\Windows\System32\svchost.exe' //String
   'ExecutionState' : null
   'Handle' : '448' //String, 0x1C0
   'HandleCount' : 248 //Long, 0xF8
   'InstallDate' : null
   'KernelModeTime' : '1250000' //String, 0x1312D0
   'MaximumWorkingSetSize' : 1380 //Long, 0x564
   'MinimumWorkingSetSize' : 200 //Long, 0xC8
   'Name' : 'svchost.exe' //String
   'OSCreationClassName' : 'Win32_OperatingSystem' //String
   'OSName' : 'Microsoft Windows Server 2012 R2 Datacenter Evaluation|C:\Windows|\Device\Harddisk0\Partition1' //String
   'OtherOperationCount' : '617' //String, 0x269
   'OtherTransferCount' : '9384' //String, 0x24A8
   'PageFaults' : 6577 //Long, 0x19B1
   'PageFileUsage' : 2964 //Long, 0xB94
   'ParentProcessId' : 620 //Long, 0x26C
   'PeakPageFileUsage' : 3488 //Long, 0xDA0
   'PeakVirtualSize' : '78598144' //String, 0x4AF5000
   'PeakWorkingSetSize' : 9288 //Long, 0x2448
   'Priority' : 8 //Long, 0x8
   'PrivatePageCount' : '3035136' //String, 0x2E5000
   'ProcessId' : 448 //Long, 0x1C0
   'QuotaNonPagedPoolUsage' : 17 //Long, 0x11
   'QuotaPagedPoolUsage' : 143 //Long, 0x8F
   'QuotaPeakNonPagedPoolUsage' : 19 //Long, 0x13
   'QuotaPeakPagedPoolUsage' : 143 //Long, 0x8F
   'ReadOperationCount' : '8' //String, 0x8
   'ReadTransferCount' : '1517' //String, 0x5ED
   'SessionId' : 0 //Long, 0x0
   'Status' : null
   'TerminationDate' : null
   'ThreadCount' : 10 //Long, 0xA
   'UserModeTime' : '4062500' //String, 0x3DFD24
   'VirtualSize' : '73273344' //String, 0x45E1000
   'WindowsVersion' : '6.3.9600' //String
   'WorkingSetSize' : '3145728' //String, 0x300000
   'WriteOperationCount' : '8' //String, 0x8
   'WriteTransferCount' : '3599' //String, 0xE0F
}

Instance \\W2012SDC\ROOT\cimv2:Win32_Process.Handle="800"

Properties={
   'Caption' : 'svchost.exe' //String
   'CommandLine' : 'C:\Windows\system32\svchost.exe -k WlansvcGroup' //String
   'CreationClassName' : 'Win32_Process' //String
   'CreationDate' : '20141112140936.586248-480' //String
   'CSCreationClassName' : 'Win32_ComputerSystem' //String
   'CSName' : '.' //String
   'Description' : 'svchost.exe' //String
   'ExecutablePath' : 'C:\Windows\system32\svchost.exe' //String
   'ExecutionState' : null
   'Handle' : '800' //String, 0x320
   'HandleCount' : 245 //Long, 0xF5
   'InstallDate' : null
   'KernelModeTime' : '625000' //String, 0x98968
   'MaximumWorkingSetSize' : 1380 //Long, 0x564
   'MinimumWorkingSetSize' : 200 //Long, 0xC8
   'Name' : 'svchost.exe' //String
   'OSCreationClassName' : 'Win32_OperatingSystem' //String
   'OSName' : 'Microsoft Windows Server 2012 R2 Datacenter Evaluation|C:\Windows|\Device\Harddisk0\Partition1' //String
   'OtherOperationCount' : '332' //String, 0x14C
   'OtherTransferCount' : '10670' //String, 0x29AE
   'PageFaults' : 3027 //Long, 0xBD3
   'PageFileUsage' : 3580 //Long, 0xDFC
   'ParentProcessId' : 620 //Long, 0x26C
   'PeakPageFileUsage' : 3652 //Long, 0xE44
   'PeakVirtualSize' : '49754112' //String, 0x2F73000
   'PeakWorkingSetSize' : 8912 //Long, 0x22D0
   'Priority' : 8 //Long, 0x8
   'PrivatePageCount' : '3665920' //String, 0x37F000
   'ProcessId' : 800 //Long, 0x320
   'QuotaNonPagedPoolUsage' : 13 //Long, 0xD
   'QuotaPagedPoolUsage' : 87 //Long, 0x57
   'QuotaPeakNonPagedPoolUsage' : 15 //Long, 0xF
   'QuotaPeakPagedPoolUsage' : 88 //Long, 0x58
   'ReadOperationCount' : '58' //String, 0x3A
   'ReadTransferCount' : '142892' //String, 0x22E2C
   'SessionId' : 0 //Long, 0x0
   'Status' : null
   'TerminationDate' : null
   'ThreadCount' : 5 //Long, 0x5
   'UserModeTime' : '156250' //String, 0x2625A
   'VirtualSize' : '48685056' //String, 0x2E6E000
   'WindowsVersion' : '6.3.9600' //String
   'WorkingSetSize' : '1966080' //String, 0x1E0000
   'WriteOperationCount' : '1' //String, 0x1
   'WriteTransferCount' : '160' //String, 0xA0
}

Instance \\W2012SDC\ROOT\cimv2:Win32_Process.Handle="880"

Properties={
   'Caption' : 'svchost.exe' //String
   'CommandLine' : 'C:\Windows\system32\svchost.exe -k NetworkService' //String
   'CreationClassName' : 'Win32_Process' //String
   'CreationDate' : '20141112140936.605572-480' //String
   'CSCreationClassName' : 'Win32_ComputerSystem' //String
   'CSName' : '.' //String
   'Description' : 'svchost.exe' //String
   'ExecutablePath' : 'C:\Windows\system32\svchost.exe' //String
   'ExecutionState' : null
   'Handle' : '880' //String, 0x370
   'HandleCount' : 761 //Long, 0x2F9
   'InstallDate' : null
   'KernelModeTime' : '18906250' //String, 0x1207C8A
   'MaximumWorkingSetSize' : 1380 //Long, 0x564
   'MinimumWorkingSetSize' : 200 //Long, 0xC8
   'Name' : 'svchost.exe' //String
   'OSCreationClassName' : 'Win32_OperatingSystem' //String
   'OSName' : 'Microsoft Windows Server 2012 R2 Datacenter Evaluation|C:\Windows|\Device\Harddisk0\Partition1' //String
   'OtherOperationCount' : '222795' //String, 0x3664B
   'OtherTransferCount' : '16257174' //String, 0xF81096
   'PageFaults' : 26274 //Long, 0x66A2
   'PageFileUsage' : 8960 //Long, 0x2300
   'ParentProcessId' : 620 //Long, 0x26C
   'PeakPageFileUsage' : 10004 //Long, 0x2714
   'PeakVirtualSize' : '1207242752' //String, 0x47F51000
   'PeakWorkingSetSize' : 18788 //Long, 0x4964
   'Priority' : 8 //Long, 0x8
   'PrivatePageCount' : '9175040' //String, 0x8C0000
   'ProcessId' : 880 //Long, 0x370
   'QuotaNonPagedPoolUsage' : 41 //Long, 0x29
   'QuotaPagedPoolUsage' : 201 //Long, 0xC9
   'QuotaPeakNonPagedPoolUsage' : 50 //Long, 0x32
   'QuotaPeakPagedPoolUsage' : 208 //Long, 0xD0
   'ReadOperationCount' : '5037' //String, 0x13AD
   'ReadTransferCount' : '5042835' //String, 0x4CF293
   'SessionId' : 0 //Long, 0x0
   'Status' : null
   'TerminationDate' : null
   'ThreadCount' : 23 //Long, 0x17
   'UserModeTime' : '10625000' //String, 0xA21FE8
   'VirtualSize' : '1202036736' //String, 0x47A5A000
   'WindowsVersion' : '6.3.9600' //String
   'WorkingSetSize' : '11431936' //String, 0xAE7000
   'WriteOperationCount' : '3314' //String, 0xCF2
   'WriteTransferCount' : '398443' //String, 0x6146B
}

Instance \\W2012SDC\ROOT\cimv2:Win32_Process.Handle="1180"

