//WBEM Performance Data MOF Dumped from machine BOBW5-50FRE by Ctrlist on 03/12/98 14:31:25 qualifier vendor:ToInstance; qualifier guid:ToInstance; qualifier locale:ToInstance; qualifier displayname:ToInstance; qualifier perfindex:ToInstance; qualifier helpindex:ToInstance; qualifier perfdetail:ToInstance; qualifier countertype:ToInstance; qualifier perfdefault:ToInstance; qualifier defaultscale:ToInstance; [abstract] class Win32_Perf { }; [abstract] class Win32_PerfRawData : Win32_Perf { }; class Win32_PerfFormattedData : Win32_Perf { uint32 SampleInterval; }; [ vendor("Microsoft"), guid(""), locale("ms:\\0x0409"), displayname("Content Index Filter"), perfindex(1902), helpindex(1903), perfdetail(100) ] class Win32Perf_ContentIndexFilter : Win32_PerfFormattedData { [key] string Name; uint64 Timestamp; [ perfdefault, displayname("Total filter speed (MBytes/hr)"), countertype(65536), perfindex(1904), helpindex(1905), defaultscale(0), perfdetail(100) ] uint32 TotalFilterSpeedMBytesPerHr; [ displayname("Binding time (msec)"), countertype(65536), perfindex(1906), helpindex(1907), defaultscale(-1), perfdetail(100) ] uint32 BindingTimeMsec; [ displayname("Filter speed (MBytes/hr)"), countertype(65536), perfindex(1908), helpindex(1909), defaultscale(0), perfdetail(100) ] uint32 FilterSpeedMBytesPerHr; }; [ vendor("Microsoft"), guid(""), locale("ms:\\0x0409"), displayname("Content Index Filter"), perfindex(1902), helpindex(1903), perfdetail(100) ] class Win32Perf_RawContentIndexFilter : Win32_PerfRawData { [key] string Name; uint64 Timestamp; [ perfdefault, displayname("Total filter speed (MBytes/hr)"), countertype(65536), perfindex(1904), helpindex(1905), defaultscale(0), perfdetail(100) ] uint32 TotalFilterSpeedMBytesPerHr; [ displayname("Binding time (msec)"), countertype(65536), perfindex(1906), helpindex(1907), defaultscale(-1), perfdetail(100) ] uint32 BindingTimeMsec; [ displayname("Filter speed (MBytes/hr)"), countertype(65536), perfindex(1908), helpindex(1909), defaultscale(0), perfdetail(100) ] uint32 FilterSpeedMBytesPerHr; }; [ vendor("Microsoft"), guid(""), locale("ms:\\0x0409"), displayname("Content Index"), perfindex(1880), helpindex(1881), perfdetail(100) ] class Win32Perf_ContentIndex : Win32_PerfFormattedData { [key] string Name; uint64 Timestamp; [ perfdefault, displayname("Wordlists"), countertype(65536), perfindex(1882), helpindex(1883), defaultscale(0), perfdetail(100) ] uint32 Wordlists; [ displayname("Persistent indexes"), countertype(65536), perfindex(1884), helpindex(1885), defaultscale(0), perfdetail(100) ] uint32 PersistentIndexes; [ displayname("Index size (MBytes)"), countertype(65536), perfindex(1886), helpindex(1887), defaultscale(0), perfdetail(100) ] uint32 IndexSizeMBytes; [ displayname("Files to be filtered"), countertype(65536), perfindex(1888), helpindex(1889), defaultscale(0), perfdetail(100) ] uint32 FilesToBeFiltered; [ displayname("Unique keys"), countertype(65536), perfindex(1890), helpindex(1891), defaultscale(0), perfdetail(100) ] uint32 UniqueKeys; [ displayname("Running queries"), countertype(65536), perfindex(1892), helpindex(1893), defaultscale(0), perfdetail(100) ] uint32 RunningQueries; [ displayname("Merge progress"), countertype(65536), perfindex(1894), helpindex(1895), defaultscale(0), perfdetail(100) ] uint32 MergeProgress; [ displayname("# documents filtered"), countertype(65536), perfindex(1896), helpindex(1897), defaultscale(0), perfdetail(100) ] uint32 NumberOfDocumentsFiltered; [ displayname("Total # documents"), countertype(65536), perfindex(1898), helpindex(1899), defaultscale(0), perfdetail(100) ] uint32 TotalNumberOfDocuments; [ displayname("Total # of queries"), countertype(65536), perfindex(1900), helpindex(1901), defaultscale(0), perfdetail(100) ] uint32 TotalNumberOfOfQueries; }; [ vendor("Microsoft"), guid(""), locale("ms:\\0x0409"), displayname("Content Index"), perfindex(1880), helpindex(1881), perfdetail(100) ] class Win32Perf_RawContentIndex : Win32_PerfRawData { [key] string Name; uint64 Timestamp; [ perfdefault, displayname("Wordlists"), countertype(65536), perfindex(1882), helpindex(1883), defaultscale(0), perfdetail(100) ] uint32 Wordlists; [ displayname("Persistent indexes"), countertype(65536), perfindex(1884), helpindex(1885), defaultscale(0), perfdetail(100) ] uint32 PersistentIndexes; [ displayname("Index size (MBytes)"), countertype(65536), perfindex(1886), helpindex(1887), defaultscale(0), perfdetail(100) ] uint32 IndexSizeMBytes; [ displayname("Files to be filtered"), countertype(65536), perfindex(1888), helpindex(1889), defaultscale(0), perfdetail(100) ] uint32 FilesToBeFiltered; [ displayname("Unique keys"), countertype(65536), perfindex(1890), helpindex(1891), defaultscale(0), perfdetail(100) ] uint32 UniqueKeys; [ displayname("Running queries"), countertype(65536), perfindex(1892), helpindex(1893), defaultscale(0), perfdetail(100) ] uint32 RunningQueries; [ displayname("Merge progress"), countertype(65536), perfindex(1894), helpindex(1895), defaultscale(0), perfdetail(100) ] uint32 MergeProgress; [ displayname("# documents filtered"), countertype(65536), perfindex(1896), helpindex(1897), defaultscale(0), perfdetail(100) ] uint32 NumberOfDocumentsFiltered; [ displayname("Total # documents"), countertype(65536), perfindex(1898), helpindex(1899), defaultscale(0), perfdetail(100) ] uint32 TotalNumberOfDocuments; [ displayname("Total # of queries"), countertype(65536), perfindex(1900), helpindex(1901), defaultscale(0), perfdetail(100) ] uint32 TotalNumberOfOfQueries; }; [ singleton, vendor("Microsoft"), guid(""), locale("ms:\\0x0409"), displayname("Http Content Index"), perfindex(1910), helpindex(1911), perfdetail(100) ] class Win32Perf_HttpContentIndex : Win32_PerfFormattedData { uint64 Timestamp; [ displayname("Cache items"), countertype(65536), perfindex(1912), helpindex(1913), defaultscale(0), perfdetail(100) ] uint32 CacheItems; [ perfdefault, displayname("% Cache hits"), countertype(537003008), perfindex(1914), helpindex(1915), defaultscale(-1), perfdetail(100) ] real64 PercentCacheHits; [ displayname("% Cache misses"), countertype(537003008), perfindex(1918), helpindex(1919), defaultscale(0), perfdetail(100) ] real64 PercentCacheMisses; [ displayname("Active queries"), countertype(65536), perfindex(1922), helpindex(1923), defaultscale(0), perfdetail(100) ] uint32 ActiveQueries; [ displayname("Total queries"), countertype(65536), perfindex(1924), helpindex(1925), defaultscale(0), perfdetail(100) ] uint32 TotalQueries; [ displayname("Queries per minute"), countertype(65536), perfindex(1926), helpindex(1927), defaultscale(0), perfdetail(100) ] uint32 QueriesPerMinute; [ displayname("Current requests queued"), countertype(65536), perfindex(1928), helpindex(1929), defaultscale(0), perfdetail(100) ] uint32 CurrentRequestsQueued; [ displayname("Total requests rejected"), countertype(65536), perfindex(1930), helpindex(1931), defaultscale(0), perfdetail(100) ] uint32 TotalRequestsRejected; }; [ singleton, vendor("Microsoft"), guid(""), locale("ms:\\0x0409"), displayname("Http Content Index"), perfindex(1910), helpindex(1911), perfdetail(100) ] class Win32Perf_RawHttpContentIndex : Win32_PerfRawData { uint64 Timestamp; [ displayname("Cache items"), countertype(65536), perfindex(1912), helpindex(1913), defaultscale(0), perfdetail(100) ] uint32 CacheItems; [ perfdefault, displayname("% Cache hits"), countertype(537003008), perfindex(1914), helpindex(1915), defaultscale(-1), perfdetail(100) ] uint32 PercentCacheHits; [ displayname("Total cache accesses"), countertype(1073939459), perfindex(1916), helpindex(1917), defaultscale(-1), perfdetail(100) ] uint32 TotalCacheAccesses_Base; [ displayname("% Cache misses"), countertype(537003008), perfindex(1918), helpindex(1919), defaultscale(0), perfdetail(100) ] uint32 PercentCacheMisses; [ displayname("Active queries"), countertype(65536), perfindex(1922), helpindex(1923), defaultscale(0), perfdetail(100) ] uint32 ActiveQueries; [ displayname("Total queries"), countertype(65536), perfindex(1924), helpindex(1925), defaultscale(0), perfdetail(100) ] uint32 TotalQueries; [ displayname("Queries per minute"), countertype(65536), perfindex(1926), helpindex(1927), defaultscale(0), perfdetail(100) ] uint32 QueriesPerMinute; [ displayname("Current requests queued"), countertype(65536), perfindex(1928), helpindex(1929), defaultscale(0), perfdetail(100) ] uint32 CurrentRequestsQueued; [ displayname("Total requests rejected"), countertype(65536), perfindex(1930), helpindex(1931), defaultscale(0), perfdetail(100) ] uint32 TotalRequestsRejected; }; instance of Win32Perf_RawHttpContentIndex { Timestamp = 0x01bd4e0698b44adc; CacheItems = 0x00000000; PercentCacheHits = 0x00000000; TotalCacheAccesses_Base = 0x00000000; PercentCacheMisses = 0x00000000; ActiveQueries = 0x00000000; TotalQueries = 0x00000000; QueriesPerMinute = 0x00000000; CurrentRequestsQueued = 0x00000000; TotalRequestsRejected = 0x00000000; }; [ vendor("Microsoft"), guid(""), locale("ms:\\0x0409"), displayname("NWLink IPX"), perfindex(488), helpindex(489), perfdetail(200) ] class Win32Perf_NWLinkIPX : Win32_PerfFormattedData { [key] string Name; uint64 Timestamp; [ displayname("Datagrams/sec"), countertype(272696320), perfindex(438), helpindex(439), defaultscale(-1), perfdetail(200) ] real64 DatagramsPerSec; [ displayname("Datagram Bytes/sec"), countertype(272696576), perfindex(440), helpindex(441), defaultscale(-4), perfdetail(200) ] real64 DatagramBytesPerSec; [ displayname("Packets/sec"), countertype(272696320), perfindex(400), helpindex(451), defaultscale(-1), perfdetail(200) ] real64 PacketsPerSec; [ displayname("Frames/sec"), countertype(272696320), perfindex(456), helpindex(457), defaultscale(-1), perfdetail(200) ] real64 FramesPerSec; [ displayname("Frame Bytes/sec"), countertype(272696576), perfindex(458), helpindex(459), defaultscale(-4), perfdetail(200) ] real64 FrameBytesPerSec; [ perfdefault, displayname("Bytes Total/sec"), countertype(272696576), perfindex(388), helpindex(67), defaultscale(-4), perfdetail(200) ] real64 BytesTotalPerSec; [ displayname("Connections Open"), countertype(65536), perfindex(412), helpindex(413), defaultscale(0), perfdetail(200) ] uint32 ConnectionsOpen; [ displayname("Connections No Retries"), countertype(65536), perfindex(414), helpindex(415), defaultscale(0), perfdetail(200) ] uint32 ConnectionsNoRetries; [ displayname("Connections With Retries"), countertype(65536), perfindex(416), helpindex(417), defaultscale(0), perfdetail(200) ] uint32 ConnectionsWithRetries; [ displayname("Disconnects Local"), countertype(65536), perfindex(418), helpindex(419), defaultscale(0), perfdetail(200) ] uint32 DisconnectsLocal; [ displayname("Disconnects Remote"), countertype(65536), perfindex(420), helpindex(421), defaultscale(0), perfdetail(200) ] uint32 DisconnectsRemote; [ displayname("Failures Link"), countertype(65536), perfindex(422), helpindex(423), defaultscale(0), perfdetail(200) ] uint32 FailuresLink; [ displayname("Failures Adapter"), countertype(65536), perfindex(424), helpindex(425), defaultscale(0), perfdetail(200) ] uint32 FailuresAdapter; [ displayname("Connection Session Timeouts"), countertype(65536), perfindex(426), helpindex(427), defaultscale(0), perfdetail(200) ] uint32 ConnectionSessionTimeouts; [ displayname("Connections Canceled"), countertype(65536), perfindex(428), helpindex(429), defaultscale(0), perfdetail(200) ] uint32 ConnectionsCanceled; [ displayname("Failures Resource Remote"), countertype(65536), perfindex(430), helpindex(431), defaultscale(0), perfdetail(200) ] uint32 FailuresResourceRemote; [ displayname("Failures Resource Local"), countertype(65536), perfindex(432), helpindex(433), defaultscale(0), perfdetail(200) ] uint32 FailuresResourceLocal; [ displayname("Failures Not Found"), countertype(65536), perfindex(434), helpindex(435), defaultscale(0), perfdetail(200) ] uint32 FailuresNotFound; [ displayname("Failures No Listen"), countertype(65536), perfindex(436), helpindex(437), defaultscale(0), perfdetail(200) ] uint32 FailuresNoListen; [ displayname("Datagrams Sent/sec"), countertype(272696320), perfindex(442), helpindex(443), defaultscale(-1), perfdetail(200) ] real64 DatagramsSentPerSec; [ displayname("Datagram Bytes Sent/sec"), countertype(272696576), perfindex(444), helpindex(445), defaultscale(-4), perfdetail(200) ] real64 DatagramBytesSentPerSec; [ displayname("Datagrams Received/sec"), countertype(272696320), perfindex(446), helpindex(447), defaultscale(-1), perfdetail(200) ] real64 DatagramsReceivedPerSec; [ displayname("Datagram Bytes Received/sec"), countertype(272696576), perfindex(448), helpindex(449), defaultscale(-4), perfdetail(200) ] real64 DatagramBytesReceivedPerSec; [ displayname("Packets Sent/sec"), countertype(272696320), perfindex(452), helpindex(453), defaultscale(-1), perfdetail(200) ] real64 PacketsSentPerSec; [ displayname("Packets Received/sec"), countertype(272696320), perfindex(266), helpindex(455), defaultscale(-1), perfdetail(300) ] real64 PacketsReceivedPerSec; [ displayname("Frames Sent/sec"), countertype(272696320), perfindex(460), helpindex(461), defaultscale(-1), perfdetail(200) ] real64 FramesSentPerSec; [ displayname("Frame Bytes Sent/sec"), countertype(272696576), perfindex(462), helpindex(463), defaultscale(-4), perfdetail(200) ] real64 FrameBytesSentPerSec; [ displayname("Frames Received/sec"), countertype(272696320), perfindex(464), helpindex(465), defaultscale(-1), perfdetail(200) ] real64 FramesReceivedPerSec; [ displayname("Frame Bytes Received/sec"), countertype(272696576), perfindex(466), helpindex(467), defaultscale(-4), perfdetail(200) ] real64 FrameBytesReceivedPerSec; [ displayname("Frames Re-Sent/sec"), countertype(272696320), perfindex(468), helpindex(469), defaultscale(-1), perfdetail(300) ] real64 FramesReSentPerSec; [ displayname("Frame Bytes Re-Sent/sec"), countertype(272696576), perfindex(470), helpindex(471), defaultscale(-4), perfdetail(400) ] real64 FrameBytesReSentPerSec; [ displayname("Frames Rejected/sec"), countertype(272696320), perfindex(472), helpindex(473), defaultscale(-1), perfdetail(300) ] real64 FramesRejectedPerSec; [ displayname("Frame Bytes Rejected/sec"), countertype(272696576), perfindex(474), helpindex(475), defaultscale(-4), perfdetail(300) ] real64 FrameBytesRejectedPerSec; [ displayname("Expirations Response"), countertype(65536), perfindex(476), helpindex(477), defaultscale(0), perfdetail(400) ] uint32 ExpirationsResponse; [ displayname("Expirations Ack"), countertype(65536), perfindex(478), helpindex(479), defaultscale(0), perfdetail(200) ] uint32 ExpirationsAck; [ displayname("Window Send Maximum "), countertype(65536), perfindex(480), helpindex(481), defaultscale(0), perfdetail(200) ] uint32 WindowSendMaximum; [ displayname("Window Send Average"), countertype(65536), perfindex(482), helpindex(483), defaultscale(0), perfdetail(200) ] uint32 WindowSendAverage; [ displayname("Piggyback Ack Queued/sec"), countertype(272696320), perfindex(484), helpindex(485), defaultscale(-1), perfdetail(200) ] real64 PiggybackAckQueuedPerSec; [ displayname("Piggyback Ack Timeouts"), countertype(65536), perfindex(486), helpindex(487), defaultscale(-1), perfdetail(200) ] uint32 PiggybackAckTimeouts; }; [ vendor("Microsoft"), guid(""), locale("ms:\\0x0409"), displayname("NWLink IPX"), perfindex(488), helpindex(489), perfdetail(200) ] class Win32Perf_RawNWLinkIPX : Win32_PerfRawData { [key] string Name; uint64 Timestamp; [ displayname("Datagrams/sec"), countertype(272696320), perfindex(438), helpindex(439), defaultscale(-1), perfdetail(200) ] uint32 DatagramsPerSec; [ displayname("Datagram Bytes/sec"), countertype(272696576), perfindex(440), helpindex(441), defaultscale(-4), perfdetail(200) ] uint64 DatagramBytesPerSec; [ displayname("Packets/sec"), countertype(272696320), perfindex(400), helpindex(451), defaultscale(-1), perfdetail(200) ] uint32 PacketsPerSec; [ displayname("Frames/sec"), countertype(272696320), perfindex(456), helpindex(457), defaultscale(-1), perfdetail(200) ] uint32 FramesPerSec; [ displayname("Frame Bytes/sec"), countertype(272696576), perfindex(458), helpindex(459), defaultscale(-4), perfdetail(200) ] uint64 FrameBytesPerSec; [ perfdefault, displayname("Bytes Total/sec"), countertype(272696576), perfindex(388), helpindex(67), defaultscale(-4), perfdetail(200) ] uint64 BytesTotalPerSec; [ displayname("Connections Open"), countertype(65536), perfindex(412), helpindex(413), defaultscale(0), perfdetail(200) ] uint32 ConnectionsOpen; [ displayname("Connections No Retries"), countertype(65536), perfindex(414), helpindex(415), defaultscale(0), perfdetail(200) ] uint32 ConnectionsNoRetries; [ displayname("Connections With Retries"), countertype(65536), perfindex(416), helpindex(417), defaultscale(0), perfdetail(200) ] uint32 ConnectionsWithRetries; [ displayname("Disconnects Local"), countertype(65536), perfindex(418), helpindex(419), defaultscale(0), perfdetail(200) ] uint32 DisconnectsLocal; [ displayname("Disconnects Remote"), countertype(65536), perfindex(420), helpindex(421), defaultscale(0), perfdetail(200) ] uint32 DisconnectsRemote; [ displayname("Failures Link"), countertype(65536), perfindex(422), helpindex(423), defaultscale(0), perfdetail(200) ] uint32 FailuresLink; [ displayname("Failures Adapter"), countertype(65536), perfindex(424), helpindex(425), defaultscale(0), perfdetail(200) ] uint32 FailuresAdapter; [ displayname("Connection Session Timeouts"), countertype(65536), perfindex(426), helpindex(427), defaultscale(0), perfdetail(200) ] uint32 ConnectionSessionTimeouts; [ displayname("Connections Canceled"), countertype(65536), perfindex(428), helpindex(429), defaultscale(0), perfdetail(200) ] uint32 ConnectionsCanceled; [ displayname("Failures Resource Remote"), countertype(65536), perfindex(430), helpindex(431), defaultscale(0), perfdetail(200) ] uint32 FailuresResourceRemote; [ displayname("Failures Resource Local"), countertype(65536), perfindex(432), helpindex(433), defaultscale(0), perfdetail(200) ] uint32 FailuresResourceLocal; [ displayname("Failures Not Found"), countertype(65536), perfindex(434), helpindex(435), defaultscale(0), perfdetail(200) ] uint32 FailuresNotFound; [ displayname("Failures No Listen"), countertype(65536), perfindex(436), helpindex(437), defaultscale(0), perfdetail(200) ] uint32 FailuresNoListen; [ displayname("Datagrams Sent/sec"), countertype(272696320), perfindex(442), helpindex(443), defaultscale(-1), perfdetail(200) ] uint32 DatagramsSentPerSec; [ displayname("Datagram Bytes Sent/sec"), countertype(272696576), perfindex(444), helpindex(445), defaultscale(-4), perfdetail(200) ] uint64 DatagramBytesSentPerSec; [ displayname("Datagrams Received/sec"), countertype(272696320), perfindex(446), helpindex(447), defaultscale(-1), perfdetail(200) ] uint32 DatagramsReceivedPerSec; [ displayname("Datagram Bytes Received/sec"), countertype(272696576), perfindex(448), helpindex(449), defaultscale(-4), perfdetail(200) ] uint64 DatagramBytesReceivedPerSec; [ displayname("Packets Sent/sec"), countertype(272696320), perfindex(452), helpindex(453), defaultscale(-1), perfdetail(200) ] uint32 PacketsSentPerSec; [ displayname("Packets Received/sec"), countertype(272696320), perfindex(266), helpindex(455), defaultscale(-1), perfdetail(300) ] uint32 PacketsReceivedPerSec; [ displayname("Frames Sent/sec"), countertype(272696320), perfindex(460), helpindex(461), defaultscale(-1), perfdetail(200) ] uint32 FramesSentPerSec; [ displayname("Frame Bytes Sent/sec"), countertype(272696576), perfindex(462), helpindex(463), defaultscale(-4), perfdetail(200) ] uint64 FrameBytesSentPerSec; [ displayname("Frames Received/sec"), countertype(272696320), perfindex(464), helpindex(465), defaultscale(-1), perfdetail(200) ] uint32 FramesReceivedPerSec; [ displayname("Frame Bytes Received/sec"), countertype(272696576), perfindex(466), helpindex(467), defaultscale(-4), perfdetail(200) ] uint64 FrameBytesReceivedPerSec; [ displayname("Frames Re-Sent/sec"), countertype(272696320), perfindex(468), helpindex(469), defaultscale(-1), perfdetail(300) ] uint32 FramesReSentPerSec; [ displayname("Frame Bytes Re-Sent/sec"), countertype(272696576), perfindex(470), helpindex(471), defaultscale(-4), perfdetail(400) ] uint64 FrameBytesReSentPerSec; [ displayname("Frames Rejected/sec"), countertype(272696320), perfindex(472), helpindex(473), defaultscale(-1), perfdetail(300) ] uint32 FramesRejectedPerSec; [ displayname("Frame Bytes Rejected/sec"), countertype(272696576), perfindex(474), helpindex(475), defaultscale(-4), perfdetail(300) ] uint64 FrameBytesRejectedPerSec; [ displayname("Expirations Response"), countertype(65536), perfindex(476), helpindex(477), defaultscale(0), perfdetail(400) ] uint32 ExpirationsResponse; [ displayname("Expirations Ack"), countertype(65536), perfindex(478), helpindex(479), defaultscale(0), perfdetail(200) ] uint32 ExpirationsAck; [ displayname("Window Send Maximum "), countertype(65536), perfindex(480), helpindex(481), defaultscale(0), perfdetail(200) ] uint32 WindowSendMaximum; [ displayname("Window Send Average"), countertype(65536), perfindex(482), helpindex(483), defaultscale(0), perfdetail(200) ] uint32 WindowSendAverage; [ displayname("Piggyback Ack Queued/sec"), countertype(272696320), perfindex(484), helpindex(485), defaultscale(-1), perfdetail(200) ] uint32 PiggybackAckQueuedPerSec; [ displayname("Piggyback Ack Timeouts"), countertype(65536), perfindex(486), helpindex(487), defaultscale(-1), perfdetail(200) ] uint32 PiggybackAckTimeouts; }; instance of Win32Perf_RawNWLinkIPX { Name = "\\Device\\NwlnkIpx"; DatagramsPerSec = 0x0011385c; DatagramBytesPerSec = 0x000000000c722878; PacketsPerSec = 0x003037e9; FramesPerSec = 0x00000000; FrameBytesPerSec = 0x0000000000000000; BytesTotalPerSec = 0x000000000c722878; ConnectionsOpen = 0x00000000; ConnectionsNoRetries = 0x00000000; ConnectionsWithRetries = 0x00000000; DisconnectsLocal = 0x00000000; DisconnectsRemote = 0x00000000; FailuresLink = 0x00000000; FailuresAdapter = 0x00000000; ConnectionSessionTimeouts = 0x00000000; ConnectionsCanceled = 0x00000000; FailuresResourceRemote = 0x00000000; FailuresResourceLocal = 0x00000000; FailuresNotFound = 0x00000000; FailuresNoListen = 0x00000000; DatagramsSentPerSec = 0x0000006a; DatagramBytesSentPerSec = 0x00000000000038f4; DatagramsReceivedPerSec = 0x001137f2; DatagramBytesReceivedPerSec = 0x000000000c71ef84; PacketsSentPerSec = 0x0000297c; PacketsReceivedPerSec = 0x00300e6d; FramesSentPerSec = 0x00000000; FrameBytesSentPerSec = 0x0000000000000000; FramesReceivedPerSec = 0x00000000; FrameBytesReceivedPerSec = 0x0000000000000000; FramesReSentPerSec = 0x00000000; FrameBytesReSentPerSec = 0x0000000000000000; FramesRejectedPerSec = 0x00000000; FrameBytesRejectedPerSec = 0x0000000000000000; ExpirationsResponse = 0x00000000; ExpirationsAck = 0x00000000; WindowSendMaximum = 0x00000000; WindowSendAverage = 0x00000000; PiggybackAckQueuedPerSec = 0x00000000; PiggybackAckTimeouts = 0x00000000; }; [ vendor("Microsoft"), guid(""), locale("ms:\\0x0409"), displayname("NWLink NetBIOS"), perfindex(398), helpindex(399), perfdetail(200) ] class Win32Perf_NWLinkNetBIOS : Win32_PerfFormattedData { [key] string Name; uint64 Timestamp; [ displayname("Datagrams/sec"), countertype(272696320), perfindex(438), helpindex(439), defaultscale(-1), perfdetail(200) ] real64 DatagramsPerSec; [ displayname("Datagram Bytes/sec"), countertype(272696576), perfindex(440), helpindex(441), defaultscale(-4), perfdetail(200) ] real64 DatagramBytesPerSec; [ displayname("Packets/sec"), countertype(272696320), perfindex(400), helpindex(451), defaultscale(-1), perfdetail(200) ] real64 PacketsPerSec; [ displayname("Frames/sec"), countertype(272696320), perfindex(456), helpindex(457), defaultscale(-1), perfdetail(200) ] real64 FramesPerSec; [ displayname("Frame Bytes/sec"), countertype(272696576), perfindex(458), helpindex(459), defaultscale(-4), perfdetail(200) ] real64 FrameBytesPerSec; [ perfdefault, displayname("Bytes Total/sec"), countertype(272696576), perfindex(388), helpindex(67), defaultscale(-4), perfdetail(200) ] real64 BytesTotalPerSec; [ displayname("Connections Open"), countertype(65536), perfindex(412), helpindex(413), defaultscale(0), perfdetail(200) ] uint32 ConnectionsOpen; [ displayname("Connections No Retries"), countertype(65536), perfindex(414), helpindex(415), defaultscale(0), perfdetail(200) ] uint32 ConnectionsNoRetries; [ displayname("Connections With Retries"), countertype(65536), perfindex(416), helpindex(417), defaultscale(0), perfdetail(200) ] uint32 ConnectionsWithRetries; [ displayname("Disconnects Local"), countertype(65536), perfindex(418), helpindex(419), defaultscale(0), perfdetail(200) ] uint32 DisconnectsLocal; [ displayname("Disconnects Remote"), countertype(65536), perfindex(420), helpindex(421), defaultscale(0), perfdetail(200) ] uint32 DisconnectsRemote; [ displayname("Failures Link"), countertype(65536), perfindex(422), helpindex(423), defaultscale(0), perfdetail(200) ] uint32 FailuresLink; [ displayname("Failures Adapter"), countertype(65536), perfindex(424), helpindex(425), defaultscale(0), perfdetail(200) ] uint32 FailuresAdapter; [ displayname("Connection Session Timeouts"), countertype(65536), perfindex(426), helpindex(427), defaultscale(0), perfdetail(200) ] uint32 ConnectionSessionTimeouts; [ displayname("Connections Canceled"), countertype(65536), perfindex(428), helpindex(429), defaultscale(0), perfdetail(200) ] uint32 ConnectionsCanceled; [ displayname("Failures Resource Remote"), countertype(65536), perfindex(430), helpindex(431), defaultscale(0), perfdetail(200) ] uint32 FailuresResourceRemote; [ displayname("Failures Resource Local"), countertype(65536), perfindex(432), helpindex(433), defaultscale(0), perfdetail(200) ] uint32 FailuresResourceLocal; [ displayname("Failures Not Found"), countertype(65536), perfindex(434), helpindex(435), defaultscale(0), perfdetail(200) ] uint32 FailuresNotFound; [ displayname("Failures No Listen"), countertype(65536), perfindex(436), helpindex(437), defaultscale(0), perfdetail(200) ] uint32 FailuresNoListen; [ displayname("Datagrams Sent/sec"), countertype(272696320), perfindex(442), helpindex(443), defaultscale(-1), perfdetail(200) ] real64 DatagramsSentPerSec; [ displayname("Datagram Bytes Sent/sec"), countertype(272696576), perfindex(444), helpindex(445), defaultscale(-4), perfdetail(200) ] real64 DatagramBytesSentPerSec; [ displayname("Datagrams Received/sec"), countertype(272696320), perfindex(446), helpindex(447), defaultscale(-1), perfdetail(200) ] real64 DatagramsReceivedPerSec; [ displayname("Datagram Bytes Received/sec"), countertype(272696576), perfindex(448), helpindex(449), defaultscale(-4), perfdetail(200) ] real64 DatagramBytesReceivedPerSec; [ displayname("Packets Sent/sec"), countertype(272696320), perfindex(452), helpindex(453), defaultscale(-1), perfdetail(200) ] real64 PacketsSentPerSec; [ displayname("Packets Received/sec"), countertype(272696320), perfindex(266), helpindex(455), defaultscale(-1), perfdetail(300) ] real64 PacketsReceivedPerSec; [ displayname("Frames Sent/sec"), countertype(272696320), perfindex(460), helpindex(461), defaultscale(-1), perfdetail(200) ] real64 FramesSentPerSec; [ displayname("Frame Bytes Sent/sec"), countertype(272696576), perfindex(462), helpindex(463), defaultscale(-4), perfdetail(200) ] real64 FrameBytesSentPerSec; [ displayname("Frames Received/sec"), countertype(272696320), perfindex(464), helpindex(465), defaultscale(-1), perfdetail(200) ] real64 FramesReceivedPerSec; [ displayname("Frame Bytes Received/sec"), countertype(272696576), perfindex(466), helpindex(467), defaultscale(-4), perfdetail(200) ] real64 FrameBytesReceivedPerSec; [ displayname("Frames Re-Sent/sec"), countertype(272696320), perfindex(468), helpindex(469), defaultscale(-1), perfdetail(300) ] real64 FramesReSentPerSec; [ displayname("Frame Bytes Re-Sent/sec"), countertype(272696576), perfindex(470), helpindex(471), defaultscale(-4), perfdetail(400) ] real64 FrameBytesReSentPerSec; [ displayname("Frames Rejected/sec"), countertype(272696320), perfindex(472), helpindex(473), defaultscale(-1), perfdetail(300) ] real64 FramesRejectedPerSec; [ displayname("Frame Bytes Rejected/sec"), countertype(272696576), perfindex(474), helpindex(475), defaultscale(-4), perfdetail(300) ] real64 FrameBytesRejectedPerSec; [ displayname("Expirations Response"), countertype(65536), perfindex(476), helpindex(477), defaultscale(0), perfdetail(400) ] uint32 ExpirationsResponse; [ displayname("Expirations Ack"), countertype(65536), perfindex(478), helpindex(479), defaultscale(0), perfdetail(200) ] uint32 ExpirationsAck; [ displayname("Window Send Maximum "), countertype(65536), perfindex(480), helpindex(481), defaultscale(0), perfdetail(200) ] uint32 WindowSendMaximum; [ displayname("Window Send Average"), countertype(65536), perfindex(482), helpindex(483), defaultscale(0), perfdetail(200) ] uint32 WindowSendAverage; [ displayname("Piggyback Ack Queued/sec"), countertype(272696320), perfindex(484), helpindex(485), defaultscale(-1), perfdetail(200) ] real64 PiggybackAckQueuedPerSec; [ displayname("Piggyback Ack Timeouts"), countertype(65536), perfindex(486), helpindex(487), defaultscale(-1), perfdetail(200) ] uint32 PiggybackAckTimeouts; }; [ vendor("Microsoft"), guid(""), locale("ms:\\0x0409"), displayname("NWLink NetBIOS"), perfindex(398), helpindex(399), perfdetail(200) ] class Win32Perf_RawNWLinkNetBIOS : Win32_PerfRawData { [key] string Name; uint64 Timestamp; [ displayname("Datagrams/sec"), countertype(272696320), perfindex(438), helpindex(439), defaultscale(-1), perfdetail(200) ] uint32 DatagramsPerSec; [ displayname("Datagram Bytes/sec"), countertype(272696576), perfindex(440), helpindex(441), defaultscale(-4), perfdetail(200) ] uint64 DatagramBytesPerSec; [ displayname("Packets/sec"), countertype(272696320), perfindex(400), helpindex(451), defaultscale(-1), perfdetail(200) ] uint32 PacketsPerSec; [ displayname("Frames/sec"), countertype(272696320), perfindex(456), helpindex(457), defaultscale(-1), perfdetail(200) ] uint32 FramesPerSec; [ displayname("Frame Bytes/sec"), countertype(272696576), perfindex(458), helpindex(459), defaultscale(-4), perfdetail(200) ] uint64 FrameBytesPerSec; [ perfdefault, displayname("Bytes Total/sec"), countertype(272696576), perfindex(388), helpindex(67), defaultscale(-4), perfdetail(200) ] uint64 BytesTotalPerSec; [ displayname("Connections Open"), countertype(65536), perfindex(412), helpindex(413), defaultscale(0), perfdetail(200) ] uint32 ConnectionsOpen; [ displayname("Connections No Retries"), countertype(65536), perfindex(414), helpindex(415), defaultscale(0), perfdetail(200) ] uint32 ConnectionsNoRetries; [ displayname("Connections With Retries"), countertype(65536), perfindex(416), helpindex(417), defaultscale(0), perfdetail(200) ] uint32 ConnectionsWithRetries; [ displayname("Disconnects Local"), countertype(65536), perfindex(418), helpindex(419), defaultscale(0), perfdetail(200) ] uint32 DisconnectsLocal; [ displayname("Disconnects Remote"), countertype(65536), perfindex(420), helpindex(421), defaultscale(0), perfdetail(200) ] uint32 DisconnectsRemote; [ displayname("Failures Link"), countertype(65536), perfindex(422), helpindex(423), defaultscale(0), perfdetail(200) ] uint32 FailuresLink; [ displayname("Failures Adapter"), countertype(65536), perfindex(424), helpindex(425), defaultscale(0), perfdetail(200) ] uint32 FailuresAdapter; [ displayname("Connection Session Timeouts"), countertype(65536), perfindex(426), helpindex(427), defaultscale(0), perfdetail(200) ] uint32 ConnectionSessionTimeouts; [ displayname("Connections Canceled"), countertype(65536), perfindex(428), helpindex(429), defaultscale(0), perfdetail(200) ] uint32 ConnectionsCanceled; [ displayname("Failures Resource Remote"), countertype(65536), perfindex(430), helpindex(431), defaultscale(0), perfdetail(200) ] uint32 FailuresResourceRemote; [ displayname("Failures Resource Local"), countertype(65536), perfindex(432), helpindex(433), defaultscale(0), perfdetail(200) ] uint32 FailuresResourceLocal; [ displayname("Failures Not Found"), countertype(65536), perfindex(434), helpindex(435), defaultscale(0), perfdetail(200) ] uint32 FailuresNotFound; [ displayname("Failures No Listen"), countertype(65536), perfindex(436), helpindex(437), defaultscale(0), perfdetail(200) ] uint32 FailuresNoListen; [ displayname("Datagrams Sent/sec"), countertype(272696320), perfindex(442), helpindex(443), defaultscale(-1), perfdetail(200) ] uint32 DatagramsSentPerSec; [ displayname("Datagram Bytes Sent/sec"), countertype(272696576), perfindex(444), helpindex(445), defaultscale(-4), perfdetail(200) ] uint64 DatagramBytesSentPerSec; [ displayname("Datagrams Received/sec"), countertype(272696320), perfindex(446), helpindex(447), defaultscale(-1), perfdetail(200) ] uint32 DatagramsReceivedPerSec; [ displayname("Datagram Bytes Received/sec"), countertype(272696576), perfindex(448), helpindex(449), defaultscale(-4), perfdetail(200) ] uint64 DatagramBytesReceivedPerSec; [ displayname("Packets Sent/sec"), countertype(272696320), perfindex(452), helpindex(453), defaultscale(-1), perfdetail(200) ] uint32 PacketsSentPerSec; [ displayname("Packets Received/sec"), countertype(272696320), perfindex(266), helpindex(455), defaultscale(-1), perfdetail(300) ] uint32 PacketsReceivedPerSec; [ displayname("Frames Sent/sec"), countertype(272696320), perfindex(460), helpindex(461), defaultscale(-1), perfdetail(200) ] uint32 FramesSentPerSec; [ displayname("Frame Bytes Sent/sec"), countertype(272696576), perfindex(462), helpindex(463), defaultscale(-4), perfdetail(200) ] uint64 FrameBytesSentPerSec; [ displayname("Frames Received/sec"), countertype(272696320), perfindex(464), helpindex(465), defaultscale(-1), perfdetail(200) ] uint32 FramesReceivedPerSec; [ displayname("Frame Bytes Received/sec"), countertype(272696576), perfindex(466), helpindex(467), defaultscale(-4), perfdetail(200) ] uint64 FrameBytesReceivedPerSec; [ displayname("Frames Re-Sent/sec"), countertype(272696320), perfindex(468), helpindex(469), defaultscale(-1), perfdetail(300) ] uint32 FramesReSentPerSec; [ displayname("Frame Bytes Re-Sent/sec"), countertype(272696576), perfindex(470), helpindex(471), defaultscale(-4), perfdetail(400) ] uint64 FrameBytesReSentPerSec; [ displayname("Frames Rejected/sec"), countertype(272696320), perfindex(472), helpindex(473), defaultscale(-1), perfdetail(300) ] uint32 FramesRejectedPerSec; [ displayname("Frame Bytes Rejected/sec"), countertype(272696576), perfindex(474), helpindex(475), defaultscale(-4), perfdetail(300) ] uint64 FrameBytesRejectedPerSec; [ displayname("Expirations Response"), countertype(65536), perfindex(476), helpindex(477), defaultscale(0), perfdetail(400) ] uint32 ExpirationsResponse; [ displayname("Expirations Ack"), countertype(65536), perfindex(478), helpindex(479), defaultscale(0), perfdetail(200) ] uint32 