代码：
import java.net.UnknownHostException; import java.util.logging.Level; import org.jinterop.dcom.common.IJIUnreferenced; import org.jinterop.dcom.common.JIException; import org.jinterop.dcom.common.JISystem; import org.jinterop.dcom.core.IJIComObject; import org.jinterop.dcom.core.JIArray; import org.jinterop.dcom.core.JICallBuilder; import org.jinterop.dcom.core.JIComServer; import org.jinterop.dcom.core.JIFlags; import org.jinterop.dcom.core.JIProgId; import org.jinterop.dcom.core.JISession; import org.jinterop.dcom.core.JIString; import org.jinterop.dcom.core.JIVariant; import org.jinterop.dcom.impls.JIObjectFactory; import org.jinterop.dcom.impls.automation.IJIDispatch; import org.jinterop.dcom.impls.automation.IJIEnumVariant; public class WMITest { private JIComServer comStub = null; private IJIComObject comObject = null; private IJIDispatch dispatch = null; private String address = null; private JISession session = null; public WMITest(String address, String[] args) throws JIException, UnknownHostException { this.address = address; session = JISession.createSession(args[1],args[2],args[3]); session.useSessionSecurity(true); session.setGlobalSocketTimeout(5000); comStub = new JIComServer(JIProgId.valueOf("WbemScripting.SWbemLocator"),address,session); IJIComObject unknown = comStub.createInstance(); comObject = (IJIComObject)unknown.queryInterface("76A6415B-CB41-11d1-8B02-00600806D9B6");//ISWbemLocator //This will obtain the dispatch interface dispatch = (IJIDispatch)JIObjectFactory.narrowObject(comObject.queryInterface(IJIDispatch.IID)); } public void performOp(String strQuery) throws JIException, InterruptedException { System.gc(); JIVariant results[] = dispatch.callMethodA("ConnectServer",new Object[]{new JIString(address),JIVariant.OPTIONAL_PARAM(),JIVariant.OPTIONAL_PARAM(),JIVariant.OPTIONAL_PARAM() ,JIVariant.OPTIONAL_PARAM(),JIVariant.OPTIONAL_PARAM(),new Integer(0),JIVariant.OPTIONAL_PARAM()}); //using the dispatch results above you can use the "ConnectServer" api to retrieve a pointer to IJIDispatch //of ISWbemServices //OR //Make a direct call like below , in this case you would get back an interface pointer to ISWbemServices , NOT to it's IDispatch JICallBuilder callObject = new JICallBuilder(); callObject.addInParamAsString(address,JIFlags.FLAG_REPRESENTATION_STRING_BSTR); callObject.addInParamAsString("",JIFlags.FLAG_REPRESENTATION_STRING_BSTR); callObject.addInParamAsString("",JIFlags.FLAG_REPRESENTATION_STRING_BSTR); callObject.addInParamAsString("",JIFlags.FLAG_REPRESENTATION_STRING_BSTR); callObject.addInParamAsString("",JIFlags.FLAG_REPRESENTATION_STRING_BSTR); callObject.addInParamAsString("",JIFlags.FLAG_REPRESENTATION_STRING_BSTR); callObject.addInParamAsInt(0,JIFlags.FLAG_NULL); callObject.addInParamAsPointer(null,JIFlags.FLAG_NULL); callObject.setOpnum(0); callObject.addOutParamAsType(IJIComObject.class,JIFlags.FLAG_NULL); IJIComObject wbemServices = JIObjectFactory.narrowObject((IJIComObject)((Object[])comObject.call(callObject))[0]); wbemServices.setInstanceLevelSocketTimeout(1000); wbemServices.registerUnreferencedHandler(new IJIUnreferenced(){ public void unReferenced() { System.out.println("wbemServices unreferenced... "); } }); //Lets have a look at both. IJIDispatch wbemServices_dispatch = (IJIDispatch)JIObjectFactory.narrowObject((results[0]).getObjectAsComObject()); //results = wbemServices_dispatch.callMethodA("InstancesOf", new Object[]{new JIString("Win32_Process"), new Integer(0), JIVariant.OPTIONAL_PARAM()}); // String strQuery = "SELECT * FROM Win32_PerfFormattedData_PerfOS_Processor WHERE Name != '_Total'"; results = wbemServices_dispatch.callMethodA("ExecQuery", new Object[] {new JIString(strQuery), JIVariant.OPTIONAL_PARAM(), JIVariant.OPTIONAL_PARAM(), JIVariant.OPTIONAL_PARAM()}); IJIDispatch wbemObjectSet_dispatch = (IJIDispatch)JIObjectFactory.narrowObject((results[0]).getObjectAsComObject()); JIVariant variant = wbemObjectSet_dispatch.get("_NewEnum"); IJIComObject object2 = variant.getObjectAsComObject(); System.out.println(object2.isDispatchSupported()); System.out.println(object2.isDispatchSupported()); object2.registerUnreferencedHandler(new IJIUnreferenced(){ public void unReferenced() { System.out.println("object2 unreferenced..."); } }); IJIEnumVariant enumVARIANT = (IJIEnumVariant)JIObjectFactory.narrowObject(object2.queryInterface(IJIEnumVariant.IID)); //This will return back a dispatch of ISWbemObjectSet //OR //It returns back the pointer to ISWbemObjectSet callObject = new JICallBuilder(); callObject.addInParamAsString("Win32_Process",JIFlags.FLAG_REPRESENTATION_STRING_BSTR); callObject.addInParamAsInt(0,JIFlags.FLAG_NULL); callObject.addInParamAsPointer(null,JIFlags.FLAG_NULL); callObject.setOpnum(4); callObject.addOutParamAsType(IJIComObject.class,JIFlags.FLAG_NULL); IJIComObject wbemObjectSet = JIObjectFactory.narrowObject((IJIComObject)((Object[])wbemServices.call(callObject))[0]); //okay seen enough of the other usage, lets just stick to disptach, it's lot simpler JIVariant Count = wbemObjectSet_dispatch.get("Count"); int count = Count.getObjectAsInt(); for (int i = 0; i < count; i++) { Object[] values = enumVARIANT.next(1); JIArray array = (JIArray)values[0]; Object[] arrayObj = (Object[])array.getArrayInstance(); for (int j = 0; j < arrayObj.length; j++) { IJIDispatch wbemObject_dispatch = (IJIDispatch)JIObjectFactory.narrowObject(((JIVariant)arrayObj[j]).getObjectAsComObject()); JIVariant variant2 = (JIVariant)(wbemObject_dispatch.callMethodA("GetObjectText_",new Object[]{new Integer(1)}))[0]; System.out.println(variant2.getObjectAsString().getString()); System.out.println("++++++++++++++++++++++++++++++++++++++++++++++++++++++++++"); } } } private void killme() throws JIException { JISession.destroySession(session); } public static void main(String[] args) throws Exception { args = new String[4]; args[0] = "192.168.152.147"; args[1] = "192.168.152.147"; args[2] = "wsc"; args[3] = "123"; JISystem.getLogger().setLevel(Level.ALL); JISystem.setInBuiltLogHandler(false); JISystem.setAutoRegisteration(true); WMITest test = new WMITest(args[0],args); // // 系统信息 // wt.query("SELECT * FROM Win32_ComputerSystem"); // // CPU信息 // wt.query("SELECT * FROM Win32_PerfFormattedData_PerfOS_Processor WHERE Name != '_Total'"); // // 内存信息 // wt.query("SELECT * FROM Win32_PerfFormattedData_PerfOS_Memory"); // // 磁盘信息 // wt.query("SELECT * FROM Win32_PerfRawData_PerfDisk_PhysicalDisk Where Name != '_Total'"); System.out.println("// // 系统信息"); test.performOp("SELECT * FROM Win32_ComputerSystem"); System.out.println("// // CPU信息"); test.performOp("SELECT * FROM Win32_PerfFormattedData_PerfOS_Processor WHERE Name != '_Total'"); System.out.println("// // 内存信息"); test.performOp("SELECT * FROM Win32_PerfFormattedData_PerfOS_Memory"); System.out.println("// // 磁盘信息"); test.performOp("SELECT * FROM Win32_PerfRawData_PerfDisk_PhysicalDisk Where Name != '_Total'"); System.out.println("// // 进程信息"); test.performOp("SELECT * FROM Win32_Process Where Name != '_Total'"); test.killme(); } }
运行结果：
// // 系统信息 false false instance of Win32_ComputerSystem { AdminPasswordStatus = 1; AutomaticResetBootOption = TRUE; AutomaticResetCapability = TRUE; BootOptionOnLimit = 3; BootOptionOnWatchDog = 3; BootROMSupported = TRUE; BootupState = "Normal boot"; Caption = "WSC-DD1C1371359"; ChassisBootupState = 3; CreationClassName = "Win32_ComputerSystem"; CurrentTimeZone = 480; Description = "AT/AT COMPATIBLE"; Domain = "WORKGROUP"; DomainRole = 0; EnableDaylightSavingsTime = TRUE; FrontPanelResetStatus = 3; InfraredSupported = FALSE; KeyboardPasswordStatus = 3; Manufacturer = "VMware, Inc."; Model = "VMware Virtual Platform"; Name = "WSC-DD1C1371359"; NetworkServerModeEnabled = TRUE; NumberOfLogicalProcessors = 1; NumberOfProcessors = 1; OEMStringArray = {"[MS_VM_CERT/SHA1/27d66596a61c48dd3dc7216fd715126e33f59ae7]", "Welcome to the Virtual Machine"}; PartOfDomain = FALSE; PauseAfterReset = "3932100000"; PowerOnPasswordStatus = 0; PowerState = 0; PowerSupplyState = 3; PrimaryOwnerName = "wsc"; ResetCapability = 1; ResetCount = -1; ResetLimit = -1; Roles = {"LM_Workstation", "LM_Server", "NT"}; Status = "OK"; SystemStartupDelay = 30; SystemStartupOptions = {""Microsoft Windows XP Professional" /noexecute=optin /fastdetect"}; SystemStartupSetting = 0; SystemType = "X86-based PC"; ThermalState = 3; TotalPhysicalMemory = "536330240"; UserName = "WSC-DD1C1371359\wsc"; WakeUpType = 6; }; ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ // // CPU信息 wbemServices unreferenced... object2 unreferenced... false false instance of Win32_PerfFormattedData_PerfOS_Processor { C1TransitionsPersec = "80"; C2TransitionsPersec = "0"; C3TransitionsPersec = "0"; DPCRate = 0; DPCsQueuedPersec = 40; InterruptsPersec = 112; Name = "0"; PercentC1Time = "95"; PercentC2Time = "0"; PercentC3Time = "0"; PercentDPCTime = "0"; PercentIdleTime = "96"; PercentInterruptTime = "0"; PercentPrivilegedTime = "0"; PercentProcessorTime = "3"; PercentUserTime = "3"; }; ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ // // 内存信息 wbemServices unreferenced... object2 unreferenced... false false instance of Win32_PerfFormattedData_PerfOS_Memory { AvailableBytes = "368558080"; AvailableKBytes = "359920"; AvailableMBytes = "351"; CacheBytes = "48754688"; CacheBytesPeak = "57954304"; CacheFaultsPersec = 0; CommitLimit = "1306517504"; CommittedBytes = "128024576"; DemandZeroFaultsPersec = 28174; FreeSystemPageTableEntries = 24738; PageFaultsPersec = 28174; PageReadsPersec = 0; PagesInputPersec = 0; PagesOutputPersec = 0; PagesPersec = 0; PageWritesPersec = 0; PercentCommittedBytesInUse = 9; PoolNonpagedAllocs = 36196; PoolNonpagedBytes = "6221824"; PoolPagedAllocs = 53540; PoolPagedBytes = "25804800"; PoolPagedResidentBytes = "25137152"; SystemCacheResidentBytes = "21434368"; SystemCodeResidentBytes = "32768"; SystemCodeTotalBytes = "942080"; SystemDriverResidentBytes = "2150400"; SystemDriverTotalBytes = "3309568"; TransitionFaultsPersec = 0; WriteCopiesPersec = 0; }; ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ // // 磁盘信息 object2 unreferenced... wbemServices unreferenced... false false instance of Win32_PerfRawData_PerfDisk_PhysicalDisk { AvgDiskBytesPerRead = "181823488"; AvgDiskBytesPerRead_Base = 8801; AvgDiskBytesPerTransfer = "506663424"; AvgDiskBytesPerTransfer_Base = 24623; AvgDiskBytesPerWrite = "324839936"; AvgDiskBytesPerWrite_Base = 15822; AvgDiskQueueLength = "369424608"; AvgDiskReadQueueLength = "96234999"; AvgDisksecPerRead = 34447750; AvgDisksecPerRead_Base = 