Properties={
   'Caption' : 'svchost.exe' //String
   'CommandLine' : 'C:\Windows\system32\svchost.exe -k LocalServiceNoNetwork' //String
   'CreationClassName' : 'Win32_Process' //String
   'CreationDate' : '20141112140939.365450-480' //String
   'CSCreationClassName' : 'Win32_ComputerSystem' //String
   'CSName' : '.' //String
   'Description' : 'svchost.exe' //String
   'ExecutablePath' : 'C:\Windows\system32\svchost.exe' //String
   'ExecutionState' : null
   'Handle' : '1180' //String, 0x49C
   'HandleCount' : 406 //Long, 0x196
   'InstallDate' : null
   'KernelModeTime' : '13281250' //String, 0xCAA7E2
   'MaximumWorkingSetSize' : 1380 //Long, 0x564
   'MinimumWorkingSetSize' : 200 //Long, 0xC8
   'Name' : 'svchost.exe' //String
   'OSCreationClassName' : 'Win32_OperatingSystem' //String
   'OSName' : 'Microsoft Windows Server 2012 R2 Datacenter Evaluation|C:\Windows|\Device\Harddisk0\Partition1' //String
   'OtherOperationCount' : '17071' //String, 0x42AF
   'OtherTransferCount' : '3668510' //String, 0x37FA1E
   'PageFaults' : 189119 //Long, 0x2E2BF
   'PageFileUsage' : 15008 //Long, 0x3AA0
   'ParentProcessId' : 620 //Long, 0x26C
   'PeakPageFileUsage' : 17440 //Long, 0x4420
   'PeakVirtualSize' : '89284608' //String, 0x5526000
   'PeakWorkingSetSize' : 20716 //Long, 0x50EC
   'Priority' : 8 //Long, 0x8
   'PrivatePageCount' : '15368192' //String, 0xEA8000
   'ProcessId' : 1180 //Long, 0x49C
   'QuotaNonPagedPoolUsage' : 35 //Long, 0x23
   'QuotaPagedPoolUsage' : 122 //Long, 0x7A
   'QuotaPeakNonPagedPoolUsage' : 39 //Long, 0x27
   'QuotaPeakPagedPoolUsage' : 134 //Long, 0x86
   'ReadOperationCount' : '0' //String, 0x0
   'ReadTransferCount' : '0' //String, 0x0
   'SessionId' : 0 //Long, 0x0
   'Status' : null
   'TerminationDate' : null
   'ThreadCount' : 16 //Long, 0x10
   'UserModeTime' : '20156250' //String, 0x1338F5A
   'VirtualSize' : '85684224' //String, 0x51B7000
   'WindowsVersion' : '6.3.9600' //String
   'WorkingSetSize' : '13398016' //String, 0xCC7000
   'WriteOperationCount' : '1' //String, 0x1
   'WriteTransferCount' : '32768' //String, 0x8000
}

Instance \\W2012SDC\ROOT\cimv2:Win32_Process.Handle="1500"

Properties={
   'Caption' : 'spoolsv.exe' //String
   'CommandLine' : 'C:\Windows\System32\spoolsv.exe' //String
   'CreationClassName' : 'Win32_Process' //String
   'CreationDate' : '20141112141006.496560-480' //String
   'CSCreationClassName' : 'Win32_ComputerSystem' //String
   'CSName' : '.' //String
   'Description' : 'spoolsv.exe' //String
   'ExecutablePath' : 'C:\Windows\System32\spoolsv.exe' //String
   'ExecutionState' : null
   'Handle' : '1500' //String, 0x5DC
   'HandleCount' : 421 //Long, 0x1A5
   'InstallDate' : null
   'KernelModeTime' : '6875000' //String, 0x68E778
   'MaximumWorkingSetSize' : 1380 //Long, 0x564
   'MinimumWorkingSetSize' : 200 //Long, 0xC8
   'Name' : 'spoolsv.exe' //String
   'OSCreationClassName' : 'Win32_OperatingSystem' //String
   'OSName' : 'Microsoft Windows Server 2012 R2 Datacenter Evaluation|C:\Windows|\Device\Harddisk0\Partition1' //String
   'OtherOperationCount' : '1399' //String, 0x577
   'OtherTransferCount' : '39482' //String, 0x9A3A
   'PageFaults' : 24264 //Long, 0x5EC8
   'PageFileUsage' : 4348 //Long, 0x10FC
   'ParentProcessId' : 620 //Long, 0x26C
   'PeakPageFileUsage' : 4544 //Long, 0x11C0
   'PeakVirtualSize' : '88711168' //String, 0x549A000
   'PeakWorkingSetSize' : 9544 //Long, 0x2548
   'Priority' : 8 //Long, 0x8
   'PrivatePageCount' : '4452352' //String, 0x43F000
   'ProcessId' : 1500 //Long, 0x5DC
   'QuotaNonPagedPoolUsage' : 26 //Long, 0x1A
   'QuotaPagedPoolUsage' : 174 //Long, 0xAE
   'QuotaPeakNonPagedPoolUsage' : 28 //Long, 0x1C
   'QuotaPeakPagedPoolUsage' : 175 //Long, 0xAF
   'ReadOperationCount' : '54' //String, 0x36
   'ReadTransferCount' : '4042' //String, 0xFCA
   'SessionId' : 0 //Long, 0x0
   'Status' : null
   'TerminationDate' : null
   'ThreadCount' : 13 //Long, 0xD
   'UserModeTime' : '7500000' //String, 0x7270E0
   'VirtualSize' : '87605248' //String, 0x538C000
   'WindowsVersion' : '6.3.9600' //String
   'WorkingSetSize' : '4763648' //String, 0x48B000
   'WriteOperationCount' : '13' //String, 0xD
   'WriteTransferCount' : '4051' //String, 0xFD3
}

Instance \\W2012SDC\ROOT\cimv2:Win32_Process.Handle="1612"

Properties={
   'Caption' : 'Microsoft.ActiveDirectory.WebServices.exe' //String
   'CommandLine' : 'C:\Windows\ADWS\Microsoft.ActiveDirectory.WebServices.exe' //String
   'CreationClassName' : 'Win32_Process' //String
   'CreationDate' : '20141112141012.973985-480' //String
   'CSCreationClassName' : 'Win32_ComputerSystem' //String
   'CSName' : '.' //String
   'Description' : 'Microsoft.ActiveDirectory.WebServices.exe' //String
   'ExecutablePath' : 'C:\Windows\ADWS\Microsoft.ActiveDirectory.WebServices.exe' //String
   'ExecutionState' : null
   'Handle' : '1612' //String, 0x64C
   'HandleCount' : 326 //Long, 0x146
   'InstallDate' : null
   'KernelModeTime' : '2031250' //String, 0x1EFE92
   'MaximumWorkingSetSize' : 1380 //Long, 0x564
   'MinimumWorkingSetSize' : 200 //Long, 0xC8
   'Name' : 'Microsoft.ActiveDirectory.WebServices.exe' //String
   'OSCreationClassName' : 'Win32_OperatingSystem' //String
   'OSName' : 'Microsoft Windows Server 2012 R2 Datacenter Evaluation|C:\Windows|\Device\Harddisk0\Partition1' //String
   'OtherOperationCount' : '92604' //String, 0x169BC
   'OtherTransferCount' : '2567070' //String, 0x272B9E
   'PageFaults' : 74166 //Long, 0x121B6
   'PageFileUsage' : 31356 //Long, 0x7A7C
   'ParentProcessId' : 620 //Long, 0x26C
   'PeakPageFileUsage' : 32344 //Long, 0x7E58
   'PeakVirtualSize' : '609386496' //String, 0x24528000
   'PeakWorkingSetSize' : 40928 //Long, 0x9FE0
   'Priority' : 8 //Long, 0x8
   'PrivatePageCount' : '32108544' //String, 0x1E9F000
   'ProcessId' : 1612 //Long, 0x64C
   'QuotaNonPagedPoolUsage' : 38 //Long, 0x26
   'QuotaPagedPoolUsage' : 359 //Long, 0x167
   'QuotaPeakNonPagedPoolUsage' : 43 //Long, 0x2B
   'QuotaPeakPagedPoolUsage' : 360 //Long, 0x168
   'ReadOperationCount' : '127' //String, 0x7F
   'ReadTransferCount' : '426064' //String, 0x68050
   'SessionId' : 0 //Long, 0x0
   'Status' : null
   'TerminationDate' : null
   'ThreadCount' : 10 //Long, 0xA
   'UserModeTime' : '5468750' //String, 0x53724E
   'VirtualSize' : '603308032' //String, 0x23F5C000
   'WindowsVersion' : '6.3.9600' //String
   'WorkingSetSize' : '10801152' //String, 0xA4D000
   'WriteOperationCount' : '0' //String, 0x0
   'WriteTransferCount' : '0' //String, 0x0
}

Instance \\W2012SDC\ROOT\cimv2:Win32_Process.Handle="1648"