ExpirationsAck; [ displayname("Window Send Maximum "), countertype(65536), perfindex(480), helpindex(481), defaultscale(0), perfdetail(200) ] uint32 WindowSendMaximum; [ displayname("Window Send Average"), countertype(65536), perfindex(482), helpindex(483), defaultscale(0), perfdetail(200) ] uint32 WindowSendAverage; [ displayname("Piggyback Ack Queued/sec"), countertype(272696320), perfindex(484), helpindex(485), defaultscale(-1), perfdetail(200) ] uint32 PiggybackAckQueuedPerSec; [ displayname("Piggyback Ack Timeouts"), countertype(65536), perfindex(486), helpindex(487), defaultscale(-1), perfdetail(200) ] uint32 PiggybackAckTimeouts; }; instance of Win32Perf_RawNWLinkNetBIOS { Name = "\\Device\\NwlnkNb"; DatagramsPerSec = 0x000060f2; DatagramBytesPerSec = 0x000000000029a762; PacketsPerSec = 0x001c9eea; FramesPerSec = 0x00000111; FrameBytesPerSec = 0x000000000001f6ee; BytesTotalPerSec = 0x00000000002b9e50; ConnectionsOpen = 0x00000000; ConnectionsNoRetries = 0x00000003; ConnectionsWithRetries = 0x00000000; DisconnectsLocal = 0x00000000; DisconnectsRemote = 0x00000000; FailuresLink = 0x00000000; FailuresAdapter = 0x00000000; ConnectionSessionTimeouts = 0x00000000; ConnectionsCanceled = 0x00000000; FailuresResourceRemote = 0x00000000; FailuresResourceLocal = 0x00000003; FailuresNotFound = 0x00000000; FailuresNoListen = 0x00000000; DatagramsSentPerSec = 0x00000030; DatagramBytesSentPerSec = 0x0000000000001573; DatagramsReceivedPerSec = 0x000060c2; DatagramBytesReceivedPerSec = 0x00000000002991ef; PacketsSentPerSec = 0x00002903; PacketsReceivedPerSec = 0x001c75e7; FramesSentPerSec = 0x00000063; FrameBytesSentPerSec = 0x0000000000002004; FramesReceivedPerSec = 0x000000ae; FrameBytesReceivedPerSec = 0x000000000001d6ea; FramesReSentPerSec = 0x00000000; FrameBytesReSentPerSec = 0x0000000000000000; FramesRejectedPerSec = 0x00000000; FrameBytesRejectedPerSec = 0x0000000000000000; ExpirationsResponse = 0x00000001; ExpirationsAck = 0x00000005; WindowSendMaximum = 0x00000004; WindowSendAverage = 0x00000004; PiggybackAckQueuedPerSec = 0x00000055; PiggybackAckTimeouts = 0x00000005; }; [ vendor("Microsoft"), guid(""), locale("ms:\\0x0409"), displayname("NWLink SPX"), perfindex(490), helpindex(491), perfdetail(200) ] class Win32Perf_NWLinkSPX : Win32_PerfFormattedData { [key] string Name; uint64 Timestamp; [ displayname("Datagrams/sec"), countertype(272696320), perfindex(438), helpindex(439), defaultscale(-1), perfdetail(200) ] real64 DatagramsPerSec; [ displayname("Datagram Bytes/sec"), countertype(272696576), perfindex(440), helpindex(441), defaultscale(-4), perfdetail(200) ] real64 DatagramBytesPerSec; [ displayname("Packets/sec"), countertype(272696320), perfindex(400), helpindex(451), defaultscale(-1), perfdetail(200) ] real64 PacketsPerSec; [ displayname("Frames/sec"), countertype(272696320), perfindex(456), helpindex(457), defaultscale(-1), perfdetail(200) ] real64 FramesPerSec; [ displayname("Frame Bytes/sec"), countertype(272696576), perfindex(458), helpindex(459), defaultscale(-4), perfdetail(200) ] real64 FrameBytesPerSec; [ perfdefault, displayname("Bytes Total/sec"), countertype(272696576), perfindex(388), helpindex(67), defaultscale(-4), perfdetail(200) ] real64 BytesTotalPerSec; [ displayname("Connections Open"), countertype(65536), perfindex(412), helpindex(413), defaultscale(0), perfdetail(200) ] uint32 ConnectionsOpen; [ displayname("Connections No Retries"), countertype(65536), perfindex(414), helpindex(415), defaultscale(0), perfdetail(200) ] uint32 ConnectionsNoRetries; [ displayname("Connections With Retries"), countertype(65536), perfindex(416), helpindex(417), defaultscale(0), perfdetail(200) ] uint32 ConnectionsWithRetries; [ displayname("Disconnects Local"), countertype(65536), perfindex(418), helpindex(419), defaultscale(0), perfdetail(200) ] uint32 DisconnectsLocal; [ displayname("Disconnects Remote"), countertype(65536), perfindex(420), helpindex(421), defaultscale(0), perfdetail(200) ] uint32 DisconnectsRemote; [ displayname("Failures Link"), countertype(65536), perfindex(422), helpindex(423), defaultscale(0), perfdetail(200) ] uint32 FailuresLink; [ displayname("Failures Adapter"), countertype(65536), perfindex(424), helpindex(425), defaultscale(0), perfdetail(200) ] uint32 FailuresAdapter; [ displayname("Connection Session Timeouts"), countertype(65536), perfindex(426), helpindex(427), defaultscale(0), perfdetail(200) ] uint32 ConnectionSessionTimeouts; [ displayname("Connections Canceled"), countertype(65536), perfindex(428), helpindex(429), defaultscale(0), perfdetail(200) ] uint32 ConnectionsCanceled; [ displayname("Failures Resource Remote"), countertype(65536), perfindex(430), helpindex(431), defaultscale(0), perfdetail(200) ] uint32 FailuresResourceRemote; [ displayname("Failures Resource Local"), countertype(65536), perfindex(432), helpindex(433), defaultscale(0), perfdetail(200) ] uint32 FailuresResourceLocal; [ displayname("Failures Not Found"), countertype(65536), perfindex(434), helpindex(435), defaultscale(0), perfdetail(200) ] uint32 FailuresNotFound; [ displayname("Failures No Listen"), countertype(65536), perfindex(436), helpindex(437), defaultscale(0), perfdetail(200) ] uint32 FailuresNoListen; [ displayname("Datagrams Sent/sec"), countertype(272696320), perfindex(442), helpindex(443), defaultscale(-1), perfdetail(200) ] real64 DatagramsSentPerSec; [ displayname("Datagram Bytes Sent/sec"), countertype(272696576), perfindex(444), helpindex(445), defaultscale(-4), perfdetail(200) ] real64 DatagramBytesSentPerSec; [ displayname("Datagrams Received/sec"), countertype(272696320), perfindex(446), helpindex(447), defaultscale(-1), perfdetail(200) ] real64 DatagramsReceivedPerSec; [ displayname("Datagram Bytes Received/sec"), countertype(272696576), perfindex(448), helpindex(449), defaultscale(-4), perfdetail(200) ] real64 DatagramBytesReceivedPerSec; [ displayname("Packets Sent/sec"), countertype(272696320), perfindex(452), helpindex(453), defaultscale(-1), perfdetail(200) ] real64 PacketsSentPerSec; [ displayname("Packets Received/sec"), countertype(272696320), perfindex(266), helpindex(455), defaultscale(-1), perfdetail(300) ] real64 PacketsReceivedPerSec; [ displayname("Frames Sent/sec"), countertype(272696320), perfindex(460), helpindex(461), defaultscale(-1), perfdetail(200) ] real64 FramesSentPerSec; [ displayname("Frame Bytes Sent/sec"), countertype(272696576), perfindex(462), helpindex(463), defaultscale(-4), perfdetail(200) ] real64 FrameBytesSentPerSec; [ displayname("Frames Received/sec"), countertype(272696320), perfindex(464), helpindex(465), defaultscale(-1), perfdetail(200) ] real64 FramesReceivedPerSec; [ displayname("Frame Bytes Received/sec"), countertype(272696576), perfindex(466), helpindex(467), defaultscale(-4), perfdetail(200) ] real64 FrameBytesReceivedPerSec; [ displayname("Frames Re-Sent/sec"), countertype(272696320), perfindex(468), helpindex(469), defaultscale(-1), perfdetail(300) ] real64 FramesReSentPerSec; [ displayname("Frame Bytes Re-Sent/sec"), countertype(272696576), perfindex(470), helpindex(471), defaultscale(-4), perfdetail(400) ] real64 FrameBytesReSentPerSec; [ displayname("Frames Rejected/sec"), countertype(272696320), perfindex(472), helpindex(473), defaultscale(-1), perfdetail(300) ] real64 FramesRejectedPerSec; [ displayname("Frame Bytes Rejected/sec"), countertype(272696576), perfindex(474), helpindex(475), defaultscale(-4), perfdetail(300) ] real64 FrameBytesRejectedPerSec; [ displayname("Expirations Response"), countertype(65536), perfindex(476), helpindex(477), defaultscale(0), perfdetail(400) ] uint32 ExpirationsResponse; [ displayname("Expirations Ack"), countertype(65536), perfindex(478), helpindex(479), defaultscale(0), perfdetail(200) ] uint32 ExpirationsAck; [ displayname("Window Send Maximum "), countertype(65536), perfindex(480), helpindex(481), defaultscale(0), perfdetail(200) ] uint32 WindowSendMaximum; [ displayname("Window Send Average"), countertype(65536), perfindex(482), helpindex(483), defaultscale(0), perfdetail(200) ] uint32 WindowSendAverage; [ displayname("Piggyback Ack Queued/sec"), countertype(272696320), perfindex(484), helpindex(485), defaultscale(-1), perfdetail(200) ] real64 PiggybackAckQueuedPerSec; [ displayname("Piggyback Ack Timeouts"), countertype(65536), perfindex(486), helpindex(487), defaultscale(-1), perfdetail(200) ] uint32 PiggybackAckTimeouts; }; [ vendor("Microsoft"), guid(""), locale("ms:\\0x0409"), displayname("NWLink SPX"), perfindex(490), helpindex(491), perfdetail(200) ] class Win32Perf_RawNWLinkSPX : Win32_PerfRawData { [key] string Name; uint64 Timestamp; [ displayname("Datagrams/sec"), countertype(272696320), perfindex(438), helpindex(439), defaultscale(-1), perfdetail(200) ] uint32 DatagramsPerSec; [ displayname("Datagram Bytes/sec"), countertype(272696576), perfindex(440), helpindex(441), defaultscale(-4), perfdetail(200) ] uint64 DatagramBytesPerSec; [ displayname("Packets/sec"), countertype(272696320), perfindex(400), helpindex(451), defaultscale(-1), perfdetail(200) ] uint32 PacketsPerSec; [ displayname("Frames/sec"), countertype(272696320), perfindex(456), helpindex(457), defaultscale(-1), perfdetail(200) ] uint32 FramesPerSec; [ displayname("Frame Bytes/sec"), countertype(272696576), perfindex(458), helpindex(459), defaultscale(-4), perfdetail(200) ] uint64 FrameBytesPerSec; [ perfdefault, displayname("Bytes Total/sec"), countertype(272696576), perfindex(388), helpindex(67), defaultscale(-4), perfdetail(200) ] uint64 BytesTotalPerSec; [ displayname("Connections Open"), countertype(65536), perfindex(412), helpindex(413), defaultscale(0), perfdetail(200) ] uint32 ConnectionsOpen; [ displayname("Connections No Retries"), countertype(65536), perfindex(414), helpindex(415), defaultscale(0), perfdetail(200) ] uint32 ConnectionsNoRetries; [ displayname("Connections With Retries"), countertype(65536), perfindex(416), helpindex(417), defaultscale(0), perfdetail(200) ] uint32 ConnectionsWithRetries; [ displayname("Disconnects Local"), countertype(65536), perfindex(418), helpindex(419), defaultscale(0), perfdetail(200) ] uint32 DisconnectsLocal; [ displayname("Disconnects Remote"), countertype(65536), perfindex(420), helpindex(421), defaultscale(0), perfdetail(200) ] uint32 DisconnectsRemote; [ displayname("Failures Link"), countertype(65536), perfindex(422), helpindex(423), defaultscale(0), perfdetail(200) ] uint32 FailuresLink; [ displayname("Failures Adapter"), countertype(65536), perfindex(424), helpindex(425), defaultscale(0), perfdetail(200) ] uint32 FailuresAdapter; [ displayname("Connection Session Timeouts"), countertype(65536), perfindex(426), helpindex(427), defaultscale(0), perfdetail(200) ] uint32 ConnectionSessionTimeouts; [ displayname("Connections Canceled"), countertype(65536), perfindex(428), helpindex(429), defaultscale(0), perfdetail(200) ] uint32 ConnectionsCanceled; [ displayname("Failures Resource Remote"), countertype(65536), perfindex(430), helpindex(431), defaultscale(0), perfdetail(200) ] uint32 FailuresResourceRemote; [ displayname("Failures Resource Local"), countertype(65536), perfindex(432), helpindex(433), defaultscale(0), perfdetail(200) ] uint32 FailuresResourceLocal; [ displayname("Failures Not Found"), countertype(65536), perfindex(434), helpindex(435), defaultscale(0), perfdetail(200) ] uint32 FailuresNotFound; [ displayname("Failures No Listen"), countertype(65536), perfindex(436), helpindex(437), defaultscale(0), perfdetail(200) ] uint32 FailuresNoListen; [ displayname("Datagrams Sent/sec"), countertype(272696320), perfindex(442), helpindex(443), defaultscale(-1), perfdetail(200) ] uint32 DatagramsSentPerSec; [ displayname("Datagram Bytes Sent/sec"), countertype(272696576), perfindex(444), helpindex(445), defaultscale(-4), perfdetail(200) ] uint64 DatagramBytesSentPerSec; [ displayname("Datagrams Received/sec"), countertype(272696320), perfindex(446), helpindex(447), defaultscale(-1), perfdetail(200) ] uint32 DatagramsReceivedPerSec; [ displayname("Datagram Bytes Received/sec"), countertype(272696576), perfindex(448), helpindex(449), defaultscale(-4), perfdetail(200) ] uint64 DatagramBytesReceivedPerSec; [ displayname("Packets Sent/sec"), countertype(272696320), perfindex(452), helpindex(453), defaultscale(-1), perfdetail(200) ] uint32 PacketsSentPerSec; [ displayname("Packets Received/sec"), countertype(272696320), perfindex(266), helpindex(455), defaultscale(-1), perfdetail(300) ] uint32 PacketsReceivedPerSec; [ displayname("Frames Sent/sec"), countertype(272696320), perfindex(460), helpindex(461), defaultscale(-1), perfdetail(200) ] uint32 FramesSentPerSec; [ displayname("Frame Bytes Sent/sec"), countertype(272696576), perfindex(462), helpindex(463), defaultscale(-4), perfdetail(200) ] uint64 FrameBytesSentPerSec; [ displayname("Frames Received/sec"), countertype(272696320), perfindex(464), helpindex(465), defaultscale(-1), perfdetail(200) ] uint32 FramesReceivedPerSec; [ displayname("Frame Bytes Received/sec"), countertype(272696576), perfindex(466), helpindex(467), defaultscale(-4), perfdetail(200) ] uint64 FrameBytesReceivedPerSec; [ displayname("Frames Re-Sent/sec"), countertype(272696320), perfindex(468), helpindex(469), defaultscale(-1), perfdetail(300) ] uint32 FramesReSentPerSec; [ displayname("Frame Bytes Re-Sent/sec"), countertype(272696576), perfindex(470), helpindex(471), defaultscale(-4), perfdetail(400) ] uint64 FrameBytesReSentPerSec; [ displayname("Frames Rejected/sec"), countertype(272696320), perfindex(472), helpindex(473), defaultscale(-1), perfdetail(300) ] uint32 FramesRejectedPerSec; [ displayname("Frame Bytes Rejected/sec"), countertype(272696576), perfindex(474), helpindex(475), defaultscale(-4), perfdetail(300) ] uint64 FrameBytesRejectedPerSec; [ displayname("Expirations Response"), countertype(65536), perfindex(476), helpindex(477), defaultscale(0), perfdetail(400) ] uint32 ExpirationsResponse; [ displayname("Expirations Ack"), countertype(65536), perfindex(478), helpindex(479), defaultscale(0), perfdetail(200) ] uint32 ExpirationsAck; [ displayname("Window Send Maximum "), countertype(65536), perfindex(480), helpindex(481), defaultscale(0), perfdetail(200) ] uint32 WindowSendMaximum; [ displayname("Window Send Average"), countertype(65536), perfindex(482), helpindex(483), defaultscale(0), perfdetail(200) ] uint32 WindowSendAverage; [ displayname("Piggyback Ack Queued/sec"), countertype(272696320), perfindex(484), helpindex(485), defaultscale(-1), perfdetail(200) ] uint32 PiggybackAckQueuedPerSec; [ displayname("Piggyback Ack Timeouts"), countertype(65536), perfindex(486), helpindex(487), defaultscale(-1), perfdetail(200) ] uint32 PiggybackAckTimeouts; }; instance of Win32Perf_RawNWLinkSPX { Name = "\\Device\\NwlnkSpx"; DatagramsPerSec = 0x00000000; DatagramBytesPerSec = 0x0000000000000000; PacketsPerSec = 0x00000000; FramesPerSec = 0x00000000; FrameBytesPerSec = 0x0000000000000000; BytesTotalPerSec = 0x0000000000000000; ConnectionsOpen = 0x00000000; ConnectionsNoRetries = 0x00000000; ConnectionsWithRetries = 0x00000000; DisconnectsLocal = 0x00000000; DisconnectsRemote = 0x00000000; FailuresLink = 0x00000000; FailuresAdapter = 0x00000000; ConnectionSessionTimeouts = 0x00000000; ConnectionsCanceled = 0x00000000; FailuresResourceRemote = 0x00000000; FailuresResourceLocal = 0x00000000; FailuresNotFound = 0x00000000; FailuresNoListen = 0x00000000; DatagramsSentPerSec = 0x00000000; DatagramBytesSentPerSec = 0x0000000000000000; DatagramsReceivedPerSec = 0x00000000; DatagramBytesReceivedPerSec = 0x0000000000000000; PacketsSentPerSec = 0x00000000; PacketsReceivedPerSec = 0x00000000; FramesSentPerSec = 0x00000000; FrameBytesSentPerSec = 0x0000000000000000; FramesReceivedPerSec = 0x00000000; FrameBytesReceivedPerSec = 0x0000000000000000; FramesReSentPerSec = 0x00000000; FrameBytesReSentPerSec = 0x0000000000000000; FramesRejectedPerSec = 0x00000000; FrameBytesRejectedPerSec = 0x0000000000000000; ExpirationsResponse = 0x00000000; ExpirationsAck = 0x00000000; WindowSendMaximum = 0x00001738; WindowSendAverage = 0x00001738; PiggybackAckQueuedPerSec = 0x00000000; PiggybackAckTimeouts = 0x00000000; }; [ vendor("Microsoft"), guid(""), locale("ms:\\0x0409"), displayname("Client Service For NetWare"), perfindex(1230), helpindex(1231), perfdetail(100) ] class Win32Perf_ClientServiceForNetWare : Win32_PerfFormattedData { [key] string Name; uint64 Timestamp; [ perfdefault, displayname("Bytes Total/sec"), countertype(272696576), perfindex(388), helpindex(389), defaultscale(-4), perfdetail(100) ] real64 BytesTotalPerSec; [ displayname("File Data Operations/sec"), countertype(272696320), perfindex(406), helpindex(391), defaultscale(0), perfdetail(100) ] real64 FileDataOperationsPerSec; [ displayname("Packets/sec"), countertype(272696576), perfindex(400), helpindex(401), defaultscale(-1), perfdetail(100) ] real64 PacketsPerSec; [ displayname("Bytes Received/sec"), countertype(272696576), perfindex(264), helpindex(265), defaultscale(-4), perfdetail(200) ] real64 BytesReceivedPerSec; [ displayname("Packets Received/sec"), countertype(272696576), perfindex(266), helpindex(267), defaultscale(-1), perfdetail(200) ] real64 PacketsReceivedPerSec; [ displayname("Bytes Transmitted/sec"), countertype(272696576), perfindex(276), helpindex(277), defaultscale(-4), perfdetail(200) ] real64 BytesTransmittedPerSec; [ displayname("Packets Transmitted/sec"), countertype(272696576), perfindex(278), helpindex(279), defaultscale(-1), perfdetail(200) ] real64 PacketsTransmittedPerSec; [ displayname("File Read Operations/sec"), countertype(272696320), perfindex(10), helpindex(289), defaultscale(0), perfdetail(100) ] real64 FileReadOperationsPerSec; [ displayname("Read Operations Random/sec"), countertype(272696320), perfindex(290), helpindex(291), defaultscale(-1), perfdetail(200) ] real64 ReadOperationsRandomPerSec; [ displayname("Read Packets/sec"), countertype(272696320), perfindex(292), helpindex(293), defaultscale(-1), perfdetail(200) ] real64 ReadPacketsPerSec; [ displayname("File Write Operations/sec"), countertype(272696320), perfindex(12), helpindex(299), defaultscale(0), perfdetail(100) ] real64 FileWriteOperationsPerSec; [ displayname("Write Operations Random/sec"), countertype(272696320), perfindex(300), helpindex(301), defaultscale(-1), perfdetail(200) ] real64 WriteOperationsRandomPerSec; [ displayname("Write Packets/sec"), countertype(272696320), perfindex(302), helpindex(303), defaultscale(-1), perfdetail(200) ] real64 WritePacketsPerSec; [ displayname("Server Sessions"), countertype(65536), perfindex(314), helpindex(315), defaultscale(0), perfdetail(100) ] uint32 ServerSessions; [ displayname("Server Reconnects"), countertype(65536), perfindex(316), helpindex(317), defaultscale(0), perfdetail(200) ] uint32 ServerReconnects; [ displayname("Connect NetWare 2.x"), countertype(65536), perfindex(1242), helpindex(1243), defaultscale(0), perfdetail(200) ] uint32 ConnectNetWare2X; [ displayname("Connect NetWare 3.x"), countertype(65536), perfindex(1244), helpindex(1245), defaultscale(0), perfdetail(200) ] uint32 ConnectNetWare3X; [ displayname("Connect NetWare 4.x"), countertype(65536), perfindex(1246), helpindex(1247), defaultscale(0), perfdetail(200) ] uint32 ConnectNetWare4X; [ displayname("Server Disconnects"), countertype(65536), perfindex(326), helpindex(327), defaultscale(0), perfdetail(200) ] uint32 ServerDisconnects; [ displayname("Packet Burst Read NCP Count/sec"), countertype(272696320), perfindex(1232), helpindex(1233), defaultscale(0), perfdetail(200) ] real64 PacketBurstReadNCPCountPerSec; [ displayname("Packet Burst Read Timeouts/sec"), countertype(272696320), perfindex(1234), helpindex(1235), defaultscale(0), perfdetail(200) ] real64 PacketBurstReadTimeoutsPerSec; [ displayname("Packet Burst Write NCP Count/sec"), countertype(272696320), perfindex(1236), helpindex(1237), defaultscale(0), perfdetail(200) ] real64 PacketBurstWriteNCPCountPerSec; [ displayname("Packet Burst Write Timeouts/sec"), countertype(272696320), perfindex(1238), helpindex(1239), defaultscale(0), perfdetail(200) ] real64 PacketBurstWriteTimeoutsPerSec; [ displayname("Packet Burst IO/sec"), countertype(272696320), perfindex(1240), helpindex(1241), defaultscale(0), perfdetail(200) ] real64 PacketBurstIOPerSec; }; [ vendor("Microsoft"), guid(""), locale("ms:\\0x0409"), displayname("Client Service For NetWare"), perfindex(1230), helpindex(1231), perfdetail(100) ] class Win32Perf_RawClientServiceForNetWare : Win32_PerfRawData { [key] string Name; uint64 Timestamp; [ perfdefault, displayname("Bytes Total/sec"), countertype(272696576), perfindex(388), helpindex(389), defaultscale(-4), perfdetail(100) ] uint64 BytesTotalPerSec; [ displayname("File Data Operations/sec"), countertype(272696320), perfindex(406), helpindex(391), defaultscale(0), perfdetail(100) ] uint32 FileDataOperationsPerSec; [ displayname("Packets/sec"), countertype(272696576), perfindex(400), helpindex(401), defaultscale(-1), perfdetail(100) ] uint64 PacketsPerSec; [ displayname("Bytes Received/sec"), countertype(272696576), perfindex(264), helpindex(265), defaultscale(-4), perfdetail(200) ] uint64 BytesReceivedPerSec; [ displayname("Packets Received/sec"), countertype(272696576), perfindex(266), helpindex(267), defaultscale(-1), perfdetail(200) ] uint64 PacketsReceivedPerSec; [ displayname("Bytes Transmitted/sec"), countertype(272696576), perfindex(276), helpindex(277), defaultscale(-4), perfdetail(200) ] uint64 BytesTransmittedPerSec; [ displayname("Packets Transmitted/sec"), countertype(272696576), perfindex(278), helpindex(279), defaultscale(-1), perfdetail(200) ] uint64 PacketsTransmittedPerSec; [ displayname("File Read Operations/sec"), countertype(272696320), perfindex(10), helpindex(289), defaultscale(0), perfdetail(100) ] uint32 FileReadOperationsPerSec; [ displayname("Read Operations Random/sec"), countertype(272696320), perfindex(290), helpindex(291), defaultscale(-1), perfdetail(200) ] uint32 ReadOperationsRandomPerSec; [ displayname("Read Packets/sec"), countertype(272696320), perfindex(292), helpindex(293), defaultscale(-1), perfdetail(200) ] uint32 ReadPacketsPerSec; [ displayname("File Write Operations/sec"), countertype(272696320), perfindex(12), helpindex(299), defaultscale(0), perfdetail(100) ] uint32 FileWriteOperationsPerSec; [ displayname("Write Operations Random/sec"), countertype(272696320), perfindex(300), helpindex(301), defaultscale(-1), perfdetail(200) ] uint32 WriteOperationsRandomPerSec; [ displayname("Write Packets/sec"), countertype(272696320), perfindex(302), helpindex(303), defaultscale(-1), perfdetail(200) ] uint32 WritePacketsPerSec; [ displayname("Server Sessions"), countertype(65536), perfindex(314), helpindex(315), defaultscale(0), perfdetail(100) ] uint32 ServerSessions; [ displayname("Server Reconnects"), countertype(65536), perfindex(316), helpindex(317), defaultscale(0), perfdetail(200) ] uint32 ServerReconnects; [ displayname("Connect NetWare 2.x"), countertype(65536), perfindex(1242), helpindex(1243), defaultscale(0), perfdetail(200) ] uint32 ConnectNetWare2X; [ displayname("Connect NetWare 3.x"), countertype(65536), perfindex(1244), helpindex(1245), defaultscale(0), perfdetail(200) ] uint32 ConnectNetWare3X; [ displayname("Connect NetWare 4.x"), countertype(65536), perfindex(1246), helpindex(1247), defaultscale(0), perfdetail(200) ] uint32 ConnectNetWare4X; [ displayname("Server Disconnects"), countertype(65536), perfindex(326), helpindex(327), defaultscale(0), perfdetail(200) ] uint32 ServerDisconnects; [ displayname("Packet Burst Read NCP Count/sec"), countertype(272696320), perfindex(1232), helpindex(1233), defaultscale(0), perfdetail(200) ] uint32 PacketBurstReadNCPCountPerSec; [ displayname("Packet Burst Read Timeouts/sec"), countertype(272696320), perfindex(1234), helpindex(1235), defaultscale(0), perfdetail(200) ] uint32 PacketBurstReadTimeoutsPerSec; [ displayname("Packet Burst Write NCP Count/sec"), countertype(272696320), perfindex(1236), helpindex(1237), defaultscale(0), perfdetail(200) ] uint32 PacketBurstWriteNCPCountPerSec; [ displayname("Packet Burst Write Timeouts/sec"), countertype(272696320), perfindex(1238), helpindex(1239), defaultscale(0), perfdetail(200) ] uint32 PacketBurstWriteTimeoutsPerSec; [ displayname("Packet Burst IO/sec"), countertype(272696320), perfindex(1240), helpindex(1241), defaultscale(0), perfdetail(200) ] uint32 PacketBurstIOPerSec; }; [ singleton, vendor("Microsoft"), guid("{5C7A4F66-9E4D-11d1-BB3C-00A0C913CAD4}"), locale("ms:\\0x0409"), displayname("Server"), perfindex(330), helpindex(331), perfdetail(100) ] class Win32Perf_Server : Win32_PerfFormattedData { uint64 Timestamp; [ perfdefault, displayname("Bytes Total/sec"), countertype(272696576), perfindex(388), helpindex(395), defaultscale(-4), perfdetail(100) ] real64 BytesTotalPerSec; [ displayname("Bytes Received/sec"), countertype(272696576), perfindex(264), helpindex(333), defaultscale(-4), perfdetail(200) ] real64 BytesReceivedPerSec; [ displayname("Bytes Transmitted/sec"), countertype(272696576), perfindex(276), helpindex(335), defaultscale(-4), perfdetail(200) ] real64 BytesTransmittedPerSec; [ displayname("Sessions Timed Out"), countertype(65536), perfindex(340), helpindex(341), defaultscale(0), perfdetail(200) ] uint32 SessionsTimedOut; [ displayname("Sessions Errored Out"), countertype(65536), perfindex(342), helpindex(343), defaultscale(0), perfdetail(200) ] uint32 SessionsErroredOut; [ displayname("Sessions Logged Off"), countertype(65536), perfindex(344), helpindex(345), defaultscale(0), perfdetail(200) ] uint32 SessionsLoggedOff; [ displayname("Sessions Forced Off"), countertype(65536), perfindex(346), helpindex(347), defaultscale(0), perfdetail(200) ] uint32 SessionsForcedOff; [ displayname("Errors Logon"), countertype(65536), perfindex(348), helpindex(349), defaultscale(0), perfdetail(200) ] uint32 ErrorsLogon; [ displayname("Errors Access Permissions"), countertype(65536), perfindex(350), helpindex(351), defaultscale(0), perfdetail(100) ] uint32 ErrorsAccessPermissions; [ displayname("Errors Granted Access"), countertype(65536), perfindex(352), helpindex(353), defaultscale(0), perfdetail(200) ] uint32 ErrorsGrantedAccess; [ displayname("Errors System"), countertype(65536), perfindex(354), helpindex(355), defaultscale(0), perfdetail(300) ] uint32 ErrorsSystem; [ displayname("Blocking Requests Rejected"), countertype(272696320), perfindex(356), helpindex(357), defaultscale(0), perfdetail(200) ] real64 BlockingRequestsRejected; [ displayname("Work Item Shortages"), countertype(272696320), perfindex(358), helpindex(359), defaultscale(0), perfdetail(200) ] real64 WorkItemShortages; [ displayname("Files Opened Total"), countertype(65536), perfindex(360), helpindex(361), defaultscale(-3), perfdetail(100) ] uint32 FilesOpenedTotal; [ displayname("Files Open"), countertype(65536), perfindex(362), helpindex(363), defaultscale(0), perfdetail(100) ] uint32 FilesOpen; [ displayname("Server Sessions"), countertype(65536), perfindex(314), helpindex(365), defaultscale(0), perfdetail(100) ] uint32 ServerSessions; [ displayname("File Directory Searches"), countertype(65536), perfindex(366), helpindex(367), defaultscale(0), perfdetail(200) ] uint32 FileDirectorySearches; [ displayname("Pool Nonpaged Bytes"), countertype(65536), perfindex(58), helpindex(369), defaultscale(-4), perfdetail(300) ] uint32 PoolNonpagedBytes; [ displayname("Pool Nonpaged Failures"), countertype(272696320), perfindex(370), helpindex(371), defaultscale(0), perfdetail(400) ] real64 PoolNonpagedFailures; [ displayname("Pool Nonpaged Peak"), countertype(65536), perfindex(372), helpindex(373), defaultscale(-4), perfdetail(300) ] uint32 PoolNonpagedPeak; [ displayname("Pool Paged Bytes"), countertype(65536), perfindex(56), helpindex(375), defaultscale(-4), perfdetail(300) ] uint32 PoolPagedBytes; [ displayname("Pool Paged Failures"), countertype(65536), perfindex(376), helpindex(377), defaultscale(0), perfdetail(400) ] uint32 PoolPagedFailures; [ displayname("Pool Paged Peak"), countertype(65536), perfindex(378), helpindex(379), defaultscale(-4), perfdetail(200) ] uint32 PoolPagedPeak; [ displayname("Context Blocks Queued/sec"), countertype(272696320), perfindex(404), helpindex(405), defaultscale(-1), perfdetail(100) ] real64 ContextBlocksQueuedPerSec; [ displayname("Logon/sec"), countertype(272696320), perfindex(692), helpindex(693), defaultscale(1), perfdetail(100) ] real64 LogonPerSec; [ displayname("Logon Total"), countertype(65536), perfindex(1260), helpindex(1261), defaultscale(1), perfdetail(100) ] uint32 LogonTotal; }; [ singleton, vendor("Microsoft"), guid("{5C7A4F66-9E4D-11d1-BB3C-00A0C913CAD4}"), locale("ms:\\0x0409"), displayname("Server"), perfindex(330), helpindex(331), perfdetail(100) ] class Win32Perf_RawServer : Win32_PerfRawData { uint64 Timestamp; [ perfdefault, displayname("Bytes Total/sec"), countertype(272696576), perfindex(388), helpindex(395), defaultscale(-4), perfdetail(100) ] uint64 BytesTotalPerSec; [ displayname("Bytes Received/sec"), countertype(272696576), perfindex(264), helpindex(333), defaultscale(-4), perfdetail(200) ] uint64 BytesReceivedPerSec; [ displayname("Bytes Transmitted/sec"), countertype(272696576), perfindex(276), helpindex(335), defaultscale(-4), perfdetail(200) ] uint64 BytesTransmittedPerSec; [ displayname("Sessions Timed Out"), countertype(65536), perfindex(340), helpindex(341), defaultscale(0), perfdetail(200) ] uint32 SessionsTimedOut; [ displayname("Sessions Errored Out"), countertype(65536), perfindex(342), helpindex(343), defaultscale(0), perfdetail(200) ] uint32 SessionsErroredOut; [ displayname("Sessions Logged Off"), countertype(65536), perfindex(344), helpindex(345), defaultscale(0), perfdetail(200) ] uint32 SessionsLoggedOff; [ displayname("Sessions Forced Off"), countertype(65536), perfindex(346), helpindex(347), defaultscale(0), perfdetail(200) ] uint32 SessionsForcedOff; [ displayname("Errors Logon"), countertype(65536), perfindex(348), helpindex(349), defaultscale(0), perfdetail(200) ] uint32 ErrorsLogon; [ displayname("Errors Access Permissions"), countertype(65536), perfindex(350), helpindex(351), defaultscale(0), perfdetail(100) ] uint32 ErrorsAccessPermissions; [ displayname("Errors Granted Access"), countertype(65536), perfindex(352), helpindex(353), defaultscale(0), perfdetail(200) ] uint32 ErrorsGrantedAccess; [ displayname("Errors System"), countertype(65536), perfindex(354), helpindex(355), defaultscale(0), perfdetail(300) ] uint32 ErrorsSystem; [ displayname("Blocking Requests Rejected"), countertype(272696320), perfindex(356), helpindex(357), defaultscale(0), perfdetail(200) ] uint32 BlockingRequestsRejected; [ displayname("Work Item Shortages"), countertype(272696320), perfindex(358), helpindex(359), defaultscale(0), perfdetail(200) ] uint32 WorkItemShortages; [ displayname("Files Opened Total"), countertype(65536), perfindex(360), helpindex(361), defaultscale(-3), perfdetail(100) ] uint32 FilesOpenedTotal; [ displayname("Files Open"), countertype(65536), perfindex(362), helpindex(363), defaultscale(0), perfdetail(100) ] uint32 FilesOpen; [ displayname("Server Sessions"), countertype(65536), perfindex(314), helpindex(365), defaultscale(0), perfdetail(100) ] uint32 ServerSessions; [ displayname("File Directory Searches"), countertype(65536), perfindex(366), helpindex(367), defaultscale(0), perfdetail(200) ] uint32 FileDirectorySearches; [ displayname("Pool Nonpaged Bytes"), countertype(65536), perfindex(58), helpindex(369), defaultscale(-4), perfdetail(300) ] uint32 PoolNonpagedBytes; [ displayname("Pool Nonpaged Failures"), countertype(272696320), perfindex(370), helpindex(371), defaultscale(0), perfdetail(400) ] uint32 PoolNonpagedFailures; [ displayname("Pool Nonpaged Peak"), countertype(65536), perfindex(372), helpindex(373), defaultscale(-4), perfdetail(300) ] uint32 PoolNonpagedPeak; [ displayname("Pool Paged Bytes"), countertype(65536), perfindex(56), helpindex(375), defaultscale(-4), perfdetail(300) ] uint32 PoolPagedBytes; [ displayname("Pool Paged Failures"), countertype(65536), perfindex(376), helpindex(377), defaultscale(0), perfdetail(400) ] uint32 PoolPagedFailures; [ displayname("Pool Paged Peak"), countertype(65536), perfindex(378), helpindex(379), defaultscale(-4), perfdetail(200) ] uint32 PoolPagedPeak; [ displayname("Context Blocks Queued/sec"), countertype(272696320), perfindex(404), helpindex(405), defaultscale(-1), perfdetail(100) ] uint32 ContextBlocksQueuedPerSec; [ displayname("Logon/sec"), countertype(272696320), perfindex(692), helpindex(693), defaultscale(1), perfdetail(100) ] uint32 LogonPerSec; [ displayname("Logon Total"), countertype(65536), perfindex(1260), helpindex(1261), defaultscale(1), perfdetail(100) ] uint32 LogonTotal; }; instance of Win32Perf_RawServer { Timestamp = 0x01bd4e0698ba679c; BytesTotalPerSec = 0x000000000017c13e; BytesReceivedPerSec = 0x00000000000aaf1f; BytesTransmittedPerSec = 0x00000000000d121f; SessionsTimedOut = 0x00000002; SessionsErroredOut = 0x00000002; SessionsLoggedOff = 0x00000000; SessionsForcedOff = 0x00000000; ErrorsLogon = 0x00000000; ErrorsAccessPermissions = 0x00000000; ErrorsGrantedAccess = 0x00000000; ErrorsSystem = 0x00000000; BlockingRequestsRejected = 0x00000000; WorkItemShortages = 0x00000000; FilesOpenedTotal = 0x00000088; FilesOpen = 0x00000000; ServerSessions = 0x00000002; FileDirectorySearches = 0x00000000; PoolNonpagedBytes = 0x00005ff3; PoolNonpagedFailures = 0x00000000; PoolNonpagedPeak = 0x00010a0c; PoolPagedBytes = 0x0000257c; PoolPagedFailures = 0x00000000; PoolPagedPeak = 0x000129a8; ContextBlocksQueuedPerSec = 0x000005c0; LogonPerSec = 0x00000003; LogonTotal = 0x00000003; }; [ vendor("Microsoft"), guid("{5C7A4F67-9E4D-11d1-BB3C-00A0C913CAD4}"), locale("ms:\\0x0409"), displayname("Server Work Queues"), perfindex(1300), helpindex(1301), perfdetail(200) ] class Win32Perf_ServerWorkQueues : Win32_PerfFormattedData { [key] string Name; uint64 Timestamp; [ perfdefault, displayname("Queue Length"), countertype(65536), perfindex(1302), helpindex(1303), defaultscale(0), perfdetail(200) ] uint32 QueueLength; [ displayname("Active Threads"), countertype(65536), perfindex(1304), helpindex(1305), defaultscale(0), perfdetail(200) ] uint32 ActiveThreads; [ displayname("Available Threads"), countertype(65536), perfindex(1306), helpindex(1307), defaultscale(0), perfdetail(200) ] uint32 AvailableThreads; [ displayname("Available Work Items"), countertype(65536), perfindex(1308), helpindex(1309), defaultscale(0), perfdetail(200) ] uint32 AvailableWorkItems; [ displayname("Borrowed Work Items"), countertype(65536), perfindex(1310), helpindex(1311), defaultscale(0), perfdetail(200) ] uint32 BorrowedWorkItems; [ displayname("Work Item Shortages"), countertype(65536), perfindex(1312), helpindex(1313), defaultscale(0), perfdetail(200) ] uint32 WorkItemShortages; [ displayname("Current