8801; AvgDisksecPerTransfer = 132237200; AvgDisksecPerTransfer_Base = 24623; AvgDisksecPerWrite = 97789449; AvgDisksecPerWrite_Base = 15822; AvgDiskWriteQueueLength = "273189609"; CurrentDiskQueueLength = 0; DiskBytesPersec = "506663424"; DiskReadBytesPersec = "181823488"; DiskReadsPersec = 8801; DiskTransfersPersec = 24623; DiskWriteBytesPersec = "324839936"; DiskWritesPersec = 15822; Frequency_Object = "0"; Frequency_PerfTime = "3579545"; Frequency_Sys100NS = "10000000"; Name = "0 C:"; PercentDiskReadTime = "96234999"; PercentDiskReadTime_Base = "130473211584062500"; PercentDiskTime = "369424608"; PercentDiskTime_Base = "130473211584062500"; PercentDiskWriteTime = "273189609"; PercentDiskWriteTime_Base = "130473211584062500"; PercentIdleTime = "22605673211"; PercentIdleTime_Base = "130473211584062500"; SplitIOPerSec = 2465; Timestamp_Object = "0"; Timestamp_PerfTime = "8298351509"; Timestamp_Sys100NS = "130473211584062500"; }; ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ // // 进程信息 wbemServices unreferenced... object2 unreferenced... false false instance of Win32_Process { Caption = "System Idle Process"; CreationClassName = "Win32_Process"; CSCreationClassName = "Win32_ComputerSystem"; CSName = "WSC-DD1C1371359"; Description = "System Idle Process"; Handle = "0"; HandleCount = 0; KernelModeTime = "20882343750"; Name = "System Idle Process"; OSCreationClassName = "Win32_OperatingSystem"; OSName = "Microsoft Windows XP Professional|C:\WINDOWS|\Device\Harddisk0\Partition1"; OtherOperationCount = "0"; OtherTransferCount = "0"; PageFaults = 0; PageFileUsage = 0; ParentProcessId = 0; PeakPageFileUsage = 0; PeakVirtualSize = "0"; PeakWorkingSetSize = 0; Priority = 0; PrivatePageCount = "0"; ProcessId = 0; QuotaNonPagedPoolUsage = 0; QuotaPagedPoolUsage = 0; QuotaPeakNonPagedPoolUsage = 0; QuotaPeakPagedPoolUsage = 0; ReadOperationCount = "0"; ReadTransferCount = "0"; SessionId = 0; ThreadCount = 1; UserModeTime = "0"; VirtualSize = "0"; WindowsVersion = "5.1.2600"; WorkingSetSize = "28672"; WriteOperationCount = "0"; WriteTransferCount = "0"; }; ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ instance of Win32_Process { Caption = "System"; CreationClassName = "Win32_Process"; CSCreationClassName = "Win32_ComputerSystem"; CSName = "WSC-DD1C1371359"; Description = "System"; Handle = "4"; HandleCount = 276; KernelModeTime = "120156250"; MaximumWorkingSetSize = 1413120; MinimumWorkingSetSize = 0; Name = "System"; OSCreationClassName = "Win32_OperatingSystem"; OSName = "Microsoft Windows XP Professional|C:\WINDOWS|\Device\Harddisk0\Partition1"; OtherOperationCount = "2937"; OtherTransferCount = "370800"; PageFaults = 4010; PageFileUsage = 0; ParentProcessId = 0; PeakPageFileUsage = 0; PeakVirtualSize = "2666496"; PeakWorkingSetSize = 2158592; Priority = 8; PrivatePageCount = "28672"; ProcessId = 4; QuotaNonPagedPoolUsage = 0; QuotaPagedPoolUsage = 0; QuotaPeakNonPagedPoolUsage = 0; QuotaPeakPagedPoolUsage = 0; ReadOperationCount = "100"; ReadTransferCount = "77484"; SessionId = 0; ThreadCount = 58; UserModeTime = "0"; VirtualSize = "1863680"; WindowsVersion = "5.1.2600"; WorkingSetSize = "303104"; WriteOperationCount = "1303"; WriteTransferCount = "6224370"; }; ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ instance of Win32_Process { Caption = "smss.exe"; CommandLine = "\SystemRoot\System32\smss.exe"; CreationClassName = "Win32_Process"; CreationDate = "20140615231403.296875+480"; CSCreationClassName = "Win32_ComputerSystem"; CSName = "WSC-DD1C1371359"; Description = "smss.exe"; ExecutablePath = "C:\WINDOWS\System32\smss.exe"; Handle = "516"; HandleCount = 19; KernelModeTime = "312500"; MaximumWorkingSetSize = 1413120; MinimumWorkingSetSize = 204800; Name = "smss.exe"; OSCreationClassName = "Win32_OperatingSystem"; OSName = "Microsoft Windows XP Professional|C:\WINDOWS|\Device\Harddisk0\Partition1"; OtherOperationCount = "161"; OtherTransferCount = "31238"; PageFaults = 209; PageFileUsage = 172032; ParentProcessId = 4; PeakPageFileUsage = 188416; PeakVirtualSize = "12152832"; PeakWorkingSetSize = 483328; Priority = 11; PrivatePageCount = "172032"; ProcessId = 516; QuotaNonPagedPoolUsage = 640; QuotaPagedPoolUsage = 6044; QuotaPeakNonPagedPoolUsage = 792; QuotaPeakPagedPoolUsage = 22116; ReadOperationCount = "8"; ReadTransferCount = "26"; SessionId = 0; ThreadCount = 3; UserModeTime = "156250"; VirtualSize = "3833856"; WindowsVersion = "5.1.2600"; WorkingSetSize = "397312"; WriteOperationCount = "4"; WriteTransferCount = "4"; }; ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ instance of Win32_Process { Caption = "csrss.exe"; CommandLine = "C:\WINDOWS\system32\csrss.exe ObjectDirectory=\Windows SharedSection=1024,3072,512 Windows=On SubSystemType=Windows ServerDll=basesrv,1 ServerDll=winsrv:UserServerDllInitialization,3 ServerDll=winsrv:ConServerDllInitialization,2 ProfileControl=Off MaxRequestThreads=16"; CreationClassName = "Win32_Process"; CreationDate = "20140615231405.578125+480"; CSCreationClassName = "Win32_ComputerSystem"; CSName = "WSC-DD1C1371359"; Description = "csrss.exe"; ExecutablePath = "C:\WINDOWS\system32\csrss.exe"; Handle = "596"; HandleCount = 372; KernelModeTime = "205937500"; MaximumWorkingSetSize = 1413120; MinimumWorkingSetSize = 204800; Name = "csrss.exe"; OSCreationClassName = "Win32_OperatingSystem"; OSName = "Microsoft Windows XP Professional|C:\WINDOWS|\Device\Harddisk0\Partition1"; OtherOperationCount = "23770"; OtherTransferCount = "280072"; PageFaults = 29394; PageFileUsage = 2428928; ParentProcessId = 516; PeakPageFileUsage = 2650112; PeakVirtualSize = "79278080"; PeakWorkingSetSize = 21041152; Priority = 13; PrivatePageCount = "2428928"; ProcessId = 596; QuotaNonPagedPoolUsage = 6648; QuotaPagedPoolUsage = 136172; QuotaPeakNonPagedPoolUsage = 7232; QuotaPeakPagedPoolUsage = 163324; ReadOperationCount = "27582"; ReadTransferCount = "1858573"; SessionId = 0; ThreadCount = 10; UserModeTime = "25468750"; VirtualSize = "65953792"; WindowsVersion = "5.1.2600"; WorkingSetSize = "6385664"; WriteOperationCount = "0"; WriteTransferCount = "0"; }; ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ instance of Win32_Process { Caption = "winlogon.exe"; CommandLine = "winlogon.exe"; CreationClassName = "Win32_Process"; CreationDate = "20140615231406.484375+480"; CSCreationClassName = "Win32_ComputerSystem"; CSName = "WSC-DD1C1371359"; Description = "winlogon.exe"; ExecutablePath = "C:\WINDOWS\system32\winlogon.exe"; Handle = "620"; HandleCount = 544; KernelModeTime = "40000000"; MaximumWorkingSetSize = 1413120; MinimumWorkingSetSize = 204800; Name = "winlogon.exe"; OSCreationClassName = "Win32_OperatingSystem"; OSName = "Microsoft Windows XP Professional|C:\WINDOWS|\Device\Harddisk0\Partition1"; OtherOperationCount = "9296"; OtherTransferCount = "224937"; PageFaults = 35993; PageFileUsage = 8613888; ParentProcessId = 516; PeakPageFileUsage = 18022400; PeakVirtualSize = "81559552"; PeakWorkingSetSize = 22265856; Priority = 13; PrivatePageCount = "8613888"; ProcessId = 620; QuotaNonPagedPoolUsage = 39472; QuotaPagedPoolUsage = 108172; QuotaPeakNonPagedPoolUsage = 43536; QuotaPeakPagedPoolUsage = 138420; ReadOperationCount = "257"; ReadTransferCount = "2281890"; SessionId = 0; ThreadCount = 20; UserModeTime = "10937500"; VirtualSize = "65028096"; WindowsVersion = "5.1.2600"; WorkingSetSize = "8458240"; WriteOperationCount = "418"; WriteTransferCount = "4786854"; }; ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ instance of Win32_Process { Caption = "services.exe"; CommandLine = "C:\WINDOWS\system32\services.exe"; CreationClassName = "Win32_Process"; CreationDate = "20140615231407.078125+480"; CSCreationClassName = "Win32_ComputerSystem"; CSName = "WSC-DD1C1371359"; Description = "services.exe"; ExecutablePath = "C:\WINDOWS\system32\services.exe"; Handle = "664"; HandleCount = 268; KernelModeTime = "14843750"; MaximumWorkingSetSize = 1413120; MinimumWorkingSetSize = 204800; Name = "services.exe"; OSCreationClassName = "Win32_OperatingSystem"; OSName = "Microsoft Windows XP Professional|C:\WINDOWS|\Device\Harddisk0\Partition1"; OtherOperationCount = "4336"; OtherTransferCount = "46967"; PageFaults = 3442; PageFileUsage = 4083712; ParentProcessId = 620; PeakPageFileUsage = 4608000; PeakVirtualSize = "52043776"; PeakWorkingSetSize = 7032832; Priority = 9; PrivatePageCount = "4083712"; ProcessId = 664; QuotaNonPagedPoolUsage = 6512; QuotaPagedPoolUsage = 37636; QuotaPeakNonPagedPoolUsage = 11584; QuotaPeakPagedPoolUsage = 81420; ReadOperationCount = "208"; ReadTransferCount = "6422804"; SessionId = 0; ThreadCount = 16; UserModeTime = "2656250"; VirtualSize = "25759744"; WindowsVersion = "5.1.2600"; WorkingSetSize = "4530176"; WriteOperationCount = "210"; WriteTransferCount = "1187383"; }; ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ instance of Win32_Process { Caption = "lsass.exe"; CommandLine = "C:\WINDOWS\system32\lsass.exe"; CreationClassName = "Win32_Process"; CreationDate = "20140615231407.125000+480"; CSCreationClassName = "Win32_ComputerSystem"; CSName = "WSC-DD1C1371359"; Description = "lsass.exe"; ExecutablePath = "C:\WINDOWS\system32\lsass.exe"; Handle = "676"; HandleCount = 355; KernelModeTime = "9375000"; MaximumWorkingSetSize = 1413120; MinimumWorkingSetSize = 204800; Name = "lsass.exe"; OSCreationClassName = "Win32_OperatingSystem"; OSName = "Microsoft Windows XP Professional|C:\WINDOWS|\Device\Harddisk0\Partition1"; OtherOperationCount = "11552"; OtherTransferCount = "92865"; PageFaults = 5660; PageFileUsage = 3895296; ParentProcessId = 620; PeakPageFileUsage = 4096000; PeakVirtualSize = "45924352"; PeakWorkingSetSize = 6762496; Priority = 9; PrivatePageCount = "3895296"; ProcessId = 676; QuotaNonPagedPoolUsage = 8768; QuotaPagedPoolUsage = 76084; QuotaPeakNonPagedPoolUsage = 11064; QuotaPeakPagedPoolUsage = 79644; ReadOperationCount = "5642"; ReadTransferCount = "1026411"; SessionId = 0; ThreadCount = 20; UserModeTime = "4218750"; VirtualSize = "44085248"; WindowsVersion = "5.1.2600"; WorkingSetSize = "1937408"; WriteOperationCount = "5066"; WriteTransferCount = "710548"; }; ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ instance of Win32_Process { Caption = "svchost.exe"; CommandLine = "C:\WINDOWS\system32\svchost -k rpcss"; CreationClassName = "Win32_Process"; CreationDate = "20140615231408.828125+480"; CSCreationClassName = "Win32_ComputerSystem"; CSName = "WSC-DD1C1371359"; Description = "svchost.exe"; ExecutablePath = "C:\WINDOWS\system32\svchost.exe"; Handle = "888"; HandleCount = 250; KernelModeTime = "2500000"; MaximumWorkingSetSize = 1413120; MinimumWorkingSetSize = 204800; Name = "svchost.exe"; OSCreationClassName = "Win32_OperatingSystem"; OSName = "Microsoft Windows XP Professional|C:\WINDOWS|\Device\Harddisk0\Partition1"; OtherOperationCount = "560"; OtherTransferCount = "22315"; PageFaults = 1389; PageFileUsage = 1994752; ParentProcessId = 664; PeakPageFileUsage = 2011136; PeakVirtualSize = "39129088"; PeakWorkingSetSize = 4980736; Priority = 8; PrivatePageCount = "1994752"; ProcessId = 888; QuotaNonPagedPoolUsage = 13968; QuotaPagedPoolUsage = 74892; QuotaPeakNonPagedPoolUsage = 15952; QuotaPeakPagedPoolUsage = 75316; ReadOperationCount = "113"; ReadTransferCount = "439164"; SessionId = 0; ThreadCount = 9; UserModeTime = "2031250"; VirtualSize = "38866944"; WindowsVersion = "5.1.2600"; WorkingSetSize = "4947968"; WriteOperationCount = "8"; WriteTransferCount = "444"; }; ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ instance of Win32_Process { Caption = "svchost.exe"; CommandLine = "C:\WINDOWS\System32\svchost.exe -k netsvcs"; CreationClassName = "Win32_Process"; CreationDate = "20140615231409.015625+480"; CSCreationClassName = "Win32_ComputerSystem"; CSName = "WSC-DD1C1371359"; Description = "svchost.exe"; ExecutablePath = "C:\WINDOWS\System32\svchost.exe"; Handle = "992"; HandleCount = 1908; KernelModeTime = "40468750"; MaximumWorkingSetSize = 1413120; MinimumWorkingSetSize = 204800; Name = "svchost.exe"; OSCreationClassName = "Win32_OperatingSystem"; OSName = "Microsoft Windows XP Professional|C:\WINDOWS|\Device\Harddisk0\Partition1"; OtherOperationCount = "31774"; OtherTransferCount = "452990"; PageFaults = 31949; PageFileUsage = 16052224; ParentProcessId = 664; PeakPageFileUsage = 20156416; PeakVirtualSize = "161574912"; PeakWorkingSetSize = 30507008; Priority = 8; PrivatePageCount = "16052224"; ProcessId = 992; QuotaNonPagedPoolUsage = 69464; QuotaPagedPoolUsage = 244924; QuotaPeakNonPagedPoolUsage = 72976; QuotaPeakPagedPoolUsage = 251708; ReadOperationCount = "2994"; ReadTransferCount = "20808396"; SessionId = 0; ThreadCount = 76; UserModeTime = "25781250"; VirtualSize = "153354240"; WindowsVersion = "5.1.2600"; WorkingSetSize = "26402816"; WriteOperationCount = "5089"; WriteTransferCount = "29132527"; }; ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ instance of Win32_Process { Caption = "svchost.exe"; CommandLine = "C:\WINDOWS\system32\svchost -k DcomLaunch"; CreationClassName = "Win32_Process"; CreationDate = "20140615231409.156250+480"; CSCreationClassName = "Win32_ComputerSystem"; CSName = "WSC-DD1C1371359"; Description = "svchost.exe"; ExecutablePath = "C:\WINDOWS\system32\svchost.exe"; Handle = "1036"; HandleCount = 231; KernelModeTime = "1250000"; MaximumWorkingSetSize = 1413120; MinimumWorkingSetSize = 204800; Name = "svchost.exe"; OSCreationClassName = "Win32_OperatingSystem"; OSName = "Microsoft Windows XP Professional|C:\WINDOWS|\Device\Harddisk0\Partition1"; OtherOperationCount = "762"; OtherTransferCount = "108740"; PageFaults = 1565; PageFileUsage = 3244032; ParentProcessId = 664; PeakPageFileUsage = 23957504; PeakVirtualSize = "68231168"; PeakWorkingSetSize = 5664768; Priority = 8; PrivatePageCount = "3244032"; ProcessId = 1036; QuotaNonPagedPoolUsage = 6864; QuotaPagedPoolUsage = 81780; QuotaPeakNonPagedPoolUsage = 7264; QuotaPeakPagedPoolUsage = 84580; ReadOperationCount = "128"; ReadTransferCount = "441196"; SessionId = 0; ThreadCount = 17; UserModeTime = "1250000"; VirtualSize = "66371584"; WindowsVersion = "5.1.2600"; WorkingSetSize = "5586944"; WriteOperationCount = "22"; WriteTransferCount = "1388"; }; ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ instance of Win32_Process { Caption = "svchost.exe"; CommandLine = "C:\WINDOWS\system32\svchost.exe -k NetworkService"; CreationClassName = "Win32_Process"; CreationDate = "20140615231430.390625+480"; CSCreationClassName = "Win32_ComputerSystem"; CSName = "WSC-DD1C1371359"; Description = "svchost.exe"; ExecutablePath = "C:\WINDOWS\system32\svchost.exe"; Handle = "1260"; HandleCount = 80; KernelModeTime = "781250"; MaximumWorkingSetSize = 1413120; MinimumWorkingSetSize = 204800; Name = "svchost.exe"; OSCreationClassName = "Win32_OperatingSystem"; OSName = "Microsoft Windows XP Professional|C:\WINDOWS|\Device\Harddisk0\Partition1"; OtherOperationCount = "461"; OtherTransferCount = "96287"; PageFaults = 1311; PageFileUsage = 1392640; ParentProcessId = 664; PeakPageFileUsage = 1531904; PeakVirtualSize = "34390016"; PeakWorkingSetSize = 3866624; Priority = 8; PrivatePageCount = "1392640"; ProcessId = 1260; QuotaNonPagedPoolUsage = 3808; QuotaPagedPoolUsage = 57564; QuotaPeakNonPagedPoolUsage = 6976; QuotaPeakPagedPoolUsage = 66964; ReadOperationCount = "124"; ReadTransferCount = "420304"; SessionId = 0; ThreadCount = 5; UserModeTime = "781250"; VirtualSize = "31436800"; WindowsVersion = "5.1.2600"; WorkingSetSize = "3780608"; WriteOperationCount = "13"; WriteTransferCount = "228"; }; ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ instance of Win32_Process { Caption = "svchost.exe"; CommandLine = "C:\WINDOWS\system32\svchost.exe -k LocalService"; CreationClassName = "Win32_Process"; CreationDate = "20140615231430.671875+480"; CSCreationClassName = "Win32_ComputerSystem"; CSName = "WSC-DD1C1371359"; Description = "svchost.exe"; ExecutablePath = "C:\WINDOWS\system32\svchost.exe"; Handle = "1384"; HandleCount = 233; KernelModeTime = "2031250"; MaximumWorkingSetSize = 1413120; MinimumWorkingSetSize = 204800; Name = "svchost.exe"; OSCreationClassName = "Win32_OperatingSystem"; OSName = "Microsoft Windows XP Professional|C:\WINDOWS|\Device\Harddisk0\Partition1"; OtherOperationCount = "895"; OtherTransferCount = "106204"; PageFaults = 1483; PageFileUsage = 2035712; ParentProcessId = 664; PeakPageFileUsage = 2035712; PeakVirtualSize = "43114496"; PeakWorkingSetSize = 5562368; Priority = 8; PrivatePageCount = "2035712"; ProcessId = 1384; QuotaNonPagedPoolUsage = 6760; QuotaPagedPoolUsage = 78860; QuotaPeakNonPagedPoolUsage = 10128; QuotaPeakPagedPoolUsage = 80620; ReadOperationCount = "52"; ReadTransferCount = "28132"; SessionId = 0; ThreadCount = 16; UserModeTime = "468750"; VirtualSize = "42979328"; WindowsVersion = "5.1.2600"; WorkingSetSize = "5562368"; WriteOperationCount = "38"; WriteTransferCount = "2056"; }; ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ instance of Win32_Process { Caption = "spoolsv.exe"; CommandLine = "C:\WINDOWS\system32\spoolsv.exe"; CreationClassName = "Win32_Process"; CreationDate = "20140615231431.156250+480"; CSCreationClassName = "Win32_ComputerSystem"; CSName = "WSC-DD1C1371359"; Description = "spoolsv.exe"; ExecutablePath = "C:\WINDOWS\system32\spoolsv.exe"; Handle = "1512"; HandleCount = 109; KernelModeTime = "1406250"; MaximumWorkingSetSize = 1413120; MinimumWorkingSetSize = 204800; Name = "spoolsv.exe"; OSCreationClassName = "Win32_OperatingSystem"; OSName = "Microsoft Windows XP Professional|C:\WINDOWS|\Device\Harddisk0\Partition1"; OtherOperationCount = "305"; OtherTransferCount = "4316"; PageFaults = 1336; PageFileUsage = 3166208; ParentProcessId = 664; PeakPageFileUsage = 3391488; PeakVirtualSize = "48046080"; PeakWorkingSetSize = 4837376; Priority = 8; PrivatePageCount = "3166208"; ProcessId = 1512; QuotaNonPagedPoolUsage = 4752; QuotaPagedPoolUsage = 80924; QuotaPeakNonPagedPoolUsage = 6792; QuotaPeakPagedPoolUsage = 84164; ReadOperationCount = "8"; ReadTransferCount = "22632"; SessionId = 0; ThreadCount = 11; UserModeTime = "468750"; VirtualSize = "45596672"; WindowsVersion = "5.1.2600"; WorkingSetSize = "4816896"; WriteOperationCount = "7"; WriteTransferCount = "372"; }; ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ instance of Win32_Process { Caption = "alg.exe"; CommandLine = "C:\WINDOWS\System32\alg.exe"; CreationClassName = "Win32_Process"; CreationDate = "20140615231457.234375+480"; CSCreationClassName = "Win32_ComputerSystem"; CSName = "WSC-DD1C1371359"; Description = "alg.exe"; ExecutablePath = "C:\WINDOWS\System32\alg.exe"; Handle = "572"; HandleCount = 102; KernelModeTime = "468750"; MaximumWorkingSetSize = 1413120; MinimumWorkingSetSize = 204800; Name = "alg.exe"; OSCreationClassName = "Win32_OperatingSystem"; OSName = "Microsoft Windows XP Professional|C:\WINDOWS|\Device\Harddisk0\Partition1"; OtherOperationCount = "164"; OtherTransferCount = "3164"; PageFaults = 954; PageFileUsage = 1265664; ParentProcessId = 664; PeakPageFileUsage = 1277952; PeakVirtualSize = "37081088"; PeakWorkingSetSize = 3772416; Priority = 8; PrivatePageCount = "1265664"; ProcessId = 572; QuotaNonPagedPoolUsage = 4848; QuotaPagedPoolUsage = 71036; QuotaPeakNonPagedPoolUsage = 6048; QuotaPeakPagedPoolUsage = 71724; ReadOperationCount = "5"; ReadTransferCount = "22432"; SessionId = 0; ThreadCount = 6; UserModeTime = "312500"; VirtualSize = "36818944"; WindowsVersion = "5.1.2600"; WorkingSetSize = "3768320"; WriteOperationCount = "4"; WriteTransferCount = "156"; }; ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ instance of Win32_Process { Caption = "wscntfy.exe"; CommandLine = "C:\WINDOWS\system32\wscntfy.exe"; CreationClassName = "Win32_Process"; CreationDate = "20140615231551.812500+480"; CSCreationClassName = "Win32_ComputerSystem"; CSName = "WSC-DD1C1371359"; Description = "wscntfy.exe"; ExecutablePath = "C:\WINDOWS\system32\wscntfy.exe"; Handle = "1340"; HandleCount = 37; KernelModeTime = "468750"; MaximumWorkingSetSize = 1413120; MinimumWorkingSetSize = 204800; Name = "wscntfy.exe"; OSCreationClassName = "Win32_OperatingSystem"; OSName = "Microsoft Windows XP Professional|C:\WINDOWS|\Device\Harddisk0\Partition1"; OtherOperationCount = "99"; OtherTransferCount = "2110"; PageFaults = 658; PageFileUsage = 684032; ParentProcessId = 992; PeakPageFileUsage = 684032; PeakVirtualSize = "31674368"; PeakWorkingSetSize = 2580480; Priority = 8; PrivatePageCount = "684032"; ProcessId = 1340; QuotaNonPagedPoolUsage = 2000; QuotaPagedPoolUsage = 64036; QuotaPeakNonPagedPoolUsage = 2024; QuotaPeakPagedPoolUsage = 65020; ReadOperationCount = "0"; ReadTransferCount = "0"; SessionId = 0; ThreadCount = 1; UserModeTime = "312500"; VirtualSize = "31674368"; WindowsVersion = "5.1.2600"; WorkingSetSize = "2580480"; WriteOperationCount = "0"; WriteTransferCount = "0"; }; ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ instance of Win32_Process { Caption = "explorer.exe"; CommandLine = "C:\WINDOWS\Explorer.EXE"; CreationClassName = "Win32_Process"; CreationDate = "20140615231552.000000+480"; CSCreationClassName = "Win32_ComputerSystem"; CSName = "WSC-DD1C1371359"; Description = "explorer.exe"; ExecutablePath = "C:\WINDOWS\Explorer.EXE"; Handle = "1408"; HandleCount = 485; KernelModeTime = "454218750"; MaximumWorkingSetSize = 1413120; MinimumWorkingSetSize = 204800; Name = "explorer.exe"; OSCreationClassName = "Win32_OperatingSystem"; OSName = "Microsoft Windows XP Professional|C:\WINDOWS|\Device\Harddisk0\Partition1"; OtherOperationCount = "93067"; OtherTransferCount = "2650807"; PageFaults = 89090; PageFileUsage = 13684736; ParentProcessId = 1236; PeakPageFileUsage = 18440192; PeakVirtualSize = "959401984"; PeakWorkingSetSize = 21835776; Priority = 8; PrivatePageCount = "13684736"; ProcessId = 1408; QuotaNonPagedPoolUsage = 11520; QuotaPagedPoolUsage = 147492; QuotaPeakNonPagedPoolUsage = 16176; QuotaPeakPagedPoolUsage = 1850084; ReadOperationCount = "6109"; ReadTransferCount = "170032752"; SessionId = 0; ThreadCount = 12; UserModeTime = "89062500"; VirtualSize = "87437312"; WindowsVersion = "5.1.2600"; WorkingSetSize = "17227776"; WriteOperationCount = "4791"; WriteTransferCount = "192941865"; }; ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ instance of Win32_Process { Caption = "ctfmon.exe"; CommandLine = ""C:\WINDOWS\system32\CTFMON.EXE" "; CreationClassName = "Win32_Process"; CreationDate = "20140615231609.546875+480"; CSCreationClassName = "Win32_ComputerSystem"; CSName = "WSC-DD1C1371359"; Description = "ctfmon.exe"; ExecutablePath = "C:\WINDOWS\system32\CTFMON.EXE"; Handle = "2004"; HandleCount = 109; KernelModeTime = "2968750"; MaximumWorkingSetSize = 1413120; MinimumWorkingSetSize = 204800; Name = "ctfmon.exe"; OSCreationClassName = "Win32_OperatingSystem"; OSName = "Microsoft Windows XP Professional|C:\WINDOWS|\Device\Harddisk0\Partition1"; OtherOperationCount = "181"; OtherTransferCount = "316"; PageFaults = 2628; PageFileUsage = 1343488; ParentProcessId = 1408; PeakPageFileUsage = 1404928; PeakVirtualSize = "41644032"; PeakWorkingSetSize = 4288512; Priority = 8; PrivatePageCount = "1343488"; ProcessId = 2004; QuotaNonPagedPoolUsage = 4720; QuotaPagedPoolUsage = 79148; QuotaPeakNonPagedPoolUsage = 5840; QuotaPeakPagedPoolUsage = 82388; ReadOperationCount = "0"; ReadTransferCount = "0"; SessionId = 0; ThreadCount = 1; UserModeTime = "1562500"; VirtualSize = "41009152"; WindowsVersion = "5.1.2600"; WorkingSetSize = "4177920"; WriteOperationCount = "0"; WriteTransferCount = "0"; }; ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ instance of Win32_Process { Caption = "wpabaln.exe"; CommandLine = "C:\WINDOWS\system32\wpabaln.exe"; CreationClassName = "Win32_Process"; CreationDate = "20140615231751.640625+480"; CSCreationClassName = "Win32_ComputerSystem"; CSName = "WSC-DD1C1371359"; Description = "wpabaln.exe"; ExecutablePath = "C:\WINDOWS\system32\wpabaln.exe"; Handle = "300"; HandleCount = 67; KernelModeTime = "625000"; MaximumWorkingSetSize = 1413120; MinimumWorkingSetSize = 204800; Name = "wpabaln.exe"; OSCreationClassName = "Win32_OperatingSystem"; OSName = "Microsoft Windows XP Professional|C:\WINDOWS|\Device\Harddisk0\Partition1"; OtherOperationCount = "112"; OtherTransferCount = "2196"; PageFaults = 828; PageFileUsage = 1064960; ParentProcessId = 620; PeakPageFileUsage = 1064960; PeakVirtualSize = "37031936"; PeakWorkingSetSize = 3260416; Priority = 8; PrivatePageCount = "1064960"; ProcessId = 300; QuotaNonPagedPoolUsage = 2560; QuotaPagedPoolUsage = 64204; QuotaPeakNonPagedPoolUsage = 3680; QuotaPeakPagedPoolUsage = 72124; ReadOperationCount = "1"; ReadTransferCount = "22264"; SessionId = 0; ThreadCount = 1; UserModeTime = "156250"; VirtualSize = "32608256"; WindowsVersion = "5.1.2600"; WorkingSetSize = "3260416"; WriteOperationCount = "0"; WriteTransferCount = "0"; }; ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ instance of Win32_Process { Caption = "conime.exe"; CommandLine = "C:\WINDOWS\system32\conime.exe"; CreationClassName = "Win32_Process"; CreationDate = "20140615231835.328125+480"; CSCreationClassName = "Win32_ComputerSystem"; CSName = "WSC-DD1C1371359"; Description = "conime.exe"; ExecutablePath = "C:\WINDOWS\system32\conime.exe"; Handle = "120"; HandleCount = 38; KernelModeTime = "468750"; MaximumWorkingSetSize = 1413120; MinimumWorkingSetSize = 204800; Name = "conime.exe"; OSCreationClassName = "Win32_OperatingSystem"; OSName = "Microsoft Windows XP Professional|C:\WINDOWS|\Device\Harddisk0\Partition1"; OtherOperationCount = "164"; OtherTransferCount = "384"; PageFaults = 853; PageFileUsage = 983040; ParentProcessId = 1212; PeakPageFileUsage = 983040; PeakVirtualSize = "37023744"; PeakWorkingSetSize = 3272704; Priority = 8; PrivatePageCount = "983040"; ProcessId = 120; QuotaNonPagedPoolUsage = 2520; QuotaPagedPoolUsage = 61764; QuotaPeakNonPagedPoolUsage = 2560; QuotaPeakPagedPoolUsage = 72108; ReadOperationCount = "0"; ReadTransferCount = "0"; SessionId = 0; ThreadCount = 1; UserModeTime = "312500"; VirtualSize = "31629312"; WindowsVersion = "5.1.2600"; WorkingSetSize = "3268608"; WriteOperationCount = "0"; WriteTransferCount = "0"; }; ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ instance of Win32_Process { Caption = "dllhost.exe"; CommandLine = "C:\WINDOWS\system32\dllhost.exe /Processid:{02D4B3F1-FD88-11D1-960D-00805FC79235}"; CreationClassName = "Win32_Process"; CreationDate = "20140615232735.453125+480"; CSCreationClassName = "Win32_ComputerSystem"; CSName = "WSC-DD1C1371359"; Description = "dllhost.exe"; ExecutablePath = "C:\WINDOWS\system32\dllhost.exe"; Handle = "1176"; HandleCount = 229; KernelModeTime = "2343750"; MaximumWorkingSetSize = 1413120; MinimumWorkingSetSize = 204800; Name = "dllhost.exe"; OSCreationClassName = "Win32_OperatingSystem"; OSName = "Microsoft Windows XP Professional|C:\WINDOWS|\Device\Harddisk0\Partition1"; OtherOperationCount = "367"; OtherTransferCount = "8578"; PageFaults = 2266; PageFileUsage = 3084288; ParentProcessId = 664; PeakPageFileUsage = 4337664; PeakVirtualSize = "54083584"; PeakWorkingSetSize = 8798208; Priority = 8; PrivatePageCount = "3084288"; ProcessId = 1176; QuotaNonPagedPoolUsage = 5920; QuotaPagedPoolUsage = 88772; QuotaPeakNonPagedPoolUsage = 8800; QuotaPeakPagedPoolUsage = 90628; ReadOperationCount = "4271"; ReadTransferCount = "2596407"; SessionId = 0; ThreadCount = 14; UserModeTime = "2656250"; VirtualSize = "50540544"; WindowsVersion = "5.1.2600"; WorkingSetSize = "8642560"; WriteOperationCount = "25"; WriteTransferCount = "4853"; }; ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ instance of Win32_Process { Caption = "msdtc.exe"; CommandLine = "C:\WINDOWS\system32\msdtc.exe"; CreationClassName = "Win32_Process"; CreationDate = "20140615232736.015625+480"; CSCreationClassName = "Win32_ComputerSystem"; CSName = "WSC-DD1C1371359"; Description = "msdtc.exe"; ExecutablePath = "C:\WINDOWS\system32\msdtc.exe"; Handle = "560"; HandleCount = 151; KernelModeTime = "1406250"; MaximumWorkingSetSize = 1413120; MinimumWorkingSetSize = 204800; Name = "msdtc.exe"; OSCreationClassName = "Win32_OperatingSystem"; OSName = "Microsoft Windows XP Professional|C:\WINDOWS|\Device\Harddisk0\Partition1"; OtherOperationCount = "257"; OtherTransferCount = "6752"; PageFaults = 1453; PageFileUsage = 1978368; ParentProcessId = 664; PeakPageFileUsage = 2101248; PeakVirtualSize = "38850560"; PeakWorkingSetSize = 5337088; Priority = 8; PrivatePageCount = "1978368"; ProcessId = 560; QuotaNonPagedPoolUsage = 6200; QuotaPagedPoolUsage = 64588; QuotaPeakNonPagedPoolUsage = 7960; QuotaPeakPagedPoolUsage = 74300; ReadOperationCount = "5"; ReadTransferCount = "22436"; SessionId = 0; ThreadCount = 12; UserModeTime = "781250"; VirtualSize = "37498880"; WindowsVersion = "5.1.2600"; WorkingSetSize = "5251072"; WriteOperationCount = "16"; WriteTransferCount = "40612"; }; ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ instance of Win32_Process { Caption = "dllhost.exe"; CommandLine = "C:\WINDOWS\system32\DllHost.exe /Processid:{76A64158-CB41-11D1-8B02-00600806D9B6}"; CreationClassName = "Win32_Process"; CreationDate = "20140615233532.437500+480"; CSCreationClassName = "Win32_ComputerSystem"; CSName = "WSC-DD1C1371359"; Description = "dllhost.exe"; ExecutablePath = "C:\WINDOWS\system32\DllHost.exe"; Handle = "172"; HandleCount = 179; KernelModeTime = "9843750"; MaximumWorkingSetSize = 1413120; MinimumWorkingSetSize = 204800; Name = "dllhost.exe"; OSCreationClassName = "Win32_OperatingSystem"; OSName = "Microsoft Windows XP Professional|C:\WINDOWS|\Device\Harddisk0\Partition1"; OtherOperationCount = "12894"; OtherTransferCount = "2027691"; PageFaults = 3445; PageFileUsage = 4878336; ParentProcessId = 1036; PeakPageFileUsage = 6991872; PeakVirtualSize = "49643520"; PeakWorkingSetSize = 11132928; Priority = 8; PrivatePageCount = "4878336"; ProcessId = 172; QuotaNonPagedPoolUsage = 8984; QuotaPagedPoolUsage = 80180; QuotaPeakNonPagedPoolUsage = 13000; QuotaPeakPagedPoolUsage = 80180; ReadOperationCount = "136"; ReadTransferCount = "439444"; SessionId = 0; ThreadCount = 8; UserModeTime = "13593750"; VirtualSize = "49643520"; WindowsVersion = "5.1.2600"; WorkingSetSize = "9076736"; WriteOperationCount = "4"; WriteTransferCount = "288"; }; ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ instance of Win32_Process { Caption = "wmiprvse.exe"; CommandLine = "C:\WINDOWS\system32\wbem\wmiprvse.exe"; CreationClassName = "Win32_Process"; CreationDate = "20140615235236.765625+480"; CSCreationClassName = "Win32_ComputerSystem"; CSName = "WSC-DD1C1371359"; Description = "wmiprvse.exe"; ExecutablePath = "C:\WINDOWS\system32\wbem\wmiprvse.exe"; Handle = "1172"; HandleCount = 170; KernelModeTime = "1406250"; MaximumWorkingSetSize = 1413120; MinimumWorkingSetSize = 204800; Name = "wmiprvse.exe"; OSCreationClassName = "Win32_OperatingSystem"; OSName = "Microsoft Windows XP Professional|C:\WINDOWS|\Device\Harddisk0\Partition1"; OtherOperationCount = "602"; OtherTransferCount = "110860"; PageFaults = 2299; PageFileUsage = 3166208; ParentProcessId = 1036; PeakPageFileUsage = 3428352; PeakVirtualSize = "49258496"; PeakWorkingSetSize = 7524352; Priority = 8; PrivatePageCount = "3166208"; ProcessId = 1172; QuotaNonPagedPoolUsage = 5832; QuotaPagedPoolUsage = 81828; QuotaPeakNonPagedPoolUsage = 6280; QuotaPeakPagedPoolUsage = 81972; ReadOperationCount = "67"; ReadTransferCount = "295563"; SessionId = 0; ThreadCount = 8; UserModeTime = "937500"; VirtualSize = "49258496"; WindowsVersion = "5.1.2600"; WorkingSetSize = "7401472"; WriteOperationCount = "61"; WriteTransferCount = "4288"; }; ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++