Properties={
   'Caption' : 'svchost.exe' //String
   'CommandLine' : 'C:\Windows\system32\svchost.exe -k apphost' //String
   'CreationClassName' : 'Win32_Process' //String
   'CreationDate' : '20141112141014.967743-480' //String
   'CSCreationClassName' : 'Win32_ComputerSystem' //String
   'CSName' : '.' //String
   'Description' : 'svchost.exe' //String
   'ExecutablePath' : 'C:\Windows\system32\svchost.exe' //String
   'ExecutionState' : null
   'Handle' : '1648' //String, 0x670
   'HandleCount' : 152 //Long, 0x98
   'InstallDate' : null
   'KernelModeTime' : '625000' //String, 0x98968
   'MaximumWorkingSetSize' : 1380 //Long, 0x564
   'MinimumWorkingSetSize' : 200 //Long, 0xC8
   'Name' : 'svchost.exe' //String
   'OSCreationClassName' : 'Win32_OperatingSystem' //String
   'OSName' : 'Microsoft Windows Server 2012 R2 Datacenter Evaluation|C:\Windows|\Device\Harddisk0\Partition1' //String
   'OtherOperationCount' : '505' //String, 0x1F9
   'OtherTransferCount' : '9886' //String, 0x269E
   'PageFaults' : 6982 //Long, 0x1B46
   'PageFileUsage' : 7428 //Long, 0x1D04
   'ParentProcessId' : 620 //Long, 0x26C
   'PeakPageFileUsage' : 7604 //Long, 0x1DB4
   'PeakVirtualSize' : '74858496' //String, 0x4764000
   'PeakWorkingSetSize' : 11676 //Long, 0x2D9C
   'Priority' : 8 //Long, 0x8
   'PrivatePageCount' : '7606272' //String, 0x741000
   'ProcessId' : 1648 //Long, 0x670
   'QuotaNonPagedPoolUsage' : 13 //Long, 0xD
   'QuotaPagedPoolUsage' : 117 //Long, 0x75
   'QuotaPeakNonPagedPoolUsage' : 14 //Long, 0xE
   'QuotaPeakPagedPoolUsage' : 120 //Long, 0x78
   'ReadOperationCount' : '243' //String, 0xF3
   'ReadTransferCount' : '933895' //String, 0xE4007
   'SessionId' : 0 //Long, 0x0
   'Status' : null
   'TerminationDate' : null
   'ThreadCount' : 12 //Long, 0xC
   'UserModeTime' : '312500' //String, 0x4C4B4
   'VirtualSize' : '73728000' //String, 0x4650000
   'WindowsVersion' : '6.3.9600' //String
   'WorkingSetSize' : '2351104' //String, 0x23E000
   'WriteOperationCount' : '0' //String, 0x0
   'WriteTransferCount' : '0' //String, 0x0
}

Instance \\W2012SDC\ROOT\cimv2:Win32_Process.Handle="1704"

Properties={
   'Caption' : 'certsrv.exe' //String
   'CommandLine' : 'C:\Windows\system32\certsrv.exe' //String
   'CreationClassName' : 'Win32_Process' //String
   'CreationDate' : '20141112141018.131395-480' //String
   'CSCreationClassName' : 'Win32_ComputerSystem' //String
   'CSName' : '.' //String
   'Description' : 'certsrv.exe' //String
   'ExecutablePath' : 'C:\Windows\system32\certsrv.exe' //String
   'ExecutionState' : null
   'Handle' : '1704' //String, 0x6A8
   'HandleCount' : 363 //Long, 0x16B
   'InstallDate' : null
   'KernelModeTime' : '1562500' //String, 0x17D784
   'MaximumWorkingSetSize' : 1380 //Long, 0x564
   'MinimumWorkingSetSize' : 200 //Long, 0xC8
   'Name' : 'certsrv.exe' //String
   'OSCreationClassName' : 'Win32_OperatingSystem' //String
   'OSName' : 'Microsoft Windows Server 2012 R2 Datacenter Evaluation|C:\Windows|\Device\Harddisk0\Partition1' //String
   'OtherOperationCount' : '2238' //String, 0x8BE
   'OtherTransferCount' : '51248' //String, 0xC830
   'PageFaults' : 7902 //Long, 0x1EDE
   'PageFileUsage' : 12308 //Long, 0x3014
   'ParentProcessId' : 620 //Long, 0x26C
   'PeakPageFileUsage' : 12660 //Long, 0x3174
   'PeakVirtualSize' : '1214898176' //String, 0x4869E000
   'PeakWorkingSetSize' : 16048 //Long, 0x3EB0
   'Priority' : 8 //Long, 0x8
   'PrivatePageCount' : '12603392' //String, 0xC05000
   'ProcessId' : 1704 //Long, 0x6A8
   'QuotaNonPagedPoolUsage' : 29 //Long, 0x1D
   'QuotaPagedPoolUsage' : 180 //Long, 0xB4
   'QuotaPeakNonPagedPoolUsage' : 33 //Long, 0x21
   'QuotaPeakPagedPoolUsage' : 181 //Long, 0xB5
   'ReadOperationCount' : '84' //String, 0x54
   'ReadTransferCount' : '2523516' //String, 0x26817C
   'SessionId' : 0 //Long, 0x0
   'Status' : null
   'TerminationDate' : null
   'ThreadCount' : 8 //Long, 0x8
   'UserModeTime' : '2187500' //String, 0x2160EC
   'VirtualSize' : '1206435840' //String, 0x47E8C000
   'WindowsVersion' : '6.3.9600' //String
   'WorkingSetSize' : '6991872' //String, 0x6AB000
   'WriteOperationCount' : '83' //String, 0x53
   'WriteTransferCount' : '1137083' //String, 0x1159BB
}

Instance \\W2012SDC\ROOT\cimv2:Win32_Process.Handle="1752"

Properties={
   'Caption' : 'svchost.exe' //String
   'CommandLine' : 'C:\Windows\system32\svchost -k ddpvssvc' //String
   'CreationClassName' : 'Win32_Process' //String
   'CreationDate' : '20141112141019.990774-480' //String
   'CSCreationClassName' : 'Win32_ComputerSystem' //String
   'CSName' : '.' //String
   'Description' : 'svchost.exe' //String
   'ExecutablePath' : 'C:\Windows\system32\svchost.exe' //String
   'ExecutionState' : null
   'Handle' : '1752' //String, 0x6D8
   'HandleCount' : 100 //Long, 0x64
   'InstallDate' : null
   'KernelModeTime' : '156250' //String, 0x2625A
   'MaximumWorkingSetSize' : 1380 //Long, 0x564
   'MinimumWorkingSetSize' : 200 //Long, 0xC8
   'Name' : 'svchost.exe' //String
   'OSCreationClassName' : 'Win32_OperatingSystem' //String
   'OSName' : 'Microsoft Windows Server 2012 R2 Datacenter Evaluation|C:\Windows|\Device\Harddisk0\Partition1' //String
   'OtherOperationCount' : '106' //String, 0x6A
   'OtherTransferCount' : '206' //String, 0xCE
   'PageFaults' : 1611 //Long, 0x64B
   'PageFileUsage' : 1188 //Long, 0x4A4
   'ParentProcessId' : 620 //Long, 0x26C
   'PeakPageFileUsage' : 1344 //Long, 0x540
   'PeakVirtualSize' : '39354368' //String, 0x2588000
   'PeakWorkingSetSize' : 5180 //Long, 0x143C
   'Priority' : 8 //Long, 0x8
   'PrivatePageCount' : '1216512' //String, 0x129000
   'ProcessId' : 1752 //Long, 0x6D8
   'QuotaNonPagedPoolUsage' : 9 //Long, 0x9
   'QuotaPagedPoolUsage' : 75 //Long, 0x4B
   'QuotaPeakNonPagedPoolUsage' : 10 //Long, 0xA
   'QuotaPeakPagedPoolUsage' : 75 //Long, 0x4B
   'ReadOperationCount' : '0' //String, 0x0
   'ReadTransferCount' : '0' //String, 0x0
   'SessionId' : 0 //Long, 0x0
   'Status' : null
   'TerminationDate' : null
   'ThreadCount' : 2 //Long, 0x2
   'UserModeTime' : '312500' //String, 0x4C4B4
   'VirtualSize' : '37756928' //String, 0x2402000
   'WindowsVersion' : '6.3.9600' //String
   'WorkingSetSize' : '1167360' //String, 0x11D000
   'WriteOperationCount' : '0' //String, 0x0
   'WriteTransferCount' : '0' //String, 0x0
}

Instance \\W2012SDC\ROOT\cimv2:Win32_Process.Handle="1788"