Clients"), countertype(65536), perfindex(1314), helpindex(1315), defaultscale(0), perfdetail(200) ] uint32 CurrentClients; [ displayname("Bytes Received/sec"), countertype(272696576), perfindex(264), helpindex(1317), defaultscale(-4), perfdetail(200) ] real64 BytesReceivedPerSec; [ displayname("Bytes Sent/sec"), countertype(272696576), perfindex(506), helpindex(1319), defaultscale(-4), perfdetail(200) ] real64 BytesSentPerSec; [ displayname("Bytes Transferred/sec"), countertype(272696576), perfindex(1320), helpindex(1321), defaultscale(-4), perfdetail(200) ] real64 BytesTransferredPerSec; [ displayname("Read Operations/sec"), countertype(272696576), perfindex(288), helpindex(1323), defaultscale(0), perfdetail(200) ] real64 ReadOperationsPerSec; [ displayname("Read Bytes/sec"), countertype(272696576), perfindex(1324), helpindex(1325), defaultscale(-4), perfdetail(200) ] real64 ReadBytesPerSec; [ displayname("Write Operations/sec"), countertype(272696576), perfindex(298), helpindex(1327), defaultscale(0), perfdetail(200) ] real64 WriteOperationsPerSec; [ displayname("Write Bytes/sec"), countertype(272696576), perfindex(1328), helpindex(1329), defaultscale(-4), perfdetail(200) ] real64 WriteBytesPerSec; [ displayname("Total Bytes/sec"), countertype(272696576), perfindex(508), helpindex(1331), defaultscale(-4), perfdetail(200) ] real64 TotalBytesPerSec; [ displayname("Total Operations/sec"), countertype(272696576), perfindex(1332), helpindex(1333), defaultscale(0), perfdetail(200) ] real64 TotalOperationsPerSec; [ displayname("Context Blocks Queued/sec"), countertype(272696320), perfindex(404), helpindex(405), defaultscale(0), perfdetail(200) ] real64 ContextBlocksQueuedPerSec; }; [ vendor("Microsoft"), guid("{5C7A4F67-9E4D-11d1-BB3C-00A0C913CAD4}"), locale("ms:\\0x0409"), displayname("Server Work Queues"), perfindex(1300), helpindex(1301), perfdetail(200) ] class Win32Perf_RawServerWorkQueues : Win32_PerfRawData { [key] string Name; uint64 Timestamp; [ perfdefault, displayname("Queue Length"), countertype(65536), perfindex(1302), helpindex(1303), defaultscale(0), perfdetail(200) ] uint32 QueueLength; [ displayname("Active Threads"), countertype(65536), perfindex(1304), helpindex(1305), defaultscale(0), perfdetail(200) ] uint32 ActiveThreads; [ displayname("Available Threads"), countertype(65536), perfindex(1306), helpindex(1307), defaultscale(0), perfdetail(200) ] uint32 AvailableThreads; [ displayname("Available Work Items"), countertype(65536), perfindex(1308), helpindex(1309), defaultscale(0), perfdetail(200) ] uint32 AvailableWorkItems; [ displayname("Borrowed Work Items"), countertype(65536), perfindex(1310), helpindex(1311), defaultscale(0), perfdetail(200) ] uint32 BorrowedWorkItems; [ displayname("Work Item Shortages"), countertype(65536), perfindex(1312), helpindex(1313), defaultscale(0), perfdetail(200) ] uint32 WorkItemShortages; [ displayname("Current Clients"), countertype(65536), perfindex(1314), helpindex(1315), defaultscale(0), perfdetail(200) ] uint32 CurrentClients; [ displayname("Bytes Received/sec"), countertype(272696576), perfindex(264), helpindex(1317), defaultscale(-4), perfdetail(200) ] uint64 BytesReceivedPerSec; [ displayname("Bytes Sent/sec"), countertype(272696576), perfindex(506), helpindex(1319), defaultscale(-4), perfdetail(200) ] uint64 BytesSentPerSec; [ displayname("Bytes Transferred/sec"), countertype(272696576), perfindex(1320), helpindex(1321), defaultscale(-4), perfdetail(200) ] uint64 BytesTransferredPerSec; [ displayname("Read Operations/sec"), countertype(272696576), perfindex(288), helpindex(1323), defaultscale(0), perfdetail(200) ] uint64 ReadOperationsPerSec; [ displayname("Read Bytes/sec"), countertype(272696576), perfindex(1324), helpindex(1325), defaultscale(-4), perfdetail(200) ] uint64 ReadBytesPerSec; [ displayname("Write Operations/sec"), countertype(272696576), perfindex(298), helpindex(1327), defaultscale(0), perfdetail(200) ] uint64 WriteOperationsPerSec; [ displayname("Write Bytes/sec"), countertype(272696576), perfindex(1328), helpindex(1329), defaultscale(-4), perfdetail(200) ] uint64 WriteBytesPerSec; [ displayname("Total Bytes/sec"), countertype(272696576), perfindex(508), helpindex(1331), defaultscale(-4), perfdetail(200) ] uint64 TotalBytesPerSec; [ displayname("Total Operations/sec"), countertype(272696576), perfindex(1332), helpindex(1333), defaultscale(0), perfdetail(200) ] uint64 TotalOperationsPerSec; [ displayname("Context Blocks Queued/sec"), countertype(272696320), perfindex(404), helpindex(405), defaultscale(0), perfdetail(200) ] uint32 ContextBlocksQueuedPerSec; }; instance of Win32Perf_RawServerWorkQueues { Name = "0"; QueueLength = 0x00000000; ActiveThreads = 0x00000000; AvailableThreads = 0x00000002; AvailableWorkItems = 0x00000002; BorrowedWorkItems = 0x00000000; WorkItemShortages = 0x00000000; CurrentClients = 0x00000001; BytesReceivedPerSec = 0x00000000000aaf1f; BytesSentPerSec = 0x00000000000d121f; BytesTransferredPerSec = 0x000000000017c13e; ReadOperationsPerSec = 0x0000000000000025; ReadBytesPerSec = 0x00000000000b2050; WriteOperationsPerSec = 0x000000000000002b; WriteBytesPerSec = 0x000000000009d760; TotalBytesPerSec = 0x000000000014f7b0; TotalOperationsPerSec = 0x0000000000000050; ContextBlocksQueuedPerSec = 0x000005c0; }; instance of Win32Perf_RawServerWorkQueues { Name = "Blocking Queue"; QueueLength = 0x00000000; ActiveThreads = 0x00000000; AvailableThreads = 0x00000002; AvailableWorkItems = 0x00000000; BorrowedWorkItems = 0x00000000; WorkItemShortages = 0x00000000; CurrentClients = 0x00000000; BytesReceivedPerSec = 0x0000000000000000; BytesSentPerSec = 0x0000000000000000; BytesTransferredPerSec = 0x0000000000000000; ReadOperationsPerSec = 0x0000000000000000; ReadBytesPerSec = 0x0000000000000000; WriteOperationsPerSec = 0x0000000000000000; WriteBytesPerSec = 0x0000000000000000; TotalBytesPerSec = 0x0000000000000000; TotalOperationsPerSec = 0x0000000000000000; ContextBlocksQueuedPerSec = 0x000001a0; }; [ singleton, vendor("Microsoft"), guid("{5C7A4F65-9E4D-11d1-BB3C-00A0C913CAD4}"), locale("ms:\\0x0409"), displayname("Redirector"), perfindex(262), helpindex(263), perfdetail(100) ] class Win32Perf_Redirector : Win32_PerfFormattedData { uint64 Timestamp; [ perfdefault, displayname("Bytes Total/sec"), countertype(272696576), perfindex(388), helpindex(389), defaultscale(-4), perfdetail(100) ] real64 BytesTotalPerSec; [ displayname("File Data Operations/sec"), countertype(272696320), perfindex(406), helpindex(391), defaultscale(0), perfdetail(100) ] real64 FileDataOperationsPerSec; [ displayname("Packets/sec"), countertype(272696576), perfindex(400), helpindex(401), defaultscale(-1), perfdetail(100) ] real64 PacketsPerSec; [ displayname("Bytes Received/sec"), countertype(272696576), perfindex(264), helpindex(265), defaultscale(-4), perfdetail(200) ] real64 BytesReceivedPerSec; [ displayname("Packets Received/sec"), countertype(272696576), perfindex(266), helpindex(267), defaultscale(-1), perfdetail(200) ] real64 PacketsReceivedPerSec; [ displayname("Read Bytes Paging/sec"), countertype(272696576), perfindex(268), helpindex(269), defaultscale(-4), perfdetail(300) ] real64 ReadBytesPagingPerSec; [ displayname("Read Bytes Non-Paging/sec"), countertype(272696576), perfindex(270), helpindex(271), defaultscale(-4), perfdetail(300) ] real64 ReadBytesNonPagingPerSec; [ displayname("Read Bytes Cache/sec"), countertype(272696576), perfindex(272), helpindex(273), defaultscale(-4), perfdetail(300) ] real64 ReadBytesCachePerSec; [ displayname("Read Bytes Network/sec"), countertype(272696576), perfindex(274), helpindex(275), defaultscale(-4), perfdetail(100) ] real64 ReadBytesNetworkPerSec; [ displayname("Bytes Transmitted/sec"), countertype(272696576), perfindex(276), helpindex(277), defaultscale(-4), perfdetail(200) ] real64 BytesTransmittedPerSec; [ displayname("Packets Transmitted/sec"), countertype(272696576), perfindex(278), helpindex(279), defaultscale(-1), perfdetail(200) ] real64 PacketsTransmittedPerSec; [ displayname("Write Bytes Paging/sec"), countertype(272696576), perfindex(280), helpindex(281), defaultscale(-4), perfdetail(300) ] real64 WriteBytesPagingPerSec; [ displayname("Write Bytes Non-Paging/sec"), countertype(272696576), perfindex(282), helpindex(283), defaultscale(-4), perfdetail(300) ] real64 WriteBytesNonPagingPerSec; [ displayname("Write Bytes Cache/sec"), countertype(272696576), perfindex(284), helpindex(285), defaultscale(-4), perfdetail(300) ] real64 WriteBytesCachePerSec; [ displayname("Write Bytes Network/sec"), countertype(272696576), perfindex(286), helpindex(287), defaultscale(-4), perfdetail(100) ] real64 WriteBytesNetworkPerSec; [ displayname("File Read Operations/sec"), countertype(272696320), perfindex(10), helpindex(289), defaultscale(0), perfdetail(100) ] real64 FileReadOperationsPerSec; [ displayname("Read Operations Random/sec"), countertype(272696320), perfindex(290), helpindex(291), defaultscale(-1), perfdetail(200) ] real64 ReadOperationsRandomPerSec; [ displayname("Read Packets/sec"), countertype(272696320), perfindex(292), helpindex(293), defaultscale(-1), perfdetail(200) ] real64 ReadPacketsPerSec; [ displayname("Reads Large/sec"), countertype(272696320), perfindex(294), helpindex(295), defaultscale(0), perfdetail(300) ] real64 ReadsLargePerSec; [ displayname("Read Packets Small/sec"), countertype(272696320), perfindex(296), helpindex(297), defaultscale(-1), perfdetail(300) ] real64 ReadPacketsSmallPerSec; [ displayname("File Write Operations/sec"), countertype(272696320), perfindex(12), helpindex(299), defaultscale(0), perfdetail(100) ] real64 FileWriteOperationsPerSec; [ displayname("Write Operations Random/sec"), countertype(272696320), perfindex(300), helpindex(301), defaultscale(-1), perfdetail(200) ] real64 WriteOperationsRandomPerSec; [ displayname("Write Packets/sec"), countertype(272696320), perfindex(302), helpindex(303), defaultscale(-1), perfdetail(200) ] real64 WritePacketsPerSec; [ displayname("Writes Large/sec"), countertype(272696320), perfindex(304), helpindex(305), defaultscale(0), perfdetail(300) ] real64 WritesLargePerSec; [ displayname("Write Packets Small/sec"), countertype(272696320), perfindex(306), helpindex(307), defaultscale(-1), perfdetail(300) ] real64 WritePacketsSmallPerSec; [ displayname("Reads Denied/sec"), countertype(272696320), perfindex(308), helpindex(309), defaultscale(0), perfdetail(200) ] real64 ReadsDeniedPerSec; [ displayname("Writes Denied/sec"), countertype(272696320), perfindex(310), helpindex(311), defaultscale(0), perfdetail(200) ] real64 WritesDeniedPerSec; [ displayname("Network Errors/sec"), countertype(272696320), perfindex(312), helpindex(313), defaultscale(0), perfdetail(100) ] real64 NetworkErrorsPerSec; [ displayname("Server Sessions"), countertype(65536), perfindex(314), helpindex(315), defaultscale(0), perfdetail(100) ] uint32 ServerSessions; [ displayname("Server Reconnects"), countertype(65536), perfindex(316), helpindex(317), defaultscale(0), perfdetail(200) ] uint32 ServerReconnects; [ displayname("Connects Core"), countertype(65536), perfindex(318), helpindex(319), defaultscale(0), perfdetail(200) ] uint32 ConnectsCore; [ displayname("Connects Lan Manager 2.0"), countertype(65536), perfindex(320), helpindex(321), defaultscale(0), perfdetail(200) ] uint32 ConnectsLanManager20; [ displayname("Connects Lan Manager 2.1"), countertype(65536), perfindex(322), helpindex(323), defaultscale(0), perfdetail(200) ] uint32 ConnectsLanManager21; [ displayname("Connects Windows NT"), countertype(65536), perfindex(324), helpindex(325), defaultscale(0), perfdetail(200) ] uint32 ConnectsWindowsNT; [ displayname("Server Disconnects"), countertype(65536), perfindex(326), helpindex(327), defaultscale(0), perfdetail(200) ] uint32 ServerDisconnects; [ displayname("Server Sessions Hung"), countertype(65536), perfindex(328), helpindex(329), defaultscale(0), perfdetail(200) ] uint32 ServerSessionsHung; [ displayname("Current Commands"), countertype(65536), perfindex(392), helpindex(393), defaultscale(0), perfdetail(200) ] uint32 CurrentCommands; }; [ singleton, vendor("Microsoft"), guid("{5C7A4F65-9E4D-11d1-BB3C-00A0C913CAD4}"), locale("ms:\\0x0409"), displayname("Redirector"), perfindex(262), helpindex(263), perfdetail(100) ] class Win32Perf_RawRedirector : Win32_PerfRawData { uint64 Timestamp; [ perfdefault, displayname("Bytes Total/sec"), countertype(272696576), perfindex(388), helpindex(389), defaultscale(-4), perfdetail(100) ] uint64 BytesTotalPerSec; [ displayname("File Data Operations/sec"), countertype(272696320), perfindex(406), helpindex(391), defaultscale(0), perfdetail(100) ] uint32 FileDataOperationsPerSec; [ displayname("Packets/sec"), countertype(272696576), perfindex(400), helpindex(401), defaultscale(-1), perfdetail(100) ] uint64 PacketsPerSec; [ displayname("Bytes Received/sec"), countertype(272696576), perfindex(264), helpindex(265), defaultscale(-4), perfdetail(200) ] uint64 BytesReceivedPerSec; [ displayname("Packets Received/sec"), countertype(272696576), perfindex(266), helpindex(267), defaultscale(-1), perfdetail(200) ] uint64 PacketsReceivedPerSec; [ displayname("Read Bytes Paging/sec"), countertype(272696576), perfindex(268), helpindex(269), defaultscale(-4), perfdetail(300) ] uint64 ReadBytesPagingPerSec; [ displayname("Read Bytes Non-Paging/sec"), countertype(272696576), perfindex(270), helpindex(271), defaultscale(-4), perfdetail(300) ] uint64 ReadBytesNonPagingPerSec; [ displayname("Read Bytes Cache/sec"), countertype(272696576), perfindex(272), helpindex(273), defaultscale(-4), perfdetail(300) ] uint64 ReadBytesCachePerSec; [ displayname("Read Bytes Network/sec"), countertype(272696576), perfindex(274), helpindex(275), defaultscale(-4), perfdetail(100) ] uint64 ReadBytesNetworkPerSec; [ displayname("Bytes Transmitted/sec"), countertype(272696576), perfindex(276), helpindex(277), defaultscale(-4), perfdetail(200) ] uint64 BytesTransmittedPerSec; [ displayname("Packets Transmitted/sec"), countertype(272696576), perfindex(278), helpindex(279), defaultscale(-1), perfdetail(200) ] uint64 PacketsTransmittedPerSec; [ displayname("Write Bytes Paging/sec"), countertype(272696576), perfindex(280), helpindex(281), defaultscale(-4), perfdetail(300) ] uint64 WriteBytesPagingPerSec; [ displayname("Write Bytes Non-Paging/sec"), countertype(272696576), perfindex(282), helpindex(283), defaultscale(-4), perfdetail(300) ] uint64 WriteBytesNonPagingPerSec; [ displayname("Write Bytes Cache/sec"), countertype(272696576), perfindex(284), helpindex(285), defaultscale(-4), perfdetail(300) ] uint64 WriteBytesCachePerSec; [ displayname("Write Bytes Network/sec"), countertype(272696576), perfindex(286), helpindex(287), defaultscale(-4), perfdetail(100) ] uint64 WriteBytesNetworkPerSec; [ displayname("File Read Operations/sec"), countertype(272696320), perfindex(10), helpindex(289), defaultscale(0), perfdetail(100) ] uint32 FileReadOperationsPerSec; [ displayname("Read Operations Random/sec"), countertype(272696320), perfindex(290), helpindex(291), defaultscale(-1), perfdetail(200) ] uint32 ReadOperationsRandomPerSec; [ displayname("Read Packets/sec"), countertype(272696320), perfindex(292), helpindex(293), defaultscale(-1), perfdetail(200) ] uint32 ReadPacketsPerSec; [ displayname("Reads Large/sec"), countertype(272696320), perfindex(294), helpindex(295), defaultscale(0), perfdetail(300) ] uint32 ReadsLargePerSec; [ displayname("Read Packets Small/sec"), countertype(272696320), perfindex(296), helpindex(297), defaultscale(-1), perfdetail(300) ] uint32 ReadPacketsSmallPerSec; [ displayname("File Write Operations/sec"), countertype(272696320), perfindex(12), helpindex(299), defaultscale(0), perfdetail(100) ] uint32 FileWriteOperationsPerSec; [ displayname("Write Operations Random/sec"), countertype(272696320), perfindex(300), helpindex(301), defaultscale(-1), perfdetail(200) ] uint32 WriteOperationsRandomPerSec; [ displayname("Write Packets/sec"), countertype(272696320), perfindex(302), helpindex(303), defaultscale(-1), perfdetail(200) ] uint32 WritePacketsPerSec; [ displayname("Writes Large/sec"), countertype(272696320), perfindex(304), helpindex(305), defaultscale(0), perfdetail(300) ] uint32 WritesLargePerSec; [ displayname("Write Packets Small/sec"), countertype(272696320), perfindex(306), helpindex(307), defaultscale(-1), perfdetail(300) ] uint32 WritePacketsSmallPerSec; [ displayname("Reads Denied/sec"), countertype(272696320), perfindex(308), helpindex(309), defaultscale(0), perfdetail(200) ] uint32 ReadsDeniedPerSec; [ displayname("Writes Denied/sec"), countertype(272696320), perfindex(310), helpindex(311), defaultscale(0), perfdetail(200) ] uint32 WritesDeniedPerSec; [ displayname("Network Errors/sec"), countertype(272696320), perfindex(312), helpindex(313), defaultscale(0), perfdetail(100) ] uint32 NetworkErrorsPerSec; [ displayname("Server Sessions"), countertype(65536), perfindex(314), helpindex(315), defaultscale(0), perfdetail(100) ] uint32 ServerSessions; [ displayname("Server Reconnects"), countertype(65536), perfindex(316), helpindex(317), defaultscale(0), perfdetail(200) ] uint32 ServerReconnects; [ displayname("Connects Core"), countertype(65536), perfindex(318), helpindex(319), defaultscale(0), perfdetail(200) ] uint32 ConnectsCore; [ displayname("Connects Lan Manager 2.0"), countertype(65536), perfindex(320), helpindex(321), defaultscale(0), perfdetail(200) ] uint32 ConnectsLanManager20; [ displayname("Connects Lan Manager 2.1"), countertype(65536), perfindex(322), helpindex(323), defaultscale(0), perfdetail(200) ] uint32 ConnectsLanManager21; [ displayname("Connects Windows NT"), countertype(65536), perfindex(324), helpindex(325), defaultscale(0), perfdetail(200) ] uint32 ConnectsWindowsNT; [ displayname("Server Disconnects"), countertype(65536), perfindex(326), helpindex(327), defaultscale(0), perfdetail(200) ] uint32 ServerDisconnects; [ displayname("Server Sessions Hung"), countertype(65536), perfindex(328), helpindex(329), defaultscale(0), perfdetail(200) ] uint32 ServerSessionsHung; [ displayname("Current Commands"), countertype(65536), perfindex(392), helpindex(393), defaultscale(0), perfdetail(200) ] uint32 CurrentCommands; }; instance of Win32Perf_RawRedirector { Timestamp = 0x01bd4e0698bd75fc; BytesTotalPerSec = 0x0000000007a0350c; FileDataOperationsPerSec = 0x00001678; PacketsPerSec = 0x0000000000005ece; BytesReceivedPerSec = 0x00000000078db0d2; PacketsReceivedPerSec = 0x0000000000002f74; ReadBytesPagingPerSec = 0x00000000082a5000; ReadBytesNonPagingPerSec = 0x0000000000000000; ReadBytesCachePerSec = 0x0000000000042655; ReadBytesNetworkPerSec = 0x00000000077f5fe1; BytesTransmittedPerSec = 0x000000000012843a; PacketsTransmittedPerSec = 0x0000000000002f5a; WriteBytesPagingPerSec = 0x00000000082a5000; WriteBytesNonPagingPerSec = 0x0000000000000000; WriteBytesCachePerSec = 0x0000000000000000; WriteBytesNetworkPerSec = 0x0000000000000000; FileReadOperationsPerSec = 0x00001678; ReadOperationsRandomPerSec = 0x0000034e; ReadPacketsPerSec = 0x00001319; ReadsLargePerSec = 0x00000000; ReadPacketsSmallPerSec = 0x00001319; FileWriteOperationsPerSec = 0x00000000; WriteOperationsRandomPerSec = 0x00000000; WritePacketsPerSec = 0x00000007; WritesLargePerSec = 0x00000000; WritePacketsSmallPerSec = 0x00000007; ReadsDeniedPerSec = 0x00000000; WritesDeniedPerSec = 0x00000000; NetworkErrorsPerSec = 0x00000000; ServerSessions = 0x00000007; ServerReconnects = 0x00000000; ConnectsCore = 0x00000000; ConnectsLanManager20 = 0x00000000; ConnectsLanManager21 = 0x00000000; ConnectsWindowsNT = 0x0000000a; ServerDisconnects = 0x00000000; ServerSessionsHung = 0x00000000; CurrentCommands = 0x00000000; }; [ singleton, vendor("Microsoft"), guid("{5C7A4F69-9E4D-11d1-BB3C-00A0C913CAD4}"), locale("ms:\\0x0409"), displayname("Browser"), perfindex(52), helpindex(53), perfdetail(100) ] class Win32Perf_Browser : Win32_PerfFormattedData { uint64 Timestamp; [ perfdefault, displayname("Announcements Server/sec"), countertype(272696576), perfindex(54), helpindex(55), defaultscale(0), perfdetail(100) ] real64 AnnouncementsServerPerSec; [ displayname("Announcements Domain/sec"), countertype(272696576), perfindex(78), helpindex(79), defaultscale(0), perfdetail(100) ] real64 AnnouncementsDomainPerSec; [ displayname("Announcements Total/sec"), countertype(272696576), perfindex(188), helpindex(813), defaultscale(0), perfdetail(100) ] real64 AnnouncementsTotalPerSec; [ displayname("Election Packets/sec"), countertype(272696320), perfindex(80), helpindex(81), defaultscale(0), perfdetail(100) ] real64 ElectionPacketsPerSec; [ displayname("Mailslot Writes/sec"), countertype(272696320), perfindex(82), helpindex(83), defaultscale(0), perfdetail(100) ] real64 MailslotWritesPerSec; [ displayname("Server List Requests/sec"), countertype(272696320), perfindex(84), helpindex(85), defaultscale(0), perfdetail(100) ] real64 ServerListRequestsPerSec; [ displayname("Enumerations Server/sec"), countertype(272696320), perfindex(156), helpindex(161), defaultscale(0), perfdetail(100) ] real64 EnumerationsServerPerSec; [ displayname("Enumerations Domain/sec"), countertype(272696320), perfindex(158), helpindex(163), defaultscale(0), perfdetail(100) ] real64 EnumerationsDomainPerSec; [ displayname("Enumerations Other/sec"), countertype(272696320), perfindex(160), helpindex(165), defaultscale(0), perfdetail(100) ] real64 EnumerationsOtherPerSec; [ displayname("Enumerations Total/sec"), countertype(272696320), perfindex(190), helpindex(815), defaultscale(0), perfdetail(100) ] real64 EnumerationsTotalPerSec; [ displayname("Missed Server Announcements"), countertype(65536), perfindex(162), helpindex(167), defaultscale(0), perfdetail(100) ] uint32 MissedServerAnnouncements; [ displayname("Missed Mailslot Datagrams"), countertype(65536), perfindex(164), helpindex(169), defaultscale(0), perfdetail(100) ] uint32 MissedMailslotDatagrams; [ displayname("Missed Server List Requests"), countertype(65536), perfindex(166), helpindex(171), defaultscale(0), perfdetail(100) ] uint32 MissedServerListRequests; [ displayname("Server Announce Allocations Failed/sec"), countertype(272696320), perfindex(168), helpindex(381), defaultscale(0), perfdetail(100) ] real64 ServerAnnounceAllocationsFailedPerSec; [ displayname("Mailslot Allocations Failed"), countertype(65536), perfindex(170), helpindex(383), defaultscale(0), perfdetail(100) ] uint32 MailslotAllocationsFailed; [ displayname("Mailslot Receives Failed"), countertype(65536), perfindex(806), helpindex(385), defaultscale(0), perfdetail(100) ] uint32 MailslotReceivesFailed; [ displayname("Mailslot Writes Failed"), countertype(65536), perfindex(808), helpindex(387), defaultscale(0), perfdetail(100) ] uint32 MailslotWritesFailed; [ displayname("Mailslot Opens Failed/sec"), countertype(272696320), perfindex(810), helpindex(807), defaultscale(0), perfdetail(100) ] real64 MailslotOpensFailedPerSec; [ displayname("Duplicate Master Announcements"), countertype(65536), perfindex(812), helpindex(809), defaultscale(0), perfdetail(100) ] uint32 DuplicateMasterAnnouncements; [ displayname("Illegal Datagrams/sec"), countertype(272696576), perfindex(814), helpindex(811), defaultscale(0), perfdetail(100) ] real64 IllegalDatagramsPerSec; }; [ singleton, vendor("Microsoft"), guid("{5C7A4F69-9E4D-11d1-BB3C-00A0C913CAD4}"), locale("ms:\\0x0409"), displayname("Browser"), perfindex(52), helpindex(53), perfdetail(100) ] class Win32Perf_RawBrowser : Win32_PerfRawData { uint64 Timestamp; [ perfdefault, displayname("Announcements Server/sec"), countertype(272696576), perfindex(54), helpindex(55), defaultscale(0), perfdetail(100) ] uint64 AnnouncementsServerPerSec; [ displayname("Announcements Domain/sec"), countertype(272696576), perfindex(78), helpindex(79), defaultscale(0), perfdetail(100) ] uint64 AnnouncementsDomainPerSec; [ displayname("Announcements Total/sec"), countertype(272696576), perfindex(188), helpindex(813), defaultscale(0), perfdetail(100) ] uint64 AnnouncementsTotalPerSec; [ displayname("Election Packets/sec"), countertype(272696320), perfindex(80), helpindex(81), defaultscale(0), perfdetail(100) ] uint32 ElectionPacketsPerSec; [ displayname("Mailslot Writes/sec"), countertype(272696320), perfindex(82), helpindex(83), defaultscale(0), perfdetail(100) ] uint32 MailslotWritesPerSec; [ displayname("Server List Requests/sec"), countertype(272696320), perfindex(84), helpindex(85), defaultscale(0), perfdetail(100) ] uint32 ServerListRequestsPerSec; [ displayname("Enumerations Server/sec"), countertype(272696320), perfindex(156), helpindex(161), defaultscale(0), perfdetail(100) ] uint32 EnumerationsServerPerSec; [ displayname("Enumerations Domain/sec"), countertype(272696320), perfindex(158), helpindex(163), defaultscale(0), perfdetail(100) ] uint32 EnumerationsDomainPerSec; [ displayname("Enumerations Other/sec"), countertype(272696320), perfindex(160), helpindex(165), defaultscale(0), perfdetail(100) ] uint32 EnumerationsOtherPerSec; [ displayname("Enumerations Total/sec"), countertype(272696320), perfindex(190), helpindex(815), defaultscale(0), perfdetail(100) ] uint32 EnumerationsTotalPerSec; [ displayname("Missed Server Announcements"), countertype(65536), perfindex(162), helpindex(167), defaultscale(0), perfdetail(100) ] uint32 MissedServerAnnouncements; [ displayname("Missed Mailslot Datagrams"), countertype(65536), perfindex(164), helpindex(169), defaultscale(0), perfdetail(100) ] uint32 MissedMailslotDatagrams; [ displayname("Missed Server List Requests"), countertype(65536), perfindex(166), helpindex(171), defaultscale(0), perfdetail(100) ] uint32 MissedServerListRequests; [ displayname("Server Announce Allocations Failed/sec"), countertype(272696320), perfindex(168), helpindex(381), defaultscale(0), perfdetail(100) ] uint32 ServerAnnounceAllocationsFailedPerSec; [ displayname("Mailslot Allocations Failed"), countertype(65536), perfindex(170), helpindex(383), defaultscale(0), perfdetail(100) ] uint32 MailslotAllocationsFailed; [ displayname("Mailslot Receives Failed"), countertype(65536), perfindex(806), helpindex(385), defaultscale(0), perfdetail(100) ] uint32 MailslotReceivesFailed; [ displayname("Mailslot Writes Failed"), countertype(65536), perfindex(808), helpindex(387), defaultscale(0), perfdetail(100) ] uint32 MailslotWritesFailed; [ displayname("Mailslot Opens Failed/sec"), countertype(272696320), perfindex(810), helpindex(807), defaultscale(0), perfdetail(100) ] uint32 MailslotOpensFailedPerSec; [ displayname("Duplicate Master Announcements"), countertype(65536), perfindex(812), helpindex(809), defaultscale(0), perfdetail(100) ] uint32 DuplicateMasterAnnouncements; [ displayname("Illegal Datagrams/sec"), countertype(272696576), perfindex(814), helpindex(811), defaultscale(0), perfdetail(100) ] uint64 IllegalDatagramsPerSec; }; instance of Win32Perf_RawBrowser { Timestamp = 0x01bd4e0698bd75fc; AnnouncementsServerPerSec = 0x0000000000000000; AnnouncementsDomainPerSec = 0x0000000000000000; AnnouncementsTotalPerSec = 0x0000000000000000; ElectionPacketsPerSec = 0x00000a1c; MailslotWritesPerSec = 0x00000045; ServerListRequestsPerSec = 0x00000000; EnumerationsServerPerSec = 0x00000000; EnumerationsDomainPerSec = 0x00000000; EnumerationsOtherPerSec = 0x00000000; EnumerationsTotalPerSec = 0x00000000; MissedServerAnnouncements = 0x00000000; MissedMailslotDatagrams = 0x00000000; MissedServerListRequests = 0x00000000; ServerAnnounceAllocationsFailedPerSec = 0x00000000; MailslotAllocationsFailed = 0x00000000; MailslotReceivesFailed = 0x00000000; MailslotWritesFailed = 0x00000000; MailslotOpensFailedPerSec = 0x0000089f; DuplicateMasterAnnouncements = 0x00000000; IllegalDatagramsPerSec = 0x0000000000000000; }; [ singleton, vendor("Microsoft"), guid("{5C7A4F5F-9E4D-11d1-BB3C-00A0C913CAD4}"), locale("ms:\\0x0409"), displayname("Cache"), perfindex(86), helpindex(87), perfdetail(200) ] class Win32Perf_Cache : Win32_PerfFormattedData { uint64 Timestamp; [ displayname("Data Maps/sec"), countertype(272696320), perfindex(88), helpindex(89), defaultscale(0), perfdetail(300) ] real64 DataMapsPerSec; [ displayname("Sync Data Maps/sec"), countertype(272696320), perfindex(90), helpindex(91), defaultscale(0), perfdetail(400) ] real64 SyncDataMapsPerSec; [ displayname("Async Data Maps/sec"), countertype(272696320), perfindex(92), helpindex(93), defaultscale(0), perfdetail(400) ] real64 AsyncDataMapsPerSec; [ perfdefault, displayname("Data Map Hits %"), countertype(549585920), perfindex(94), helpindex(95), defaultscale(0), perfdetail(400) ] real64 DataMapHitsPercent; [ displayname("Data Map Pins/sec"), countertype(549585920), perfindex(96), helpindex(97), defaultscale(0), perfdetail(400) ] real64 DataMapPinsPerSec; [ displayname("Pin Reads/sec"), countertype(272696320), perfindex(98), helpindex(99), defaultscale(0), perfdetail(300) ] real64 PinReadsPerSec; [ displayname("Sync Pin Reads/sec"), countertype(272696320), perfindex(100), helpindex(101), defaultscale(0), perfdetail(400) ] real64 SyncPinReadsPerSec; [ displayname("Async Pin Reads/sec"), countertype(272696320), perfindex(102), helpindex(103), defaultscale(0), perfdetail(400) ] real64 AsyncPinReadsPerSec; [ displayname("Pin Read Hits %"), countertype(549585920), perfindex(104), helpindex(105), defaultscale(0), perfdetail(300) ] real64 PinReadHitsPercent; [ displayname("Copy Reads/sec"), countertype(272696320), perfindex(106), helpindex(107), defaultscale(0), perfdetail(300) ] real64 CopyReadsPerSec; [ displayname("Sync Copy Reads/sec"), countertype(272696320), perfindex(108), helpindex(109), defaultscale(0), perfdetail(400) ] real64 SyncCopyReadsPerSec; [ displayname("Async Copy Reads/sec"), countertype(272696320), perfindex(110), helpindex(111), defaultscale(0), perfdetail(400) ] real64 AsyncCopyReadsPerSec; [ displayname("Copy Read Hits %"), countertype(549585920), perfindex(112), helpindex(113), defaultscale(0), perfdetail(300) ] real64 CopyReadHitsPercent; [ displayname("MDL Reads/sec"), countertype(272696320), perfindex(114), helpindex(115), defaultscale(0), perfdetail(300) ] real64 MDLReadsPerSec; [ displayname("Sync MDL Reads/sec"), countertype(272696320), perfindex(116), helpindex(117), defaultscale(0), perfdetail(400) ] real64 SyncMDLReadsPerSec; [ displayname("Async MDL Reads/sec"), countertype(272696320), perfindex(118), helpindex(119), defaultscale(0), perfdetail(400) ] real64 AsyncMDLReadsPerSec; [ displayname("MDL Read Hits %"), countertype(549585920), perfindex(120), helpindex(121), defaultscale(0), perfdetail(300) ] real64 MDLReadHitsPercent; [ displayname("Read Aheads/sec"), countertype(272696320), perfindex(122), helpindex(123), defaultscale(0), perfdetail(200) ] real64 ReadAheadsPerSec; [ displayname("Fast Reads/sec"), countertype(272696320), perfindex(124), helpindex(125), defaultscale(-1), perfdetail(300) ] real64 FastReadsPerSec; [ displayname("Sync Fast Reads/sec"), countertype(272696320), perfindex(126), helpindex(127), defaultscale(-1), perfdetail(400) ] real64 SyncFastReadsPerSec; [ displayname("Async Fast Reads/sec"), countertype(272696320), perfindex(128), helpindex(129), defaultscale(-1), perfdetail(400) ] real64 AsyncFastReadsPerSec; [ displayname("Fast Read Resource Misses/sec"), countertype(272696320), perfindex(130), helpindex(131), defaultscale(0), perfdetail(400) ] real64 FastReadResourceMissesPerSec; [ displayname("Fast Read Not Possibles/sec"), countertype(272696320), perfindex(132), helpindex(133), defaultscale(0), perfdetail(400) ] real64 FastReadNotPossiblesPerSec; [ displayname("Lazy Write Flushes/sec"), countertype(272696320), perfindex(134), helpindex(135), defaultscale(0), perfdetail(400) ] real64 LazyWriteFlushesPerSec; [ displayname("Lazy Write Pages/sec"), countertype(272696320), perfindex(136), helpindex(137), defaultscale(0), perfdetail(200) ] real64 LazyWritePagesPerSec; [ displayname("Data Flushes/sec"), countertype(272696320), perfindex(138), helpindex(139), defaultscale(0), perfdetail(400) ] real64 DataFlushesPerSec; [ displayname("Data Flush Pages/sec"), countertype(272696320), perfindex(140), helpindex(141), defaultscale(0), perfdetail(200) ] real64 DataFlushPagesPerSec; }; [ singleton, vendor("Microsoft"), guid("{5C7A4F5F-9E4D-11d1-BB3C-00A0C913CAD4}"), locale("ms:\\0x0409"), displayname("Cache"), perfindex(86), helpindex(87), perfdetail(200) ] class Win32Perf_RawCache : Win32_PerfRawData { uint64 Timestamp; [ displayname("Data Maps/sec"), countertype(272696320), perfindex(88), helpindex(89), defaultscale(0), perfdetail(300) ] uint32 DataMapsPerSec; [ displayname("Sync Data Maps/sec"), countertype(272696320), perfindex(90), helpindex(91), defaultscale(0), perfdetail(400) ] uint32 SyncDataMapsPerSec; [ displayname("Async Data Maps/sec"), countertype(272696320), perfindex(92), helpindex(93), defaultscale(0), perfdetail(400) ] uint32 AsyncDataMapsPerSec; [ perfdefault, displayname("Data Map Hits %"), countertype(549585920), perfindex(94), helpindex(95), defaultscale(0), perfdetail(400) ] uint32 DataMapHitsPercent; [ displayname("Data Map Hits %"), countertype(1073939457), perfindex(94), helpindex(95), defaultscale(0), perfdetail(400) ] uint32 DataMapHitsPercent_Base; [ displayname("Data Map Pins/sec"), countertype(549585920), perfindex(96), helpindex(97), defaultscale(0), perfdetail(400) ] uint32 DataMapPinsPerSec; [ displayname("Data Map Pins/sec"), countertype(1073939457), perfindex(96), helpindex(97), defaultscale(0), perfdetail(400) ] uint32 DataMapPinsPerSec_Base; [ displayname("Pin Reads/sec"), countertype(272696320), perfindex(98), helpindex(99), defaultscale(0), perfdetail(300) ] uint32 PinReadsPerSec; [ displayname("Sync Pin Reads/sec"), countertype(272696320), perfindex(100), helpindex(101), defaultscale(0), perfdetail(400) ] uint32 SyncPinReadsPerSec; [ displayname("Async Pin Reads/sec"), countertype(272696320), perfindex(102), helpindex(103), defaultscale(0), perfdetail(400) ] uint32 AsyncPinReadsPerSec; [ displayname("Pin Read Hits %"), countertype(549585920), perfindex(104), helpindex(105), defaultscale(0), perfdetail(300) ] uint32 PinReadHitsPercent; [ displayname("Pin Read Hits %"), countertype(1073939457), perfindex(104), helpindex(105), defaultscale(0), perfdetail(300) ] uint32 PinReadHitsPercent_Base; [ displayname("Copy Reads/sec"), countertype(272696320), perfindex(106), helpindex(107), defaultscale(0), perfdetail(300) ] uint32 CopyReadsPerSec; [ displayname("Sync Copy Reads/sec"), countertype(272696320), perfindex(108), helpindex(109), defaultscale(0), perfdetail(400) ] uint32 SyncCopyReadsPerSec; [ displayname("Async Copy Reads/sec"), countertype(272696320), perfindex(110), helpindex(111), defaultscale(0), perfdetail(400) ] uint32 AsyncCopyReadsPerSec; [ displayname("Copy Read Hits %"), countertype(549585920), perfindex(112), helpindex(113), defaultscale(0), perfdetail(300) ] uint32 CopyReadHitsPercent; [ displayname("Copy Read Hits %"), countertype(1073939457), perfindex(112), helpindex(113), defaultscale(0), perfdetail(300) ] uint32 CopyReadHitsPercent_Base; [ displayname("MDL Reads/sec"), countertype(272696320), perfindex(114), helpindex(115), defaultscale(0), perfdetail(300) ] uint32 MDLReadsPerSec; [ displayname("Sync MDL Reads/sec"), countertype(272696320), perfindex(116), helpindex(117), defaultscale(0), perfdetail(400) ] uint32 SyncMDLReadsPerSec; [ displayname("Async MDL Reads/sec"), countertype(272696320), perfindex(118), helpindex(119), defaultscale(0), perfdetail(400) ] uint32 AsyncMDLReadsPerSec; [ displayname("MDL Read Hits %"), countertype(549585920), perfindex(120), helpindex(121), defaultscale(0), perfdetail(300) ] uint32 MDLReadHitsPercent; [ displayname("MDL Read Hits %"), countertype(1073939457), perfindex(120), helpindex(121), defaultscale(0), perfdetail(300) ] uint32 MDLReadHitsPercent_Base; [ displayname("Read Aheads/sec"), countertype(272696320), perfindex(122), helpindex(123), defaultscale(0), perfdetail(200) ] uint32 ReadAheadsPerSec; [ displayname("Fast Reads/sec"), countertype(272696320), perfindex(124), helpindex(125), defaultscale(-1), perfdetail(300) ] uint32 FastReadsPerSec; [ displayname("Sync Fast Reads/sec"), countertype(272696320), perfindex(126), helpindex(127), defaultscale(-1), perfdetail(400) ] uint32 SyncFastReadsPerSec; [ displayname("Async Fast Reads/sec"), countertype(272696320), perfindex(128), helpindex(129), defaultscale(-1), perfdetail(400) ] uint32 AsyncFastReadsPerSec; [ displayname("Fast Read Resource Misses/sec"), countertype(272696320), perfindex(130), helpindex(131), defaultscale(0), perfdetail(400) ] uint32 FastReadResourceMissesPerSec; [ displayname("Fast Read Not Possibles/sec"), countertype(272696320), perfindex(132), helpindex(133), defaultscale(0), perfdetail(400) ] uint32 FastReadNotPossiblesPerSec; [ displayname("Lazy Write Flushes/sec"), countertype(272696320), perfindex(134), helpindex(135), defaultscale(0), perfdetail(400) ] uint32 LazyWriteFlushesPerSec; [ displayname("Lazy Write Pages/sec"), countertype(272696320), perfindex(136), helpindex(137), defaultscale(0), perfdetail(200) ] uint32 LazyWritePagesPerSec; [ displayname("Data Flushes/sec"), countertype(272696320), perfindex(138), helpindex(139), defaultscale(0), perfdetail(400) ] uint32 DataFlushesPerSec; [ displayname("Data Flush Pages/sec"), countertype(272696320), perfindex(140), helpindex(141), defaultscale(0), perfdetail(200) ] uint32 DataFlushPagesPerSec; }; instance of Win32Perf_RawCache { Timestamp = 0x01bd4e0698befd2c; DataMapsPerSec = 0x000a0b5c; SyncDataMapsPerSec = 0x000a0b5c; AsyncDataMapsPerSec = 0x00000000; DataMapHitsPercent = 0x00093bc7; DataMapHitsPercent_Base = 0x000a0b5c; DataMapPinsPerSec = 0x0001947d; DataMapPinsPerSec_Base = 0x000a0b5c; PinReadsPerSec = 0x000072d1; SyncPinReadsPerSec = 0x000072d1; AsyncPinReadsPerSec = 0x00000000; PinReadHitsPercent = 0x00006fd0; PinReadHitsPercent_Base = 0x000072d1; CopyReadsPerSec = 0x000f0c5f; SyncCopyReadsPerSec = 0x000f0c5f; AsyncCopyReadsPerSec = 0x00000000; CopyReadHitsPercent = 0x000e68ae; CopyReadHitsPercent_Base = 0x000f0c5f; MDLReadsPerSec = 0x0000000f; SyncMDLReadsPerSec = 0x0000000f; AsyncMDLReadsPerSec = 0x00000000; MDLReadHitsPercent = 0x00000000; MDLReadHitsPercent_Base = 0x0000000f; ReadAheadsPerSec = 0x00001966; FastReadsPerSec = 0x0000b73d; SyncFastReadsPerSec = 0x0000b73d; AsyncFastReadsPerSec = 0x00000000; FastReadResourceMissesPerSec = 0x00000000; FastReadNotPossiblesPerSec = 0x00000000; LazyWriteFlushesPerSec = 0x00006e65; LazyWritePagesPerSec = 0x00014961; DataFlushesPerSec = 0x000089b1; DataFlushPagesPerSec = 0x0001b319; }; [ perfdefault, vendor("Microsoft"), guid("{5C7A4F5D-9E4D-11d1-BB3C-00A0C913CAD4}"), locale("ms:\\0x0409"), displayname("Processor"), perfindex(238), helpindex(239), perfdetail(100) ] class Win32Perf_Processor : Win32_PerfFormattedData { [key] string Name; uint64 Timestamp; [ perfdefault, displayname("% Processor Time"), countertype(558957824), perfindex(6), helpindex(7), defaultscale(0), perfdetail(100) ] real64 PercentProcessorTime; [ displayname("% User Time"), countertype(542180608), perfindex(142), helpindex(143), defaultscale(0), perfdetail(200) ] real64 PercentUserTime; [ displayname("% Privileged Time"), countertype(542180608), perfindex(144), helpindex(145), defaultscale(0), perfdetail(200) ] real64 PercentPrivilegedTime; [ displayname("Interrupts/sec"), countertype(272696320), perfindex(148), helpindex(149), defaultscale(-2), perfdetail(100) ] real64 InterruptsPerSec; [ displayname("% DPC Time"), countertype(542180608), perfindex(696), helpindex(339), defaultscale(0), perfdetail(200) ] real64 PercentDPCTime; [ displayname("% Interrupt Time"), countertype(542180608), perfindex(698), helpindex(397), defaultscale(0), perfdetail(200) ] real64 PercentInterruptTime; [ displayname("DPCs Queued/sec"), countertype(272696320), perfindex(1334), helpindex(1335), defaultscale(0), perfdetail(200) ] real64 DPCsQueuedPerSec; [ displayname("DPC Rate"), countertype(65536), perfindex(1336), helpindex(1337), defaultscale(0), perfdetail(200) ] uint32 DPCRate; [ displayname("DPC Bypasses/sec"), countertype(272696320), perfindex(1338), helpindex(1339), defaultscale(0), perfdetail(200) ] real64 DPCBypassesPerSec; [ displayname("APC Bypasses/sec"), countertype(272696320), perfindex(1340), helpindex(1341), defaultscale(0), perfdetail(200) ] real64 APCBypassesPerSec; }; [ perfdefault, vendor("Microsoft"), guid("{5C7A4F5D-9E4D-11d1-BB3C-00A0C913CAD4}"), locale("ms:\\0x0409"), displayname("Processor"), perfindex(238), helpindex(239), perfdetail(100) ] class Win32Perf_RawProcessor : Win32_PerfRawData { [key] string Name; uint64 Timestamp; [ perfdefault, displayname("% Processor Time"), countertype(558957824), perfindex(6), helpindex(7), defaultscale(0), perfdetail(100) ] uint64 PercentProcessorTime; [ displayname("% User Time"), countertype(542180608), perfindex(142), helpindex(143), defaultscale(0), perfdetail(200) ] uint64 PercentUserTime; [ displayname("% Privileged Time"), countertype(542180608), perfindex(144), helpindex(145), defaultscale(0), perfdetail(200) ] uint64 PercentPrivilegedTime; [ displayname("Interrupts/sec"), countertype(272696320), perfindex(148), helpindex(149), defaultscale(-2), perfdetail(100) ] uint32 InterruptsPerSec; [ displayname("% DPC Time"), countertype(542180608), perfindex(696), helpindex(339), defaultscale(0), perfdetail(200) ] uint64 PercentDPCTime; [ displayname("% Interrupt Time"), countertype(542180608), perfindex(698), helpindex(397), defaultscale(0), perfdetail(200) ] uint64 PercentInterruptTime; [ displayname("DPCs Queued/sec"), countertype(272696320), perfindex(1334), helpindex(1335), defaultscale(0), perfdetail(200) ] uint32 DPCsQueuedPerSec; [ displayname("DPC Rate"), countertype(65536), perfindex(1336), helpindex(1337), defaultscale(0), perfdetail(200) ] uint32 DPCRate; [ displayname("DPC Bypasses/sec"), countertype(272696320), perfindex(1338), helpindex(1339), defaultscale(0), perfdetail(200) ] uint32 DPCBypassesPerSec; [ displayname("APC Bypasses/sec"), countertype(272696320), perfindex(1340), helpindex(1341), defaultscale(0), perfdetail(200) ] uint32 APCBypassesPerSec; }; instance of Win32Perf_RawProcessor { Name = "0"; PercentProcessorTime = 0x0000002980ec2b90; PercentUserTime = 0x0000000493c40c90; PercentPrivilegedTime = 0x00000001bc962b60; InterruptsPerSec = 0x0071f42a; PercentDPCTime = 0x0000000043872030; PercentInterruptTime = 0x00000000210e7c60; DPCsQueuedPerSec = 0x0052e778; DPCRate = 0x00000001; DPCBypassesPerSec = 0x00000000; APCBypassesPerSec = 0x000121f8; }; instance of Win32Perf_RawProcessor { Name = "_Total"; PercentProcessorTime = 0x0000002980ec2b90; PercentUserTime = 0x0000000493c40c90; PercentPrivilegedTime = 0x00000001bc962b60; InterruptsPerSec = 0x0071f42a; PercentDPCTime = 0x0000000043872030; PercentInterruptTime = 0x00000000210e7c60; DPCsQueuedPerSec = 0x0052e778; DPCRate = 0x00000001; DPCBypassesPerSec = 0x00000000; APCBypassesPerSec = 0x000121f8; }; [ singleton, vendor("Microsoft"), guid("{5C7A4F5E-9E4D-11d1-BB3C-00A0C913CAD4}"), locale("ms:\\0x0409"), displayname("Memory"), perfindex(4), helpindex(5), perfdetail(100) ] class Win32Perf_Memory : Win32_PerfFormattedData { uint64 Timestamp; [ displayname("Available Bytes"), countertype(65536), perfindex(24), helpindex(25), defaultscale(-6), perfdetail(300) ] uint32 AvailableBytes; [ displayname("Committed Bytes"), countertype(65536), perfindex(26), helpindex(27), defaultscale(-6), perfdetail(300) ] uint32 CommittedBytes; [ displayname("Commit Limit"), countertype(65536), perfindex(30), helpindex(31), defaultscale(-6), perfdetail(400) ] uint32 CommitLimit; [ displayname("Page Faults/sec"), countertype(272696320), perfindex(28), helpindex(29), defaultscale(-1), perfdetail(100) ] real64 PageFaultsPerSec; [ displayname("Write Copies/sec"), countertype(272696320), perfindex(32), helpindex(33), defaultscale(0), perfdetail(400) ] real64 WriteCopiesPerSec; [ displayname("Transition Faults/sec"), countertype(272696320), perfindex(34), helpindex(35), defaultscale(-1), perfdetail(400) ] real64 TransitionFaultsPerSec; [ displayname("Cache Faults/sec"), countertype(272696320), perfindex(36), helpindex(37), defaultscale(-1), perfdetail(400) ] real64 CacheFaultsPerSec; [ displayname("Demand Zero Faults/sec"), countertype(272696320), perfindex(38), helpindex(39), defaultscale(-1), perfdetail(400) ] real64 DemandZeroFaultsPerSec; [ perfdefault, displayname("Pages/sec"), countertype(272696320), perfindex(40), helpindex(41), defaultscale(0), perfdetail(100) ] real64 PagesPerSec; [ displayname("Pages Input/sec"), countertype(272696320), perfindex(822), helpindex(823), defaultscale(0), perfdetail(100) ] real64 PagesInputPerSec; [ displayname("Page Reads/sec"), countertype(272696320), perfindex(42), helpindex(43), defaultscale(0), perfdetail(300) ] real64 PageReadsPerSec; [ displayname("Pages Output/sec"), countertype(272696320), perfindex(48), helpindex(49), defaultscale(0), perfdetail(200) ] real64 PagesOutputPerSec; [ displayname("Page Writes/sec"), countertype(272696320), perfindex(50), helpindex(51), defaultscale(0), perfdetail(300) ] real64 PageWritesPerSec; [ displayname("Pool Paged Bytes"), countertype(65536), perfindex(56), helpindex(57), defaultscale(-5), perfdetail(200) ] uint32 PoolPagedBytes; [ displayname("Pool Nonpaged Bytes"), countertype(65536), perfindex(58), helpindex(59), defaultscale(-5), perfdetail(200) ] uint32 PoolNonpagedBytes; [ displayname("Pool Paged Allocs"), countertype(65536), perfindex(60), helpindex(61), defaultscale(-2), perfdetail(400) ] uint32 PoolPagedAllocs; [ displayname("Pool Nonpaged Allocs"), countertype(65536), perfindex(64), helpindex(65), defaultscale(-2), perfdetail(400) ] uint32 PoolNonpagedAllocs; [ displayname("Free System Page Table Entries"), countertype(65536), perfindex(678), helpindex(679), defaultscale(-2), perfdetail(400) ] uint32 FreeSystemPageTableEntries; [ displayname("Cache Bytes"), countertype(65536), perfindex(818), helpindex(819), defaultscale(-5), perfdetail(200) ] uint32 CacheBytes; [ displayname("Cache Bytes Peak"), countertype(65536), perfindex(820), helpindex(821), defaultscale(-5), perfdetail(200) ] uint32 CacheBytesPeak; [ displayname("Pool Paged Resident Bytes"), countertype(65536), perfindex(66), helpindex(63), defaultscale(-5), perfdetail(200) ] uint32 PoolPagedResidentBytes; [ displayname("System Code Total Bytes"), countertype(65536), perfindex(68), helpindex(69), defaultscale(-5), perfdetail(200) ] uint32 SystemCodeTotalBytes; [ displayname("System Code Resident Bytes"), countertype(65536), perfindex(70), helpindex(71), defaultscale(-5), perfdetail(200) ] uint32 SystemCodeResidentBytes; [ displayname("System Driver Total Bytes"), countertype(65536), perfindex(72), helpindex(73), defaultscale(-5), perfdetail(200) ] uint32 SystemDriverTotalBytes; [ displayname("System Driver Resident Bytes"), countertype(65536), perfindex(74), helpindex(75), defaultscale(-5), perfdetail(200) ] uint32 SystemDriverResidentBytes; [ displayname("System Cache Resident Bytes"), countertype(65536), perfindex(76), helpindex(77), defaultscale(-5), perfdetail(200) ] uint32 SystemCacheResidentBytes; [ displayname("% Committed Bytes In Use"), countertype(537003008), perfindex(1406), helpindex(1407), defaultscale(0), perfdetail(300) ] real64 PercentCommittedBytesInUse; }; [ singleton, vendor("Microsoft"), guid("{5C7A4F5E-9E4D-11d1-BB3C-00A0C913CAD4}"), locale("ms:\\0x0409"), displayname("Memory"), perfindex(4), helpindex(5), perfdetail(100) ] class Win32Perf_RawMemory : Win32_PerfRawData { uint64 Timestamp; [ displayname("Available Bytes"), countertype(65536), perfindex(24), helpindex(25), defaultscale(-6), perfdetail(300) ] uint32 AvailableBytes; [ displayname("Committed Bytes"), countertype(65536), perfindex(26), helpindex(27), defaultscale(-6), perfdetail(300) ] uint32 CommittedBytes; [ displayname("Commit Limit"), countertype(65536), perfindex(30), helpindex(31), defaultscale(-6), perfdetail(400) ] uint32 CommitLimit; [ displayname("Page Faults/sec"), countertype(272696320), perfindex(28), helpindex(29), defaultscale(-1), perfdetail(100) ] uint32 PageFaultsPerSec; [ displayname("Write Copies/sec"), countertype(272696320), perfindex(32), helpindex(33), defaultscale(0), perfdetail(400) ] uint32 WriteCopiesPerSec; [ displayname("Transition Faults/sec"), countertype(272696320), perfindex(34), helpindex(35), defaultscale(-1), perfdetail(400) ] uint32 TransitionFaultsPerSec; [ displayname("Cache Faults/sec"), countertype(272696320), perfindex(36), helpindex(37), defaultscale(-1), perfdetail(400) ] uint32 CacheFaultsPerSec; [ displayname("Demand Zero Faults/sec"), countertype(272696320), perfindex(38), helpindex(39), defaultscale(-1), perfdetail(400) ] uint32 DemandZeroFaultsPerSec; [ perfdefault, displayname("Pages/sec"), countertype(272696320), perfindex(40), helpindex(41), defaultscale(0), perfdetail(100) ] uint32 PagesPerSec; [ displayname("Pages Input/sec"), countertype(272696320), perfindex(822), helpindex(823), defaultscale(0), perfdetail(100) ] uint32 PagesInputPerSec; [ displayname("Page Reads/sec"), countertype(272696320), perfindex(42), helpindex(43), defaultscale(0), perfdetail(300) ] uint32 PageReadsPerSec; [ displayname("Pages Output/sec"), countertype(272696320), perfindex(48), helpindex(49), defaultscale(0), perfdetail(200) ] uint32 PagesOutputPerSec; [ displayname("Page Writes/sec"), countertype(272696320), perfindex(50), helpindex(51), defaultscale(0), perfdetail(300) ] uint32 PageWritesPerSec; [ displayname("Pool Paged Bytes"), countertype(65536), perfindex(56), helpindex(57), defaultscale(-5), perfdetail(200) ] uint32 PoolPagedBytes; [ displayname("Pool Nonpaged Bytes"), countertype(65536), perfindex(58), helpindex(59), defaultscale(-5), perfdetail(200) ] uint32 PoolNonpagedBytes; [ displayname("Pool Paged Allocs"), countertype(65536), perfindex(60), helpindex(61), defaultscale(-2), perfdetail(400) ] uint32 PoolPagedAllocs; [ displayname("Pool Nonpaged Allocs"), countertype(65536), perfindex(64), helpindex(65), defaultscale(-2), perfdetail(400) ] uint32 PoolNonpagedAllocs; [ displayname("Free System Page Table Entries"), countertype(65536), perfindex(678), helpindex(679), defaultscale(-2), perfdetail(400) ] uint32 FreeSystemPageTableEntries; [ displayname("Cache Bytes"), countertype(65536), perfindex(818), helpindex(819), defaultscale(-5), perfdetail(200) ] uint32 CacheBytes; [ displayname("Cache Bytes Peak"), countertype(65536), perfindex(820), helpindex(821), defaultscale(-5), perfdetail(200) ] uint32 CacheBytesPeak; [ displayname("Pool Paged Resident Bytes"), countertype(65536), perfindex(66), helpindex(63), defaultscale(-5), perfdetail(200) ] uint32 PoolPagedResidentBytes; [ displayname("System Code Total Bytes"), countertype(65536), perfindex(68), helpindex(69), defaultscale(-5), perfdetail(200) ] uint32 SystemCodeTotalBytes; [ displayname("System Code Resident Bytes"), countertype(65536), perfindex(70), helpindex(71), defaultscale(-5), perfdetail(200) ] uint32 SystemCodeResidentBytes; [ displayname("System Driver Total Bytes"), countertype(65536), perfindex(72), helpindex(73), defaultscale(-5), perfdetail(200) ] uint32 SystemDriverTotalBytes; [ displayname("System Driver Resident Bytes"), countertype(65536), perfindex(74), helpindex(75), defaultscale(-5), perfdetail(200) ] uint32 SystemDriverResidentBytes; [ displayname("System Cache Resident Bytes"), countertype(65536), perfindex(76), helpindex(77), defaultscale(-5), perfdetail(200) ] uint32 SystemCacheResidentBytes; [ displayname("% Committed Bytes In Use"), countertype(537003008), perfindex(1406), helpindex(1407), defaultscale(0), perfdetail(300) ] uint32 PercentCommittedBytesInUse; [ displayname("% Committed Bytes In Use"), countertype(1073939459), perfindex(1406), helpindex(1407), defaultscale(0), perfdetail(300) ] uint32 PercentCommittedBytesInUse_Base; }; instance of Win32Perf_RawMemory { Timestamp = 0x01bd4e0698c0845c; AvailableBytes = 0x00462000; CommittedBytes = 0x02cd8000; CommitLimit = 0x07ec2000; PageFaultsPerSec = 0x000d5ab1; WriteCopiesPerSec = 0x00009e05; TransitionFaultsPerSec = 0x0004835a; CacheFaultsPerSec = 0x0004b49e; DemandZeroFaultsPerSec = 0x0005cf88; PagesPerSec = 0x0002fb11; PagesInputPerSec = 0x0002e681; PageReadsPerSec = 0x00014352; PagesOutputPerSec = 0x00001490; PageWritesPerSec = 0x00000149; PoolPagedBytes = 0x00f24000; PoolNonpagedBytes = 0x00314000; PoolPagedAllocs = 0x0000372a; PoolNonpagedAllocs = 0x00002f09; FreeSystemPageTableEntries = 0x00003524; CacheBytes = 0x0219a000; CacheBytesPeak = 0x024c1000; PoolPagedResidentBytes = 0x00aa5000; SystemCodeTotalBytes = 0x00000000; SystemCodeResidentBytes = 0x00142000; SystemDriverTotalBytes = 0x001b8000; SystemDriverResidentBytes = 0x00111000; SystemCacheResidentBytes = 0x014a2000; PercentCommittedBytesInUse = 0x00002cd8; PercentCommittedBytesInUse_Base = 0x00007ec2; }; [ singleton, vendor("Microsoft"), guid("{5C7A4F64-9E4D-11d1-BB3C-00A0C913CAD4}"), locale("ms:\\0x0409"), displayname("Objects"), perfindex(260), helpindex(261), perfdetail(100) ] class Win32Perf_Objects : Win32_PerfFormattedData { uint64 Timestamp; [ perfdefault, displayname("Processes"), countertype(65536), perfindex(248), helpindex(249), defaultscale(0), perfdetail(100) ] uint32 Processes; [ displayname("Threads"), countertype(65536), perfindex(250), helpindex(251), defaultscale(-1), perfdetail(100) ] uint32 Threads; [ displayname("Events"), countertype(65536), perfindex(252), helpindex(253), defaultscale(-1), perfdetail(300) ] uint32 Events; [ displayname("Semaphores"), countertype(65536), perfindex(254), helpindex(255), defaultscale(-1), perfdetail(300) ] uint32 Semaphores; [ displayname("Mutexes"), countertype(65536), perfindex(256), helpindex(257), defaultscale(0), perfdetail(300) ] uint32 Mutexes; [ displayname("Sections"), countertype(65536), perfindex(258), helpindex(259), defaultscale(-1), perfdetail(300) ] uint32 Sections; }; [ singleton, vendor("Microsoft"), guid("{5C7A4F64-9E4D-11d1-BB3C-00A0C913CAD4}"), locale("ms:\\0x0409"), displayname("Objects"), perfindex(260), helpindex(261), perfdetail(100) ] class Win32Perf_RawObjects : Win32_PerfRawData { uint64 Timestamp; [ perfdefault, displayname("Processes"), countertype(65536), perfindex(248), helpindex(249), defaultscale(0), perfdetail(100) ] uint32 Processes; [ displayname("Threads"), countertype(65536), perfindex(250), helpindex(251), defaultscale(-1), perfdetail(100) ] uint32 Threads; [ displayname("Events"), countertype(65536), perfindex(252), helpindex(253), defaultscale(-1), perfdetail(300) ] uint32 Events; [ displayname("Semaphores"), countertype(65536), perfindex(254), helpindex(255), defaultscale(-1), perfdetail(300) ] uint32 Semaphores; [ displayname("Mutexes"), countertype(65536), perfindex(256), helpindex(257), defaultscale(0), perfdetail(300) ] uint32 Mutexes; [ displayname("Sections"), countertype(65536), perfindex(258), helpindex(259), defaultscale(-1), perfdetail(300) ] uint32 Sections; }; instance of Win32Perf_RawObjects { Timestamp = 0x01bd4e0698c0845c; Processes = 0x00000016; Threads = 0x00000096; Events = 0x0000021c; Semaphores = 0x00000097; Mutexes = 0x0000006d; Sections = 0x00000180; }; [ vendor("Microsoft"), guid("{5C7A4F68-9E4D-11d1-BB3C-00A0C913CAD4}"), locale("ms:\\0x0409"), displayname("Paging File"), perfindex(700), helpindex(701), perfdetail(200) ] class Win32Perf_PagingFile : Win32_PerfFormattedData { [key] string Name; uint64 Timestamp; [ perfdefault, displayname("% Usage"), countertype(537003008), perfindex(702), helpindex(703), defaultscale(0), perfdetail(200) ] real64 PercentUsage; [ displayname("% Usage Peak"), countertype(537003008), perfindex(704), helpindex(705), defaultscale(0), perfdetail(200) ] real64 PercentUsagePeak; }; [ vendor("Microsoft"), guid("{5C7A4F68-9E4D-11d1-BB3C-00A0C913CAD4}"), locale("ms:\\0x0409"), displayname("Paging File"), perfindex(700), helpindex(701), perfdetail(200) ] class Win32Perf_RawPagingFile : Win32_PerfRawData { [key] string Name; uint64 Timestamp; [ perfdefault, displayname("% Usage"), countertype(537003008), perfindex(702), helpindex(703), defaultscale(0), perfdetail(200) ] uint32 PercentUsage; [ displayname("% Usage"), countertype(1073939459), perfindex(702), helpindex(703), defaultscale(0), perfdetail(200) ] uint32 PercentUsage_Base; [ displayname("% Usage Peak"), countertype(537003008), perfindex(704), helpindex(705), defaultscale(0), perfdetail(200) ] uint32 PercentUsagePeak; [ displayname("% Usage Peak"), countertype(1073939459), perfindex(704), helpindex(705), defaultscale(0), perfdetail(200) ] uint32 PercentUsagePeak_Base; }; instance of Win32Perf_RawPagingFile { Name = "\\??\\C:\\pagefile.sys"; PercentUsage = 0x00000fa0; PercentUsage_Base = 0x00004b00; PercentUsagePeak = 0x00001131; PercentUsagePeak_Base = 0x00004b00; }; instance of Win32Perf_RawPagingFile { Name = "_Total"; PercentUsage = 0x00000fa0; PercentUsage_Base = 0x00004b00; PercentUsagePeak = 0x00001131; PercentUsagePeak_Base = 0x00004b00; }; [ singleton, vendor("Microsoft"), guid("{5C7A4F5C-9E4D-11d1-BB3C-00A0C913CAD4}"), locale("ms:\\0x0409"), displayname("System"), perfindex(2), helpindex(3), perfdetail(100) ] class Win32Perf_System : Win32_PerfFormattedData { uint64 Timestamp; [ displayname("File Read Operations/sec"), countertype(272696320), perfindex(10), helpindex(11), defaultscale(0), perfdetail(100) ] real64 FileReadOperationsPerSec; [ displayname("File Write Operations/sec"), countertype(272696320), perfindex(12), helpindex(13), defaultscale(0), perfdetail(100) ] real64 FileWriteOperationsPerSec; [ displayname("File Control Operations/sec"), countertype(272696320), perfindex(14), helpindex(15), defaultscale(0), perfdetail(200) ] real64 FileControlOperationsPerSec; [ displayname("File Read Bytes/sec"), countertype(272696576), perfindex(16), helpindex(17), defaultscale(-4), perfdetail(300) ] real64 FileReadBytesPerSec; [ displayname("File Write Bytes/sec"), countertype(272696576), perfindex(18), helpindex(19), defaultscale(-4), perfdetail(300) ] real64 FileWriteBytesPerSec; [ displayname("File Control Bytes/sec"), countertype(272696576), perfindex(20), helpindex(21), defaultscale(-3), perfdetail(400) ] real64 FileControlBytesPerSec; [ displayname("Context Switches/sec"), countertype(272696320), perfindex(146), helpindex(147), defaultscale(-2), perfdetail(200) ] real64 ContextSwitchesPerSec; [ displayname("System Calls/sec"), countertype(272696320), perfindex(150), helpindex(151), defaultscale(-1), perfdetail(200) ] real64 SystemCallsPerSec; [ perfdefault, displayname("File Data Operations/sec"), countertype(272696320), perfindex(406), helpindex(407), defaultscale(0), perfdetail(100) ] real64 FileDataOperationsPerSec; [ displayname("System Up Time"), countertype(807666944), perfindex(674), helpindex(675), defaultscale(-5), perfdetail(100) ] real64 SystemUpTime; [ displayname("Processor Queue Length"), countertype(65536), perfindex(44), helpindex(45), defaultscale(1), perfdetail(400) ] uint32 ProcessorQueueLength; [ displayname("Processes"), countertype(65536), perfindex(248), helpindex(249), defaultscale(1), perfdetail(400) ] uint32 Processes; [ displayname("Threads"), countertype(65536), perfindex(250), helpindex(251), defaultscale(1), perfdetail(400) ] uint32 Threads; [ displayname("Alignment Fixups/sec"), countertype(272696320), perfindex(686), helpindex(687), defaultscale(0), perfdetail(400) ] real64 AlignmentFixupsPerSec; [ displayname("Exception Dispatches/sec"), countertype(272696320), perfindex(688), helpindex(689), defaultscale(0), perfdetail(400) ] real64 ExceptionDispatchesPerSec; [ displayname("Floating Emulations/sec"), countertype(272696320), perfindex(690), helpindex(691), defaultscale(0), perfdetail(400) ] real64 FloatingEmulationsPerSec; [ displayname("% Registry Quota In Use"), countertype(537003008), perfindex(1350), helpindex(1351), defaultscale(0), perfdetail(200) ] real64 PercentRegistryQuotaInUse; }; [ singleton, vendor("Microsoft"), guid("{5C7A4F5C-9E4D-11d1-BB3C-00A0C913CAD4}"), locale("ms:\\0x0409"), displayname("System"), perfindex(2), helpindex(3), perfdetail(100) ] class Win32Perf_RawSystem : Win32_PerfRawData { uint64 Timestamp; [ displayname("File Read Operations/sec"), countertype(272696320), perfindex(10), helpindex(11), defaultscale(0), perfdetail(100) ] uint32 FileReadOperationsPerSec; [ displayname("File Write Operations/sec"), countertype(272696320), perfindex(12), helpindex(13), defaultscale(0), perfdetail(100) ] uint32 FileWriteOperationsPerSec; [ displayname("File Control Operations/sec"), countertype(272696320), perfindex(14), helpindex(15), defaultscale(0), perfdetail(200) ] uint32 FileControlOperationsPerSec; [ displayname("File Read Bytes/sec"), countertype(272696576), perfindex(16), helpindex(17), defaultscale(-4), perfdetail(300) ] uint64 FileReadBytesPerSec; [ displayname("File Write Bytes/sec"), countertype(272696576), perfindex(18), helpindex(19), defaultscale(-4), perfdetail(300) ] uint64 FileWriteBytesPerSec; [ displayname("File Control Bytes/sec"), countertype(272696576), perfindex(20), helpindex(21), defaultscale(-3), perfdetail(400) ] uint64 FileControlBytesPerSec; [ displayname("Context Switches/sec"), countertype(272696320), perfindex(146), helpindex(147), defaultscale(-2), perfdetail(200) ] uint32 ContextSwitchesPerSec; [ displayname("System Calls/sec"), countertype(272696320), perfindex(150), helpindex(151), defaultscale(-1), perfdetail(200) ] uint32 SystemCallsPerSec; [ perfdefault, displayname("File Data Operations/sec"), countertype(272696320), perfindex(406), helpindex(407), defaultscale(0), perfdetail(100) ] uint32 FileDataOperationsPerSec; [ displayname("System Up Time"), countertype(807666944), perfindex(674), helpindex(675), defaultscale(-5), perfdetail(100) ] uint64 SystemUpTime; [ displayname("Processor Queue Length"), countertype(65536), perfindex(44), helpindex(45), defaultscale(1), perfdetail(400) ] uint32 ProcessorQueueLength; [ displayname("Processes"), countertype(65536), perfindex(248), helpindex(249), defaultscale(1), perfdetail(400) ] uint32 Processes; [ displayname("Threads"), countertype(65536), perfindex(250), helpindex(251), defaultscale(1), perfdetail(400) ] uint32 Threads; [ displayname("Alignment Fixups/sec"), countertype(272696320), perfindex(686), helpindex(687), defaultscale(0), perfdetail(400) ] uint32 AlignmentFixupsPerSec; [ displayname("Exception Dispatches/sec"), countertype(272696320), perfindex(688), helpindex(689), defaultscale(0), perfdetail(400) ] uint32 ExceptionDispatchesPerSec; [ displayname("Floating Emulations/sec"), countertype(272696320), perfindex(690), helpindex(691), defaultscale(0), perfdetail(400) ] uint32 FloatingEmulationsPerSec; [ displayname("% Registry Quota In Use"), countertype(537003008), perfindex(1350), helpindex(1351), defaultscale(0), perfdetail(200) ] uint32 PercentRegistryQuotaInUse; [ displayname("% Registry Quota In Use"), countertype(1073939459), perfindex(1350), helpindex(1351), defaultscale(0), perfdetail(200) ] uint32 PercentRegistryQuotaInUse_Base; }; instance of Win32Perf_RawSystem { Timestamp = 0x01bd4e0698c20b8c; FileReadOperationsPerSec = 0x0000c790; FileWriteOperationsPerSec = 0x0000286e; FileControlOperationsPerSec = 0x000c65cf; FileReadBytesPerSec = 0x0000000001a66314; FileWriteBytesPerSec = 0x00000000060a125d; FileControlBytesPerSec = 0x000000a87569147c; ContextSwitchesPerSec = 0x0154ba0e; SystemCallsPerSec = 0x03a46350; FileDataOperationsPerSec = 0x0000effe; SystemUpTime = 0x01bd4dd6dd33f190; ProcessorQueueLength = 0x00000001; Processes = 0x00000014; Threads = 0x00000092; AlignmentFixupsPerSec = 0x00000000; ExceptionDispatchesPerSec = 0x000007e2; FloatingEmulationsPerSec = 0x00000000; PercentRegistryQuotaInUse = 0x009fd6a8; PercentRegistryQuotaInUse_Base = 0x01155555; }; [ vendor("Microsoft"), guid("{5C7A4F62-9E4D-11d1-BB3C-00A0C913CAD4}"), locale("ms:\\0x0409"), displayname("Process"), perfindex(230), helpindex(231), perfdetail(100) ] class Win32Perf_Process : Win32_PerfFormattedData { [key] string Name; uint64 Timestamp; [ perfdefault, displayname("% Processor Time"), countertype(542180608), perfindex(6), helpindex(189), defaultscale(0), perfdetail(100) ] real64 PercentProcessorTime; [ displayname("% User Time"), countertype(542180608), perfindex(142), helpindex(157), defaultscale(0), perfdetail(200) ] real64 PercentUserTime; [ displayname("% Privileged Time"), countertype(542180608), perfindex(144), helpindex(159), defaultscale(0), perfdetail(200) ] real64 PercentPrivilegedTime; [ displayname("Virtual Bytes Peak"), countertype(65536), perfindex(172), helpindex(173), defaultscale(-6), perfdetail(300) ] uint32 VirtualBytesPeak; [ displayname("Virtual Bytes"), countertype(65536), perfindex(174), helpindex(175), defaultscale(-6), perfdetail(300) ] uint32 VirtualBytes; [ displayname("Page Faults/sec"), countertype(272696320), perfindex(28), helpindex(177), defaultscale(-1), perfdetail(100) ] real64 PageFaultsPerSec; [ displayname("Working Set Peak"), countertype(65536), perfindex(178), helpindex(179), defaultscale(-5), perfdetail(200) ] uint32 WorkingSetPeak; [ displayname("Working Set"), countertype(65536), perfindex(180), helpindex(181), defaultscale(-5), perfdetail(100) ] uint32 WorkingSet; [ displayname("Page File Bytes Peak"), countertype(65536), perfindex(182), helpindex(183), defaultscale(-6), perfdetail(200) ] uint32 PageFileBytesPeak; [ displayname("Page File Bytes"), countertype(65536), perfindex(184), helpindex(185), defaultscale(-6), perfdetail(200) ] uint32 PageFileBytes; [ displayname("Private Bytes"), countertype(65536), perfindex(186), helpindex(187), defaultscale(-5), perfdetail(200) ] uint32 PrivateBytes; [ displayname("Thread Count"), countertype(65536), perfindex(680), helpindex(681), defaultscale(0), perfdetail(200) ] uint32 ThreadCount; [ displayname("Priority Base"), countertype(65536), perfindex(682), helpindex(683), defaultscale(0), perfdetail(200) ] uint32 PriorityBase; [ displayname("Elapsed Time"), countertype(807666944), perfindex(684), helpindex(685), defaultscale(-4), perfdetail(200) ] real64 ElapsedTime; [ displayname("ID Process"), countertype(65536), perfindex(784), helpindex(785), defaultscale(-1), perfdetail(100) ] uint32 IDProcess; [ displayname("Creating Process ID"), countertype(65536), perfindex(1410), helpindex(1411), defaultscale(-1), perfdetail(100) ] uint32 CreatingProcessID; [ displayname("Pool Paged Bytes"), countertype(65536), perfindex(56), helpindex(57), defaultscale(-5), perfdetail(200) ] uint32 PoolPagedBytes; [ displayname("Pool Nonpaged Bytes"), countertype(65536), perfindex(58), helpindex(59), defaultscale(-5), perfdetail(200) ] uint32 PoolNonpagedBytes; [ displayname("Handle Count"), countertype(65536), perfindex(952), helpindex(953), defaultscale(0), perfdetail(200) ] uint32 HandleCount; }; [ vendor("Microsoft"), guid("{5C7A4F62-9E4D-11d1-BB3C-00A0C913CAD4}"), locale("ms:\\0x0409"), displayname("Process"), perfindex(230), helpindex(231), perfdetail(100) ] class Win32Perf_RawProcess : Win32_PerfRawData { [key] string Name; uint64 Timestamp; [ perfdefault, displayname("% Processor Time"), countertype(542180608), perfindex(6), helpindex(189), defaultscale(0), perfdetail(100) ] uint64 PercentProcessorTime; [ displayname("% User Time"), countertype(542180608), perfindex(142), helpindex(157), defaultscale(0), perfdetail(200) ] uint64 PercentUserTime; [ displayname("% Privileged Time"), countertype(542180608), perfindex(144), helpindex(159), defaultscale(0), perfdetail(200) ] uint64 PercentPrivilegedTime; [ displayname("Virtual Bytes Peak"), countertype(65536), perfindex(172), helpindex(173), defaultscale(-6), perfdetail(300) ] uint32 VirtualBytesPeak; [ displayname("Virtual Bytes"), countertype(65536), perfindex(174), helpindex(175), defaultscale(-6), perfdetail(300) ] uint32 VirtualBytes; [ displayname("Page Faults/sec"), countertype(272696320), perfindex(28), helpindex(177), defaultscale(-1), perfdetail(100) ] uint32 PageFaultsPerSec; [ displayname("Working Set Peak"), countertype(65536), perfindex(178), helpindex(179), defaultscale(-5), perfdetail(200) ] uint32 WorkingSetPeak; [ displayname("Working Set"), countertype(65536), perfindex(180), helpindex(181), defaultscale(-5), perfdetail(100) ] uint32 WorkingSet; [ displayname("Page File Bytes Peak"), countertype(65536), perfindex(182), helpindex(183), defaultscale(-6), perfdetail(200) ] uint32 PageFileBytesPeak; [ displayname("Page File Bytes"), countertype(65536), perfindex(184), helpindex(185), defaultscale(-6), perfdetail(200) ] uint32 PageFileBytes; [ displayname("Private Bytes"), countertype(65536), perfindex(186), helpindex(187), defaultscale(-5), perfdetail(200) ] uint32 PrivateBytes; [ displayname("Thread Count"), countertype(65536), perfindex(680), helpindex(681), defaultscale(0), perfdetail(200) ] uint32 ThreadCount; [ displayname("Priority Base"), countertype(65536), perfindex(682), helpindex(683), defaultscale(0), perfdetail(200) ] uint32 PriorityBase; [ displayname("Elapsed Time"), countertype(807666944), perfindex(684), helpindex(685), defaultscale(-4), perfdetail(200) ] uint64 ElapsedTime; [ displayname("ID Process"), countertype(65536), perfindex(784), helpindex(785), defaultscale(-1), perfdetail(100) ] uint32 IDProcess; [ displayname("Creating Process ID"), countertype(65536), perfindex(1410), helpindex(1411), defaultscale(-1), perfdetail(100) ] uint32 CreatingProcessID; [ displayname("Pool Paged Bytes"), countertype(65536), perfindex(56), helpindex(57), defaultscale(-5), perfdetail(200) ] uint32 PoolPagedBytes; [ displayname("Pool Nonpaged Bytes"), countertype(65536), perfindex(58), helpindex(59), defaultscale(-5), perfdetail(200) ] uint32 PoolNonpagedBytes; [ displayname("Handle Count"), countertype(65536), perfindex(952), helpindex(953), defaultscale(0), perfdetail(200) ] uint32 HandleCount; }; instance of Win32Perf_RawProcess { Name = "Idle"; PercentProcessorTime = 0x0000002980ec2b90; PercentUserTime = 0x0000000000000000; PercentPrivilegedTime = 0x0000002980ec2b90; VirtualBytesPeak = 0x00000000; VirtualBytes = 0x00000000; PageFaultsPerSec = 0x00000001; WorkingSetPeak = 0x00004000; WorkingSet = 0x00004000; PageFileBytesPeak = 0x00000000; PageFileBytes = 0x00000000; PrivateBytes = 0x00000000; ThreadCount = 0x00000001; PriorityBase = 0x00000000; ElapsedTime = 0x01bd4dd7c6b30dc0; IDProcess = 0x00000000; CreatingProcessID = 0x00000000; PoolPagedBytes = 0x00000000; PoolNonpagedBytes = 0x00000000; HandleCount = 0x00000000; }; instance of Win32Perf_RawProcess { Name = "System"; PercentProcessorTime = 0x0000000024a04680; PercentUserTime = 0x0000000000000000; PercentPrivilegedTime = 0x0000000024a04680; VirtualBytesPeak = 0x001a2000; VirtualBytes = 0x00192000; PageFaultsPerSec = 0x00000b42; WorkingSetPeak = 0x000a2000; WorkingSet = 0x0003d000; PageFileBytesPeak = 0x00079000; PageFileBytes = 0x0000d000; PrivateBytes = 0x0000d000; ThreadCount = 0x00000021; PriorityBase = 0x00000008; ElapsedTime = 0x01bd4dd7c6b30dc0; IDProcess = 0x00000008; CreatingProcessID = 0x00000000; PoolPagedBytes = 0x00000000; PoolNonpagedBytes = 0x00000000; HandleCount = 0x000000e2; }; instance of Win32Perf_RawProcess { Name = "smss"; PercentProcessorTime = 0x000000000050fcf0; PercentUserTime = 0x0000000000326d30; PercentPrivilegedTime = 0x00000000001e8fc0; VirtualBytesPeak = 0x00576000; VirtualBytes = 0x0041b000; PageFaultsPerSec = 0x00000a94; WorkingSetPeak = 0x00268000; WorkingSet = 0x0005b000; PageFileBytesPeak = 0x0002b000; PageFileBytes = 0x00027000; PrivateBytes = 0x00027000; ThreadCount = 0x00000006; PriorityBase = 0x0000000b; ElapsedTime = 0x01bd4dd7c6b30dc0; IDProcess = 0x00000060; CreatingProcessID = 0x00000008; PoolPagedBytes = 0x00001310; PoolNonpagedBytes = 0x000004d4; HandleCount = 0x00000021; }; instance of Win32Perf_RawProcess { Name = "csrss"; PercentProcessorTime = 0x000000000405ec60; PercentUserTime = 0x0000000000805bc0; PercentPrivilegedTime = 0x00000000038590a0; VirtualBytesPeak = 0x00e6f000; VirtualBytes = 0x00e1f000; PageFaultsPerSec = 0x00000e4e; WorkingSetPeak = 0x0024b000; WorkingSet = 0x0010c000; PageFileBytesPeak = 0x00170000; PageFileBytes = 0x00170000; PrivateBytes = 0x00170000; ThreadCount = 0x00000007; PriorityBase = 0x0000000d; ElapsedTime = 0x01bd4dd7cc9bd960; IDProcess = 0x00000080; CreatingProcessID = 0x00000060; PoolPagedBytes = 0x00007000; PoolNonpagedBytes = 0x00001184; HandleCount = 0x000000cf; }; instance of Win32Perf_RawProcess { Name = "winlogon"; PercentProcessorTime = 0x0000000002b74650; PercentUserTime = 0x00000000015dedf0; PercentPrivilegedTime = 0x0000000001595860; VirtualBytesPeak = 0x03095000; VirtualBytes = 0x02f97000; PageFaultsPerSec = 0x0000123a; WorkingSetPeak = 0x00550000; WorkingSet = 0x000e2000; PageFileBytesPeak = 0x00208000; PageFileBytes = 0x001f9000; PrivateBytes = 0x001f9000; ThreadCount = 0x0000000c; PriorityBase = 0x0000000d; ElapsedTime = 0x01bd4dd7cddcbec0; IDProcess = 0x00000094; CreatingProcessID = 0x00000060; PoolPagedBytes = 0x000078dc; PoolNonpagedBytes = 0x00007ef8; HandleCount = 0x000000a3; }; instance of Win32Perf_RawProcess { Name = "services"; PercentProcessorTime = 0x0000000002cfb950; PercentUserTime = 0x000000000087ffb0; PercentPrivilegedTime = 0x000000000247b9a0; VirtualBytesPeak = 0x03fea000; VirtualBytes = 0x03cea000; PageFaultsPerSec = 0x00000cd3; WorkingSetPeak = 0x005bc000; WorkingSet = 0x002e3000; PageFileBytesPeak = 0x00406000; PageFileBytes = 0x003bd000; PrivateBytes = 0x003bd000; ThreadCount = 0x0000001d; PriorityBase = 0x00000009; ElapsedTime = 0x01bd4dd7d0247860; IDProcess = 0x000000b8; CreatingProcessID = 0x00000094; PoolPagedBytes = 0x00006f2c; PoolNonpagedBytes = 0x0003589c; HandleCount = 0x0000018e; }; instance of Win32Perf_RawProcess { Name = "lsass"; PercentProcessorTime = 0x00000000008986e0; PercentUserTime = 0x00000000003702c0; PercentPrivilegedTime = 0x0000000000528420; VirtualBytesPeak = 0x0375a000; VirtualBytes = 0x0351a000; PageFaultsPerSec = 0x00001015; WorkingSetPeak = 0x0058f000; WorkingSet = 0x00087000; PageFileBytesPeak = 0x0024d000; PageFileBytes = 0x0022e000; PrivateBytes = 0x0022e000; ThreadCount = 0x0000000a; PriorityBase = 0x00000009; ElapsedTime = 0x01bd4dd7d0bece50; IDProcess = 0x000000c4; CreatingProcessID = 0x00000094; PoolPagedBytes = 0x000057cc; PoolNonpagedBytes = 0x00008ae8; HandleCount = 0x000000c1; }; instance of Win32Perf_RawProcess { Name = "spoolsv"; PercentProcessorTime = 0x00000000002016f0; PercentUserTime = 0x00000000000f47e0; PercentPrivilegedTime = 0x000000000010cf10; VirtualBytesPeak = 0x01d21000; VirtualBytes = 0x01ce1000; PageFaultsPerSec = 0x000003dd; WorkingSetPeak = 0x00349000; WorkingSet = 0x00195000; PageFileBytesPeak = 0x0016c000; PageFileBytes = 0x0016c000; PrivateBytes = 0x0016c000; ThreadCount = 0x00000009; PriorityBase = 0x00000008; ElapsedTime = 0x01bd4dd7d5621f00; IDProcess = 0x00000144; CreatingProcessID = 0x000000b8; PoolPagedBytes = 0x00005920; PoolNonpagedBytes = 0x000035ac; HandleCount = 0x0000005c; }; instance of Win32Perf_RawProcess { Name = "RpcSs"; PercentProcessorTime = 0x0000000000219e20; PercentUserTime = 0x0000000000092b20; PercentPrivilegedTime = 0x0000000000187300; VirtualBytesPeak = 0x01587000; VirtualBytes = 0x01547000; PageFaultsPerSec = 0x0000033c; WorkingSetPeak = 0x00244000; WorkingSet = 0x000fe000; PageFileBytesPeak = 0x000f9000; PageFileBytes = 0x000f9000; PrivateBytes = 0x000f9000; ThreadCount = 0x00000007; PriorityBase = 0x00000008; ElapsedTime = 0x01bd4dd7d7b48af0; IDProcess = 0x000001a0; CreatingProcessID = 0x000000b8; PoolPagedBytes = 0x000046bc; PoolNonpagedBytes = 0x0006f218; HandleCount = 0x00000085; }; instance of Win32Perf_RawProcess { Name = "ntmssvc"; PercentProcessorTime = 0x0000000000696ff0; PercentUserTime = 0x00000000002dd7a0; PercentPrivilegedTime = 0x00000000003b9850; VirtualBytesPeak = 0x01a7a000; VirtualBytes = 0x017e0000; PageFaultsPerSec = 0x00000ec5; WorkingSetPeak = 0x0020f000; WorkingSet = 0x0000e000; PageFileBytesPeak = 0x000fa000; PageFileBytes = 0x000d8000; PrivateBytes = 0x000d8000; ThreadCount = 0x00000008; PriorityBase = 0x00000008; ElapsedTime = 0x01bd4dd7da673bb0; IDProcess = 0x00000224; CreatingProcessID = 0x000000b8; PoolPagedBytes = 0x00004380; PoolNonpagedBytes = 0x00000d90; HandleCount = 0x0000003c; }; instance of Win32Perf_RawProcess { Name = "Explorer"; PercentProcessorTime = 0x000000000ec2eeb0; PercentUserTime = 0x0000000003f82bb0; PercentPrivilegedTime = 0x000000000acac300; VirtualBytesPeak = 0x0275d000; VirtualBytes = 0x02569000; PageFaultsPerSec = 0x00001808; WorkingSetPeak = 0x0052d000; WorkingSet = 0x00113000; PageFileBytesPeak = 0x001f0000; PageFileBytes = 0x001e9000; PrivateBytes = 0x001e9000; ThreadCount = 0x00000008; PriorityBase = 0x00000008; ElapsedTime = 0x01bd4dd7ec5592f0; IDProcess = 0x000001e8; CreatingProcessID = 0x000000b4; PoolPagedBytes = 0x00007a68; PoolNonpagedBytes = 0x00002718; HandleCount = 0x00000085; }; instance of Win32Perf_RawProcess { Name = "SysTray"; PercentProcessorTime = 0x000000000016ebd0; PercentUserTime = 0x000000000007a3f0; PercentPrivilegedTime = 0x00000000000f47e0; VirtualBytesPeak = 0x0142e000; VirtualBytes = 0x0141e000; PageFaultsPerSec = 0x000001f3; WorkingSetPeak = 0x001ee000; WorkingSet = 0x001ee000; PageFileBytesPeak = 0x000ba000; PageFileBytes = 0x000ba000; PrivateBytes = 0x000ba000; ThreadCount = 0x00000001; PriorityBase = 0x00000008; ElapsedTime = 0x01bd4dd7f01534b0; IDProcess = 0x00000238; CreatingProcessID = 0x000001e8; PoolPagedBytes = 0x00004adc; PoolNonpagedBytes = 0x00000cf4; HandleCount = 0x00000025; }; instance of Win32Perf_RawProcess { Name = "netman"; PercentProcessorTime = 0x000000000016ebd0; PercentUserTime = 0x000000000007a3f0; PercentPrivilegedTime = 0x00000000000f47e0; VirtualBytesPeak = 0x01b11000; VirtualBytes = 0x01b01000; PageFaultsPerSec = 0x000003d7; WorkingSetPeak = 0x0027f000; WorkingSet = 0x00172000; PageFileBytesPeak = 0x000ff000; PageFileBytes = 0x000ff000; PrivateBytes = 0x000ff000; ThreadCount = 0x00000005; PriorityBase = 0x00000008; ElapsedTime = 0x01bd4dd7f16b7eb0; IDProcess = 0x000001c0; CreatingProcessID = 0x000000b8; PoolPagedBytes = 0x00005818; PoolNonpagedBytes = 0x000010c0; HandleCount = 0x00000057; }; instance of Win32Perf_RawProcess { Name = "CMD"; PercentProcessorTime = 0x00000000000ab250; PercentUserTime = 0x0000000000049590; PercentPrivilegedTime = 0x0000000000061cc0; VirtualBytesPeak = 0x00dfb000; VirtualBytes = 0x00dfa000; PageFaultsPerSec = 0x000000d5; WorkingSetPeak = 0x000d6000; WorkingSet = 0x0000a000; PageFileBytesPeak = 0x0004a000; PageFileBytes = 0x00049000; PrivateBytes = 0x00049000; ThreadCount = 0x00000001; PriorityBase = 0x00000008; ElapsedTime = 0x01bd4dd7f61b08e0; IDProcess = 0x00000274; CreatingProcessID = 0x000001e8; PoolPagedBytes = 0x00003048; PoolNonpagedBytes = 0x000006a8; HandleCount = 0x00000010; }; instance of Win32Perf_RawProcess { Name = "CMD"; PercentProcessorTime = 0x0000000000559280; PercentUserTime = 0x00000000001564a0; PercentPrivilegedTime = 0x0000000000402de0; VirtualBytesPeak = 0x00e0a000; VirtualBytes = 0x00dfa000; PageFaultsPerSec = 0x0000022f; WorkingSetPeak = 0x000fd000; WorkingSet = 0x0000a000; PageFileBytesPeak = 0x00056000; PageFileBytes = 0x00054000; PrivateBytes = 0x00054000; ThreadCount = 0x00000001; PriorityBase = 0x00000008; ElapsedTime = 0x01bd4dd7f645d220; IDProcess = 0x0000028c; CreatingProcessID = 0x00000274; PoolPagedBytes = 0x00003048; PoolNonpagedBytes = 0x000006a8; HandleCount = 0x0000000f; }; instance of Win32Perf_RawProcess { Name = "findfast"; PercentProcessorTime = 0x0000000142327ee0; PercentUserTime = 0x00000000ce027e30; PercentPrivilegedTime = 0x00000000743000b0; VirtualBytesPeak = 0x02b2e000; VirtualBytes = 0x01acf000; PageFaultsPerSec = 0x0001158d; WorkingSetPeak = 0x00b7b000; WorkingSet = 0x00344000; PageFileBytesPeak = 0x009e7000; PageFileBytes = 0x0011f000; PrivateBytes = 0x0011f000; ThreadCount = 0x00000002; PriorityBase = 0x00000008; ElapsedTime = 0x01bd4dda18a645f0; IDProcess = 0x000000e0; CreatingProcessID = 0x0000017c; PoolPagedBytes = 0x00005c38; PoolNonpagedBytes = 0x00001068; HandleCount = 0x00000042; }; instance of Win32Perf_RawProcess { Name = "CMD"; PercentProcessorTime = 0x00000000000ab250; PercentUserTime = 0x0000000000030e60; PercentPrivilegedTime = 0x000000000007a3f0; VirtualBytesPeak = 0x00dfb000; VirtualBytes = 0x00dfa000; PageFaultsPerSec = 0x000000d5; WorkingSetPeak = 0x000d6000; WorkingSet = 0x000d5000; PageFileBytesPeak = 0x0004a000; PageFileBytes = 0x00049000; PrivateBytes = 0x00049000; ThreadCount = 0x00000001; PriorityBase = 0x00000008; ElapsedTime = 0x01bd4e05c13d53ac; IDProcess = 0x00000200; CreatingProcessID = 0x000001e8; PoolPagedBytes = 0x00003028; PoolNonpagedBytes = 0x000006a8; HandleCount = 0x00000010; }; instance of Win32Perf_RawProcess { Name = "CMD"; PercentProcessorTime = 0x0000000000495900; PercentUserTime = 0x000000000013dd70; PercentPrivilegedTime = 0x0000000000357b90; VirtualBytesPeak = 0x00e0a000; VirtualBytes = 0x00dfa000; PageFaultsPerSec = 0x0000014e; WorkingSetPeak = 0x000fc000; WorkingSet = 0x000fb000; PageFileBytesPeak = 0x00054000; PageFileBytes = 0x00052000; PrivateBytes = 0x00052000; ThreadCount = 0x00000001; PriorityBase = 0x00000008; ElapsedTime = 0x01bd4e05c1a0a6dc; IDProcess = 0x000002d0; CreatingProcessID = 0x00000200; PoolPagedBytes = 0x00003048; PoolNonpagedBytes = 0x000006a8; HandleCount = 0x00000011; }; instance of Win32Perf_RawProcess { Name = "notepad"; PercentProcessorTime = 0x0000000000402de0; PercentUserTime = 0x000000000019fa30; PercentPrivilegedTime = 0x00000000002633b0; VirtualBytesPeak = 0x0145b000; VirtualBytes = 0x01246000; PageFaultsPerSec = 0x000001a6; WorkingSetPeak = 0x0018b000; WorkingSet = 0x0018b000; PageFileBytesPeak = 0x0008e000; PageFileBytes = 0x0008e000; PrivateBytes = 0x0008e000; ThreadCount = 0x00000001; PriorityBase = 0x00000008; ElapsedTime = 0x01bd4e061d46bbbc; IDProcess = 0x0000020c; CreatingProcessID = 0x000002d0; PoolPagedBytes = 0x00004378; PoolNonpagedBytes = 0x00000918; HandleCount = 0x00000018; }; instance of Win32Perf_RawProcess { Name = "ctrlist"; PercentProcessorTime = 0x000000000033f460; PercentUserTime = 0x00000000000dc0b0; PercentPrivilegedTime = 0x00000000002633b0; VirtualBytesPeak = 0x01e09000; VirtualBytes = 0x01e09000; PageFaultsPerSec = 0x000003d0; WorkingSetPeak = 0x00338000; WorkingSet = 0x00328000; PageFileBytesPeak = 0x001ae000; PageFileBytes = 0x0019d000; PrivateBytes = 0x0019d000; ThreadCount = 0x00000003; PriorityBase = 0x00000008; ElapsedTime = 0x01bd4e069733379c; IDProcess = 0x000001f8; CreatingProcessID = 0x000002d0; PoolPagedBytes = 0x00004498; PoolNonpagedBytes = 0x00001418; HandleCount = 0x00000077; }; instance of Win32Perf_RawProcess { Name = "_Total"; PercentProcessorTime = 0x0000002b02eabe70; PercentUserTime = 0x00000000d5789690; PercentPrivilegedTime = 0x0000002a2d7227e0; VirtualBytesPeak = 0x1f6ba000; VirtualBytes = 0x1d6fd000; PageFaultsPerSec = 0x0001a721; WorkingSetPeak = 0x03b0d000; WorkingSet = 0x016e3000; PageFileBytesPeak = 0x01ed8000; PageFileBytes = 0x014e9000; PrivateBytes = 0x014e9000; ThreadCount = 0x00000092; PriorityBase = 0x00000000; ElapsedTime = 0x0000000000000000; IDProcess = 0x00000000; CreatingProcessID = 0x00000000; PoolPagedBytes = 0x000568e4; PoolNonpagedBytes = 0x000c3b2c; HandleCount = 0x000007f3; }; [ vendor("Microsoft"), guid("{5C7A4F63-9E4D-11d1-BB3C-00A0C913CAD4}"), locale("ms:\\0x0409"), displayname("Thread"), perfindex(232), helpindex(233), perfdetail(100) ] class Win32Perf_Thread : Win32_PerfFormattedData { [key] string Name; uint64 Timestamp; [ perfdefault, displayname("% Processor Time"), countertype(542180608), perfindex(6), helpindex(191), defaultscale(0), perfdetail(100) ] real64 PercentProcessorTime; [ displayname("% User Time"), countertype(542180608), perfindex(142), helpindex(193), defaultscale(0), perfdetail(200) ] real64 PercentUserTime; [ displayname("% Privileged Time"), countertype(542180608), perfindex(144), helpindex(195), defaultscale(0), perfdetail(200) ] real64 PercentPrivilegedTime; [ displayname("Context Switches/sec"), countertype(272696320), perfindex(146), helpindex(197), defaultscale(-2), perfdetail(200) ] real64 ContextSwitchesPerSec; [ displayname("Elapsed Time"), countertype(807666944), perfindex(684), helpindex(699), defaultscale(-4), perfdetail(200) ] real64 ElapsedTime; [ displayname("Priority Current"), countertype(65536), perfindex(694), helpindex(695), defaultscale(0), perfdetail(200) ] uint32 PriorityCurrent; [ displayname("Priority Base"), countertype(65536), perfindex(682), helpindex(697), defaultscale(0), perfdetail(200) ] uint32 PriorityBase; [ displayname("Start Address"), countertype(0), perfindex(706), helpindex(707), defaultscale(0), perfdetail(400) ] uint32 StartAddress; [ displayname("Thread State"), countertype(65536), perfindex(46), helpindex(47), defaultscale(0), perfdetail(400) ] uint32 ThreadState; [ displayname("Thread Wait Reason"), countertype(65536), perfindex(336), helpindex(337), defaultscale(0), perfdetail(400) ] uint32 ThreadWaitReason; [ displayname("ID Process"), countertype(65536), perfindex(784), helpindex(785), defaultscale(0), perfdetail(400) ] uint32 IDProcess; [ displayname("ID Thread"), countertype(65536), perfindex(804), helpindex(805), defaultscale(0), perfdetail(400) ] uint32 IDThread; }; [ vendor("Microsoft"), guid("{5C7A4F63-9E4D-11d1-BB3C-00A0C913CAD4}"), locale("ms:\\0x0409"), displayname("Thread"), perfindex(232), helpindex(233), perfdetail(100) ] class Win32Perf_RawThread : Win32_PerfRawData { [key] string Name; uint64 Timestamp; [ perfdefault, displayname("% Processor Time"), countertype(542180608), perfindex(6), helpindex(191), defaultscale(0), perfdetail(100) ] uint64 PercentProcessorTime; [ displayname("% User Time"), countertype(542180608), perfindex(142), helpindex(193), defaultscale(0), perfdetail(200) ] uint64 PercentUserTime; [ displayname("% Privileged Time"), countertype(542180608), perfindex(144), helpindex(195), defaultscale(0), perfdetail(200) ] uint64 PercentPrivilegedTime; [ displayname("Context Switches/sec"), countertype(272696320), perfindex(146), helpindex(197), defaultscale(-2), perfdetail(200) ] uint32 ContextSwitchesPerSec; [ displayname("Elapsed Time"), countertype(807666944), perfindex(684), helpindex(699), defaultscale(-4), perfdetail(200) ] uint64 ElapsedTime; [ displayname("Priority Current"), countertype(65536), perfindex(694), helpindex(695), defaultscale(0), perfdetail(200) ] uint32 PriorityCurrent; [ displayname("Priority Base"), countertype(65536), perfindex(682), helpindex(697), defaultscale(0), perfdetail(200) ] uint32 PriorityBase; [ displayname("Start Address"), countertype(0), perfindex(706), helpindex(707), defaultscale(0), perfdetail(400) ] uint32 StartAddress; [ displayname("Thread State"), countertype(65536), perfindex(46), helpindex(47), defaultscale(0), perfdetail(400) ] uint32 ThreadState; [ displayname("Thread Wait Reason"), countertype(65536), perfindex(336), helpindex(337), defaultscale(0), perfdetail(400) ] uint32 ThreadWaitReason; [ displayname("ID Process"), countertype(65536), perfindex(784), helpindex(785), defaultscale(0), perfdetail(400) ] uint32 IDProcess; [ displayname("ID Thread"), countertype(65536), perfindex(804), helpindex(805), defaultscale(0), perfdetail(400) ] uint32 IDThread; }; instance of Win32Perf_RawThread { Name = "Idle/0"; PercentProcessorTime = 0x0000002980ec2b90; PercentUserTime = 0x0000000000000000; PercentPrivilegedTime = 0x0000002980ec2b90; ContextSwitchesPerSec = 0x0009e0b8; ElapsedTime = 0x0000000000000000; PriorityCurrent = 0x00000000; PriorityBase = 0x00000000; StartAddress = 0x00000000; ThreadState = 0x00000002; ThreadWaitReason = 0x00000000; IDProcess = 0x00000000; IDThread = 0x00000000; }; instance of Win32Perf_RawThread { Name = "System/0"; PercentProcessorTime = 0x00000000152f2470; PercentUserTime = 0x0000000000000000; PercentPrivilegedTime = 0x00000000152f2470; ContextSwitchesPerSec = 0x0000303c; ElapsedTime = 0x0000000000000000; PriorityCurrent = 0x00000000; PriorityBase = 0x00000000; StartAddress = 0x805055d0; ThreadState = 0x00000001; ThreadWaitReason = 0x00000008; IDProcess = 0x00000008; IDThread = 0x00000004; }; instance of Win32Perf_RawThread { Name = "System/1"; PercentProcessorTime = 0x00000000011f4740; PercentUserTime = 0x0000000000000000; PercentPrivilegedTime = 0x00000000011f4740; ContextSwitchesPerSec = 0x00004053; ElapsedTime = 0x01bd4dd7aef76c40; PriorityCurrent = 0x00000010; PriorityBase = 0x00000008; StartAddress = 0x8041319e; ThreadState = 0x00000005; ThreadWaitReason = 0x0000000f; IDProcess = 0x00000008; IDThread = 0x0000000c; }; instance of Win32Perf_RawThread { Name = "System/2"; PercentProcessorTime = 0x0000000000a50840; PercentUserTime = 0x0000000000000000; PercentPrivilegedTime = 0x0000000000a50840; ContextSwitchesPerSec = 0x000028dc; ElapsedTime = 0x01bd4dd7aef76c40; PriorityCurrent = 0x00000010; PriorityBase = 0x00000008; StartAddress = 0x8041319e; ThreadState = 0x00000005; ThreadWaitReason = 0x0000000f; IDProcess = 0x00000008; IDThread = 0x00000010; }; instance of Win32Perf_RawThread { Name = "System/3"; PercentProcessorTime = 0x0000000002154c70; PercentUserTime = 0x0000000000000000; PercentPrivilegedTime = 0x0000000002154c70; ContextSwitchesPerSec = 0x00007770; ElapsedTime = 0x01bd4dd7aef76c40; PriorityCurrent = 0x00000010; PriorityBase = 0x00000008; StartAddress = 0x8041319e; ThreadState = 0x00000005; ThreadWaitReason = 0x0000000f; IDProcess = 0x00000008; IDThread = 0x00000014; }; instance of Win32Perf_RawThread { Name = "System/4"; PercentProcessorTime = 0x0000000001b1f940; PercentUserTime = 0x0000000000000000; PercentPrivilegedTime = 0x0000000001b1f940; ContextSwitchesPerSec = 0x00006386; ElapsedTime = 0x01bd4dd7aef76c40; PriorityCurrent = 0x00000010; PriorityBase = 0x00000008; StartAddress = 0x8041319e; ThreadState = 0x00000005; ThreadWaitReason = 0x0000000f; IDProcess = 0x00000008; IDThread = 0x00000018; }; instance of Win32Perf_RawThread { Name = "System/5"; PercentProcessorTime = 0x0000000002230d20; PercentUserTime = 0x0000000000000000; PercentPrivilegedTime = 0x0000000002230d20; ContextSwitchesPerSec = 0x00008ec9; ElapsedTime = 0x01bd4dd7aef76c40; PriorityCurrent = 0x00000010; PriorityBase = 0x00000008; StartAddress = 0x8041319e; ThreadState = 0x00000005; ThreadWaitReason = 0x0000000f; IDProcess = 0x00000008; IDThread = 0x0000001c; }; instance of Win32Perf_RawThread { Name = "System/6"; PercentProcessorTime = 0x00000000009bdd20; PercentUserTime = 0x0000000000000000; PercentPrivilegedTime = 0x00000000009bdd20; ContextSwitchesPerSec = 0x0000aee8; ElapsedTime = 0x01bd4dd7aef76c40; PriorityCurrent = 0x0000000c; PriorityBase = 0x0000000c; StartAddress = 0x8041319e; ThreadState = 0x00000005; ThreadWaitReason = 0x0000000f; IDProcess = 0x00000008; IDThread = 0x00000020; }; instance of Win32Perf_RawThread { Name = "System/7"; PercentProcessorTime = 0x00000000001e8fc0; PercentUserTime = 0x0000000000000000; PercentPrivilegedTime = 0x00000000001e8fc0; ContextSwitchesPerSec = 0x000019a8; ElapsedTime = 0x01bd4dd7aef76c40; PriorityCurrent = 0x0000000c; PriorityBase = 0x0000000c; StartAddress = 0x8041319e; ThreadState = 0x00000005; ThreadWaitReason = 0x0000000f; IDProcess = 0x00000008; IDThread = 0x00000024; }; instance of Win32Perf_RawThread { Name = "System/8"; PercentProcessorTime = 0x00000000002dd7a0; PercentUserTime = 0x0000000000000000; PercentPrivilegedTime = 0x00000000002dd7a0; ContextSwitchesPerSec = 0x00000229; ElapsedTime = 0x01bd4dd7aef76c40; PriorityCurrent = 0x0000000d; PriorityBase = 0x0000000c; StartAddress = 0x8041319e; ThreadState = 0x00000005; ThreadWaitReason = 0x0000000f; IDProcess = 0x00000008; IDThread = 0x00000028; }; instance of Win32Perf_RawThread { Name = "System/9"; PercentProcessorTime = 0x00000000000dc0b0; PercentUserTime = 0x0000000000000000; PercentPrivilegedTime = 0x00000000000dc0b0; ContextSwitchesPerSec = 0x000018c9; ElapsedTime = 0x01bd4dd7aef76c40; PriorityCurrent = 0x0000000f; PriorityBase = 0x0000000f; StartAddress = 0x8041319e; ThreadState = 0x00000005; ThreadWaitReason = 0x0000000f; IDProcess = 0x00000008; IDThread = 0x0000002c; }; instance of Win32Perf_RawThread { Name = "System/10"; PercentProcessorTime = 0x0000000002ac9400; PercentUserTime = 0x0000000000000000; PercentPrivilegedTime = 0x0000000002ac9400; ContextSwitchesPerSec = 0x00005bb3; ElapsedTime = 0x01bd4dd7aefa7aa0; PriorityCurrent = 0x00000012; PriorityBase = 0x00000008; StartAddress = 0x8043026c; ThreadState = 0x00000005; ThreadWaitReason = 0x00000012; IDProcess = 0x00000008; IDThread = 0x00000030; }; instance of Win32Perf_RawThread { Name = "System/11"; PercentProcessorTime = 0x00000000000c3980; PercentUserTime = 0x0000000000000000; PercentPrivilegedTime = 0x00000000000c3980; ContextSwitchesPerSec = 0x00000f7d; ElapsedTime = 0x01bd4dd7aefa7aa0; PriorityCurrent = 0x00000011; PriorityBase = 0x00000008; StartAddress = 0x804c9500; ThreadState = 0x00000005; ThreadWaitReason = 0x00000008; IDProcess = 0x00000008; IDThread = 0x00000034; }; instance of Win32Perf_RawThread { Name = "System/12"; PercentProcessorTime = 0x0000000000018730; PercentUserTime = 0x0000000000000000; PercentPrivilegedTime = 0x0000000000018730; ContextSwitchesPerSec = 0x0003891c; ElapsedTime = 0x01bd4dd7aefa7aa0; PriorityCurrent = 0x00000010; PriorityBase = 0x00000008; StartAddress = 0x804525d3; ThreadState = 0x00000005; ThreadWaitReason = 0x00000000; IDProcess = 0x00000008; IDThread = 0x00000038; }; instance of Win32Perf_RawThread { Name = "System/13"; PercentProcessorTime = 0x00000000000c3980; PercentUserTime = 0x0000000000000000; PercentPrivilegedTime = 0x00000000000c3980; ContextSwitchesPerSec = 0x00035ff7; ElapsedTime = 0x01bd4dd7aefa7aa0; PriorityCurrent = 0x00000017; PriorityBase = 0x00000008; StartAddress = 0x804526cb; ThreadState = 0x00000005; ThreadWaitReason = 0x00000000; IDProcess = 0x00000008; IDThread = 0x0000003c; }; instance of Win32Perf_RawThread { Name = "System/14"; PercentProcessorTime = 0x0000000000000000; PercentUserTime = 0x0000000000000000; PercentPrivilegedTime = 0x0000000000000000; ContextSwitchesPerSec = 0x00000001; ElapsedTime = 0x01bd4dd7af1d9ff0; PriorityCurrent = 0x00000010; PriorityBase = 0x00000008; StartAddress = 0x804184bf; ThreadState = 0x00000005; ThreadWaitReason = 0x0000000f; IDProcess = 0x00000008; IDThread = 0x00000040; }; instance of Win32Perf_RawThread { Name = "System/15"; PercentProcessorTime = 0x0000000000000000; PercentUserTime = 0x0000000000000000; PercentPrivilegedTime = 0x0000000000000000; ContextSwitchesPerSec = 0x00000001; ElapsedTime = 0x01bd4dd7af1d9ff0; PriorityCurrent = 0x00000011; PriorityBase = 0x00000008; StartAddress = 0x804184bf; ThreadState = 0x00000005; ThreadWaitReason = 0x0000000f; IDProcess = 0x00000008; IDThread = 0x00000044; }; instance of Win32Perf_RawThread { Name = "System/16"; PercentProcessorTime = 0x0000000000000000; PercentUserTime = 0x0000000000000000; PercentPrivilegedTime = 0x0000000000000000; ContextSwitchesPerSec = 0x00000001; ElapsedTime = 0x01bd4dd7b66bfd70; PriorityCurrent = 0x00000008; PriorityBase = 0x00000008; StartAddress = 0x803b4c0a; ThreadState = 0x00000005; ThreadWaitReason = 0x00000000; IDProcess = 0x00000008; IDThread = 0x00000048; }; instance of Win32Perf_RawThread { Name = "System/17"; PercentProcessorTime = 0x0000000000000000; PercentUserTime = 0x0000000000000000; PercentPrivilegedTime = 0x0000000000000000; ContextSwitchesPerSec = 0x00000012; ElapsedTime = 0x01bd4dd7b8a77d90; PriorityCurrent = 0x00000008; PriorityBase = 0x00000008; StartAddress = 0x8013ce56; ThreadState = 0x00000005; ThreadWaitReason = 0x0000000f; IDProcess = 0x00000008; IDThread = 0x0000004c; }; instance of Win32Perf_RawThread { Name = "System/18"; PercentProcessorTime = 0x0000000000000000; PercentUserTime = 0x0000000000000000; PercentPrivilegedTime = 0x0000000000000000; ContextSwitchesPerSec = 0x0000000f; ElapsedTime = 0x01bd4dd7c6acf100; PriorityCurrent = 0x00000009; PriorityBase = 0x00000008; StartAddress = 0x804df74c; ThreadState = 0x00000005; ThreadWaitReason = 0x00000010; IDProcess = 0x00000008; IDThread = 0x00000058; }; instance of Win32Perf_RawThread { Name = "System/19"; PercentProcessorTime = 0x0000000000000000; PercentUserTime = 0x0000000000000000; PercentPrivilegedTime = 0x0000000000000000; ContextSwitchesPerSec = 0x00000019; ElapsedTime = 0x01bd4dd7c88b3ab0; PriorityCurrent = 0x00000011; PriorityBase = 0x00000008; StartAddress = 0x80432fbc; ThreadState = 0x00000005; ThreadWaitReason = 0x00000012; IDProcess = 0x00000008; IDThread = 0x0000006c; }; instance of Win32Perf_RawThread { Name = "System/20"; PercentProcessorTime = 0x0000000000c82d90; PercentUserTime = 0x0000000000000000; PercentPrivilegedTime = 0x0000000000c82d90; ContextSwitchesPerSec = 0x000262cd; ElapsedTime = 0x01bd4dd7cff6a0c0; PriorityCurrent = 0x00000013; PriorityBase = 0x00000008; StartAddress = 0xa00d54e7; ThreadState = 0x00000005; ThreadWaitReason = 0x0000000d; IDProcess = 0x00000008; IDThread = 0x000000a8; }; instance of Win32Perf_RawThread { Name = "System/21"; PercentProcessorTime = 0x0000000001aa5550; PercentUserTime = 0x0000000000000000; PercentPrivilegedTime = 0x0000000001aa5550; ContextSwitchesPerSec = 0x0000d165; ElapsedTime = 0x01bd4dd7cff827f0; PriorityCurrent = 0x00000010; PriorityBase = 0x00000008; StartAddress = 0xa00dff2d; ThreadState = 0x00000005; ThreadWaitReason = 0x0000000d; IDProcess = 0x00000008; IDThread = 0x000000ac; }; instance of Win32Perf_RawThread { Name = "System/22"; PercentProcessorTime = 0x0000000000000000; PercentUserTime = 0x0000000000000000; PercentPrivilegedTime = 0x0000000000000000; ContextSwitchesPerSec = 0x00000003; ElapsedTime = 0x01bd4dd7d02786c0; PriorityCurrent = 0x00000010; PriorityBase = 0x00000008; StartAddress = 0xa00dff2d; ThreadState = 0x00000005; ThreadWaitReason = 0x0000000d; IDProcess = 0x00000008; IDThread = 0x000000bc; }; instance of Win32Perf_RawThread { Name = "System/23"; PercentProcessorTime = 0x0000000000000000; PercentUserTime = 0x0000000000000000; PercentPrivilegedTime = 0x0000000000000000; ContextSwitchesPerSec = 0x00000001; ElapsedTime = 0x01bd4dd7d4e96730; PriorityCurrent = 0x00000008; PriorityBase = 0x00000008; StartAddress = 0xf2d36f3e; ThreadState = 0x00000005; ThreadWaitReason = 0x00000000; IDProcess = 0x00000008; IDThread = 0x00000124; }; instance of Win32Perf_RawThread { Name = "System/24"; PercentProcessorTime = 0x0000000000018730; PercentUserTime = 0x0000000000000000; PercentPrivilegedTime = 0x0000000000018730; ContextSwitchesPerSec = 0x000005d2; ElapsedTime = 0x01bd4dd7d6d26330; PriorityCurrent = 0x00000008; PriorityBase = 0x00000008; StartAddress = 0xf6905f4e; ThreadState = 0x00000005; ThreadWaitReason = 0x0000000f; IDProcess = 0x00000008; IDThread = 0x0000013c; }; instance of Win32Perf_RawThread { Name = "System/25"; PercentProcessorTime = 0x0000000000433c40; PercentUserTime = 0x0000000000000000; PercentPrivilegedTime = 0x0000000000433c40; ContextSwitchesPerSec = 0x000008bd; ElapsedTime = 0x01bd4dd7d6d26330; PriorityCurrent = 0x00000008; PriorityBase = 0x00000008; StartAddress = 0xf6905f4e; ThreadState = 0x00000005; ThreadWaitReason = 0x0000000f; IDProcess = 0x00000008; IDThread = 0x00000170; }; instance of Win32Perf_RawThread { Name = "System/26"; PercentProcessorTime = 0x0000000000000000; PercentUserTime = 0x0000000000000000; PercentPrivilegedTime = 0x0000000000000000; ContextSwitchesPerSec = 0x0000002b; ElapsedTime = 0x01bd4dd7d6d26330; PriorityCurrent = 0x00000008; PriorityBase = 0x00000008; StartAddress = 0xf68ea0e9; ThreadState = 0x00000005; ThreadWaitReason = 0x00000000; IDProcess = 0x00000008; IDThread = 0x00000178; }; instance of Win32Perf_RawThread { Name = "System/27"; PercentProcessorTime = 0x0000000000000000; PercentUserTime = 0x0000000000000000; PercentPrivilegedTime = 0x0000000000000000; ContextSwitchesPerSec = 0x00000001; ElapsedTime = 0x01bd4dd7d862be50; PriorityCurrent = 0x00000008; PriorityBase = 0x00000008; StartAddress = 0xf6770370; ThreadState = 0x00000005; ThreadWaitReason = 0x0000000f; IDProcess = 0x00000008; IDThread = 0x000001d8; }; instance of Win32Perf_RawThread { Name = "System/28"; PercentProcessorTime = 0x000000000016ebd0; PercentUserTime = 0x0000000000000000; PercentPrivilegedTime = 0x000000000016ebd0; ContextSwitchesPerSec = 0x000005fa; ElapsedTime = 0x01bd4dd7d8bce660; PriorityCurrent = 0x00000009; PriorityBase = 0x00000009; StartAddress = 0xf670fcda; ThreadState = 0x00000005; ThreadWaitReason = 0x0000000f; IDProcess = 0x00000008; IDThread = 0x00000150; }; instance of Win32Perf_RawThread { Name = "System/29"; PercentProcessorTime = 0x0000000000000000; PercentUserTime = 0x0000000000000000; PercentPrivilegedTime = 0x0000000000000000; ContextSwitchesPerSec = 0x0000035d; ElapsedTime = 0x01bd4dd7d8be6d90; PriorityCurrent = 0x00000009; PriorityBase = 0x00000009; StartAddress = 0xf670fcda; ThreadState = 0x00000005; ThreadWaitReason = 0x0000000f; IDProcess = 0x00000008; IDThread = 0x000001f4; }; instance of Win32Perf_RawThread { Name = "System/30"; PercentProcessorTime = 0x0000000000030e60; PercentUserTime = 0x0000000000000000; PercentPrivilegedTime = 0x0000000000030e60; ContextSwitchesPerSec = 0x0000085b; ElapsedTime = 0x01bd4dd7ebf0b890; PriorityCurrent = 0x00000008; PriorityBase = 0x00000008; StartAddress = 0xf6905f5c; ThreadState = 0x00000005; ThreadWaitReason = 0x0000000f; IDProcess = 0x00000008; IDThread = 0x000000ec; }; instance of Win32Perf_RawThread { Name = "System/31"; PercentProcessorTime = 0x0000000000000000; PercentUserTime = 0x0000000000000000; PercentPrivilegedTime = 0x0000000000000000; ContextSwitchesPerSec = 0x00000001; ElapsedTime = 0x01bd4e0693b3c3bc; PriorityCurrent = 0x00000009; PriorityBase = 0x00000009; StartAddress = 0xf670fcda; ThreadState = 0x00000005; ThreadWaitReason = 0x0000000f; IDProcess = 0x00000008; IDThread = 0x000001f0; }; instance of Win32Perf_RawThread { Name = "System/32"; PercentProcessorTime = 0x0000000000000000; PercentUserTime = 0x0000000000000000; PercentPrivilegedTime = 0x0000000000000000; ContextSwitchesPerSec = 0x00000001; ElapsedTime = 0x01bd4e0693b3c3bc; PriorityCurrent = 0x00000009; PriorityBase = 0x00000009; StartAddress = 0xf670fcda; ThreadState = 0x00000005; ThreadWaitReason = 0x0000000f; IDProcess = 0x00000008; IDThread = 0x000002c8; }; instance of Win32Perf_RawThread { Name = "smss/0"; PercentProcessorTime = 0x0000000000867880; PercentUserTime = 0x000000000030e600; PercentPrivilegedTime = 0x0000000000559280; ContextSwitchesPerSec = 0x000004f4; ElapsedTime = 0x01bd4dd7c6b30dc0; PriorityCurrent = 0x0000000b; PriorityBase = 0x0000000b; StartAddress = 0x48589d00; ThreadState = 0x00000005; ThreadWaitReason = 0x00000006; IDProcess = 0x00000060; IDThread = 0x0000005c; }; instance of Win32Perf_RawThread { Name = "smss/1"; PercentProcessorTime = 0x0000000000000000; PercentUserTime = 0x0000000000000000; PercentPrivilegedTime = 0x0000000000000000; ContextSwitchesPerSec = 0x00000006; ElapsedTime = 0x01bd4dd7c6c9f990; PriorityCurrent = 0x0000000c; PriorityBase = 0x0000000b; StartAddress = 0x48586827; ThreadState = 0x00000005; ThreadWaitReason = 0x00000010; IDProcess = 0x00000060; IDThread = 0x00000064; }; instance of Win32Perf_RawThread { Name = "smss/2"; PercentProcessorTime = 0x0000000000000000; PercentUserTime = 0x0000000000000000; PercentPrivilegedTime = 0x0000000000000000; ContextSwitchesPerSec = 0x00000002; ElapsedTime = 0x01bd4dd7c6c9f990; PriorityCurrent = 0x0000000c; PriorityBase = 0x0000000b; StartAddress = 0x48586827; ThreadState = 0x00000005; ThreadWaitReason = 0x00000010; IDProcess = 0x00000060; IDThread = 0x00000068; }; instance of Win32Perf_RawThread { Name = "smss/3"; PercentProcessorTime = 0x0000000000000000; PercentUserTime = 0x0000000000000000; PercentPrivilegedTime = 0x0000000000000000; ContextSwitchesPerSec = 0x00000099; ElapsedTime = 0x01bd4dd7cc9a5230; PriorityCurrent = 0x0000000c; PriorityBase = 0x0000000b; StartAddress = 0x48587514; ThreadState = 0x00000005; ThreadWaitReason = 0x00000010; IDProcess = 0x00000060; IDThread = 0x00000070; }; instance of Win32Perf_RawThread { Name = "smss/4"; PercentProcessorTime = 0x0000000000000000; PercentUserTime = 0x0000000000000000; PercentPrivilegedTime = 0x0000000000000000; ContextSwitchesPerSec = 0x00000032; ElapsedTime = 0x01bd4dd7cc9a5230; PriorityCurrent = 0x0000000b; PriorityBase = 0x0000000b; StartAddress = 0x48587362; ThreadState = 0x00000005; ThreadWaitReason = 0x00000010; IDProcess = 0x00000060; IDThread = 0x00000074; }; instance of Win32Perf_RawThread { Name = "smss/5"; PercentProcessorTime = 0x0000000000000000; PercentUserTime = 0x0000000000000000; PercentPrivilegedTime = 0x0000000000000000; ContextSwitchesPerSec = 0x00000001; ElapsedTime = 0x01bd4dd7cc9a5230; PriorityCurrent = 0x0000000b; PriorityBase = 0x0000000b; StartAddress = 0x77fb460d; ThreadState = 0x00000005; ThreadWaitReason = 0x00000010; IDProcess = 0x00000060; IDThread = 0x00000078; }; instance of Win32Perf_RawThread { Name = "csrss/0"; PercentProcessorTime = 0x0000000000000000; PercentUserTime = 0x0000000000000000; PercentPrivilegedTime = 0x0000000000000000; ContextSwitchesPerSec = 0x00000002; ElapsedTime = 0x01bd4dd7cdabd8c0; PriorityCurrent = 0x0000000e; PriorityBase = 0x0000000d; StartAddress = 0x5ffaf1a3; ThreadState = 0x00000005; ThreadWaitReason = 0x00000006; IDProcess = 0x00000080; IDThread = 0x00000084; }; instance of Win32Perf_RawThread { Name = "csrss/1"; PercentProcessorTime = 0x0000000000c089a0; PercentUserTime = 0x00000000002016f0; PercentPrivilegedTime = 0x0000000000a072b0; ContextSwitchesPerSec = 0x00001f18; ElapsedTime = 0x01bd4dd7cdc44bc0; PriorityCurrent = 0x0000000d; PriorityBase = 0x0000000d; StartAddress = 0x5ff82b03; ThreadState = 0x00000005; ThreadWaitReason = 0x00000010; IDProcess = 0x00000080; IDThread = 0x00000088; }; instance of Win32Perf_RawThread { Name = "csrss/2"; PercentProcessorTime = 0x0000000000000000; PercentUserTime = 0x0000000000000000; PercentPrivilegedTime = 0x0000000000000000; ContextSwitchesPerSec = 0x00000036; ElapsedTime = 0x01bd4dd7cddb3790; PriorityCurrent = 0x0000000e; PriorityBase = 0x0000000d; StartAddress = 0x77fb460d; ThreadState = 0x00000005; ThreadWaitReason = 0x00000010; IDProcess = 0x00000080; IDThread = 0x0000008c; }; instance of Win32Perf_RawThread { Name = "csrss/3"; PercentProcessorTime = 0x0000000000000000; PercentUserTime = 0x0000000000000000; PercentPrivilegedTime = 0x0000000000000000; ContextSwitchesPerSec = 0x00000003; ElapsedTime = 0x01bd4dd7cddb3790; PriorityCurrent = 0x0000000e; PriorityBase = 0x0000000d; StartAddress = 0x5ff8250e; ThreadState = 0x00000005; ThreadWaitReason = 0x00000010; IDProcess = 0x00000080; IDThread = 0x00000090; }; instance of Win32Perf_RawThread { Name = "csrss/4"; PercentProcessorTime = 0x0000000000a1f9e0; PercentUserTime = 0x00000000001e8fc0; PercentPrivilegedTime = 0x0000000000836a20; ContextSwitchesPerSec = 0x00001e5a; ElapsedTime = 0x01bd4dd7cde5e9e0; PriorityCurrent = 0x0000000e; PriorityBase = 0x0000000d; StartAddress = 0x5ff82b03; ThreadState = 0x00000005; ThreadWaitReason = 0x00000010; IDProcess = 0x00000080; IDThread = 0x00000098; }; instance of Win32Perf_RawThread { Name = "csrss/5"; PercentProcessorTime = 0x0000000001085b70; PercentUserTime = 0x00000000001e8fc0; PercentPrivilegedTime = 0x0000000000e9cbb0; ContextSwitchesPerSec = 0x00004857; ElapsedTime = 0x01bd4dd7ec666200; PriorityCurrent = 0x0000000f; PriorityBase = 0x0000000d; StartAddress = 0x5ffc20f8; ThreadState = 0x00000005; ThreadWaitReason = 0x0000000d; IDProcess = 0x00000080; IDThread = 0x000001d4; }; instance of Win32Perf_RawThread { Name = "csrss/6"; PercentProcessorTime = 0x0000000000bbf410; PercentUserTime = 0x00000000001e8fc0; PercentPrivilegedTime = 0x00000000009d6450; ContextSwitchesPerSec = 0x00001e2a; ElapsedTime = 0x01bd4dd7ec6f8d20; PriorityCurrent = 0x0000000e; PriorityBase = 0x0000000d; StartAddress = 0x5ff82b03; ThreadState = 0x00000005; ThreadWaitReason = 0x00000010; IDProcess = 0x00000080; IDThread = 0x00000268; }; instance of Win32Perf_RawThread { Name = "winlogon/0"; PercentProcessorTime = 0x000000000134abe0; PercentUserTime = 0x000000000041b510; PercentPrivilegedTime = 0x0000000000f2f6d0; ContextSwitchesPerSec = 0x00000821; ElapsedTime = 0x01bd4dd7cddcbec0; PriorityCurrent = 0x0000000f; PriorityBase = 0x0000000f; StartAddress = 0x01013ef0; ThreadState = 0x00000005; ThreadWaitReason = 0x0000000d; IDProcess = 0x00000094; IDThread = 0x0000007c; }; instance of Win32Perf_RawThread { Name = "winlogon/1"; PercentProcessorTime = 0x0000000000000000; PercentUserTime = 0x0000000000000000; PercentPrivilegedTime = 0x0000000000000000; ContextSwitchesPerSec = 0x0000000a; ElapsedTime = 0x01bd4dd7ce557690; PriorityCurrent = 0x0000000d; PriorityBase = 0x0000000d; StartAddress = 0x77f1407b; ThreadState = 0x00000005; ThreadWaitReason = 0x00000006; IDProcess = 0x00000094; IDThread = 0x0000009c; }; instance of Win32Perf_RawThread { Name = "winlogon/2"; PercentProcessorTime = 0x0000000000635330; PercentUserTime = 0x0000000000125640; PercentPrivilegedTime = 0x000000000050fcf0; ContextSwitchesPerSec = 0x00006401; ElapsedTime = 0x01bd4dd7cfabc090; PriorityCurrent = 0x0000000e; PriorityBase = 0x0000000d; StartAddress = 0x77f1407b; ThreadState = 0x00000005; ThreadWaitReason = 0x00000006; IDProcess = 0x00000094; IDThread = 0x000000a0; }; instance of Win32Perf_RawThread { Name = "winlogon/3"; PercentProcessorTime = 0x0000000000000000; PercentUserTime = 0x0000000000000000; PercentPrivilegedTime = 0x0000000000000000; ContextSwitchesPerSec = 0x0000000a; ElapsedTime = 0x01bd4dd7cfabc090; PriorityCurrent = 0x0000000d; PriorityBase = 0x0000000d; StartAddress = 0x77f1407b; ThreadState = 0x00000005; ThreadWaitReason = 0x00000006; IDProcess = 0x00000094; IDThread = 0x000000a4; }; instance of Win32Perf_RawThread { Name = "winlogon/4"; PercentProcessorTime = 0x0000000000000000; PercentUserTime = 0x0000000000000000; PercentPrivilegedTime = 0x0000000000000000; ContextSwitchesPerSec = 0x00000003; ElapsedTime = 0x01bd4dd7d01fe2d0; PriorityCurrent = 0x0000000d; PriorityBase = 0x0000000d; StartAddress = 0x77f1407b; ThreadState = 0x00000005; ThreadWaitReason = 0x0000000f; IDProcess = 0x00000094; IDThread = 0x000000b0; }; instance of Win32Perf_RawThread { Name = "winlogon/5"; PercentProcessorTime = 0x0000000000030e60; PercentUserTime = 0x0000000000000000; PercentPrivilegedTime = 0x0000000000030e60; ContextSwitchesPerSec = 0x000000b1; ElapsedTime = 0x01bd4dd7d448f480; PriorityCurrent = 0x0000000d; PriorityBase = 0x0000000d; StartAddress = 0x77f1407b; ThreadState = 0x00000005; ThreadWaitReason = 0x00000006; IDProcess = 0x00000094; IDThread = 0x000000fc; }; instance of Win32Perf_RawThread { Name = "winlogon/6"; PercentProcessorTime = 0x0000000000018730; PercentUserTime = 0x0000000000000000; PercentPrivilegedTime = 0x0000000000018730; ContextSwitchesPerSec = 0x000006e2; ElapsedTime = 0x01bd4dd7d459c390; PriorityCurrent = 0x0000000b; PriorityBase = 0x0000000b; StartAddress = 0x77f1407b; ThreadState = 0x00000005; ThreadWaitReason = 0x00000006; IDProcess = 0x00000094; IDThread = 0x00000104; }; instance of Win32Perf_RawThread { Name = "winlogon/7"; PercentProcessorTime = 0x0000000000000000; PercentUserTime = 0x0000000000000000; PercentPrivilegedTime = 0x0000000000000000; ContextSwitchesPerSec = 0x00000006; ElapsedTime = 0x01bd4dd7dafcfc10; PriorityCurrent = 0x0000000d; PriorityBase = 0x0000000d; StartAddress = 0x77f1407b; ThreadState = 0x00000005; ThreadWaitReason = 0x00000006; IDProcess = 0x00000094; IDThread = 0x00000240; }; instance of Win32Perf_RawThread { Name = "winlogon/8"; PercentProcessorTime = 0x0000000000000000; PercentUserTime = 0x0000000000000000; PercentPrivilegedTime = 0x0000000000000000; ContextSwitchesPerSec = 0x00000002; ElapsedTime = 0x01bd4dd7dafe8340; PriorityCurrent = 0x0000000d; PriorityBase = 0x0000000d; StartAddress = 0x77f1407b; ThreadState = 0x00000005; ThreadWaitReason = 0x0000000f; IDProcess = 0x00000094; IDThread = 0x00000244; }; instance of Win32Perf_RawThread { Name = "winlogon/9"; PercentProcessorTime = 0x0000000000000000; PercentUserTime = 0x0000000000000000; PercentPrivilegedTime = 0x0000000000000000; ContextSwitchesPerSec = 0x00000001; ElapsedTime = 0x01bd4dd7db0f5250; PriorityCurrent = 0x00000001; PriorityBase = 0x00000001; StartAddress = 0x77f1407b; ThreadState = 0x00000005; ThreadWaitReason = 0x00000006; IDProcess = 0x00000094; IDThread = 0x0000024c; }; instance of Win32Perf_RawThread { Name = "winlogon/10"; PercentProcessorTime = 0x0000000000000000; PercentUserTime = 0x0000000000000000; PercentPrivilegedTime = 0x0000000000000000; ContextSwitchesPerSec = 0x00000005; ElapsedTime = 0x01bd4dd7ec0dc120; PriorityCurrent = 0x00000004; PriorityBase = 0x00000001; StartAddress = 0x77f1407b; ThreadState = 0x00000005; ThreadWaitReason = 0x00000006; IDProcess = 0x00000094; IDThread = 0x00000174; }; instance of Win32Perf_RawThread { Name = "winlogon/11"; PercentProcessorTime = 0x0000000000000000; PercentUserTime = 0x0000000000000000; PercentPrivilegedTime = 0x0000000000000000; ContextSwitchesPerSec = 0x0000001d; ElapsedTime = 0x01bd4dd7ec433cb0; PriorityCurrent = 0x0000000d; PriorityBase = 0x0000000d; StartAddress = 0x77f1407b; ThreadState = 0x00000005; ThreadWaitReason = 0x0000000d; IDProcess = 0x00000094; IDThread = 0x000001bc; }; instance of Win32Perf_RawThread { Name = "services/0"; PercentProcessorTime = 0x0000000000018730; PercentUserTime = 0x0000000000000000; PercentPrivilegedTime = 0x0000000000018730; ContextSwitchesPerSec = 0x00000137; ElapsedTime = 0x01bd4dd7d45fe050; PriorityCurrent = 0x0000000a; PriorityBase = 0x00000009; StartAddress = 0x77f1407b; ThreadState = 0x00000005; ThreadWaitReason = 0x00000006; IDProcess = 0x000000b8; IDThread = 0x00000118; }; instance of Win32Perf_RawThread { Name = "services/1"; PercentProcessorTime = 0x0000000000805bc0; PercentUserTime = 0x00000000002dd7a0; PercentPrivilegedTime = 0x0000000000528420; ContextSwitchesPerSec = 0x00000f57; ElapsedTime = 0x01bd4dd7d46f2830; PriorityCurrent = 0x00000009; PriorityBase = 0x00000009; StartAddress = 0x77f1407b; ThreadState = 0x00000001; ThreadWaitReason = 0x00000000; IDProcess = 0x000000b8; IDThread = 0x00000100; }; instance of Win32Perf_RawThread { Name = "services/2"; PercentProcessorTime = 0x0000000001319d80; PercentUserTime = 0x000000000024ac80; PercentPrivilegedTime = 0x00000000010cf100; ContextSwitchesPerSec = 0x00000736; ElapsedTime = 0x01bd4dd7d46f2830; PriorityCurrent = 0x00000009; PriorityBase = 0x00000009; StartAddress = 0x77f1407b; ThreadState = 0x00000005; ThreadWaitReason = 0x0000000f; IDProcess = 0x000000b8; IDThread = 0x0000011c; }; instance of Win32Perf_RawThread { Name = "services/3"; PercentProcessorTime = 0x0000000000018730; PercentUserTime = 0x0000000000018730; PercentPrivilegedTime = 0x0000000000000000; ContextSwitchesPerSec = 0x00000036; ElapsedTime = 0x01bd4dd7d47e7010; PriorityCurrent = 0x00000009; PriorityBase = 0x00000009; StartAddress = 0x77f1407b; ThreadState = 0x00000005; ThreadWaitReason = 0x00000000; IDProcess = 0x000000b8; IDThread = 0x00000120; }; instance of Win32Perf_RawThread { Name = "services/4"; PercentProcessorTime = 0x0000000000018730; PercentUserTime = 0x0000000000000000; PercentPrivilegedTime = 0x0000000000018730; ContextSwitchesPerSec = 0x00000007; ElapsedTime = 0x01bd4dd7d4be9df0; PriorityCurrent = 0x0000000a; PriorityBase = 0x00000009; StartAddress = 0x77f1407b; ThreadState = 0x00000005; ThreadWaitReason = 0x00000010; IDProcess = 0x000000b8; IDThread = 0x00000128; }; instance of Win32Perf_RawThread { Name = "services/5"; PercentProcessorTime = 0x0000000000061cc0; PercentUserTime = 0x0000000000018730; PercentPrivilegedTime = 0x0000000000049590; ContextSwitchesPerSec = 0x00000034; ElapsedTime = 0x01bd4dd7d53d7280; PriorityCurrent = 0x00000009; PriorityBase = 0x00000009; StartAddress = 0x77f1407b; ThreadState = 0x00000005; ThreadWaitReason = 0x00000006; IDProcess = 0x000000b8; IDThread = 0x00000134; }; instance of Win32Perf_RawThread { Name = "services/6"; PercentProcessorTime = 0x0000000000326d30; PercentUserTime = 0x0000000000000000; PercentPrivilegedTime = 0x0000000000326d30; ContextSwitchesPerSec = 0x0000004a; ElapsedTime = 0x01bd4dd7d555e580; PriorityCurrent = 0x00000009; PriorityBase = 0x00000009; StartAddress = 0x77f1407b; ThreadState = 0x00000005; ThreadWaitReason = 0x00000006; IDProcess = 0x000000b8; IDThread = 0x00000130; }; instance of Win32Perf_RawThread { Name = "services/7"; PercentProcessorTime = 0x0000000000000000; PercentUserTime = 0x0000000000000000; PercentPrivilegedTime = 0x0000000000000000; ContextSwitchesPerSec = 0x0000000d; ElapsedTime = 0x01bd4dd7d55d8970; PriorityCurrent = 0x00000009; PriorityBase = 0x00000009; StartAddress = 0x77f1407b; ThreadState = 0x00000005; ThreadWaitReason = 0x00000006; IDProcess = 0x000000b8; IDThread = 0x00000138; }; instance of Win32Perf_RawThread { Name = "services/8"; PercentProcessorTime = 0x0000000000000000; PercentUserTime = 0x0000000000000000; PercentPrivilegedTime = 0x0000000000000000; ContextSwitchesPerSec = 0x00000010; ElapsedTime = 0x01bd4dd7d68474a0; PriorityCurrent = 0x00000009; PriorityBase = 0x00000009; StartAddress = 0x77f1407b; ThreadState = 0x00000005; ThreadWaitReason = 0x00000000; IDProcess = 0x000000b8; IDThread = 0x00000168; }; instance of Win32Perf_RawThread { Name = "services/9"; PercentProcessorTime = 0x0000000000187300; PercentUserTime = 0x0000000000030e60; PercentPrivilegedTime = 0x00000000001564a0; ContextSwitchesPerSec = 0x0000000f; ElapsedTime = 0x01bd4dd7d68474a0; PriorityCurrent = 0x00000009; PriorityBase = 0x00000009; StartAddress = 0x77f1407b; ThreadState = 0x00000005; ThreadWaitReason = 0x00000006; IDProcess = 0x000000b8; IDThread = 0x0000016c; }; instance of Win32Perf_RawThread { Name = "services/10"; PercentProcessorTime = 0x000000000007a3f0; PercentUserTime = 0x0000000000018730; PercentPrivilegedTime = 0x0000000000061cc0; ContextSwitchesPerSec = 0x00000208; ElapsedTime = 0x01bd4dd7d75d7140; PriorityCurrent = 0x0000000a; PriorityBase = 0x00000009; StartAddress = 0x77f1407b; ThreadState = 0x00000005; ThreadWaitReason = 0x00000004; IDProcess = 0x000000b8; IDThread = 0x00000184; }; instance of Win32Perf_RawThread { Name = "services/11"; PercentProcessorTime = 0x0000000000030e60; PercentUserTime = 0x0000000000000000; PercentPrivilegedTime = 0x0000000000030e60; ContextSwitchesPerSec = 0x00000012; ElapsedTime = 0x01bd4dd7d7883a80; PriorityCurrent = 0x00000009; PriorityBase = 0x00000009; StartAddress = 0x77f1407b; ThreadState = 0x00000005; ThreadWaitReason = 0x00000006; IDProcess = 0x000000b8; IDThread = 0x00000164; }; instance of Win32Perf_RawThread { Name = "services/12"; PercentProcessorTime = 0x0000000000018730; PercentUserTime = 0x0000000000000000; PercentPrivilegedTime = 0x0000000000018730; ContextSwitchesPerSec = 0x00000195; ElapsedTime = 0x01bd4dd7d7883a80; PriorityCurrent = 0x0000000b; PriorityBase = 0x00000009; StartAddress = 0x77f1407b; ThreadState = 0x00000005; ThreadWaitReason = 0x00000006; IDProcess = 0x000000b8; IDThread = 0x0000018c; }; instance of Win32Perf_RawThread { Name = "services/13"; PercentProcessorTime = 0x0000000000030e60; PercentUserTime = 0x0000000000000000; PercentPrivilegedTime = 0x0000000000030e60; ContextSwitchesPerSec = 0x0000003c; ElapsedTime = 0x01bd4dd7d7883a80; PriorityCurrent = 0x0000000b; PriorityBase = 0x00000009; StartAddress = 0x77f1407b; ThreadState = 0x00000005; ThreadWaitReason = 0x00000006; IDProcess = 0x000000b8; IDThread = 0x00000190; }; instance of Win32Perf_RawThread { Name = "services/14"; PercentProcessorTime = 0x0000000000000000; PercentUserTime = 0x0000000000000000; PercentPrivilegedTime = 0x0000000000000000; ContextSwitchesPerSec = 0x00000023; ElapsedTime = 0x01bd4dd7d789c1b0; PriorityCurrent = 0x00000009; PriorityBase = 0x00000009; StartAddress = 0x77f1407b; ThreadState = 0x00000005; ThreadWaitReason = 0x00000006; IDProcess = 0x000000b8; IDThread = 0x00000198; }; instance of Win32Perf_RawThread { Name = "services/15"; PercentProcessorTime = 0x0000000000000000; PercentUserTime = 0x0000000000000000; PercentPrivilegedTime = 0x0000000000000000; ContextSwitchesPerSec = 0x00000002; ElapsedTime = 0x01bd4dd7d7dc45d0; PriorityCurrent = 0x00000009; PriorityBase = 0x00000009; StartAddress = 0x77f1407b; ThreadState = 0x00000005; ThreadWaitReason = 0x00000006; IDProcess = 0x000000b8; IDThread = 0x000001a4; }; instance of Win32Perf_RawThread { Name = "services/16"; PercentProcessorTime = 0x0000000000000000; PercentUserTime = 0x0000000000000000; PercentPrivilegedTime = 0x0000000000000000; ContextSwitchesPerSec = 0x00000001; ElapsedTime = 0x01bd4dd7d7f94e60; PriorityCurrent = 0x00000009; PriorityBase = 0x00000009; StartAddress = 0x77f1407b; ThreadState = 0x00000005; ThreadWaitReason = 0x00000006; IDProcess = 0x000000b8; IDThread = 0x000001ac; }; instance of Win32Perf_RawThread { Name = "services/17"; PercentProcessorTime = 0x0000000000030e60; PercentUserTime = 0x0000000000018730; PercentPrivilegedTime = 0x0000000000018730; ContextSwitchesPerSec = 0x00000012; ElapsedTime = 0x01bd4dd7d854fda0; PriorityCurrent = 0x00000009; PriorityBase = 0x00000009; StartAddress = 0x77f1407b; ThreadState = 0x00000005; ThreadWaitReason = 0x00000006; IDProcess = 0x000000b8; IDThread = 0x000001c4; }; instance of Win32Perf_RawThread { Name = "services/18"; PercentProcessorTime = 0x0000000000000000; PercentUserTime = 0x0000000000000000; PercentPrivilegedTime = 0x0000000000000000; ContextSwitchesPerSec = 0x00000002; ElapsedTime = 0x01bd4dd7d8644580; PriorityCurrent = 0x00000009; PriorityBase = 0x00000009; StartAddress = 0x77f1407b; ThreadState = 0x00000005; ThreadWaitReason = 0x00000006; IDProcess = 0x000000b8; IDThread = 0x000001dc; }; instance of Win32Perf_RawThread { Name = "services/19"; PercentProcessorTime = 0x0000000000092b20; PercentUserTime = 0x0000000000061cc0; PercentPrivilegedTime = 0x0000000000030e60; ContextSwitchesPerSec = 0x000000ad; ElapsedTime = 0x01bd4dd7d8c30320; PriorityCurrent = 0x0000000b; PriorityBase = 0x0000000a; StartAddress = 0x77f1407b; ThreadState = 0x00000005; ThreadWaitReason = 0x00000006; IDProcess = 0x000000b8; IDThread = 0x000001fc; }; instance of Win32Perf_RawThread { Name = "services/20"; PercentProcessorTime = 0x0000000000092b20; PercentUserTime = 0x0000000000061cc0; PercentPrivilegedTime = 0x0000000000030e60; ContextSwitchesPerSec = 0x0000007c; ElapsedTime = 0x01bd4dd7d8cf3ca0; PriorityCurrent = 0x0000000b; PriorityBase = 0x0000000a; StartAddress = 0x77f1407b; ThreadState = 0x00000005; ThreadWaitReason = 0x00000006; IDProcess = 0x000000b8; IDThread = 0x000001d0; }; instance of Win32Perf_RawThread { Name = "services/21"; PercentProcessorTime = 0x0000000000018730; PercentUserTime = 0x0000000000000000; PercentPrivilegedTime = 0x0000000000018730; ContextSwitchesPerSec = 0x00000056; ElapsedTime = 0x01bd4dd7d8e62870; PriorityCurrent = 0x0000000b; PriorityBase = 0x0000000a; StartAddress = 0x77f1407b; ThreadState = 0x00000005; ThreadWaitReason = 0x00000006; IDProcess = 0x000000b8; IDThread = 0x00000194; }; instance of Win32Perf_RawThread { Name = "services/22"; PercentProcessorTime = 0x0000000000061cc0; PercentUserTime = 0x0000000000000000; PercentPrivilegedTime = 0x0000000000061cc0; ContextSwitchesPerSec = 0x00000091; ElapsedTime = 0x01bd4dd7daabff20; PriorityCurrent = 0x0000000a; PriorityBase = 0x0000000a; StartAddress = 0x77f1407b; ThreadState = 0x00000005; ThreadWaitReason = 0x00000006; IDProcess = 0x000000b8; IDThread = 0x00000230; }; instance of Win32Perf_RawThread { Name = "services/23"; PercentProcessorTime = 0x0000000000000000; PercentUserTime = 0x0000000000000000; PercentPrivilegedTime = 0x0000000000000000; ContextSwitchesPerSec = 0x00000018; ElapsedTime = 0x01bd4dd7db0318d0; PriorityCurrent = 0x00000009; PriorityBase = 0x00000009; StartAddress = 0x77f1407b; ThreadState = 0x00000005; ThreadWaitReason = 0x00000006; IDProcess = 0x000000b8; IDThread = 0x00000248; }; instance of Win32Perf_RawThread { Name = "services/24"; PercentProcessorTime = 0x0000000000000000; PercentUserTime = 0x0000000000000000; PercentPrivilegedTime = 0x0000000000000000; ContextSwitchesPerSec = 0x00000002; ElapsedTime = 0x01bd4dd7db187d70; PriorityCurrent = 0x00000009; PriorityBase = 0x00000009; StartAddress = 0x77f1407b; ThreadState = 0x00000005; ThreadWaitReason = 0x00000010; IDProcess = 0x000000b8; IDThread = 0x000000f8; }; instance of Win32Perf_RawThread { Name = "services/25"; PercentProcessorTime = 0x0000000000000000; PercentUserTime = 0x0000000000000000; PercentPrivilegedTime = 0x0000000000000000; ContextSwitchesPerSec = 0x00000002; ElapsedTime = 0x01bd4dd7db187d70; PriorityCurrent = 0x00000009; PriorityBase = 0x00000009; StartAddress = 0x77f1407b; ThreadState = 0x00000005; ThreadWaitReason = 0x00000010; IDProcess = 0x000000b8; IDThread = 0x00000250; }; instance of Win32Perf_RawThread { Name = "services/26"; PercentProcessorTime = 0x0000000000061cc0; PercentUserTime = 0x0000000000049590; PercentPrivilegedTime = 0x0000000000018730; ContextSwitchesPerSec = 0x0000007f; ElapsedTime = 0x01bd4dd7db3d29f0; PriorityCurrent = 0x0000000b; PriorityBase = 0x0000000a; StartAddress = 0x77f1407b; ThreadState = 0x00000005; ThreadWaitReason = 0x00000006; IDProcess = 0x000000b8; IDThread = 0x00000264; }; instance of Win32Perf_RawThread { Name = "services/27"; PercentProcessorTime = 0x0000000000000000; PercentUserTime = 0x0000000000000000; PercentPrivilegedTime = 0x0000000000000000; ContextSwitchesPerSec = 0x00000001; ElapsedTime = 0x01bd4e0693b3c3bc; PriorityCurrent = 0x0000000a; PriorityBase = 0x0000000a; StartAddress = 0x77f1407b; ThreadState = 0x00000005; ThreadWaitReason = 0x00000010; IDProcess = 0x000000b8; IDThread = 0x00000148; }; instance of Win32Perf_RawThread { Name = "services/28"; PercentProcessorTime = 0x0000000000000000; PercentUserTime = 0x0000000000000000; PercentPrivilegedTime = 0x0000000000000000; ContextSwitchesPerSec = 0x00000001; ElapsedTime = 0x01bd4e06973f711c; PriorityCurrent = 0x00000009; PriorityBase = 0x00000009; StartAddress = 0x77f1407b; ThreadState = 0x00000005; ThreadWaitReason = 0x0000000f; IDProcess = 0x000000b8; IDThread = 0x00000114; }; instance of Win32Perf_RawThread { Name = "lsass/0"; PercentProcessorTime = 0x0000000000000000; PercentUserTime = 0x0000000000000000; PercentPrivilegedTime = 0x0000000000000000; ContextSwitchesPerSec = 0x00000002; ElapsedTime = 0x01bd4dd7d18574b0; PriorityCurrent = 0x00000009; PriorityBase = 0x00000009; StartAddress = 0x77f1407b; ThreadState = 0x00000005; ThreadWaitReason = 0x00000006; IDProcess = 0x000000c4; IDThread = 0x000000d0; }; instance of Win32Perf_RawThread { Name = "lsass/1"; PercentProcessorTime = 0x0000000000000000; PercentUserTime = 0x0000000000000000; PercentPrivilegedTime = 0x0000000000000000; ContextSwitchesPerSec = 0x00000008; ElapsedTime = 0x01bd4dd7d2caefa0; PriorityCurrent = 0x0000000a; PriorityBase = 0x00000009; StartAddress = 0x77f1407b; ThreadState = 0x00000005; ThreadWaitReason = 0x00000000; IDProcess = 0x000000c4; IDThread = 0x000000d4; }; instance of Win32Perf_RawThread { Name = "lsass/2"; PercentProcessorTime = 0x0000000000000000; PercentUserTime = 0x0000000000000000; PercentPrivilegedTime = 0x0000000000000000; ContextSwitchesPerSec = 0x00000164; ElapsedTime = 0x01bd4dd7d3006b30; PriorityCurrent = 0x00000009; PriorityBase = 0x00000009; StartAddress = 0x77f1407b; ThreadState = 0x00000005; ThreadWaitReason = 0x00000006; IDProcess = 0x000000c4; IDThread = 0x000000d8; }; instance of Win32Perf_RawThread { Name = "lsass/3"; PercentProcessorTime = 0x0000000000000000; PercentUserTime = 0x0000000000000000; PercentPrivilegedTime = 0x0000000000000000; ContextSwitchesPerSec = 0x00000006; ElapsedTime = 0x01bd4dd7d30687f0; PriorityCurrent = 0x0000000a; PriorityBase = 0x00000009; StartAddress = 0x77f1407b; ThreadState = 0x00000005; ThreadWaitReason = 0x00000010; IDProcess = 0x000000c4; IDThread = 0x000000dc; }; instance of Win32Perf_RawThread { Name = "lsass/4"; PercentProcessorTime = 0x0000000000000000; PercentUserTime = 0x0000000000000000; PercentPrivilegedTime = 0x0000000000000000; ContextSwitchesPerSec = 0x00000003; ElapsedTime = 0x01bd4dd7d3bf6da0; PriorityCurrent = 0x0000000a; PriorityBase = 0x00000009; StartAddress = 0x77f1407b; ThreadState = 0x00000005; ThreadWaitReason = 0x00000006; IDProcess = 0x000000c4; IDThread = 0x000000e8; }; instance of Win32Perf_RawThread { Name = "lsass/5"; PercentProcessorTime = 0x0000000000030e60; PercentUserTime = 0x0000000000030e60; PercentPrivilegedTime = 0x0000000000000000; ContextSwitchesPerSec = 0x0000012f; ElapsedTime = 0x01bd4dd7d4275660; PriorityCurrent = 0x00000009; PriorityBase = 0x00000009; StartAddress = 0x77f1407b; ThreadState = 0x00000005; ThreadWaitReason = 0x00000010; IDProcess = 0x000000c4; IDThread = 0x000000f0; }; instance of Win32Perf_RawThread { Name = "lsass/6"; PercentProcessorTime = 0x0000000000000000; PercentUserTime = 0x0000000000000000; PercentPrivilegedTime = 0x0000000000000000; ContextSwitchesPerSec = 0x00000003; ElapsedTime = 0x01bd4dd7d428dd90; PriorityCurrent = 0x0000000a; PriorityBase = 0x00000009; StartAddress = 0x77f1407b; ThreadState = 0x00000005; ThreadWaitReason = 0x00000006; IDProcess = 0x000000c4; IDThread = 0x000000f4; }; instance of Win32Perf_RawThread { Name = "lsass/7"; PercentProcessorTime = 0x0000000000061cc0; PercentUserTime = 0x0000000000030e60; PercentPrivilegedTime = 0x0000000000030e60; ContextSwitchesPerSec = 0x000000a9; ElapsedTime = 0x01bd4dd7d75bea10; PriorityCurrent = 0x0000000b; PriorityBase = 0x00000009; StartAddress = 0x77f1407b; ThreadState = 0x00000005; ThreadWaitReason = 0x00000006; IDProcess = 0x000000c4; IDThread = 0x00000180; }; instance of Win32Perf_RawThread { Name = "lsass/8"; PercentProcessorTime = 0x00000000000c3980; PercentUserTime = 0x0000000000018730; PercentPrivilegedTime = 0x00000000000ab250; ContextSwitchesPerSec = 0x00000105; ElapsedTime = 0x01bd4dd7d75d7140; PriorityCurrent = 0x00000009; PriorityBase = 0x00000009; StartAddress = 0x77f1407b; ThreadState = 0x00000005; ThreadWaitReason = 0x00000006; IDProcess = 0x000000c4; IDThread = 0x00000188; }; instance of Win32Perf_RawThread { Name = "lsass/9"; PercentProcessorTime = 0x0000000000049590; PercentUserTime = 0x0000000000030e60; PercentPrivilegedTime = 0x0000000000018730; ContextSwitchesPerSec = 0x0000009a; ElapsedTime = 0x01bd4e032325f7bc; PriorityCurrent = 0x00000009; PriorityBase = 0x00000009; StartAddress = 0x77f1407b; ThreadState = 0x00000005; ThreadWaitReason = 0x0000000f; IDProcess = 0x000000c4; IDThread = 0x00000284; }; instance of Win32Perf_RawThread { Name = "spoolsv/0"; PercentProcessorTime = 0x0000000000018730; PercentUserTime = 0x0000000000000000; PercentPrivilegedTime = 0x0000000000018730; ContextSwitchesPerSec = 0x00000014; ElapsedTime = 0x01bd4dd7d563a630; PriorityCurrent = 0x00000008; PriorityBase = 0x00000008; StartAddress = 0x77f140de; ThreadState = 0x00000005; ThreadWaitReason = 0x00000000; IDProcess = 0x00000144; IDThread = 0x00000140; }; instance of Win32Perf_RawThread { Name = "spoolsv/1"; PercentProcessorTime = 0x0000000000000000; PercentUserTime = 0x0000000000000000; PercentPrivilegedTime = 0x0000000000000000; ContextSwitchesPerSec = 0x00000002; ElapsedTime = 0x01bd4dd7d5948c30; PriorityCurrent = 0x00000008; PriorityBase = 0x00000008; StartAddress = 0x77f1407b; ThreadState = 0x00000005; ThreadWaitReason = 0x0000000f; IDProcess = 0x00000144; IDThread = 0x0000014c; }; instance of Win32Perf_RawThread { Name = "spoolsv/2"; PercentProcessorTime = 0x0000000000030e60; PercentUserTime = 0x0000000000000000; PercentPrivilegedTime = 0x0000000000030e60; ContextSwitchesPerSec = 0x00000039; ElapsedTime = 0x01bd4dd7d59aa8f0; PriorityCurrent = 0x0000000a; PriorityBase = 0x00000008; StartAddress = 0x77f1407b; ThreadState = 0x00000005; ThreadWaitReason = 0x00000010; IDProcess = 0x00000144; IDThread = 0x00000154; }; instance of Win32Perf_RawThread { Name = "spoolsv/3"; PercentProcessorTime = 0x000000000019fa30; PercentUserTime = 0x00000000000dc0b0; PercentPrivilegedTime = 0x00000000000c3980; ContextSwitchesPerSec = 0x00000148; ElapsedTime = 0x01bd4dd7d59aa8f0; PriorityCurrent = 0x0000000a; PriorityBase = 0x00000008; StartAddress = 0x77f1407b; ThreadState = 0x00000005; ThreadWaitReason = 0x00000006; IDProcess = 0x00000144; IDThread = 0x00000158; }; instance of Win32Perf_RawThread { Name = "spoolsv/4"; PercentProcessorTime = 0x0000000000000000; PercentUserTime = 0x0000000000000000; PercentPrivilegedTime = 0x0000000000000000; ContextSwitchesPerSec = 0x00000028; ElapsedTime = 0x01bd4dd7d59aa8f0; PriorityCurrent = 0x00000008; PriorityBase = 0x00000008; StartAddress = 0x77f1407b; ThreadState = 0x00000005; ThreadWaitReason = 0x00000007; IDProcess = 0x00000144; IDThread = 0x0000015c; }; instance of Win32Perf_RawThread { Name = "spoolsv/5"; PercentProcessorTime = 0x0000000000000000; PercentUserTime = 0x0000000000000000; PercentPrivilegedTime = 0x0000000000000000; ContextSwitchesPerSec = 0x00000001; ElapsedTime = 0x01bd4dd7d5a24ce0; PriorityCurrent = 0x00000008; PriorityBase = 0x00000008; StartAddress = 0x77f1407b; ThreadState = 0x00000005; ThreadWaitReason = 0x00000006; IDProcess = 0x00000144; IDThread = 0x00000160; }; instance of Win32Perf_RawThread { Name = "spoolsv/6"; PercentProcessorTime = 0x0000000000000000; PercentUserTime = 0x0000000000000000; PercentPrivilegedTime = 0x0000000000000000; ContextSwitchesPerSec = 0x00000157; ElapsedTime = 0x01bd4dd7d7e87f50; PriorityCurrent = 0x00000008; PriorityBase = 0x00000008; StartAddress = 0x77f1407b; ThreadState = 0x00000005; ThreadWaitReason = 0x00000006; IDProcess = 0x00000144; IDThread = 0x000001a8; }; instance of Win32Perf_RawThread { Name = "spoolsv/7"; PercentProcessorTime = 0x0000000000000000; PercentUserTime = 0x0000000000000000; PercentPrivilegedTime = 0x0000000000000000; ContextSwitchesPerSec = 0x00000001; ElapsedTime = 0x01bd4dd7d8599330; PriorityCurrent = 0x00000008; PriorityBase = 0x00000008; StartAddress = 0x77f1407b; ThreadState = 0x00000005; ThreadWaitReason = 0x00000006; IDProcess = 0x00000144; IDThread = 0x000001cc; }; instance of Win32Perf_RawThread { Name = "spoolsv/8"; PercentProcessorTime = 0x0000000000000000; PercentUserTime = 0x0000000000000000; PercentPrivilegedTime = 0x0000000000000000; ContextSwitchesPerSec = 0x00000013; ElapsedTime = 0x01bd4e06983884ac; PriorityCurrent = 0x00000009; PriorityBase = 0x00000008; StartAddress = 0x77f1407b; ThreadState = 0x00000005; ThreadWaitReason = 0x00000004; IDProcess = 0x00000144; IDThread = 0x0000029c; }; instance of Win32Perf_RawThread { Name = "RpcSs/0"; PercentProcessorTime = 0x0000000000049590; PercentUserTime = 0x0000000000000000; PercentPrivilegedTime = 0x0000000000049590; ContextSwitchesPerSec = 0x00000023; ElapsedTime = 0x01bd4dd7d7b48af0; PriorityCurrent = 0x00000008; PriorityBase = 0x00000008; StartAddress = 0x77f140de; ThreadState = 0x00000005; ThreadWaitReason = 0x00000000; IDProcess = 0x000001a0; IDThread = 0x0000019c; }; instance of Win32Perf_RawThread { Name = "RpcSs/1"; PercentProcessorTime = 0x00000000000dc0b0; PercentUserTime = 0x0000000000049590; PercentPrivilegedTime = 0x0000000000092b20; ContextSwitchesPerSec = 0x000001b0; ElapsedTime = 0x01bd4dd7d854fda0; PriorityCurrent = 0x00000008; PriorityBase = 0x00000008; StartAddress = 0x77f1407b; ThreadState = 0x00000005; ThreadWaitReason = 0x00000004; IDProcess = 0x000001a0; IDThread = 0x000001b8; }; instance of Win32Perf_RawThread { Name = "RpcSs/2"; PercentProcessorTime = 0x0000000000061cc0; PercentUserTime = 0x0000000000000000; PercentPrivilegedTime = 0x0000000000061cc0; ContextSwitchesPerSec = 0x00000088; ElapsedTime = 0x01bd4dd7d85684d0; PriorityCurrent = 0x00000009; PriorityBase = 0x00000008; StartAddress = 0x77f1407b; ThreadState = 0x00000005; ThreadWaitReason = 0x00000010; IDProcess = 0x000001a0; IDThread = 0x000001c8; }; instance of Win32Perf_RawThread { Name = "RpcSs/3"; PercentProcessorTime = 0x0000000000000000; PercentUserTime = 0x0000000000000000; PercentPrivilegedTime = 0x0000000000000000; ContextSwitchesPerSec = 0x00000008; ElapsedTime = 0x01bd4dd7d89095f0; PriorityCurrent = 0x00000009; PriorityBase = 0x00000008; StartAddress = 0x77f1407b; ThreadState = 0x00000005; ThreadWaitReason = 0x0000000f; IDProcess = 0x000001a0; IDThread = 0x000001e0; }; instance of Win32Perf_RawThread { Name = "RpcSs/4"; PercentProcessorTime = 0x0000000000030e60; PercentUserTime = 0x0000000000000000; PercentPrivilegedTime = 0x0000000000030e60; ContextSwitchesPerSec = 0x00000084; ElapsedTime = 0x01bd4dd7d8e936d0; PriorityCurrent = 0x00000008; PriorityBase = 0x00000008; StartAddress = 0x77f1407b; ThreadState = 0x00000005; ThreadWaitReason = 0x00000010; IDProcess = 0x000001a0; IDThread = 0x00000214; }; instance of Win32Perf_RawThread { Name = "RpcSs/5"; PercentProcessorTime = 0x0000000000000000; PercentUserTime = 0x0000000000000000; PercentPrivilegedTime = 0x0000000000000000; ContextSwitchesPerSec = 0x00000001; ElapsedTime = 0x01bd4dd7d9b5f9f0; PriorityCurrent = 0x00000008; PriorityBase = 0x00000008; StartAddress = 0x77f1407b; ThreadState = 0x00000005; ThreadWaitReason = 0x00000006; IDProcess = 0x000001a0; IDThread = 0x000000cc; }; instance of Win32Perf_RawThread { Name = "RpcSs/6"; PercentProcessorTime = 0x0000000000018730; PercentUserTime = 0x0000000000018730; PercentPrivilegedTime = 0x0000000000000000; ContextSwitchesPerSec = 0x00000299; ElapsedTime = 0x01bd4dd821dd5c70; PriorityCurrent = 0x00000008; PriorityBase = 0x00000008; StartAddress = 0x77f1407b; ThreadState = 0x00000005; ThreadWaitReason = 0x00000004; IDProcess = 0x000001a0; IDThread = 0x0000012c; }; instance of Win32Perf_RawThread { Name = "ntmssvc/0"; PercentProcessorTime = 0x0000000000092b20; PercentUserTime = 0x0000000000030e60; PercentPrivilegedTime = 0x0000000000061cc0; ContextSwitchesPerSec = 0x00000075; ElapsedTime = 0x01bd4dd7da68c2e0; PriorityCurrent = 0x00000009; PriorityBase = 0x00000008; StartAddress = 0x77f140de; ThreadState = 0x00000005; ThreadWaitReason = 0x00000000; IDProcess = 0x00000224; IDThread = 0x0000021c; }; instance of Win32Perf_RawThread { Name = "ntmssvc/1"; PercentProcessorTime = 0x0000000000092b20; PercentUserTime = 0x0000000000061cc0; PercentPrivilegedTime = 0x0000000000030e60; ContextSwitchesPerSec = 0x0000004e; ElapsedTime = 0x01bd4dd7daaa77f0; PriorityCurrent = 0x00000008; PriorityBase = 0x00000008; StartAddress = 0x77f1407b; ThreadState = 0x00000005; ThreadWaitReason = 0x00000006; IDProcess = 0x00000224; IDThread = 0x00000228; }; instance of Win32Perf_RawThread { Name = "ntmssvc/2"; PercentProcessorTime = 0x0000000000000000; PercentUserTime = 0x0000000000000000; PercentPrivilegedTime = 0x0000000000000000; ContextSwitchesPerSec = 0x0000004e; ElapsedTime = 0x01bd4dd7daaf0d80; PriorityCurrent = 0x00000009; PriorityBase = 0x00000008; StartAddress = 0x77f1407b; ThreadState = 0x00000005; ThreadWaitReason = 0x00000010; IDProcess = 0x00000224; IDThread = 0x00000234; }; instance of Win32Perf_RawThread { Name = "ntmssvc/3"; PercentProcessorTime = 0x0000000000000000; PercentUserTime = 0x0000000000000000; PercentPrivilegedTime = 0x0000000000000000; ContextSwitchesPerSec = 0x00000001; ElapsedTime = 0x01bd4dd7db389460; PriorityCurrent = 0x00000008; PriorityBase = 0x00000008; StartAddress = 0x77f1407b; ThreadState = 0x00000005; ThreadWaitReason = 0x00000006; IDProcess = 0x00000224; IDThread = 0x0000022c; }; instance of Win32Perf_RawThread { Name = "ntmssvc/4"; PercentProcessorTime = 0x0000000000018730; PercentUserTime = 0x0000000000000000; PercentPrivilegedTime = 0x0000000000018730; ContextSwitchesPerSec = 0x00000015; ElapsedTime = 0x01bd4dd7db389460; PriorityCurrent = 0x0000000a; PriorityBase = 0x00000008; StartAddress = 0x77f1407b; ThreadState = 0x00000005; ThreadWaitReason = 0x0000000d; IDProcess = 0x00000224; IDThread = 0x0000025c; }; instance of Win32Perf_RawThread { Name = "ntmssvc/5"; PercentProcessorTime = 0x0000000000000000; PercentUserTime = 0x0000000000000000; PercentPrivilegedTime = 0x0000000000000000; ContextSwitchesPerSec = 0x000035ee; ElapsedTime = 0x01bd4dd7db64e4d0; PriorityCurrent = 0x00000008; PriorityBase = 0x00000007; StartAddress = 0x77f1407b; ThreadState = 0x00000005; ThreadWaitReason = 0x00000006; IDProcess = 0x00000224; IDThread = 0x00000220; }; instance