Properties={
   'Caption' : 'dfsrs.exe' //String
   'CommandLine' : 'C:\Windows\system32\DFSRs.exe' //String
   'CreationClassName' : 'Win32_Process' //String
   'CreationDate' : '20141112141020.178273-480' //String
   'CSCreationClassName' : 'Win32_ComputerSystem' //String
   'CSName' : '.' //String
   'Description' : 'dfsrs.exe' //String
   'ExecutablePath' : 'C:\Windows\system32\DFSRs.exe' //String
   'ExecutionState' : null
   'Handle' : '1788' //String, 0x6FC
   'HandleCount' : 337 //Long, 0x151
   'InstallDate' : null
   'KernelModeTime' : '95312500' //String, 0x5AE5A74
   'MaximumWorkingSetSize' : 1380 //Long, 0x564
   'MinimumWorkingSetSize' : 200 //Long, 0xC8
   'Name' : 'dfsrs.exe' //String
   'OSCreationClassName' : 'Win32_OperatingSystem' //String
   'OSName' : 'Microsoft Windows Server 2012 R2 Datacenter Evaluation|C:\Windows|\Device\Harddisk0\Partition1' //String
   'OtherOperationCount' : '497916' //String, 0x798FC
   'OtherTransferCount' : '12700790' //String, 0xC1CC76
   'PageFaults' : 34715 //Long, 0x879B
   'PageFileUsage' : 16096 //Long, 0x3EE0
   'ParentProcessId' : 620 //Long, 0x26C
   'PeakPageFileUsage' : 18104 //Long, 0x46B8
   'PeakVirtualSize' : '657481728' //String, 0x27306000
   'PeakWorkingSetSize' : 20612 //Long, 0x5084
   'Priority' : 8 //Long, 0x8
   'PrivatePageCount' : '16482304' //String, 0xFB8000
   'ProcessId' : 1788 //Long, 0x6FC
   'QuotaNonPagedPoolUsage' : 32 //Long, 0x20
   'QuotaPagedPoolUsage' : 135 //Long, 0x87
   'QuotaPeakNonPagedPoolUsage' : 36 //Long, 0x24
   'QuotaPeakPagedPoolUsage' : 136 //Long, 0x88
   'ReadOperationCount' : '10151' //String, 0x27A7
   'ReadTransferCount' : '38521101' //String, 0x24BC90D
   'SessionId' : 0 //Long, 0x0
   'Status' : null
   'TerminationDate' : null
   'ThreadCount' : 17 //Long, 0x11
   'UserModeTime' : '74218750' //String, 0x46C7CFE
   'VirtualSize' : '656932864' //String, 0x27280000
   'WindowsVersion' : '6.3.9600' //String
   'WorkingSetSize' : '12181504' //String, 0xB9E000
   'WriteOperationCount' : '29750' //String, 0x7436
   'WriteTransferCount' : '16285027' //String, 0xF87D63
}

Instance \\W2012SDC\ROOT\cimv2:Win32_Process.Handle="1804"

Properties={
   'Caption' : 'svchost.exe' //String
   'CommandLine' : 'C:\Windows\system32\svchost.exe -k DHCPServer' //String
   'CreationClassName' : 'Win32_Process' //String
   'CreationDate' : '20141112141020.490773-480' //String
   'CSCreationClassName' : 'Win32_ComputerSystem' //String
   'CSName' : '.' //String
   'Description' : 'svchost.exe' //String
   'ExecutablePath' : 'C:\Windows\system32\svchost.exe' //String
   'ExecutionState' : null
   'Handle' : '1804' //String, 0x70C
   'HandleCount' : 284 //Long, 0x11C
   'InstallDate' : null
   'KernelModeTime' : '62812500' //String, 0x3BE7154
   'MaximumWorkingSetSize' : 1380 //Long, 0x564
   'MinimumWorkingSetSize' : 200 //Long, 0xC8
   'Name' : 'svchost.exe' //String
   'OSCreationClassName' : 'Win32_OperatingSystem' //String
   'OSName' : 'Microsoft Windows Server 2012 R2 Datacenter Evaluation|C:\Windows|\Device\Harddisk0\Partition1' //String
   'OtherOperationCount' : '88555' //String, 0x159EB
   'OtherTransferCount' : '1737418' //String, 0x1A82CA
   'PageFaults' : 396835 //Long, 0x60E23
   'PageFileUsage' : 128888 //Long, 0x1F778
   'ParentProcessId' : 620 //Long, 0x26C
   'PeakPageFileUsage' : 129948 //Long, 0x1FB9C
   'PeakVirtualSize' : '1314181120' //String, 0x4E54D000
   'PeakWorkingSetSize' : 29028 //Long, 0x7164
   'Priority' : 8 //Long, 0x8
   'PrivatePageCount' : '131981312' //String, 0x7DDE000
   'ProcessId' : 1804 //Long, 0x70C
   'QuotaNonPagedPoolUsage' : 31 //Long, 0x1F
   'QuotaPagedPoolUsage' : 148 //Long, 0x94
   'QuotaPeakNonPagedPoolUsage' : 35 //Long, 0x23
   'QuotaPeakPagedPoolUsage' : 148 //Long, 0x94
   'ReadOperationCount' : '6153' //String, 0x1809
   'ReadTransferCount' : '1559965376' //String, 0x5CFB2EC0
   'SessionId' : 0 //Long, 0x0
   'Status' : null
   'TerminationDate' : null
   'ThreadCount' : 21 //Long, 0x15
   'UserModeTime' : '8593750' //String, 0x832156
   'VirtualSize' : '1313046528' //String, 0x4E438000
   'WindowsVersion' : '6.3.9600' //String
   'WorkingSetSize' : '6115328' //String, 0x5D5000
   'WriteOperationCount' : '2242' //String, 0x8C2
   'WriteTransferCount' : '1613808620' //String, 0x6030C3EC
}

Instance \\W2012SDC\ROOT\cimv2:Win32_Process.Handle="1820"

Properties={
   'Caption' : 'dns.exe' //String
   'CommandLine' : 'C:\Windows\system32\dns.exe' //String
   'CreationClassName' : 'Win32_Process' //String
   'CreationDate' : '20141112141020.522023-480' //String
   'CSCreationClassName' : 'Win32_ComputerSystem' //String
   'CSName' : '.' //String
   'Description' : 'dns.exe' //String
   'ExecutablePath' : 'C:\Windows\system32\dns.exe' //String
   'ExecutionState' : null
   'Handle' : '1820' //String, 0x71C
   'HandleCount' : 323 //Long, 0x143
   'InstallDate' : null
   'KernelModeTime' : '13906250' //String, 0xD4314A
   'MaximumWorkingSetSize' : 1380 //Long, 0x564
   'MinimumWorkingSetSize' : 200 //Long, 0xC8
   'Name' : 'dns.exe' //String
   'OSCreationClassName' : 'Win32_OperatingSystem' //String
   'OSName' : 'Microsoft Windows Server 2012 R2 Datacenter Evaluation|C:\Windows|\Device\Harddisk0\Partition1' //String
   'OtherOperationCount' : '44792' //String, 0xAEF8
   'OtherTransferCount' : '1323381' //String, 0x143175
   'PageFaults' : 14706 //Long, 0x3972
   'PageFileUsage' : 10376 //Long, 0x2888
   'ParentProcessId' : 620 //Long, 0x26C
   'PeakPageFileUsage' : 11672 //Long, 0x2D98
   'PeakVirtualSize' : '60485632' //String, 0x39AF000
   'PeakWorkingSetSize' : 9632 //Long, 0x25A0
   'Priority' : 8 //Long, 0x8
   'PrivatePageCount' : '10625024' //String, 0xA22000
   'ProcessId' : 1820 //Long, 0x71C
   'QuotaNonPagedPoolUsage' : 36 //Long, 0x24
   'QuotaPagedPoolUsage' : 98 //Long, 0x62
   'QuotaPeakNonPagedPoolUsage' : 43 //Long, 0x2B
   'QuotaPeakPagedPoolUsage' : 98 //Long, 0x62
   'ReadOperationCount' : '535' //String, 0x217
   'ReadTransferCount' : '62060' //String, 0xF26C
   'SessionId' : 0 //Long, 0x0
   'Status' : null
   'TerminationDate' : null
   'ThreadCount' : 20 //Long, 0x14
   'UserModeTime' : '13125000' //String, 0xC84588
   'VirtualSize' : '58322944' //String, 0x379F000
   'WindowsVersion' : '6.3.9600' //String
   'WorkingSetSize' : '6586368' //String, 0x648000
   'WriteOperationCount' : '628' //String, 0x274
   'WriteTransferCount' : '1769440' //String, 0x1AFFE0
}

Instance \\W2012SDC\ROOT\cimv2:Win32_Process.Handle="1840"

Properties={
   'Caption' : 'svchost.exe' //String
   'CommandLine' : 'C:\Windows\system32\svchost.exe -k ftpsvc' //String
   'CreationClassName' : 'Win32_Process' //String
   'CreationDate' : '20141112141020.881400-480' //String
   'CSCreationClassName' : 'Win32_ComputerSystem' //String
   'CSName' : '.' //String
   'Description' : 'svchost.exe' //String
   'ExecutablePath' : 'C:\Windows\system32\svchost.exe' //String
   'ExecutionState' : null
   'Handle' : '1840' //String, 0x730
   'HandleCount' : 273 //Long, 0x111
   'InstallDate' : null
   'KernelModeTime' : '156250' //String, 0x2625A
   'MaximumWorkingSetSize' : 1380 //Long, 0x564
   'MinimumWorkingSetSize' : 200 //Long, 0xC8
   'Name' : 'svchost.exe' //String
   'OSCreationClassName' : 'Win32_OperatingSystem' //String
   'OSName' : 'Microsoft Windows Server 2012 R2 Datacenter Evaluation|C:\Windows|\Device\Harddisk0\Partition1' //String
   'OtherOperationCount' : '278' //String, 0x116
   'OtherTransferCount' : '3638' //String, 0xE36
   'PageFaults' : 7687 //Long, 0x1E07
   'PageFileUsage' : 4624 //Long, 0x1210
   'ParentProcessId' : 620 //Long, 0x26C
   'PeakPageFileUsage' : 4696 //Long, 0x1258
   'PeakVirtualSize' : '49913856' //String, 0x2F9A000
   'PeakWorkingSetSize' : 8848 //Long, 0x2290
   'Priority' : 8 //Long, 0x8
   'PrivatePageCount' : '4734976' //String, 0x484000
   'ProcessId' : 1840 //Long, 0x730
   'QuotaNonPagedPoolUsage' : 15 //Long, 0xF
   'QuotaPagedPoolUsage' : 88 //Long, 0x58
   'QuotaPeakNonPagedPoolUsage' : 15 //Long, 0xF
   'QuotaPeakPagedPoolUsage' : 88 //Long, 0x58
   'ReadOperationCount' : '121' //String, 0x79
   'ReadTransferCount' : '457500' //String, 0x6FB1C
   'SessionId' : 0 //Long, 0x0
   'Status' : null
   'TerminationDate' : null
   'ThreadCount' : 13 //Long, 0xD
   'UserModeTime' : '0' //String, 0x0
   'VirtualSize' : '49381376' //String, 0x2F18000
   'WindowsVersion' : '6.3.9600' //String
   'WorkingSetSize' : '5206016' //String, 0x4F7000
   'WriteOperationCount' : '0' //String, 0x0
   'WriteTransferCount' : '0' //String, 0x0
}

Instance \\W2012SDC\ROOT\cimv2:Win32_Process.Handle="1856"

Properties={
   'Caption' : 'inetinfo.exe' //String
   'CommandLine' : 'C:\Windows\system32\inetsrv\inetinfo.exe' //String
   'CreationClassName' : 'Win32_Process' //String
   'CreationDate' : '20141112141021.137283-480' //String
   'CSCreationClassName' : 'Win32_ComputerSystem' //String
   'CSName' : '.' //String
   'Description' : 'inetinfo.exe' //String
   'ExecutablePath' : 'C:\Windows\system32\inetsrv\inetinfo.exe' //String
   'ExecutionState' : null
   'Handle' : '1856' //String, 0x740
   'HandleCount' : 452 //Long, 0x1C4
   'InstallDate' : null
   'KernelModeTime' : '922968750' //String, 0x370362AE
   'MaximumWorkingSetSize' : 1380 //Long, 0x564
   'MinimumWorkingSetSize' : 200 //Long, 0xC8
   'Name' : 'inetinfo.exe' //String
   'OSCreationClassName' : 'Win32_OperatingSystem' //String
   'OSName' : 'Microsoft Windows Server 2012 R2 Datacenter Evaluation|C:\Windows|\Device\Harddisk0\Partition1' //String
   'OtherOperationCount' : '978773' //String, 0xEEF55
   'OtherTransferCount' : '15987422' //String, 0xF3F2DE
   'PageFaults' : 327548 //Long, 0x4FF7C
   'PageFileUsage' : 17728 //Long, 0x4540
   'ParentProcessId' : 620 //Long, 0x26C
   'PeakPageFileUsage' : 18124 //Long, 0x46CC
   'PeakVirtualSize' : '130600960' //String, 0x7C8D000
   'PeakWorkingSetSize' : 26404 //Long, 0x6724
   'Priority' : 8 //Long, 0x8
   'PrivatePageCount' : '18153472' //String, 0x1150000
   'ProcessId' : 1856 //Long, 0x740
   'QuotaNonPagedPoolUsage' : 45 //Long, 0x2D
   'QuotaPagedPoolUsage' : 127 //Long, 0x7F
   'QuotaPeakNonPagedPoolUsage' : 49 //Long, 0x31
   'QuotaPeakPagedPoolUsage' : 133 //Long, 0x85
   'ReadOperationCount' : '119' //String, 0x77
   'ReadTransferCount' : '1669263' //String, 0x19788F
   'SessionId' : 0 //Long, 0x0
   'Status' : null
   'TerminationDate' : null
   'ThreadCount' : 20 //Long, 0x14
   'UserModeTime' : '1221093750' //String, 0x48C86976
   'VirtualSize' : '112443392' //String, 0x6B3C000
   'WindowsVersion' : '6.3.9600' //String
   'WorkingSetSize' : '2625536' //String, 0x281000
   'WriteOperationCount' : '38' //String, 0x26
   'WriteTransferCount' : '1241926' //String, 0x12F346
}

Instance \\W2012SDC\ROOT\cimv2:Win32_Process.Handle="1912"

Properties={
   'Caption' : 'ismserv.exe' //String
   'CommandLine' : 'C:\Windows\System32\ismserv.exe' //String
   'CreationClassName' : 'Win32_Process' //String
   'CreationDate' : '20141112141021.820814-480' //String
   'CSCreationClassName' : 'Win32_ComputerSystem' //String
   'CSName' : '.' //String
   'Description' : 'ismserv.exe' //String
   'ExecutablePath' : 'C:\Windows\System32\ismserv.exe' //String
   'ExecutionState' : null
   'Handle' : '1912' //String, 0x778
   'HandleCount' : 108 //Long, 0x6C
   'InstallDate' : null
   'KernelModeTime' : '312500' //String, 0x4C4B4
   'MaximumWorkingSetSize' : 1380 //Long, 0x564
   'MinimumWorkingSetSize' : 200 //Long, 0xC8
   'Name' : 'ismserv.exe' //String
   'OSCreationClassName' : 'Win32_OperatingSystem' //String
   'OSName' : 'Microsoft Windows Server 2012 R2 Datacenter Evaluation|C:\Windows|\Device\Harddisk0\Partition1' //String
   'OtherOperationCount' : '2875' //String, 0xB3B
   'OtherTransferCount' : '16998' //String, 0x4266
   'PageFaults' : 5292 //Long, 0x14AC
   'PageFileUsage' : 1932 //Long, 0x78C
   'ParentProcessId' : 620 //Long, 0x26C
   'PeakPageFileUsage' : 2004 //Long, 0x7D4
   'PeakVirtualSize' : '32768000' //String, 0x1F40000
   'PeakWorkingSetSize' : 4508 //Long, 0x119C
   'Priority' : 8 //Long, 0x8
   'PrivatePageCount' : '1978368' //String, 0x1E3000
   'ProcessId' : 1912 //Long, 0x778
   'QuotaNonPagedPoolUsage' : 12 //Long, 0xC
   'QuotaPagedPoolUsage' : 48 //Long, 0x30
   'QuotaPeakNonPagedPoolUsage' : 14 //Long, 0xE
   'QuotaPeakPagedPoolUsage' : 48 //Long, 0x30
   'ReadOperationCount' : '0' //String, 0x0
   'ReadTransferCount' : '0' //String, 0x0
   'SessionId' : 0 //Long, 0x0
   'Status' : null
   'TerminationDate' : null
   'ThreadCount' : 8 //Long, 0x8
   'UserModeTime' : '156250' //String, 0x2625A
   'VirtualSize' : '32702464' //String, 0x1F30000
   'WindowsVersion' : '6.3.9600' //String
   'WorkingSetSize' : '2301952' //String, 0x232000
   'WriteOperationCount' : '0' //String, 0x0
   'WriteTransferCount' : '0' //String, 0x0
}

Instance \\W2012SDC\ROOT\cimv2:Win32_Process.Handle="1944"

Properties={
   'Caption' : 'svchost.exe' //String
   'CommandLine' : 'C:\Windows\system32\svchost.exe -k KpsSvcGroup' //String
   'CreationClassName' : 'Win32_Process' //String
   'CreationDate' : '20141112141021.987272-480' //String
   'CSCreationClassName' : 'Win32_ComputerSystem' //String
   'CSName' : '.' //String
   'Description' : 'svchost.exe' //String
   'ExecutablePath' : 'C:\Windows\system32\svchost.exe' //String
   'ExecutionState' : null
   'Handle' : '1944' //String, 0x798
   'HandleCount' : 75 //Long, 0x4B
   'InstallDate' : null
   'KernelModeTime' : '0' //String, 0x0
   'MaximumWorkingSetSize' : 1380 //Long, 0x564
   'MinimumWorkingSetSize' : 200 //Long, 0xC8
   'Name' : 'svchost.exe' //String
   'OSCreationClassName' : 'Win32_OperatingSystem' //String
   'OSName' : 'Microsoft Windows Server 2012 R2 Datacenter Evaluation|C:\Windows|\Device\Harddisk0\Partition1' //String
   'OtherOperationCount' : '68' //String, 0x44
   'OtherTransferCount' : '166' //String, 0xA6
   'PageFaults' : 1071 //Long, 0x42F
   'PageFileUsage' : 828 //Long, 0x33C
   'ParentProcessId' : 620 //Long, 0x26C
   'PeakPageFileUsage' : 900 //Long, 0x384
   'PeakVirtualSize' : '19378176' //String, 0x127B000
   'PeakWorkingSetSize' : 3068 //Long, 0xBFC
   'Priority' : 8 //Long, 0x8
   'PrivatePageCount' : '847872' //String, 0xCF000
   'ProcessId' : 1944 //Long, 0x798
   'QuotaNonPagedPoolUsage' : 6 //Long, 0x6
   'QuotaPagedPoolUsage' : 34 //Long, 0x22
   'QuotaPeakNonPagedPoolUsage' : 7 //Long, 0x7
   'QuotaPeakPagedPoolUsage' : 34 //Long, 0x22
   'ReadOperationCount' : '0' //String, 0x0
   'ReadTransferCount' : '0' //String, 0x0
   'SessionId' : 0 //Long, 0x0
   'Status' : null
   'TerminationDate' : null
   'ThreadCount' : 3 //Long, 0x3
   'UserModeTime' : '0' //String, 0x0
   'VirtualSize' : '17502208' //String, 0x10B1000
   'WindowsVersion' : '6.3.9600' //String
   'WorkingSetSize' : '774144' //String, 0xBD000
   'WriteOperationCount' : '0' //String, 0x0
   'WriteTransferCount' : '0' //String, 0x0
}

Instance \\W2012SDC\ROOT\cimv2:Win32_Process.Handle="1964"

Properties={
   'Caption' : 'svchost.exe' //String
   'CommandLine' : 'C:\Windows\System32\svchost.exe -k LPDService' //String
   'CreationClassName' : 'Win32_Process' //String
   'CreationDate' : '20141112141021.987272-480' //String
   'CSCreationClassName' : 'Win32_ComputerSystem' //String
   'CSName' : '.' //String
   'Description' : 'svchost.exe' //String
   'ExecutablePath' : 'C:\Windows\System32\svchost.exe' //String
   'ExecutionState' : null
   'Handle' : '1964' //String, 0x7AC
   'HandleCount' : 130 //Long, 0x82
   'InstallDate' : null
   'KernelModeTime' : '156250' //String, 0x2625A
   'MaximumWorkingSetSize' : 1380 //Long, 0x564
   'MinimumWorkingSetSize' : 200 //Long, 0xC8
   'Name' : 'svchost.exe' //String
   'OSCreationClassName' : 'Win32_OperatingSystem' //String
   'OSName' : 'Microsoft Windows Server 2012 R2 Datacenter Evaluation|C:\Windows|\Device\Harddisk0\Partition1' //String
   'OtherOperationCount' : '72' //String, 0x48
   'OtherTransferCount' : '3082' //String, 0xC0A
   'PageFaults' : 1282 //Long, 0x502
   'PageFileUsage' : 1244 //Long, 0x4DC
   'ParentProcessId' : 620 //Long, 0x26C
   'PeakPageFileUsage' : 1344 //Long, 0x540
   'PeakVirtualSize' : '58740736' //String, 0x3805000
   'PeakWorkingSetSize' : 4340 //Long, 0x10F4
   'Priority' : 8 //Long, 0x8
   'PrivatePageCount' : '1273856' //String, 0x137000
   'ProcessId' : 1964 //Long, 0x7AC
   'QuotaNonPagedPoolUsage' : 10 //Long, 0xA
   'QuotaPagedPoolUsage' : 107 //Long, 0x6B
   'QuotaPeakNonPagedPoolUsage' : 10 //Long, 0xA
   'QuotaPeakPagedPoolUsage' : 108 //Long, 0x6C
   'ReadOperationCount' : '186' //String, 0xBA
   'ReadTransferCount' : '95046' //String, 0x17346
   'SessionId' : 0 //Long, 0x0
   'Status' : null
   'TerminationDate' : null
   'ThreadCount' : 4 //Long, 0x4
   'UserModeTime' : '156250' //String, 0x2625A
   'VirtualSize' : '57675776' //String, 0x3701000
   'WindowsVersion' : '6.3.9600' //String
   'WorkingSetSize' : '872448' //String, 0xD5000
   'WriteOperationCount' : '0' //String, 0x0
   'WriteTransferCount' : '0' //String, 0x0
}

Instance \\W2012SDC\ROOT\cimv2:Win32_Process.Handle="2004"

Properties={
   'Caption' : 'svchost.exe' //String
   'CommandLine' : 'C:\Windows\system32\svchost.exe -k MSiSNS' //String
   'CreationClassName' : 'Win32_Process' //String
   'CreationDate' : '20141112141022.409146-480' //String
   'CSCreationClassName' : 'Win32_ComputerSystem' //String
   'CSName' : '.' //String
   'Description' : 'svchost.exe' //String
   'ExecutablePath' : 'C:\Windows\system32\svchost.exe' //String
   'ExecutionState' : null
   'Handle' : '2004' //String, 0x7D4
   'HandleCount' : 70 //Long, 0x46
   'InstallDate' : null
   'KernelModeTime' : '156250' //String, 0x2625A
   'MaximumWorkingSetSize' : 1380 //Long, 0x564
   'MinimumWorkingSetSize' : 200 //Long, 0xC8
   'Name' : 'svchost.exe' //String
   'OSCreationClassName' : 'Win32_OperatingSystem' //String
   'OSName' : 'Microsoft Windows Server 2012 R2 Datacenter Evaluation|C:\Windows|\Device\Harddisk0\Partition1' //String
   'OtherOperationCount' : '144' //String, 0x90
   'OtherTransferCount' : '2490' //String, 0x9BA
   'PageFaults' : 1993 //Long, 0x7C9
   'PageFileUsage' : 772 //Long, 0x304
   'ParentProcessId' : 620 //Long, 0x26C
   'PeakPageFileUsage' : 896 //Long, 0x380
   'PeakVirtualSize' : '18833408' //String, 0x11F6000
   'PeakWorkingSetSize' : 3084 //Long, 0xC0C
   'Priority' : 8 //Long, 0x8
   'PrivatePageCount' : '790528' //String, 0xC1000
   'ProcessId' : 2004 //Long, 0x7D4
   'QuotaNonPagedPoolUsage' : 7 //Long, 0x7
   'QuotaPagedPoolUsage' : 32 //Long, 0x20
   'QuotaPeakNonPagedPoolUsage' : 7 //Long, 0x7
   'QuotaPeakPagedPoolUsage' : 32 //Long, 0x20
   'ReadOperationCount' : '21' //String, 0x15
   'ReadTransferCount' : '448' //String, 0x1C0
   'SessionId' : 0 //Long, 0x0
   'Status' : null
   'TerminationDate' : null
   'ThreadCount' : 4 //Long, 0x4
   'UserModeTime' : '156250' //String, 0x2625A
   'VirtualSize' : '17768448' //String, 0x10F2000
   'WindowsVersion' : '6.3.9600' //String
   'WorkingSetSize' : '802816' //String, 0xC4000
   'WriteOperationCount' : '10' //String, 0xA
   'WriteTransferCount' : '448' //String, 0x1C0
}

Instance \\W2012SDC\ROOT\cimv2:Win32_Process.Handle="2032"

Properties={
   'Caption' : 'mqsvc.exe' //String
   'CommandLine' : 'C:\Windows\system32\mqsvc.exe' //String
   'CreationClassName' : 'Win32_Process' //String
   'CreationDate' : '20141112141022.612272-480' //String
   'CSCreationClassName' : 'Win32_ComputerSystem' //String
   'CSName' : '.' //String
   'Description' : 'mqsvc.exe' //String
   'ExecutablePath' : 'C:\Windows\system32\mqsvc.exe' //String
   'ExecutionState' : null
   'Handle' : '2032' //String, 0x7F0
   'HandleCount' : 375 //Long, 0x177
   'InstallDate' : null
   'KernelModeTime' : '625000' //String, 0x98968
   'MaximumWorkingSetSize' : 1380 //Long, 0x564
   'MinimumWorkingSetSize' : 200 //Long, 0xC8
   'Name' : 'mqsvc.exe' //String
   'OSCreationClassName' : 'Win32_OperatingSystem' //String
   'OSName' : 'Microsoft Windows Server 2012 R2 Datacenter Evaluation|C:\Windows|\Device\Harddisk0\Partition1' //String
   'OtherOperationCount' : '1382' //String, 0x566
   'OtherTransferCount' : '24156' //String, 0x5E5C
   'PageFaults' : 4507 //Long, 0x119B
   'PageFileUsage' : 6996 //Long, 0x1B54
   'ParentProcessId' : 620 //Long, 0x26C
   'PeakPageFileUsage' : 7508 //Long, 0x1D54
   'PeakVirtualSize' : '101085184' //String, 0x6067000
   'PeakWorkingSetSize' : 12928 //Long, 0x3280
   'Priority' : 8 //Long, 0x8
   'PrivatePageCount' : '7163904' //String, 0x6D5000
   'ProcessId' : 2032 //Long, 0x7F0
   'QuotaNonPagedPoolUsage' : 42 //Long, 0x2A
   'QuotaPagedPoolUsage' : 162 //Long, 0xA2
   'QuotaPeakNonPagedPoolUsage' : 45 //Long, 0x2D
   'QuotaPeakPagedPoolUsage' : 163 //Long, 0xA3
   'ReadOperationCount' : '221' //String, 0xDD
   'ReadTransferCount' : '742292' //String, 0xB5394
   'SessionId' : 0 //Long, 0x0
   'Status' : null
   'TerminationDate' : null
   'ThreadCount' : 31 //Long, 0x1F
   'UserModeTime' : '156250' //String, 0x2625A
   'VirtualSize' : '96837632' //String, 0x5C5A000
   'WindowsVersion' : '6.3.9600' //String
   'WorkingSetSize' : '1806336' //String, 0x1B9000
   'WriteOperationCount' : '23' //String, 0x17
   'WriteTransferCount' : '68003' //String, 0x109A3
}

Instance \\W2012SDC\ROOT\cimv2:Win32_Process.Handle="2228"

Properties={
   'Caption' : 'sqlservr.exe' //String
   'CommandLine' : '"C:\Program Files\Microsoft SQL Server\MSSQL12.MSSQLSERVER\MSSQL\Binn\sqlservr.exe" -sMSSQLSERVER' //String
   'CreationClassName' : 'Win32_Process' //String
   'CreationDate' : '20141112141033.172411-480' //String
   'CSCreationClassName' : 'Win32_ComputerSystem' //String
   'CSName' : '.' //String
   'Description' : 'sqlservr.exe' //String
   'ExecutablePath' : 'C:\Program Files\Microsoft SQL Server\MSSQL12.MSSQLSERVER\MSSQL\Binn\sqlservr.exe' //String
   'ExecutionState' : null
   'Handle' : '2228' //String, 0x8B4
   'HandleCount' : 666 //Long, 0x29A
   'InstallDate' : null
   'KernelModeTime' : '13914687500' //String
   'MaximumWorkingSetSize' : 1380 //Long, 0x564
   'MinimumWorkingSetSize' : 200 //Long, 0xC8
   'Name' : 'sqlservr.exe' //String
   'OSCreationClassName' : 'Win32_OperatingSystem' //String
   'OSName' : 'Microsoft Windows Server 2012 R2 Datacenter Evaluation|C:\Windows|\Device\Harddisk0\Partition1' //String
   'OtherOperationCount' : '614169' //String, 0x95F19
   'OtherTransferCount' : '5877930' //String, 0x59B0AA
   'PageFaults' : 282834 //Long, 0x450D2
   'PageFileUsage' : 241208 //Long, 0x3AE38
   'ParentProcessId' : 620 //Long, 0x26C
   'PeakPageFileUsage' : 255220 //Long, 0x3E4F4
   'PeakVirtualSize' : '8787750912' //String
   'PeakWorkingSetSize' : 136196 //Long, 0x21404
   'Priority' : 8 //Long, 0x8
   'PrivatePageCount' : '246996992' //String, 0xEB8E000
   'ProcessId' : 2228 //Long, 0x8B4
   'QuotaNonPagedPoolUsage' : 61 //Long, 0x3D
   'QuotaPagedPoolUsage' : 481 //Long, 0x1E1
   'QuotaPeakNonPagedPoolUsage' : 63 //Long, 0x3F
   'QuotaPeakPagedPoolUsage' : 483 //Long, 0x1E3
   'ReadOperationCount' : '29861' //String, 0x74A5
   'ReadTransferCount' : '302650857' //String, 0x120A15E9
   'SessionId' : 0 //Long, 0x0
   'Status' : null
   'TerminationDate' : null
   'ThreadCount' : 63 //Long, 0x3F
   'UserModeTime' : '29289531250' //String
   'VirtualSize' : '8772554752' //String
   'WindowsVersion' : '6.3.9600' //String
   'WorkingSetSize' : '64561152' //String, 0x3D92000
   'WriteOperationCount' : '13179' //String, 0x337B
   'WriteTransferCount' : '89829539' //String, 0x55AB0A3
}

Instance \\W2012SDC\ROOT\cimv2:Win32_Process.Handle="2404"

Properties={
   'Caption' : 'SMSvcHost.exe' //String
   'CommandLine' : 'C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe' //String
   'CreationClassName' : 'Win32_Process' //String
   'CreationDate' : '20141112141043.515235-480' //String
   'CSCreationClassName' : 'Win32_ComputerSystem' //String
   'CSName' : '.' //String
   'Description' : 'SMSvcHost.exe' //String
   'ExecutablePath' : 'C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe' //String
   'ExecutionState' : null
   'Handle' : '2404' //String, 0x964
   'HandleCount' : 280 //Long, 0x118
   'InstallDate' : null
   'KernelModeTime' : '625000' //String, 0x98968
   'MaximumWorkingSetSize' : 1380 //Long, 0x564
   'MinimumWorkingSetSize' : 200 //Long, 0xC8
   'Name' : 'SMSvcHost.exe' //String
   'OSCreationClassName' : 'Win32_OperatingSystem' //String
   'OSName' : 'Microsoft Windows Server 2012 R2 Datacenter Evaluation|C:\Windows|\Device\Harddisk0\Partition1' //String
   'OtherOperationCount' : '940' //String, 0x3AC
   'OtherTransferCount' : '12151' //String, 0x2F77
   'PageFaults' : 9157 //Long, 0x23C5
   'PageFileUsage' : 29492 //Long, 0x7334
   'ParentProcessId' : 620 //Long, 0x26C
   'PeakPageFileUsage' : 30320 //Long, 0x7670
   'PeakVirtualSize' : '610156544' //String, 0x245E4000
   'PeakWorkingSetSize' : 30172 //Long, 0x75DC
   'Priority' : 8 //Long, 0x8
   'PrivatePageCount' : '30199808' //String, 0x1CCD000
   'ProcessId' : 2404 //Long, 0x964
   'QuotaNonPagedPoolUsage' : 35 //Long, 0x23
   'QuotaPagedPoolUsage' : 374 //Long, 0x176
   'QuotaPeakNonPagedPoolUsage' : 40 //Long, 0x28
   'QuotaPeakPagedPoolUsage' : 374 //Long, 0x176
   'ReadOperationCount' : '148' //String, 0x94
   'ReadTransferCount' : '238784' //String, 0x3A4C0
   'SessionId' : 0 //Long, 0x0
   'Status' : null
   'TerminationDate' : null
   'ThreadCount' : 8 //Long, 0x8
   'UserModeTime' : '2031250' //String, 0x1EFE92
   'VirtualSize' : '598794240' //String, 0x23B0E000
   'WindowsVersion' : '6.3.9600' //String
   'WorkingSetSize' : '2994176' //String, 0x2DB000
   'WriteOperationCount' : '56' //String, 0x38
   'WriteTransferCount' : '35319' //String, 0x89F7
}

Instance \\W2012SDC\ROOT\cimv2:Win32_Process.Handle="2480"

Properties={
   'Caption' : 'svchost.exe' //String
   'CommandLine' : 'C:\Windows\System32\svchost.exe -k PeerDist' //String
   'CreationClassName' : 'Win32_Process' //String
   'CreationDate' : '20141112141043.862091-480' //String
   'CSCreationClassName' : 'Win32_ComputerSystem' //String
   'CSName' : '.' //String
   'Description' : 'svchost.exe' //String
   'ExecutablePath' : 'C:\Windows\System32\svchost.exe' //String
   'ExecutionState' : null
   'Handle' : '2480' //String, 0x9B0
   'HandleCount' : 342 //Long, 0x156
   'InstallDate' : null
   'KernelModeTime' : '2500000' //String, 0x2625A0
   'MaximumWorkingSetSize' : 1380 //Long, 0x564
   'MinimumWorkingSetSize' : 200 //Long, 0xC8
   'Name' : 'svchost.exe' //String
   'OSCreationClassName' : 'Win32_OperatingSystem' //String
   'OSName' : 'Microsoft Windows Server 2012 R2 Datacenter Evaluation|C:\Windows|\Device\Harddisk0\Partition1' //String
   'OtherOperationCount' : '1531' //String, 0x5FB
   'OtherTransferCount' : '38158' //String, 0x950E
   'PageFaults' : 14912 //Long, 0x3A40
   'PageFileUsage' : 53224 //Long, 0xCFE8
   'ParentProcessId' : 620 //Long, 0x26C
   'PeakPageFileUsage' : 54844 //Long, 0xD63C
   'PeakVirtualSize' : '433553408' //String, 0x19D78000
   'PeakWorkingSetSize' : 20776 //Long, 0x5128
   'Priority' : 8 //Long, 0x8
   'PrivatePageCount' : '54501376' //String, 0x33FA000
   'ProcessId' : 2480 //Long, 0x9B0
   'QuotaNonPagedPoolUsage' : 43 //Long, 0x2B
   'QuotaPagedPoolUsage' : 158 //Long, 0x9E
   'QuotaPeakNonPagedPoolUsage' : 45 //Long, 0x2D
   'QuotaPeakPagedPoolUsage' : 158 //Long, 0x9E
   'ReadOperationCount' : '203' //String, 0xCB
   'ReadTransferCount' : '22484286' //String, 0x157153E
   'SessionId' : 0 //Long, 0x0
   'Status' : null
   'TerminationDate' : null
   'ThreadCount' : 13 //Long, 0xD
   'UserModeTime' : '2656250' //String, 0x2887FA
   'VirtualSize' : '430989312' //String, 0x19B06000
   'WindowsVersion' : '6.3.9600' //String
   'WorkingSetSize' : '1843200' //String, 0x1C2000
   'WriteOperationCount' : '6' //String, 0x6
   'WriteTransferCount' : '139264' //String, 0x22000
}

Instance \\W2012SDC\ROOT\cimv2:Win32_Process.Handle="2544"

Properties={
   'Caption' : 'ReportingServicesService.exe' //String
   'CommandLine' : '"C:\Program Files\Microsoft SQL Server\MSRS12.MSSQLSERVER\Reporting Services\ReportServer\bin\ReportingServicesService.exe"' //String
   'CreationClassName' : 'Win32_Process' //String
   'CreationDate' : '20141112141046.896445-480' //String
   'CSCreationClassName' : 'Win32_ComputerSystem' //String
   'CSName' : '.' //String
   'Description' : 'ReportingServicesService.exe' //String
   'ExecutablePath' : 'C:\Program Files\Microsoft SQL Server\MSRS12.MSSQLSERVER\Reporting Services\ReportServer\bin\ReportingServicesService.exe' //String
   'ExecutionState' : null
   'Handle' : '2544' //String, 0x9F0
   'HandleCount' : 699 //Long, 0x2BB
   'InstallDate' : null
   'KernelModeTime' : '440312500' //String, 0x1A3EA2B4
   'MaximumWorkingSetSize' : 1380 //Long, 0x564
   'MinimumWorkingSetSize' : 200 //Long, 0xC8
   'Name' : 'ReportingServicesService.exe' //String
   'OSCreationClassName' : 'Win32_OperatingSystem' //String
   'OSName' : 'Microsoft Windows Server 2012 R2 Datacenter Evaluation|C:\Windows|\Device\Harddisk0\Partition1' //String
   'OtherOperationCount' : '22620' //String, 0x585C
   'OtherTransferCount' : '4504656' //String, 0x44BC50
   'PageFaults' : 226983 //Long, 0x376A7
   'PageFileUsage' : 131252 //Long, 0x200B4
   'ParentProcessId' : 620 //Long, 0x26C
   'PeakPageFileUsage' : 141256 //Long, 0x227C8
   'PeakVirtualSize' : '8758919168' //String
   'PeakWorkingSetSize' : 103352 //Long, 0x193B8
   'Priority' : 8 //Long, 0x8
   'PrivatePageCount' : '134402048' //String, 0x802D000
   'ProcessId' : 2544 //Long, 0x9F0
   'QuotaNonPagedPoolUsage' : 58 //Long, 0x3A
   'QuotaPagedPoolUsage' : 427 //Long, 0x1AB
   'QuotaPeakNonPagedPoolUsage' : 66 //Long, 0x42
   'QuotaPeakPagedPoolUsage' : 429 //Long, 0x1AD
   'ReadOperationCount' : '6197' //String, 0x1835
   'ReadTransferCount' : '12316036' //String, 0xBBED84
   'SessionId' : 0 //Long, 0x0
   'Status' : null
   'TerminationDate' : null
   'ThreadCount' : 45 //Long, 0x2D
   'UserModeTime' : '1996093750' //String, 0x76F9F936
   'VirtualSize' : '8751898624' //String
   'WindowsVersion' : '6.3.9600' //String
   'WorkingSetSize' : '23429120' //String, 0x1658000
   'WriteOperationCount' : '6853' //String, 0x1AC5
   'WriteTransferCount' : '959009' //String, 0xEA221
}

Instance \\W2012SDC\ROOT\cimv2:Win32_Process.Handle="2748"

Properties={
   'Caption' : 'ProviderRegistryService.exe' //String
   'CommandLine' : 'C:\Windows\System32\Essentials\ProviderRegistryService.exe' //String
   'CreationClassName' : 'Win32_Process' //String
   'CreationDate' : '20141112141049.443322-480' //String
   'CSCreationClassName' : 'Win32_ComputerSystem' //String
   'CSName' : '.' //String
   'Description' : 'ProviderRegistryService.exe' //String
   'ExecutablePath' : 'C:\Windows\System32\Essentials\ProviderRegistryService.exe' //String
   'ExecutionState' : null
   'Handle' : '2748' //String, 0xABC
   'HandleCount' : 481 //Long, 0x1E1
   'InstallDate' : null
   'KernelModeTime' : '2500000' //String, 0x2625A0
   'MaximumWorkingSetSize' : 1380 //Long, 0x564
   'MinimumWorkingSetSize' : 200 //Long, 0xC8
   'Name' : 'ProviderRegistryService.exe' //String
   'OSCreationClassName' : 'Win32_OperatingSystem' //String
   'OSName' : 'Microsoft Windows Server 2012 R2 Datacenter Evaluation|C:\Windows|\Device\Harddisk0\Partition1' //String
   'OtherOperationCount' : '55455' //String, 0xD89F
   'OtherTransferCount' : '703237' //String, 0xABB05
   'PageFaults' : 91181 //Long, 0x1642D
   'PageFileUsage' : 32908 //Long, 0x808C
   'ParentProcessId' : 620 //Long, 0x26C
   'PeakPageFileUsage' : 35856 //Long, 0x8C10
   'PeakVirtualSize' : '620924928' //String, 0x25029000
   'PeakWorkingSetSize' : 41464 //Long, 0xA1F8
   'Priority' : 8 //Long, 0x8
   'PrivatePageCount' : '33697792' //String, 0x2023000
   'ProcessId' : 2748 //Long, 0xABC
   'QuotaNonPagedPoolUsage' : 32 //Long, 0x20
   'QuotaPagedPoolUsage' : 388 //Long, 0x184
   'QuotaPeakNonPagedPoolUsage' : 42 //Long, 0x2A
   'QuotaPeakPagedPoolUsage' : 388 //Long, 0x184
   'ReadOperationCount' : '117' //String, 0x75
   'ReadTransferCount' : '300599' //String, 0x49637
   'SessionId' : 0 //Long, 0x0
   'Status' : null
   'TerminationDate' : null
   'ThreadCount' : 7 //Long, 0x7
   'UserModeTime' : '7812500' //String, 0x773594
   'VirtualSize' : '614313984' //String, 0x249DB000
   'WindowsVersion' : '6.3.9600' //String
   'WorkingSetSize' : '10493952' //String, 0xA02000
   'WriteOperationCount' : '58637' //String, 0xE50D
   'WriteTransferCount' : '8920882' //String, 0x881F32
}

Instance \\W2012SDC\ROOT\cimv2:Win32_Process.Handle="2852"

Properties={
   'Caption' : 'TCPSVCS.EXE' //String
   'CommandLine' : 'C:\Windows\System32\tcpsvcs.exe' //String
   'CreationClassName' : 'Win32_Process' //String
   'CreationDate' : '20141112141051.186685-480' //String
   'CSCreationClassName' : 'Win32_ComputerSystem' //String
   'CSName' : '.' //String
   'Description' : 'TCPSVCS.EXE' //String
   'ExecutablePath' : 'C:\Windows\System32\tcpsvcs.exe' //String
   'ExecutionState' : null
   'Handle' : '2852' //String, 0xB24
   'HandleCount' : 86 //Long, 0x56
   'InstallDate' : null
   'KernelModeTime' : '156250' //String, 0x2625A
   'MaximumWorkingSetSize' : 1380 //Long, 0x564
   'MinimumWorkingSetSize' : 200 //Long, 0xC8
   'Name' : 'TCPSVCS.EXE' //String
   'OSCreationClassName' : 'Win32_OperatingSystem' //String
   'OSName' : 'Microsoft Windows Server 2012 R2 Datacenter Evaluation|C:\Windows|\Device\Harddisk0\Partition1' //String
   'OtherOperationCount' : '446' //String, 0x1BE
   'OtherTransferCount' : '8320' //String, 0x2080
   'PageFaults' : 867 //Long, 0x363
   'PageFileUsage' : 736 //Long, 0x2E0
   'ParentProcessId' : 620 //Long, 0x26C
   'PeakPageFileUsage' : 832 //Long, 0x340
   'PeakVirtualSize' : '15405056' //String, 0xEB1000
   'PeakWorkingSetSize' : 2920 //Long, 0xB68
   'Priority' : 8 //Long, 0x8
   'PrivatePageCount' : '753664' //String, 0xB8000
   'ProcessId' : 2852 //Long, 0xB24
   'QuotaNonPagedPoolUsage' : 17 //Long, 0x11
   'QuotaPagedPoolUsage' : 31 //Long, 0x1F
   'QuotaPeakNonPagedPoolUsage' : 18 //Long, 0x12
   'QuotaPeakPagedPoolUsage' : 31 //Long, 0x1F
   'ReadOperationCount' : '157' //String, 0x9D
   'ReadTransferCount' : '80227' //String, 0x13963
   'SessionId' : 0 //Long, 0x0
   'Status' : null
   'TerminationDate' : null
   'ThreadCount' : 2 //Long, 0x2
   'UserModeTime' : '0' //String, 0x0
   'VirtualSize' : '14340096' //String, 0xDAD000
   'WindowsVersion' : '6.3.9600' //String
   'WorkingSetSize' : '1929216' //String, 0x1D7000
   'WriteOperationCount' : '0' //String, 0x0
   'WriteTransferCount' : '0' //String, 0x0
}
comments powered by Disqus
WUtils.com