of Win32Perf_RawThread { Name = "ntmssvc/6"; PercentProcessorTime = 0x00000000004dee90; PercentUserTime = 0x0000000000232550; PercentPrivilegedTime = 0x00000000002ac940; ContextSwitchesPerSec = 0x00000068; ElapsedTime = 0x01bd4dd7db64e4d0; PriorityCurrent = 0x00000008; PriorityBase = 0x00000008; StartAddress = 0x77f1407b; ThreadState = 0x00000005; ThreadWaitReason = 0x00000006; IDProcess = 0x00000224; IDThread = 0x00000218; }; instance of Win32Perf_RawThread { Name = "ntmssvc/7"; PercentProcessorTime = 0x0000000000018730; PercentUserTime = 0x0000000000000000; PercentPrivilegedTime = 0x0000000000018730; ContextSwitchesPerSec = 0x0000003f; ElapsedTime = 0x01bd4dd8b1e5d6d0; PriorityCurrent = 0x00000009; PriorityBase = 0x00000008; StartAddress = 0x77f1407b; ThreadState = 0x00000005; ThreadWaitReason = 0x00000010; IDProcess = 0x00000224; IDThread = 0x0000026c; }; instance of Win32Perf_RawThread { Name = "Explorer/0"; PercentProcessorTime = 0x0000000000a68f70; PercentUserTime = 0x00000000002c5070; PercentPrivilegedTime = 0x00000000007a3f00; ContextSwitchesPerSec = 0x000009c8; ElapsedTime = 0x01bd4dd7ec5592f0; PriorityCurrent = 0x0000000a; PriorityBase = 0x00000008; StartAddress = 0x77f140de; ThreadState = 0x00000005; ThreadWaitReason = 0x0000000d; IDProcess = 0x000001e8; IDThread = 0x00000054; }; instance of Win32Perf_RawThread { Name = "Explorer/1"; PercentProcessorTime = 0x0000000000000000; PercentUserTime = 0x0000000000000000; PercentPrivilegedTime = 0x0000000000000000; ContextSwitchesPerSec = 0x000000b1; ElapsedTime = 0x01bd4dd7edd9b490; PriorityCurrent = 0x00000009; PriorityBase = 0x00000008; StartAddress = 0x77f1407b; ThreadState = 0x00000005; ThreadWaitReason = 0x00000010; IDProcess = 0x000001e8; IDThread = 0x000002a8; }; instance of Win32Perf_RawThread { Name = "Explorer/2"; PercentProcessorTime = 0x000000000b8cd3d0; PercentUserTime = 0x0000000002fa8290; PercentPrivilegedTime = 0x0000000008925140; ContextSwitchesPerSec = 0x00024aea; ElapsedTime = 0x01bd4dd7ede77540; PriorityCurrent = 0x0000000a; PriorityBase = 0x00000009; StartAddress = 0x77f1407b; ThreadState = 0x00000005; ThreadWaitReason = 0x0000000d; IDProcess = 0x000001e8; IDThread = 0x000002b8; }; instance of Win32Perf_RawThread { Name = "Explorer/3"; PercentProcessorTime = 0x0000000000061cc0; PercentUserTime = 0x0000000000030e60; PercentPrivilegedTime = 0x0000000000030e60; ContextSwitchesPerSec = 0x00000074; ElapsedTime = 0x01bd4dd7ee5701f0; PriorityCurrent = 0x00000008; PriorityBase = 0x00000008; StartAddress = 0x77f1407b; ThreadState = 0x00000005; ThreadWaitReason = 0x00000006; IDProcess = 0x000001e8; IDThread = 0x000002bc; }; instance of Win32Perf_RawThread { Name = "Explorer/4"; PercentProcessorTime = 0x0000000000000000; PercentUserTime = 0x0000000000000000; PercentPrivilegedTime = 0x0000000000000000; ContextSwitchesPerSec = 0x00000003; ElapsedTime = 0x01bd4dd7f0c1e0e0; PriorityCurrent = 0x00000008; PriorityBase = 0x00000008; StartAddress = 0x77f1407b; ThreadState = 0x00000005; ThreadWaitReason = 0x00000006; IDProcess = 0x000001e8; IDThread = 0x00000288; }; instance of Win32Perf_RawThread { Name = "Explorer/5"; PercentProcessorTime = 0x0000000000000000; PercentUserTime = 0x0000000000000000; PercentPrivilegedTime = 0x0000000000000000; ContextSwitchesPerSec = 0x00000006; ElapsedTime = 0x01bd4dd7f2a955b0; PriorityCurrent = 0x00000002; PriorityBase = 0x00000001; StartAddress = 0x77f1407b; ThreadState = 0x00000005; ThreadWaitReason = 0x00000006; IDProcess = 0x000001e8; IDThread = 0x000002cc; }; instance of Win32Perf_RawThread { Name = "Explorer/6"; PercentProcessorTime = 0x0000000001796f50; PercentUserTime = 0x00000000008fa3a0; PercentPrivilegedTime = 0x0000000000e9cbb0; ContextSwitchesPerSec = 0x000009d4; ElapsedTime = 0x01bd4dd8495b1cf0; PriorityCurrent = 0x00000008; PriorityBase = 0x00000008; StartAddress = 0x77f1407b; ThreadState = 0x00000005; ThreadWaitReason = 0x0000000d; IDProcess = 0x000001e8; IDThread = 0x00000294; }; instance of Win32Perf_RawThread { Name = "Explorer/7"; PercentProcessorTime = 0x0000000000000000; PercentUserTime = 0x0000000000000000; PercentPrivilegedTime = 0x0000000000000000; ContextSwitchesPerSec = 0x0000006c; ElapsedTime = 0x01bd4dd8c508d9f0; PriorityCurrent = 0x00000008; PriorityBase = 0x00000008; StartAddress = 0x77f1407b; ThreadState = 0x00000005; ThreadWaitReason = 0x00000010; IDProcess = 0x000001e8; IDThread = 0x000002d8; }; instance of Win32Perf_RawThread { Name = "SysTray/0"; PercentProcessorTime = 0x00000000001564a0; PercentUserTime = 0x0000000000061cc0; PercentPrivilegedTime = 0x00000000000f47e0; ContextSwitchesPerSec = 0x000004f6; ElapsedTime = 0x01bd4dd7f01534b0; PriorityCurrent = 0x0000000a; PriorityBase = 0x00000008; StartAddress = 0x77f140de; ThreadState = 0x00000005; ThreadWaitReason = 0x0000000d; IDProcess = 0x00000238; IDThread = 0x000002b4; }; instance of Win32Perf_RawThread { Name = "netman/0"; PercentProcessorTime = 0x0000000000092b20; PercentUserTime = 0x0000000000030e60; PercentPrivilegedTime = 0x0000000000061cc0; ContextSwitchesPerSec = 0x0000002f; ElapsedTime = 0x01bd4dd7f16b7eb0; PriorityCurrent = 0x00000008; PriorityBase = 0x00000008; StartAddress = 0x77f140de; ThreadState = 0x00000005; ThreadWaitReason = 0x00000000; IDProcess = 0x000001c0; IDThread = 0x000001e4; }; instance of Win32Perf_RawThread { Name = "netman/1"; PercentProcessorTime = 0x0000000000000000; PercentUserTime = 0x0000000000000000; PercentPrivilegedTime = 0x0000000000000000; ContextSwitchesPerSec = 0x00000002; ElapsedTime = 0x01bd4dd7f1826a80; PriorityCurrent = 0x00000009; PriorityBase = 0x00000008; StartAddress = 0x77f1407b; ThreadState = 0x00000005; ThreadWaitReason = 0x00000006; IDProcess = 0x000001c0; IDThread = 0x000002a0; }; instance of Win32Perf_RawThread { Name = "netman/2"; PercentProcessorTime = 0x0000000000000000; PercentUserTime = 0x0000000000000000; PercentPrivilegedTime = 0x0000000000000000; ContextSwitchesPerSec = 0x00000021; ElapsedTime = 0x01bd4dd7f1995650; PriorityCurrent = 0x00000009; PriorityBase = 0x00000008; StartAddress = 0x77f1407b; ThreadState = 0x00000005; ThreadWaitReason = 0x0000000d; IDProcess = 0x000001c0; IDThread = 0x0000027c; }; instance of Win32Perf_RawThread { Name = "netman/3"; PercentProcessorTime = 0x00000000000ab250; PercentUserTime = 0x0000000000030e60; PercentPrivilegedTime = 0x000000000007a3f0; ContextSwitchesPerSec = 0x00000354; ElapsedTime = 0x01bd4dd7f19add80; PriorityCurrent = 0x00000009; PriorityBase = 0x00000008; StartAddress = 0x77f1407b; ThreadState = 0x00000005; ThreadWaitReason = 0x00000010; IDProcess = 0x000001c0; IDThread = 0x000002d4; }; instance of Win32Perf_RawThread { Name = "netman/4"; PercentProcessorTime = 0x0000000000018730; PercentUserTime = 0x0000000000000000; PercentPrivilegedTime = 0x0000000000018730; ContextSwitchesPerSec = 0x00000049; ElapsedTime = 0x01bd4dd7f19c64b0; PriorityCurrent = 0x00000008; PriorityBase = 0x00000008; StartAddress = 0x77f1407b; ThreadState = 0x00000005; ThreadWaitReason = 0x00000010; IDProcess = 0x000001c0; IDThread = 0x0000010c; }; instance of Win32Perf_RawThread { Name = "CMD/0"; PercentProcessorTime = 0x0000000000092b20; PercentUserTime = 0x0000000000030e60; PercentPrivilegedTime = 0x0000000000061cc0; ContextSwitchesPerSec = 0x000000bc; ElapsedTime = 0x01bd4dd7f61b08e0; PriorityCurrent = 0x00000008; PriorityBase = 0x00000008; StartAddress = 0x77f140de; ThreadState = 0x00000005; ThreadWaitReason = 0x00000006; IDProcess = 0x00000274; IDThread = 0x00000278; }; instance of Win32Perf_RawThread { Name = "CMD/0"; PercentProcessorTime = 0x0000000000559280; PercentUserTime = 0x000000000013dd70; PercentPrivilegedTime = 0x000000000041b510; ContextSwitchesPerSec = 0x00001116; ElapsedTime = 0x01bd4dd7f6475950; PriorityCurrent = 0x00000008; PriorityBase = 0x00000008; StartAddress = 0x77f140de; ThreadState = 0x00000005; ThreadWaitReason = 0x00000011; IDProcess = 0x0000028c; IDThread = 0x000000c8; }; instance of Win32Perf_RawThread { Name = "findfast/0"; PercentProcessorTime = 0x0000000000b75e80; PercentUserTime = 0x00000000004f75c0; PercentPrivilegedTime = 0x000000000067e8c0; ContextSwitchesPerSec = 0x0000830f; ElapsedTime = 0x01bd4dda18a645f0; PriorityCurrent = 0x0000000a; PriorityBase = 0x00000008; StartAddress = 0x77f140de; ThreadState = 0x00000005; ThreadWaitReason = 0x0000000d; IDProcess = 0x000000e0; IDThread = 0x00000050; }; instance of Win32Perf_RawThread { Name = "findfast/1"; PercentProcessorTime = 0x0000000141799930; PercentUserTime = 0x00000000cdb18140; PercentPrivilegedTime = 0x0000000073c817f0; ContextSwitchesPerSec = 0x000aee5c; ElapsedTime = 0x01bd4dda1918e100; PriorityCurrent = 0x00000006; PriorityBase = 0x00000006; StartAddress = 0x77f1407b; ThreadState = 0x00000005; ThreadWaitReason = 0x00000006; IDProcess = 0x000000e0; IDThread = 0x000001b0; }; instance of Win32Perf_RawThread { Name = "CMD/0"; PercentProcessorTime = 0x0000000000092b20; PercentUserTime = 0x0000000000018730; PercentPrivilegedTime = 0x000000000007a3f0; ContextSwitchesPerSec = 0x000000c5; ElapsedTime = 0x01bd4e05c13d53ac; PriorityCurrent = 0x00000008; PriorityBase = 0x00000008; StartAddress = 0x77f140de; ThreadState = 0x00000005; ThreadWaitReason = 0x00000006; IDProcess = 0x00000200; IDThread = 0x00000260; }; instance of Win32Perf_RawThread { Name = "CMD/0"; PercentProcessorTime = 0x000000000047d1d0; PercentUserTime = 0x0000000000125640; PercentPrivilegedTime = 0x0000000000357b90; ContextSwitchesPerSec = 0x00000b6e; ElapsedTime = 0x01bd4e05c1a0a6dc; PriorityCurrent = 0x0000000a; PriorityBase = 0x00000008; StartAddress = 0x77f140de; ThreadState = 0x00000005; ThreadWaitReason = 0x00000006; IDProcess = 0x000002d0; IDThread = 0x00000204; }; instance of Win32Perf_RawThread { Name = "notepad/0"; PercentProcessorTime = 0x00000000003ea6b0; PercentUserTime = 0x0000000000187300; PercentPrivilegedTime = 0x00000000002633b0; ContextSwitchesPerSec = 0x00000693; ElapsedTime = 0x01bd4e061d46bbbc; PriorityCurrent = 0x00000008; PriorityBase = 0x00000008; StartAddress = 0x77f140de; ThreadState = 0x00000005; ThreadWaitReason = 0x0000000d; IDProcess = 0x0000020c; IDThread = 0x000001b4; }; instance of Win32Perf_RawThread { Name = "ctrlist/0"; PercentProcessorTime = 0x0000000000326d30; PercentUserTime = 0x00000000000c3980; PercentPrivilegedTime = 0x00000000002633b0; ContextSwitchesPerSec = 0x00000182; ElapsedTime = 0x01bd4e069733379c; PriorityCurrent = 0x0000000f; PriorityBase = 0x00000008; StartAddress = 0x77f140de; ThreadState = 0x00000002; ThreadWaitReason = 0x00000000; IDProcess = 0x000001f8; IDThread = 0x000002c4; }; instance of Win32Perf_RawThread { Name = "ctrlist/1"; PercentProcessorTime = 0x0000000000000000; PercentUserTime = 0x0000000000000000; PercentPrivilegedTime = 0x0000000000000000; ContextSwitchesPerSec = 0x00000004; ElapsedTime = 0x01bd4e0697b6a1bc; PriorityCurrent = 0x0000000b; PriorityBase = 0x00000008; StartAddress = 0x77f1407b; ThreadState = 0x00000005; ThreadWaitReason = 0x00000006; IDProcess = 0x000001f8; IDThread = 0x00000108; }; instance of Win32Perf_RawThread { Name = "ctrlist/2"; PercentProcessorTime = 0x0000000000000000; PercentUserTime = 0x0000000000000000; PercentPrivilegedTime = 0x0000000000000000; ContextSwitchesPerSec = 0x00000001; ElapsedTime = 0x01bd4e0697d83fdc; PriorityCurrent = 0x00000008; PriorityBase = 0x00000008; StartAddress = 0x77f1407b; ThreadState = 0x00000005; ThreadWaitReason = 0x00000010; IDProcess = 0x000001f8; IDThread = 0x00000290; }; instance of Win32Perf_RawThread { Name = "_Total/_Total"; PercentProcessorTime = 0x0000002afdc403a0; PercentUserTime = 0x00000000d3ce4140; PercentPrivilegedTime = 0x0000002a29f5c260; ContextSwitchesPerSec = 0x0026f3db; ElapsedTime = 0x0000000000000000; PriorityCurrent = 0x00000000; PriorityBase = 0x00000000; StartAddress = 0x00000000; ThreadState = 0x00000000; ThreadWaitReason = 0x00000000; IDProcess = 0x00000000; IDThread = 0x00000000; }; [ vendor("Microsoft"), guid("{5C7A4F7E-9E4D-11d1-BB3C-00A0C913CAD4}"), locale("ms:\\0x0409"), displayname("Job Object"), perfindex(1500), helpindex(1501), perfdetail(200) ] class Win32Perf_JobObject : Win32_PerfFormattedData { [key] string Name; uint64 Timestamp; [ perfdefault, displayname("Current % Processor Time"), countertype(542180608), perfindex(1502), helpindex(1503), defaultscale(0), perfdetail(200) ] real64 CurrentPercentProcessorTime; [ displayname("Current % User Mode Time"), countertype(542180608), perfindex(1504), helpindex(1505), defaultscale(0), perfdetail(200) ] real64 CurrentPercentUserModeTime; [ displayname("Current % Kernel Mode Time"), countertype(542180608), perfindex(1506), helpindex(1507), defaultscale(0), perfdetail(200) ] real64 CurrentPercentKernelModeTime; [ displayname("This Period mSec - Processor"), countertype(65792), perfindex(1508), helpindex(1509), defaultscale(-4), perfdetail(200) ] uint64 ThisPeriodMSecProcessor; [ displayname("This Period mSec - User Mode"), countertype(65792), perfindex(1510), helpindex(1511), defaultscale(-4), perfdetail(200) ] uint64 ThisPeriodMSecUserMode; [ displayname("This Period mSec - Kernel Mode"), countertype(65792), perfindex(1512), helpindex(1513), defaultscale(-4), perfdetail(200) ] uint64 ThisPeriodMSecKernelMode; [ displayname("Total mSec - Processor"), countertype(65792), perfindex(1522), helpindex(1523), defaultscale(-4), perfdetail(200) ] uint64 TotalMSecProcessor; [ displayname("Total mSec - User Mode"), countertype(65792), perfindex(1524), helpindex(1525), defaultscale(-4), perfdetail(200) ] uint64 TotalMSecUserMode; [ displayname("Total mSec - Kernel Mode"), countertype(65792), perfindex(1526), helpindex(1527), defaultscale(-4), perfdetail(200) ] uint64 TotalMSecKernelMode; [ displayname("Pages/Sec"), countertype(272696320), perfindex(1514), helpindex(1515), defaultscale(0), perfdetail(200) ] real64 PagesPerSec; [ displayname("Process Count - Total"), countertype(65536), perfindex(1516), helpindex(1517), defaultscale(0), perfdetail(200) ] uint32 ProcessCountTotal; [ displayname("Process Count - Active"), countertype(65536), perfindex(1518), helpindex(1519), defaultscale(0), perfdetail(200) ] uint32 ProcessCountActive; [ displayname("Process Count - Terminated"), countertype(65536), perfindex(1520), helpindex(1521), defaultscale(0), perfdetail(200) ] uint32 ProcessCountTerminated; }; [ vendor("Microsoft"), guid("{5C7A4F7E-9E4D-11d1-BB3C-00A0C913CAD4}"), locale("ms:\\0x0409"), displayname("Job Object"), perfindex(1500), helpindex(1501), perfdetail(200) ] class Win32Perf_RawJobObject : Win32_PerfRawData { [key] string Name; uint64 Timestamp; [ perfdefault, displayname("Current % Processor Time"), countertype(542180608), perfindex(1502), helpindex(1503), defaultscale(0), perfdetail(200) ] uint64 CurrentPercentProcessorTime; [ displayname("Current % User Mode Time"), countertype(542180608), perfindex(1504), helpindex(1505), defaultscale(0), perfdetail(200) ] uint64 CurrentPercentUserModeTime; [ displayname("Current % Kernel Mode Time"), countertype(542180608), perfindex(1506), helpindex(1507), defaultscale(0), perfdetail(200) ] uint64 CurrentPercentKernelModeTime; [ displayname("This Period mSec - Processor"), countertype(65792), perfindex(1508), helpindex(1509), defaultscale(-4), perfdetail(200) ] uint64 ThisPeriodMSecProcessor; [ displayname("This Period mSec - User Mode"), countertype(65792), perfindex(1510), helpindex(1511), defaultscale(-4), perfdetail(200) ] uint64 ThisPeriodMSecUserMode; [ displayname("This Period mSec - Kernel Mode"), countertype(65792), perfindex(1512), helpindex(1513), defaultscale(-4), perfdetail(200) ] uint64 ThisPeriodMSecKernelMode; [ displayname("Total mSec - Processor"), countertype(65792), perfindex(1522), helpindex(1523), defaultscale(-4), perfdetail(200) ] uint64 TotalMSecProcessor; [ displayname("Total mSec - User Mode"), countertype(65792), perfindex(1524), helpindex(1525), defaultscale(-4), perfdetail(200) ] uint64 TotalMSecUserMode; [ displayname("Total mSec - Kernel Mode"), countertype(65792), perfindex(1526), helpindex(1527), defaultscale(-4), perfdetail(200) ] uint64 TotalMSecKernelMode; [ displayname("Pages/Sec"), countertype(272696320), perfindex(1514), helpindex(1515), defaultscale(0), perfdetail(200) ] uint32 PagesPerSec; [ displayname("Process Count - Total"), countertype(65536), perfindex(1516), helpindex(1517), defaultscale(0), perfdetail(200) ] uint32 ProcessCountTotal; [ displayname("Process Count - Active"), countertype(65536), perfindex(1518), helpindex(1519), defaultscale(0), perfdetail(200) ] uint32 ProcessCountActive; [ displayname("Process Count - Terminated"), countertype(65536), perfindex(1520), helpindex(1521), defaultscale(0), perfdetail(200) ] uint32 ProcessCountTerminated; }; instance of Win32Perf_RawJobObject { Name = "_Total"; CurrentPercentProcessorTime = 0x0000000000000000; CurrentPercentUserModeTime = 0x0000000000000000; CurrentPercentKernelModeTime = 0x0000000000000000; ThisPeriodMSecProcessor = 0x0000000000000000; ThisPeriodMSecUserMode = 0x0000000000000000; ThisPeriodMSecKernelMode = 0x0000000000000000; TotalMSecProcessor = 0x0000000000000000; TotalMSecUserMode = 0x0000000000000000; TotalMSecKernelMode = 0x0000000000000000; PagesPerSec = 0x00000000; ProcessCountTotal = 0x00000000; ProcessCountActive = 0x00000000; ProcessCountTerminated = 0x00000000; }; [ vendor("Microsoft"), guid("{5C7A4F7F-9E4D-11d1-BB3C-00A0C913CAD4}"), locale("ms:\\0x0409"), displayname("Job Object Details"), perfindex(1548), helpindex(1549), perfdetail(200) ] class Win32Perf_JobObjectDetails : Win32_PerfFormattedData { [key] string Name; uint64 Timestamp; [ perfdefault, displayname("% Processor Time"), countertype(542180608), perfindex(6), helpindex(189), defaultscale(0), perfdetail(200) ] real64 PercentProcessorTime; [ displayname("% User Time"), countertype(542180608), perfindex(142), helpindex(157), defaultscale(0), perfdetail(200) ] real64 PercentUserTime; [ displayname("% Privileged Time"), countertype(542180608), perfindex(144), helpindex(159), defaultscale(0), perfdetail(200) ] real64 PercentPrivilegedTime; [ displayname("Virtual Bytes Peak"), countertype(65536), perfindex(172), helpindex(173), defaultscale(-6), perfdetail(300) ] uint32 VirtualBytesPeak; [ displayname("Virtual Bytes"), countertype(65536), perfindex(174), helpindex(175), defaultscale(-6), perfdetail(300) ] uint32 VirtualBytes; [ displayname("Page Faults/sec"), countertype(272696320), perfindex(28), helpindex(177), defaultscale(-1), perfdetail(200) ] real64 PageFaultsPerSec; [ displayname("Working Set Peak"), countertype(65536), perfindex(178), helpindex(179), defaultscale(-5), perfdetail(200) ] uint32 WorkingSetPeak; [ displayname("Working Set"), countertype(65536), perfindex(180), helpindex(181), defaultscale(-5), perfdetail(200) ] uint32 WorkingSet; [ displayname("Page File Bytes Peak"), countertype(65536), perfindex(182), helpindex(183), defaultscale(-6), perfdetail(200) ] uint32 PageFileBytesPeak; [ displayname("Page File Bytes"), countertype(65536), perfindex(184), helpindex(185), defaultscale(-6), perfdetail(200) ] uint32 PageFileBytes; [ displayname("Private Bytes"), countertype(65536), perfindex(186), helpindex(187), defaultscale(-5), perfdetail(200) ] uint32 PrivateBytes; [ displayname("Thread Count"), countertype(65536), perfindex(680), helpindex(681), defaultscale(0), perfdetail(200) ] uint32 ThreadCount; [ displayname("Priority Base"), countertype(65536), perfindex(682), helpindex(683), defaultscale(0), perfdetail(200) ] uint32 PriorityBase; [ displayname("Elapsed Time"), countertype(807666944), perfindex(684), helpindex(685), defaultscale(-4), perfdetail(200) ] real64 ElapsedTime; [ displayname("ID Process"), countertype(65536), perfindex(784), helpindex(785), defaultscale(-1), perfdetail(200) ] uint32 IDProcess; [ displayname("Creating Process ID"), countertype(65536), perfindex(1410), helpindex(1411), defaultscale(-1), perfdetail(200) ] uint32 CreatingProcessID; [ displayname("Pool Paged Bytes"), countertype(65536), perfindex(56), helpindex(57), defaultscale(-5), perfdetail(200) ] uint32 PoolPagedBytes; [ displayname("Pool Nonpaged Bytes"), countertype(65536), perfindex(58), helpindex(59), defaultscale(-5), perfdetail(200) ] uint32 PoolNonpagedBytes; [ displayname("Handle Count"), countertype(65536), perfindex(952), helpindex(953), defaultscale(0), perfdetail(200) ] uint32 HandleCount; }; [ vendor("Microsoft"), guid("{5C7A4F7F-9E4D-11d1-BB3C-00A0C913CAD4}"), locale("ms:\\0x0409"), displayname("Job Object Details"), perfindex(1548), helpindex(1549), perfdetail(200) ] class Win32Perf_RawJobObjectDetails : Win32_PerfRawData { [key] string Name; uint64 Timestamp; [ perfdefault, displayname("% Processor Time"), countertype(542180608), perfindex(6), helpindex(189), defaultscale(0), perfdetail(200) ] uint64 PercentProcessorTime; [ displayname("% User Time"), countertype(542180608), perfindex(142), helpindex(157), defaultscale(0), perfdetail(200) ] uint64 PercentUserTime; [ displayname("% Privileged Time"), countertype(542180608), perfindex(144), helpindex(159), defaultscale(0), perfdetail(200) ] uint64 PercentPrivilegedTime; [ displayname("Virtual Bytes Peak"), countertype(65536), perfindex(172), helpindex(173), defaultscale(-6), perfdetail(300) ] uint32 VirtualBytesPeak; [ displayname("Virtual Bytes"), countertype(65536), perfindex(174), helpindex(175), defaultscale(-6), perfdetail(300) ] uint32 VirtualBytes; [ displayname("Page Faults/sec"), countertype(272696320), perfindex(28), helpindex(177), defaultscale(-1), perfdetail(200) ] uint32 PageFaultsPerSec; [ displayname("Working Set Peak"), countertype(65536), perfindex(178), helpindex(179), defaultscale(-5), perfdetail(200) ] uint32 WorkingSetPeak; [ displayname("Working Set"), countertype(65536), perfindex(180), helpindex(181), defaultscale(-5), perfdetail(200) ] uint32 WorkingSet; [ displayname("Page File Bytes Peak"), countertype(65536), perfindex(182), helpindex(183), defaultscale(-6), perfdetail(200) ] uint32 PageFileBytesPeak; [ displayname("Page File Bytes"), countertype(65536), perfindex(184), helpindex(185), defaultscale(-6), perfdetail(200) ] uint32 PageFileBytes; [ displayname("Private Bytes"), countertype(65536), perfindex(186), helpindex(187), defaultscale(-5), perfdetail(200) ] uint32 PrivateBytes; [ displayname("Thread Count"), countertype(65536), perfindex(680), helpindex(681), defaultscale(0), perfdetail(200) ] uint32 ThreadCount; [ displayname("Priority Base"), countertype(65536), perfindex(682), helpindex(683), defaultscale(0), perfdetail(200) ] uint32 PriorityBase; [ displayname("Elapsed Time"), countertype(807666944), perfindex(684), helpindex(685), defaultscale(-4), perfdetail(200) ] uint64 ElapsedTime; [ displayname("ID Process"), countertype(65536), perfindex(784), helpindex(785), defaultscale(-1), perfdetail(200) ] uint32 IDProcess; [ displayname("Creating Process ID"), countertype(65536), perfindex(1410), helpindex(1411), defaultscale(-1), perfdetail(200) ] uint32 CreatingProcessID; [ displayname("Pool Paged Bytes"), countertype(65536), perfindex(56), helpindex(57), defaultscale(-5), perfdetail(200) ] uint32 PoolPagedBytes; [ displayname("Pool Nonpaged Bytes"), countertype(65536), perfindex(58), helpindex(59), defaultscale(-5), perfdetail(200) ] uint32 PoolNonpagedBytes; [ displayname("Handle Count"), countertype(65536), perfindex(952), helpindex(953), defaultscale(0), perfdetail(200) ] uint32 HandleCount; }; instance of Win32Perf_RawJobObjectDetails { Name = "_Total/_Total"; PercentProcessorTime = 0x0000000000000000; PercentUserTime = 0x0000000000000000; PercentPrivilegedTime = 0x0000000000000000; VirtualBytesPeak = 0x00000000; VirtualBytes = 0x00000000; PageFaultsPerSec = 0x00000000; WorkingSetPeak = 0x00000000; WorkingSet = 0x00000000; PageFileBytesPeak = 0x00000000; PageFileBytes = 0x00000000; PrivateBytes = 0x00000000; ThreadCount = 0x00000000; PriorityBase = 0x00000000; ElapsedTime = 0x0000000000000000; IDProcess = 0x00000000; CreatingProcessID = 0x00000000; PoolPagedBytes = 0x00000000; PoolNonpagedBytes = 0x00000000; HandleCount = 0x00000000; }; [ vendor("Microsoft"), guid("{5C7A4F7D-9E4D-11d1-BB3C-00A0C913CAD4}"), locale("ms:\\0x0409"), displayname("Print Queue"), perfindex(1450), helpindex(1451), perfdetail(100) ] class Win32Perf_PrintQueue : Win32_PerfFormattedData { [key] string Name; uint64 Timestamp; [ displayname("Total Jobs Printed"), countertype(65536), perfindex(1452), helpindex(1453), defaultscale(-1), perfdetail(100) ] uint32 TotalJobsPrinted; [ displayname("Bytes Printed/sec"), countertype(272696576), perfindex(1454), helpindex(1455), defaultscale(-5), perfdetail(200) ] real64 BytesPrintedPerSec; [ displayname("Total Pages Printed"), countertype(65536), perfindex(1456), helpindex(1457), defaultscale(-1), perfdetail(100) ] uint32 TotalPagesPrinted; [ perfdefault, displayname("Jobs"), countertype(65536), perfindex(1458), helpindex(1459), defaultscale(0), perfdetail(100) ] uint32 Jobs; [ displayname("References"), countertype(65536), perfindex(1460), helpindex(1461), defaultscale(0), perfdetail(300) ] uint32 References; [ displayname("Max References"), countertype(65536), perfindex(1462), helpindex(1463), defaultscale(0), perfdetail(300) ] uint32 MaxReferences; [ displayname("Jobs Spooling"), countertype(65536), perfindex(1464), helpindex(1465), defaultscale(0), perfdetail(200) ] uint32 JobsSpooling; [ displayname("Max Jobs Spooling"), countertype(65536), perfindex(1466), helpindex(1467), defaultscale(0), perfdetail(200) ] uint32 MaxJobsSpooling; [ displayname("Out of Paper Errors"), countertype(65536), perfindex(1468), helpindex(1469), defaultscale(-1), perfdetail(200) ] uint32 OutOfPaperErrors; [ displayname("Not Ready Errors"), countertype(65536), perfindex(1470), helpindex(1471), defaultscale(-1), perfdetail(200) ] uint32 NotReadyErrors; [ displayname("Job Errors"), countertype(65536), perfindex(1472), helpindex(1473), defaultscale(-1), perfdetail(200) ] uint32 JobErrors; [ displayname("Enumerate Network Printer Calls"), countertype(65536), perfindex(1474), helpindex(1475), defaultscale(-1), perfdetail(400) ] uint32 EnumerateNetworkPrinterCalls; [ displayname("Add Network Printer Calls"), countertype(65536), perfindex(1476), helpindex(1477), defaultscale(-1), perfdetail(400) ] uint32 AddNetworkPrinterCalls; }; [ vendor("Microsoft"), guid("{5C7A4F7D-9E4D-11d1-BB3C-00A0C913CAD4}"), locale("ms:\\0x0409"), displayname("Print Queue"), perfindex(1450), helpindex(1451), perfdetail(100) ] class Win32Perf_RawPrintQueue : Win32_PerfRawData { [key] string Name; uint64 Timestamp; [ displayname("Total Jobs Printed"), countertype(65536), perfindex(1452), helpindex(1453), defaultscale(-1), perfdetail(100) ] uint32 TotalJobsPrinted; [ displayname("Bytes Printed/sec"), countertype(272696576), perfindex(1454), helpindex(1455), defaultscale(-5), perfdetail(200) ] uint64 BytesPrintedPerSec; [ displayname("Total Pages Printed"), countertype(65536), perfindex(1456), helpindex(1457), defaultscale(-1), perfdetail(100) ] uint32 TotalPagesPrinted; [ perfdefault, displayname("Jobs"), countertype(65536), perfindex(1458), helpindex(1459), defaultscale(0), perfdetail(100) ] uint32 Jobs; [ displayname("References"), countertype(65536), perfindex(1460), helpindex(1461), defaultscale(0), perfdetail(300) ] uint32 References; [ displayname("Max References"), countertype(65536), perfindex(1462), helpindex(1463), defaultscale(0), perfdetail(300) ] uint32 MaxReferences; [ displayname("Jobs Spooling"), countertype(65536), perfindex(1464), helpindex(1465), defaultscale(0), perfdetail(200) ] uint32 JobsSpooling; [ displayname("Max Jobs Spooling"), countertype(65536), perfindex(1466), helpindex(1467), defaultscale(0), perfdetail(200) ] uint32 MaxJobsSpooling; [ displayname("Out of Paper Errors"), countertype(65536), perfindex(1468), helpindex(1469), defaultscale(-1), perfdetail(200) ] uint32 OutOfPaperErrors; [ displayname("Not Ready Errors"), countertype(65536), perfindex(1470), helpindex(1471), defaultscale(-1), perfdetail(200) ] uint32 NotReadyErrors; [ displayname("Job Errors"), countertype(65536), perfindex(1472), helpindex(1473), defaultscale(-1), perfdetail(200) ] uint32 JobErrors; [ displayname("Enumerate Network Printer Calls"), countertype(65536), perfindex(1474), helpindex(1475), defaultscale(-1), perfdetail(400) ] uint32 EnumerateNetworkPrinterCalls; [ displayname("Add Network Printer Calls"), countertype(65536), perfindex(1476), helpindex(1477), defaultscale(-1), perfdetail(400) ] uint32 AddNetworkPrinterCalls; }; instance of Win32Perf_RawPrintQueue { Name = "_Total"; TotalJobsPrinted = 0x0000000000000000; BytesPrintedPerSec = 0x0000000000000000; TotalPagesPrinted = 0x0000000000000000; Jobs = 0x00000000; References = 0x00000000; MaxReferences = 0x00000000; JobsSpooling = 0x00000000; MaxJobsSpooling = 0x00000000; OutOfPaperErrors = 0x00000000; NotReadyErrors = 0x00000000; JobErrors = 0x00000000; EnumerateNetworkPrinterCalls = 0x00000000; AddNetworkPrinterCalls = 0x00000000; }; [ vendor("Microsoft"), guid(""), locale("ms:\\0x0409"), displayname("Sysmon Control"), perfindex(1932), helpindex(1933), perfdetail(100) ] class Win32Perf_SysmonControl : Win32_PerfFormattedData { [key] string Name; uint64 Timestamp; [ displayname("Real Time Collect Items"), countertype(65536), perfindex(1934), helpindex(1935), defaultscale(0), perfdetail(100) ] uint32 RealTimeCollectItems; [ perfdefault, displayname("Real Time Collect Time"), countertype(1073874176), perfindex(1936), helpindex(1937), defaultscale(0), perfdetail(100) ] real64 RealTimeCollectTime; [ displayname("Real Time Collect Count"), countertype(65536), perfindex(1938), helpindex(1939), defaultscale(0), perfdetail(100) ] uint32 RealTimeCollectCount; [ displayname("Sysmon Data Update Time"), countertype(1073874176), perfindex(1940), helpindex(1941), defaultscale(0), perfdetail(100) ] real64 SysmonDataUpdateTime; [ displayname("Sysmon Display Update Time"), countertype(1073874176), perfindex(1942), helpindex(1943), defaultscale(0), perfdetail(100) ] real64 SysmonDisplayUpdateTime; }; [ vendor("Microsoft"), guid(""), locale("ms:\\0x0409"), displayname("Sysmon Control"), perfindex(1932), helpindex(1933), perfdetail(100) ] class Win32Perf_RawSysmonControl : Win32_PerfRawData { [key] string Name; uint64 Timestamp; [ displayname("Real Time Collect Items"), countertype(65536), perfindex(1934), helpindex(1935), defaultscale(0), perfdetail(100) ] uint32 RealTimeCollectItems; [ perfdefault, displayname("Real Time Collect Time"), countertype(1073874176), perfindex(1936), helpindex(1937), defaultscale(0), perfdetail(100) ] uint64 RealTimeCollectTime; [ displayname("Real Time Collect Time"), countertype(1073939458), perfindex(1936), helpindex(1937), defaultscale(0), perfdetail(100) ] uint32 RealTimeCollectTime_Base; [ displayname("Real Time Collect Count"), countertype(65536), perfindex(1938), helpindex(1939), defaultscale(0), perfdetail(100) ] uint32 RealTimeCollectCount; [ displayname("Sysmon Data Update Time"), countertype(1073874176), perfindex(1940), helpindex(1941), defaultscale(0), perfdetail(100) ] uint64 SysmonDataUpdateTime; [ displayname("Sysmon Data Update Time"), countertype(1073939458), perfindex(1940), helpindex(1941), defaultscale(0), perfdetail(100) ] uint32 SysmonDataUpdateTime_Base; [ displayname("Sysmon Display Update Time"), countertype(1073874176), perfindex(1942), helpindex(1943), defaultscale(0), perfdetail(100) ] uint64 SysmonDisplayUpdateTime; [ displayname("Sysmon Display Update Time"), countertype(1073939458), perfindex(1942), helpindex(1943), defaultscale(0), perfdetail(100) ] uint32 SysmonDisplayUpdateTime_Base; }; [ vendor("Microsoft"), guid("{5C7A4F7C-9E4D-11d1-BB3C-00A0C913CAD4}"), locale("ms:\\0x0409"), displayname("Telephony"), perfindex(1150), helpindex(1151), perfdetail(100) ] class Win32Perf_Telephony : Win32_PerfFormattedData { [key] string Name; uint64 Timestamp; [ perfdefault, displayname("Lines"), countertype(65536), perfindex(1152), helpindex(1153), defaultscale(0), perfdetail(100) ] uint32 Lines; [ displayname("Telephone Devices"), countertype(65536), perfindex(1154), helpindex(1155), defaultscale(0), perfdetail(100) ] uint32 TelephoneDevices; [ displayname("Active Lines"), countertype(65536), perfindex(1156), helpindex(1157), defaultscale(0), perfdetail(100) ] uint32 ActiveLines; [ displayname("Active Telephones"), countertype(65536), perfindex(1158), helpindex(1159), defaultscale(0), perfdetail(100) ] uint32 ActiveTelephones; [ displayname("Outgoing Calls/sec"), countertype(272696320), perfindex(1160), helpindex(1161), defaultscale(0), perfdetail(100) ] real64 OutgoingCallsPerSec; [ displayname("Incoming Calls/sec"), countertype(272696320), perfindex(1162), helpindex(1163), defaultscale(0), perfdetail(100) ] real64 IncomingCallsPerSec; [ displayname("Client Apps"), countertype(65536), perfindex(1164), helpindex(1165), defaultscale(0), perfdetail(100) ] uint32 ClientApps; [ displayname("Current Outgoing Calls"), countertype(65536), perfindex(1166), helpindex(1167), defaultscale(0), perfdetail(100) ] uint32 CurrentOutgoingCalls; [ displayname("Current Incoming Calls"), countertype(65536), perfindex(1168), helpindex(1169), defaultscale(0), perfdetail(100) ] uint32 CurrentIncomingCalls; }; [ vendor("Microsoft"), guid("{5C7A4F7C-9E4D-11d1-BB3C-00A0C913CAD4}"), locale("ms:\\0x0409"), displayname("Telephony"), perfindex(1150), helpindex(1151), perfdetail(100) ] class Win32Perf_RawTelephony : Win32_PerfRawData { [key] string Name; uint64 Timestamp; [ perfdefault, displayname("Lines"), countertype(65536), perfindex(1152), helpindex(1153), defaultscale(0), perfdetail(100) ] uint32 Lines; [ displayname("Telephone Devices"), countertype(65536), perfindex(1154), helpindex(1155), defaultscale(0), perfdetail(100) ] uint32 TelephoneDevices; [ displayname("Active Lines"), countertype(65536), perfindex(1156), helpindex(1157), defaultscale(0), perfdetail(100) ] uint32 ActiveLines; [ displayname("Active Telephones"), countertype(65536), perfindex(1158), helpindex(1159), defaultscale(0), perfdetail(100) ] uint32 ActiveTelephones; [ displayname("Outgoing Calls/sec"), countertype(272696320), perfindex(1160), helpindex(1161), defaultscale(0), perfdetail(100) ] uint32 OutgoingCallsPerSec; [ displayname("Incoming Calls/sec"), countertype(272696320), perfindex(1162), helpindex(1163), defaultscale(0), perfdetail(100) ] uint32 IncomingCallsPerSec; [ displayname("Client Apps"), countertype(65536), perfindex(1164), helpindex(1165), defaultscale(0), perfdetail(100) ] uint32 ClientApps; [ displayname("Current Outgoing Calls"), countertype(65536), perfindex(1166), helpindex(1167), defaultscale(0), perfdetail(100) ] uint32 CurrentOutgoingCalls; [ displayname("Current Incoming Calls"), countertype(65536), perfindex(1168), helpindex(1169), defaultscale(0), perfdetail(100) ] uint32 CurrentIncomingCalls; }; [ vendor("Microsoft"), guid("{5C7A4F73-9E4D-11d1-BB3C-00A0C913CAD4}"), locale("ms:\\0x0409"), displayname("NBT Connection"), perfindex(502), helpindex(503), perfdetail(200) ] class Win32Perf_NBTConnection : Win32_PerfFormattedData { [key] string Name; uint64 Timestamp; [ displayname("Bytes Received/sec"), countertype(272696576), perfindex(264), helpindex(505), defaultscale(-4), perfdetail(200) ] real64 BytesReceivedPerSec; [ displayname("Bytes Sent/sec"), countertype(272696576), perfindex(506), helpindex(507), defaultscale(-4), perfdetail(200) ] real64 BytesSentPerSec; [ perfdefault, displayname("Bytes Total/sec"), countertype(272696576), perfindex(388), helpindex(509), defaultscale(-4), perfdetail(200) ] real64 BytesTotalPerSec; }; [ vendor("Microsoft"), guid("{5C7A4F73-9E4D-11d1-BB3C-00A0C913CAD4}"), locale("ms:\\0x0409"), displayname("NBT Connection"), perfindex(502), helpindex(503), perfdetail(200) ] class Win32Perf_RawNBTConnection : Win32_PerfRawData { [key] string Name; uint64 Timestamp; [ displayname("Bytes Received/sec"), countertype(272696576), perfindex(264), helpindex(505), defaultscale(-4), perfdetail(200) ] uint64 BytesReceivedPerSec; [ displayname("Bytes Sent/sec"), countertype(272696576), perfindex(506), helpindex(507), defaultscale(-4), perfdetail(200) ] uint64 BytesSentPerSec; [ perfdefault, displayname("Bytes Total/sec"), countertype(272696576), perfindex(388), helpindex(509), defaultscale(-4), perfdetail(200) ] uint64 BytesTotalPerSec; }; instance of Win32Perf_RawNBTConnection { Name = "Total"; BytesReceivedPerSec = 0x0000000000000000; BytesSentPerSec = 0x0000000000000000; BytesTotalPerSec = 0x0000000000000000; }; [ vendor("Microsoft"), guid("{5C7A4F72-9E4D-11d1-BB3C-00A0C913CAD4}"), locale("ms:\\0x0409"), displayname("Network Interface"), perfindex(510), helpindex(511), perfdetail(200) ] class Win32Perf_NetworkInterface : Win32_PerfFormattedData { [key] string Name; uint64 Timestamp; [ perfdefault, displayname("Bytes Total/sec"), countertype(272696320), perfindex(388), helpindex(513), defaultscale(-4), perfdetail(200) ] real64 BytesTotalPerSec; [ displayname("Packets/sec"), countertype(272696320), perfindex(400), helpindex(515), defaultscale(-1), perfdetail(200) ] real64 PacketsPerSec; [ displayname("Packets Received/sec"), countertype(272696320), perfindex(266), helpindex(517), defaultscale(-1), perfdetail(200) ] real64 PacketsReceivedPerSec; [ displayname("Packets Sent/sec"), countertype(272696320), perfindex(452), helpindex(519), defaultscale(-1), perfdetail(200) ] real64 PacketsSentPerSec; [ displayname("Current Bandwidth"), countertype(65536), perfindex(520), helpindex(521), defaultscale(-6), perfdetail(200) ] uint32 CurrentBandwidth; [ displayname("Bytes Received/sec"), countertype(272696320), perfindex(264), helpindex(523), defaultscale(-4), perfdetail(200) ] real64 BytesReceivedPerSec; [ displayname("Packets Received Unicast/sec"), countertype(272696320), perfindex(524), helpindex(525), defaultscale(-1), perfdetail(300) ] real64 PacketsReceivedUnicastPerSec; [ displayname("Packets Received Non-Unicast/sec"), countertype(272696320), perfindex(526), helpindex(527), defaultscale(-1), perfdetail(300) ] real64 PacketsReceivedNonUnicastPerSec; [ displayname("Packets Received Discarded"), countertype(65536), perfindex(528), helpindex(529), defaultscale(0), perfdetail(200) ] uint32 PacketsReceivedDiscarded; [ displayname("Packets Received Errors"), countertype(65536), perfindex(530), helpindex(531), defaultscale(0), perfdetail(200) ] uint32 PacketsReceivedErrors; [ displayname("Packets Received Unknown"), countertype(65536), perfindex(532), helpindex(533), defaultscale(0), perfdetail(200) ] uint32 PacketsReceivedUnknown; [ displayname("Bytes Sent/sec"), countertype(272696320), perfindex(506), helpindex(535), defaultscale(-4), perfdetail(200) ] real64 BytesSentPerSec; [ displayname("Packets Sent Unicast/sec"), countertype(272696320), perfindex(536), helpindex(537), defaultscale(-1), perfdetail(300) ] real64 PacketsSentUnicastPerSec; [ displayname("Packets Sent Non-Unicast/sec"), countertype(272696320), perfindex(538), helpindex(539), defaultscale(-1), perfdetail(300) ] real64 PacketsSentNonUnicastPerSec; [ displayname("Packets Outbound Discarded"), countertype(65536), perfindex(540), helpindex(541), defaultscale(0), perfdetail(200) ] uint32 PacketsOutboundDiscarded; [ displayname("Packets Outbound Errors"), countertype(65536), perfindex(542), helpindex(543), defaultscale(0), perfdetail(200) ] uint32 PacketsOutboundErrors; [ displayname("Output Queue Length"), countertype(65536), perfindex(544), helpindex(545), defaultscale(0), perfdetail(200) ] uint32 OutputQueueLength; }; [ vendor("Microsoft"), guid("{5C7A4F72-9E4D-11d1-BB3C-00A0C913CAD4}"), locale("ms:\\0x0409"), displayname("Network Interface"), perfindex(510), helpindex(511), perfdetail(200) ] class Win32Perf_RawNetworkInterface : Win32_PerfRawData { [key] string Name; uint64 Timestamp; [ perfdefault, displayname("Bytes Total/sec"), countertype(272696320), perfindex(388), helpindex(513), defaultscale(-4), perfdetail(200) ] uint32 BytesTotalPerSec; [ displayname("Packets/sec"), countertype(272696320), perfindex(400), helpindex(515), defaultscale(-1), perfdetail(200) ] uint32 PacketsPerSec; [ displayname("Packets Received/sec"), countertype(272696320), perfindex(266), helpindex(517), defaultscale(-1), perfdetail(200) ] uint32 PacketsReceivedPerSec; [ displayname("Packets Sent/sec"), countertype(272696320), perfindex(452), helpindex(519), defaultscale(-1), perfdetail(200) ] uint32 PacketsSentPerSec; [ displayname("Current Bandwidth"), countertype(65536), perfindex(520), helpindex(521), defaultscale(-6), perfdetail(200) ] uint32 CurrentBandwidth; [ displayname("Bytes Received/sec"), countertype(272696320), perfindex(264), helpindex(523), defaultscale(-4), perfdetail(200) ] uint32 BytesReceivedPerSec; [ displayname("Packets Received Unicast/sec"), countertype(272696320), perfindex(524), helpindex(525), defaultscale(-1), perfdetail(300) ] uint32 PacketsReceivedUnicastPerSec; [ displayname("Packets Received Non-Unicast/sec"), countertype(272696320), perfindex(526), helpindex(527), defaultscale(-1), perfdetail(300) ] uint32 PacketsReceivedNonUnicastPerSec; [ displayname("Packets Received Discarded"), countertype(65536), perfindex(528), helpindex(529), defaultscale(0), perfdetail(200) ] uint32 PacketsReceivedDiscarded; [ displayname("Packets Received Errors"), countertype(65536), perfindex(530), helpindex(531), defaultscale(0), perfdetail(200) ] uint32 PacketsReceivedErrors; [ displayname("Packets Received Unknown"), countertype(65536), perfindex(532), helpindex(533), defaultscale(0), perfdetail(200) ] uint32 PacketsReceivedUnknown; [ displayname("Bytes Sent/sec"), countertype(272696320), perfindex(506), helpindex(535), defaultscale(-4), perfdetail(200) ] uint32 BytesSentPerSec; [ displayname("Packets Sent Unicast/sec"), countertype(272696320), perfindex(536), helpindex(537), defaultscale(-1), perfdetail(300) ] uint32 PacketsSentUnicastPerSec; [ displayname("Packets Sent Non-Unicast/sec"), countertype(272696320), perfindex(538), helpindex(539), defaultscale(-1), perfdetail(300) ] uint32 PacketsSentNonUnicastPerSec; [ displayname("Packets Outbound Discarded"), countertype(65536), perfindex(540), helpindex(541), defaultscale(0), perfdetail(200) ] uint32 PacketsOutboundDiscarded; [ displayname("Packets Outbound Errors"), countertype(65536), perfindex(542), helpindex(543), defaultscale(0), perfdetail(200) ] uint32 PacketsOutboundErrors; [ displayname("Output Queue Length"), countertype(65536), perfindex(544), helpindex(545), defaultscale(0), perfdetail(200) ] uint32 OutputQueueLength; }; instance of Win32Perf_RawNetworkInterface { Name = "1"; BytesTotalPerSec = 0x00000000; PacketsPerSec = 0x00000000; PacketsReceivedPerSec = 0x00000000; PacketsSentPerSec = 0x00000000; CurrentBandwidth = 0x00989680; BytesReceivedPerSec = 0x00000000; PacketsReceivedUnicastPerSec = 0x00000000; PacketsReceivedNonUnicastPerSec = 0x00000000; PacketsReceivedDiscarded = 0x00000000; PacketsReceivedErrors = 0x00000000; PacketsReceivedUnknown = 0x00000000; BytesSentPerSec = 0x00000000; PacketsSentUnicastPerSec = 0x00000000; PacketsSentNonUnicastPerSec = 0x00000000; PacketsOutboundDiscarded = 0x00000000; PacketsOutboundErrors = 0x00000000; OutputQueueLength = 0x00000000; }; instance of Win32Perf_RawNetworkInterface { Name = "2"; BytesTotalPerSec = 0x268374c2; PacketsPerSec = 0x00361245; PacketsReceivedPerSec = 0x00353484; PacketsSentPerSec = 0x0000ddc1; CurrentBandwidth = 0x00989680; BytesReceivedPerSec = 0x26312e67; PacketsReceivedUnicastPerSec = 0x00017c52; PacketsReceivedNonUnicastPerSec = 0x00031b6e; PacketsReceivedDiscarded = 0x00000000; PacketsReceivedErrors = 0x00000000; PacketsReceivedUnknown = 0x00309cc4; BytesSentPerSec = 0x0052465b; PacketsSentUnicastPerSec = 0x0000dd50; PacketsSentNonUnicastPerSec = 0x00000071; PacketsOutboundDiscarded = 0x00000000; PacketsOutboundErrors = 0x00000000; OutputQueueLength = 0x00000000; }; instance of Win32Perf_RawNetworkInterface { Name = "3"; BytesTotalPerSec = 0x00000000; PacketsPerSec = 0x00000000; PacketsReceivedPerSec = 0x00000000; PacketsSentPerSec = 0x00000000; CurrentBandwidth = 0x00006d60; BytesReceivedPerSec = 0x00000000; PacketsReceivedUnicastPerSec = 0x00000000; PacketsReceivedNonUnicastPerSec = 0x00000000; PacketsReceivedDiscarded = 0x00000000; PacketsReceivedErrors = 0x00000000; PacketsReceivedUnknown = 0x00000000; BytesSentPerSec = 0x00000000; PacketsSentUnicastPerSec = 0x00000000; PacketsSentNonUnicastPerSec = 0x00000000; PacketsOutboundDiscarded = 0x00000000; PacketsOutboundErrors = 0x00000000; OutputQueueLength = 0x00000000; }; instance of Win32Perf_RawNetworkInterface { Name = "4"; BytesTotalPerSec = 0x00000000; PacketsPerSec = 0x00000000; PacketsReceivedPerSec = 0x00000000; PacketsSentPerSec = 0x00000000; CurrentBandwidth = 0x00006d60; BytesReceivedPerSec = 0x00000000; PacketsReceivedUnicastPerSec = 0x00000000; PacketsReceivedNonUnicastPerSec = 0x00000000; PacketsReceivedDiscarded = 0x00000000; PacketsReceivedErrors = 0x00000000; PacketsReceivedUnknown = 0x00000000; BytesSentPerSec = 0x00000000; PacketsSentUnicastPerSec = 0x00000000; PacketsSentNonUnicastPerSec = 0x00000000; PacketsOutboundDiscarded = 0x00000000; PacketsOutboundErrors = 0x00000000; OutputQueueLength = 0x00000000; }; instance of Win32Perf_RawNetworkInterface { Name = "5"; BytesTotalPerSec = 0x00000000; PacketsPerSec = 0x00000000; PacketsReceivedPerSec = 0x00000000; PacketsSentPerSec = 0x00000000; CurrentBandwidth = 0x00006d60; BytesReceivedPerSec = 0x00000000; PacketsReceivedUnicastPerSec = 0x00000000; PacketsReceivedNonUnicastPerSec = 0x00000000; PacketsReceivedDiscarded = 0x00000000; PacketsReceivedErrors = 0x00000000; PacketsReceivedUnknown = 0x00000000; BytesSentPerSec = 0x00000000; PacketsSentUnicastPerSec = 0x00000000; PacketsSentNonUnicastPerSec = 0x00000000; PacketsOutboundDiscarded = 0x00000000; PacketsOutboundErrors = 0x00000000; OutputQueueLength = 0x00000000; }; [ singleton, vendor("Microsoft"), guid("{5C7A4F70-9E4D-11d1-BB3C-00A0C913CAD4}"), locale("ms:\\0x0409"), displayname("IP"), perfindex(546), helpindex(547), perfdetail(200) ] class Win32Perf_IP : Win32_PerfFormattedData { uint64 Timestamp; [ perfdefault, displayname("Datagrams/sec"), countertype(272696320), perfindex(438), helpindex(549), defaultscale(-1), perfdetail(200) ] real64 DatagramsPerSec; [ displayname("Datagrams Received/sec"), countertype(272696320), perfindex(446), helpindex(551), defaultscale(-1), perfdetail(200) ] real64 DatagramsReceivedPerSec; [ displayname("Datagrams Received Header Errors"), countertype(65536), perfindex(552), helpindex(553), defaultscale(0), perfdetail(200) ] uint32 DatagramsReceivedHeaderErrors; [ displayname("Datagrams Received Address Errors"), countertype(65536), perfindex(554), helpindex(555), defaultscale(0), perfdetail(200) ] uint32 DatagramsReceivedAddressErrors; [ displayname("Datagrams Forwarded/sec"), countertype(272696320), perfindex(556), helpindex(557), defaultscale(-1), perfdetail(200) ] real64 DatagramsForwardedPerSec; [ displayname("Datagrams Received Unknown Protocol"), countertype(65536), perfindex(558), helpindex(559), defaultscale(0), perfdetail(200) ] uint32 DatagramsReceivedUnknownProtocol; [ displayname("Datagrams Received Discarded"), countertype(65536), perfindex(560), helpindex(561), defaultscale(0), perfdetail(200) ] uint32 DatagramsReceivedDiscarded; [ displayname("Datagrams Received Delivered/sec"), countertype(272696320), perfindex(562), helpindex(563), defaultscale(-1), perfdetail(200) ] real64 DatagramsReceivedDeliveredPerSec; [ displayname("Datagrams Sent/sec"), countertype(272696320), perfindex(442), helpindex(565), defaultscale(-1), perfdetail(200) ] real64 DatagramsSentPerSec; [ displayname("Datagrams Outbound Discarded"), countertype(65536), perfindex(566), helpindex(567), defaultscale(0), perfdetail(200) ] uint32 DatagramsOutboundDiscarded; [ displayname("Datagrams Outbound No Route"), countertype(65536), perfindex(568), helpindex(569), defaultscale(0), perfdetail(200) ] uint32 DatagramsOutboundNoRoute; [ displayname("Fragments Received/sec"), countertype(272696320), perfindex(570), helpindex(571), defaultscale(-1), perfdetail(200) ] real64 FragmentsReceivedPerSec; [ displayname("Fragments Re-assembled/sec"), countertype(272696320), perfindex(572), helpindex(573), defaultscale(-1), perfdetail(200) ] real64 FragmentsReAssembledPerSec; [ displayname("Fragment Re-assembly Failures"), countertype(65536), perfindex(574), helpindex(575), defaultscale(0), perfdetail(200) ] uint32 FragmentReAssemblyFailures; [ displayname("Fragmented Datagrams/sec"), countertype(272696320), perfindex(576), helpindex(577), defaultscale(-1), perfdetail(200) ] real64 FragmentedDatagramsPerSec; [ displayname("Fragmentation Failures"), countertype(65536), perfindex(578), helpindex(579), defaultscale(0), perfdetail(200) ] uint32 FragmentationFailures; [ displayname("Fragments Created/sec"), countertype(272696320), perfindex(580), helpindex(581), defaultscale(-1), perfdetail(200) ] real64 FragmentsCreatedPerSec; }; [ singleton, vendor("Microsoft"), guid("{5C7A4F70-9E4D-11d1-BB3C-00A0C913CAD4}"), locale("ms:\\0x0409"), displayname("IP"), perfindex(546), helpindex(547), perfdetail(200) ] class Win32Perf_RawIP : Win32_PerfRawData { uint64 Timestamp; [ perfdefault, displayname("Datagrams/sec"), countertype(272696320), perfindex(438), helpindex(549), defaultscale(-1), perfdetail(200) ] uint32 DatagramsPerSec; [ displayname("Datagrams Received/sec"), countertype(272696320), perfindex(446), helpindex(551), defaultscale(-1), perfdetail(200) ] uint32 DatagramsReceivedPerSec; [ displayname("Datagrams Received Header Errors"), countertype(65536), perfindex(552), helpindex(553), defaultscale(0), perfdetail(200) ] uint32 DatagramsReceivedHeaderErrors; [ displayname("Datagrams Received Address Errors"), countertype(65536), perfindex(554), helpindex(555), defaultscale(0), perfdetail(200) ] uint32 DatagramsReceivedAddressErrors; [ displayname("Datagrams Forwarded/sec"), countertype(272696320), perfindex(556), helpindex(557), defaultscale(-1), perfdetail(200) ] uint32 DatagramsForwardedPerSec; [ displayname("Datagrams Received Unknown Protocol"), countertype(65536), perfindex(558), helpindex(559), defaultscale(0), perfdetail(200) ] uint32 DatagramsReceivedUnknownProtocol; [ displayname("Datagrams Received Discarded"), countertype(65536), perfindex(560), helpindex(561), defaultscale(0), perfdetail(200) ] uint32 DatagramsReceivedDiscarded; [ displayname("Datagrams Received Delivered/sec"), countertype(272696320), perfindex(562), helpindex(563), defaultscale(-1), perfdetail(200) ] uint32 DatagramsReceivedDeliveredPerSec; [ displayname("Datagrams Sent/sec"), countertype(272696320), perfindex(442), helpindex(565), defaultscale(-1), perfdetail(200) ] uint32 DatagramsSentPerSec; [ displayname("Datagrams Outbound Discarded"), countertype(65536), perfindex(566), helpindex(567), defaultscale(0), perfdetail(200) ] uint32 DatagramsOutboundDiscarded; [ displayname("Datagrams Outbound No Route"), countertype(65536), perfindex(568), helpindex(569), defaultscale(0), perfdetail(200) ] uint32 DatagramsOutboundNoRoute; [ displayname("Fragments Received/sec"), countertype(272696320), perfindex(570), helpindex(571), defaultscale(-1), perfdetail(200) ] uint32 FragmentsReceivedPerSec; [ displayname("Fragments Re-assembled/sec"), countertype(272696320), perfindex(572), helpindex(573), defaultscale(-1), perfdetail(200) ] uint32 FragmentsReAssembledPerSec; [ displayname("Fragment Re-assembly Failures"), countertype(65536), perfindex(574), helpindex(575), defaultscale(0), perfdetail(200) ] uint32 FragmentReAssemblyFailures; [ displayname("Fragmented Datagrams/sec"), countertype(272696320), perfindex(576), helpindex(577), defaultscale(-1), perfdetail(200) ] uint32 FragmentedDatagramsPerSec; [ displayname("Fragmentation Failures"), countertype(65536), perfindex(578), helpindex(579), defaultscale(0), perfdetail(200) ] uint32 FragmentationFailures; [ displayname("Fragments Created/sec"), countertype(272696320), perfindex(580), helpindex(581), defaultscale(-1), perfdetail(200) ] uint32 FragmentsCreatedPerSec; }; instance of Win32Perf_RawIP { Timestamp = 0x01bd4e0698d1536c; DatagramsPerSec = 0x0004970b; DatagramsReceivedPerSec = 0x0003b97a; DatagramsReceivedHeaderErrors = 0x00000000; DatagramsReceivedAddressErrors = 0x00001f8d; DatagramsForwardedPerSec = 0x00000000; DatagramsReceivedUnknownProtocol = 0x00000000; DatagramsReceivedDiscarded = 0x00000000; DatagramsReceivedDeliveredPerSec = 0x0003a5b9; DatagramsSentPerSec = 0x0000dd91; DatagramsOutboundDiscarded = 0x00000000; DatagramsOutboundNoRoute = 0x00000000; FragmentsReceivedPerSec = 0x00000000; FragmentsReAssembledPerSec = 0x00000000; FragmentReAssemblyFailures = 0x00000000; FragmentedDatagramsPerSec = 0x00000000; FragmentationFailures = 0x00000000; FragmentsCreatedPerSec = 0x00000000; }; [ singleton, vendor("Microsoft"), guid("{5C7A4F71-9E4D-11d1-BB3C-00A0C913CAD4}"), locale("ms:\\0x0409"), displayname("ICMP"), perfindex(582), helpindex(583), perfdetail(200) ] class Win32Perf_ICMP : Win32_PerfFormattedData { uint64 Timestamp; [ perfdefault, displayname("Messages/sec"), countertype(272696320), perfindex(584), helpindex(585), defaultscale(-1), perfdetail(200) ] real64 MessagesPerSec; [ displayname("Messages Received/sec"), countertype(272696320), perfindex(586), helpindex(587), defaultscale(-1), perfdetail(200) ] real64 MessagesReceivedPerSec; [ displayname("Messages Received Errors"), countertype(65536), perfindex(588), helpindex(589), defaultscale(0), perfdetail(200) ] uint32 MessagesReceivedErrors; [ displayname("Received Dest. Unreachable"), countertype(65536), perfindex(590), helpindex(591), defaultscale(0), perfdetail(200) ] uint32 ReceivedDestUnreachable; [ displayname("Received Time Exceeded"), countertype(65536), perfindex(592), helpindex(593), defaultscale(0), perfdetail(200) ] uint32 ReceivedTimeExceeded; [ displayname("Received Parameter Problem"), countertype(65536), perfindex(594), helpindex(595), defaultscale(0), perfdetail(300) ] uint32 ReceivedParameterProblem; [ displayname("Received Source Quench"), countertype(65536), perfindex(596), helpindex(597), defaultscale(0), perfdetail(400) ] uint32 ReceivedSourceQuench; [ displayname("Received Redirect/sec"), countertype(272696320), perfindex(598), helpindex(599), defaultscale(-1), perfdetail(200) ] real64 ReceivedRedirectPerSec; [ displayname("Received Echo/sec"), countertype(272696320), perfindex(600), helpindex(601), defaultscale(-1), perfdetail(300) ] real64 ReceivedEchoPerSec; [ displayname("Received Echo Reply/sec"), countertype(272696320), perfindex(602), helpindex(603), defaultscale(-1), perfdetail(300) ] real64 ReceivedEchoReplyPerSec; [ displayname("Received Timestamp/sec"), countertype(272696320), perfindex(604), helpindex(605), defaultscale(-1), perfdetail(300) ] real64 ReceivedTimestampPerSec; [ displayname("Received Timestamp Reply/sec"), countertype(272696320), perfindex(606), helpindex(607), defaultscale(-1), perfdetail(300) ] real64 ReceivedTimestampReplyPerSec; [ displayname("Received Address Mask"), countertype(65536), perfindex(608), helpindex(609), defaultscale(0), perfdetail(300) ] uint32 ReceivedAddressMask; [ displayname("Received Address Mask Reply"), countertype(65536), perfindex(610), helpindex(611), defaultscale(0), perfdetail(300) ] uint32 ReceivedAddressMaskReply; [ displayname("Messages Sent/sec"), countertype(272696320), perfindex(612), helpindex(613), defaultscale(-1), perfdetail(200) ] real64 MessagesSentPerSec; [ displayname("Messages Outbound Errors"), countertype(65536), perfindex(614), helpindex(615), defaultscale(0), perfdetail(200) ] uint32 MessagesOutboundErrors; [ displayname("Sent Destination Unreachable"), countertype(65536), perfindex(616), helpindex(617), defaultscale(0), perfdetail(200) ] uint32 SentDestinationUnreachable; [ displayname("Sent Time Exceeded"), countertype(65536), perfindex(618), helpindex(619), defaultscale(0), perfdetail(200) ] uint32 SentTimeExceeded; [ displayname("Sent Parameter Problem"), countertype(65536), perfindex(620), helpindex(621), defaultscale(0), perfdetail(300) ] uint32 SentParameterProblem; [ displayname("Sent Source Quench"), countertype(65536), perfindex(622), helpindex(623), defaultscale(0), perfdetail(400) ] uint32 SentSourceQuench; [ displayname("Sent Redirect/sec"), countertype(272696320), perfindex(624), helpindex(625), defaultscale(-1), perfdetail(200) ] real64 SentRedirectPerSec; [ displayname("Sent Echo/sec"), countertype(272696320), perfindex(626), helpindex(627), defaultscale(-1), perfdetail(300) ] real64 SentEchoPerSec; [ displayname("Sent Echo Reply/sec"), countertype(272696320), perfindex(628), helpindex(629), defaultscale(-1), perfdetail(300) ] real64 SentEchoReplyPerSec; [ displayname("Sent Timestamp/sec"), countertype(272696320), perfindex(630), helpindex(631), defaultscale(-1), perfdetail(300) ] real64 SentTimestampPerSec; [ displayname("Sent Timestamp Reply/sec"), countertype(272696320), perfindex(632), helpindex(633), defaultscale(-1), perfdetail(300) ] real64 SentTimestampReplyPerSec; [ displayname("Sent Address Mask"), countertype(65536), perfindex(634), helpindex(635), defaultscale(0), perfdetail(300) ] uint32 SentAddressMask; [ displayname("Sent Address Mask Reply"), countertype(65536), perfindex(636), helpindex(637), defaultscale(0), perfdetail(300) ] uint32 SentAddressMaskReply; }; [ singleton, vendor("Microsoft"), guid("{5C7A4F71-9E4D-11d1-BB3C-00A0C913CAD4}"), locale("ms:\\0x0409"), displayname("ICMP"), perfindex(582), helpindex(583), perfdetail(200) ] class Win32Perf_RawICMP : Win32_PerfRawData { uint64 Timestamp; [ perfdefault, displayname("Messages/sec"), countertype(272696320), perfindex(584), helpindex(585), defaultscale(-1), perfdetail(200) ] uint32 MessagesPerSec; [ displayname("Messages Received/sec"), countertype(272696320), perfindex(586), helpindex(587), defaultscale(-1), perfdetail(200) ] uint32 MessagesReceivedPerSec; [ displayname("Messages Received Errors"), countertype(65536), perfindex(588), helpindex(589), defaultscale(0), perfdetail(200) ] uint32 MessagesReceivedErrors; [ displayname("Received Dest. Unreachable"), countertype(65536), perfindex(590), helpindex(591), defaultscale(0), perfdetail(200) ] uint32 ReceivedDestUnreachable; [ displayname("Received Time Exceeded"), countertype(65536), perfindex(592), helpindex(593), defaultscale(0), perfdetail(200) ] uint32 ReceivedTimeExceeded; [ displayname("Received Parameter Problem"), countertype(65536), perfindex(594), helpindex(595), defaultscale(0), perfdetail(300) ] uint32 ReceivedParameterProblem; [ displayname("Received Source Quench"), countertype(65536), perfindex(596), helpindex(597), defaultscale(0), perfdetail(400) ] uint32 ReceivedSourceQuench; [ displayname("Received Redirect/sec"), countertype(272696320), perfindex(598), helpindex(599), defaultscale(-1), perfdetail(200) ] uint32 ReceivedRedirectPerSec; [ displayname("Received Echo/sec"), countertype(272696320), perfindex(600), helpindex(601), defaultscale(-1), perfdetail(300) ] uint32 ReceivedEchoPerSec; [ displayname("Received Echo Reply/sec"), countertype(272696320), perfindex(602), helpindex(603), defaultscale(-1), perfdetail(300) ] uint32 ReceivedEchoReplyPerSec; [ displayname("Received Timestamp/sec"), countertype(272696320), perfindex(604), helpindex(605), defaultscale(-1), perfdetail(300) ] uint32 ReceivedTimestampPerSec; [ displayname("Received Timestamp Reply/sec"), countertype(272696320), perfindex(606), helpindex(607), defaultscale(-1), perfdetail(300) ] uint32 ReceivedTimestampReplyPerSec; [ displayname("Received Address Mask"), countertype(65536), perfindex(608), helpindex(609), defaultscale(0), perfdetail(300) ] uint32 ReceivedAddressMask; [ displayname("Received Address Mask Reply"), countertype(65536), perfindex(610), helpindex(611), defaultscale(0), perfdetail(300) ] uint32 ReceivedAddressMaskReply; [ displayname("Messages Sent/sec"), countertype(272696320), perfindex(612), helpindex(613), defaultscale(-1), perfdetail(200) ] uint32 MessagesSentPerSec; [ displayname("Messages Outbound Errors"), countertype(65536), perfindex(614), helpindex(615), defaultscale(0), perfdetail(200) ] uint32 MessagesOutboundErrors; [ displayname("Sent Destination Unreachable"), countertype(65536), perfindex(616), helpindex(617), defaultscale(0), perfdetail(200) ] uint32 SentDestinationUnreachable; [ displayname("Sent Time Exceeded"), countertype(65536), perfindex(618), helpindex(619), defaultscale(0), perfdetail(200) ] uint32 SentTimeExceeded; [ displayname("Sent Parameter Problem"), countertype(65536), perfindex(620), helpindex(621), defaultscale(0), perfdetail(300) ] uint32 SentParameterProblem; [ displayname("Sent Source Quench"), countertype(65536), perfindex(622), helpindex(623), defaultscale(0), perfdetail(400) ] uint32 SentSourceQuench; [ displayname("Sent Redirect/sec"), countertype(272696320), perfindex(624), helpindex(625), defaultscale(-1), perfdetail(200) ] uint32 SentRedirectPerSec; [ displayname("Sent Echo/sec"), countertype(272696320), perfindex(626), helpindex(627), defaultscale(-1), perfdetail(300) ] uint32 SentEchoPerSec; [ displayname("Sent Echo Reply/sec"), countertype(272696320), perfindex(628), helpindex(629), defaultscale(-1), perfdetail(300) ] uint32 SentEchoReplyPerSec; [ displayname("Sent Timestamp/sec"), countertype(272696320), perfindex(630), helpindex(631), defaultscale(-1), perfdetail(300) ] uint32 SentTimestampPerSec; [ displayname("Sent Timestamp Reply/sec"), countertype(272696320), perfindex(632), helpindex(633), defaultscale(-1), perfdetail(300) ] uint32 SentTimestampReplyPerSec; [ displayname("Sent Address Mask"), countertype(65536), perfindex(634), helpindex(635), defaultscale(0), perfdetail(300) ] uint32 SentAddressMask; [ displayname("Sent Address Mask Reply"), countertype(65536), perfindex(636), helpindex(637), defaultscale(0), perfdetail(300) ] uint32 SentAddressMaskReply; }; instance of Win32Perf_RawICMP { Timestamp = 0x01bd4e0698d2da9c; MessagesPerSec = 0x0000044b; MessagesReceivedPerSec = 0x0000043b; MessagesReceivedErrors = 0x00000000; ReceivedDestUnreachable = 0x0000002b; ReceivedTimeExceeded = 0x00000000; ReceivedParameterProblem = 0x00000000; ReceivedSourceQuench = 0x00000000; ReceivedRedirectPerSec = 0x00000000; ReceivedEchoPerSec = 0x00000001; ReceivedEchoReplyPerSec = 0x00000008; ReceivedTimestampPerSec = 0x00000000; ReceivedTimestampReplyPerSec = 0x00000000; ReceivedAddressMask = 0x00000000; ReceivedAddressMaskReply = 0x00000000; MessagesSentPerSec = 0x00000010; MessagesOutboundErrors = 0x00000000; SentDestinationUnreachable = 0x00000004; SentTimeExceeded = 0x00000000; SentParameterProblem = 0x00000000; SentSourceQuench = 0x00000000; SentRedirectPerSec = 0x00000000; SentEchoPerSec = 0x00000008; SentEchoReplyPerSec = 0x00000001; SentTimestampPerSec = 0x00000000; SentTimestampReplyPerSec = 0x00000000; SentAddressMask = 0x00000000; SentAddressMaskReply = 0x00000000; }; [ singleton, vendor("Microsoft"), guid("{5C7A4F6E-9E4D-11d1-BB3C-00A0C913CAD4}"), locale("ms:\\0x0409"), displayname("TCP"), perfindex(638), helpindex(639), perfdetail(200) ] class Win32Perf_TCP : Win32_PerfFormattedData { uint64 Timestamp; [ perfdefault, displayname("Segments/sec"), countertype(272696320), perfindex(640), helpindex(641), defaultscale(-1), perfdetail(200) ] real64 SegmentsPerSec; [ displayname("Connections Established"), countertype(65536), perfindex(642), helpindex(643), defaultscale(0), perfdetail(200) ] uint32 ConnectionsEstablished; [ displayname("Connections Active"), countertype(65536), perfindex(644), helpindex(645), defaultscale(0), perfdetail(200) ] uint32 ConnectionsActive; [ displayname("Connections Passive"), countertype(65536), perfindex(646), helpindex(647), defaultscale(0), perfdetail(200) ] uint32 ConnectionsPassive; [ displayname("Connection Failures"), countertype(65536), perfindex(648), helpindex(649), defaultscale(0), perfdetail(200) ] uint32 ConnectionFailures; [ displayname("Connections Reset"), countertype(65536), perfindex(650), helpindex(651), defaultscale(0), perfdetail(200) ] uint32 ConnectionsReset; [ displayname("Segments Received/sec"), countertype(272696320), perfindex(652), helpindex(653), defaultscale(-1), perfdetail(200) ] real64 SegmentsReceivedPerSec; [ displayname("Segments Sent/sec"), countertype(272696320), perfindex(654), helpindex(655), defaultscale(-1), perfdetail(200) ] real64 SegmentsSentPerSec; [ displayname("Segments Retransmitted/sec"), countertype(272696320), perfindex(656), helpindex(657), defaultscale(-1), perfdetail(200) ] real64 SegmentsRetransmittedPerSec; }; [ singleton, vendor("Microsoft"), guid("{5C7A4F6E-9E4D-11d1-BB3C-00A0C913CAD4}"), locale("ms:\\0x0409"), displayname("TCP"), perfindex(638), helpindex(639), perfdetail(200) ] class Win32Perf_RawTCP : Win32_PerfRawData { uint64 Timestamp; [ perfdefault, displayname("Segments/sec"), countertype(272696320), perfindex(640), helpindex(641), defaultscale(-1), perfdetail(200) ] uint32 SegmentsPerSec; [ displayname("Connections Established"), countertype(65536), perfindex(642), helpindex(643), defaultscale(0), perfdetail(200) ] uint32 ConnectionsEstablished; [ displayname("Connections Active"), countertype(65536), perfindex(644), helpindex(645), defaultscale(0), perfdetail(200) ] uint32 ConnectionsActive; [ displayname("Connections Passive"), countertype(65536), perfindex(646), helpindex(647), defaultscale(0), perfdetail(200) ] uint32 ConnectionsPassive; [ displayname("Connection Failures"), countertype(65536), perfindex(648), helpindex(649), defaultscale(0), perfdetail(200) ] uint32 ConnectionFailures; [ displayname("Connections Reset"), countertype(65536), perfindex(650), helpindex(651), defaultscale(0), perfdetail(200) ] uint32 ConnectionsReset; [ displayname("Segments Received/sec"), countertype(272696320), perfindex(652), helpindex(653), defaultscale(-1), perfdetail(200) ] uint32 SegmentsReceivedPerSec; [ displayname("Segments Sent/sec"), countertype(272696320), perfindex(654), helpindex(655), defaultscale(-1), perfdetail(200) ] uint32 SegmentsSentPerSec; [ displayname("Segments Retransmitted/sec"), countertype(272696320), perfindex(656), helpindex(657), defaultscale(-1), perfdetail(200) ] uint32 SegmentsRetransmittedPerSec; }; instance of Win32Perf_RawTCP { Timestamp = 0x01bd4e0698d2da9c; SegmentsPerSec = 0x000254b5; ConnectionsEstablished = 0x00000001; ConnectionsActive = 0x00000024; ConnectionsPassive = 0x00000002; ConnectionFailures = 0x00000002; ConnectionsReset = 0x00000001; SegmentsReceivedPerSec = 0x00017b09; SegmentsSentPerSec = 0x0000d9ac; SegmentsRetransmittedPerSec = 0x00000002; }; [ singleton, vendor("Microsoft"), guid("{5C7A4F6F-9E4D-11d1-BB3C-00A0C913CAD4}"), locale("ms:\\0x0409"), displayname("UDP"), perfindex(658), helpindex(659), perfdetail(200) ] class Win32Perf_UDP : Win32_PerfFormattedData { uint64 Timestamp; [ perfdefault, displayname("Datagrams/sec"), countertype(272696320), perfindex(438), helpindex(661), defaultscale(-1), perfdetail(200) ] real64 DatagramsPerSec; [ displayname("Datagrams Received/sec"), countertype(272696320), perfindex(446), helpindex(663), defaultscale(-1), perfdetail(200) ] real64 DatagramsReceivedPerSec; [ displayname("Datagrams No Port/sec"), countertype(272696320), perfindex(664), helpindex(665), defaultscale(-1), perfdetail(200) ] real64 DatagramsNoPortPerSec; [ displayname("Datagrams Received Errors"), countertype(65536), perfindex(666), helpindex(667), defaultscale(0), perfdetail(200) ] uint32 DatagramsReceivedErrors; [ displayname("Datagrams Sent/sec"), countertype(272696320), perfindex(442), helpindex(669), defaultscale(-1), perfdetail(200) ] real64 DatagramsSentPerSec; }; [ singleton, vendor("Microsoft"), guid("{5C7A4F6F-9E4D-11d1-BB3C-00A0C913CAD4}"), locale("ms:\\0x0409"), displayname("UDP"), perfindex(658), helpindex(659), perfdetail(200) ] class Win32Perf_RawUDP : Win32_PerfRawData { uint64 Timestamp; [ perfdefault, displayname("Datagrams/sec"), countertype(272696320), perfindex(438), helpindex(661), defaultscale(-1), perfdetail(200) ] uint32 DatagramsPerSec; [ displayname("Datagrams Received/sec"), countertype(272696320), perfindex(446), helpindex(663), defaultscale(-1), perfdetail(200) ] uint32 DatagramsReceivedPerSec; [ displayname("Datagrams No Port/sec"), countertype(272696320), perfindex(664), helpindex(665), defaultscale(-1), perfdetail(200) ] uint32 DatagramsNoPortPerSec; [ displayname("Datagrams Received Errors"), countertype(65536), perfindex(666), helpindex(667), defaultscale(0), perfdetail(200) ] uint32 DatagramsReceivedErrors; [ displayname("Datagrams Sent/sec"), countertype(272696320), perfindex(442), helpindex(669), defaultscale(-1), perfdetail(200) ] uint32 DatagramsSentPerSec; }; instance of Win32Perf_RawUDP { Timestamp = 0x01bd4e0698d461cc; DatagramsPerSec = 0x000203d3; DatagramsReceivedPerSec = 0x00020009; DatagramsNoPortPerSec = 0x00002a9d; DatagramsReceivedErrors = 0x00000000; DatagramsSentPerSec = 0x000003ca; }; [ costly, vendor("Microsoft"), guid(""), locale("ms:\\0x0409"), displayname("Content Index Filter"), perfindex(1902), helpindex(1903), perfdetail(100) ] class Win32Perf_ContentIndexFilter : Win32_PerfFormattedData { [key] string Name; uint64 Timestamp; [ perfdefault, displayname("Total filter speed (MBytes/hr)"), countertype(65536), perfindex(1904), helpindex(1905), defaultscale(0), perfdetail(100) ] uint32 TotalFilterSpeedMBytesPerHr; [ displayname("Binding time (msec)"), countertype(65536), perfindex(1906), helpindex(1907), defaultscale(-1), perfdetail(100) ] uint32 BindingTimeMsec; [ displayname("Filter speed (MBytes/hr)"), countertype(65536), perfindex(1908), helpindex(1909), defaultscale(0), perfdetail(100) ] uint32 FilterSpeedMBytesPerHr; }; [ costly, vendor("Microsoft"), guid(""), locale("ms:\\0x0409"), displayname("Content Index Filter"), perfindex(1902), helpindex(1903), perfdetail(100) ] class Win32Perf_RawContentIndexFilter : Win32_PerfRawData { [key] string Name; uint64 Timestamp; [ perfdefault, displayname("Total filter speed (MBytes/hr)"), countertype(65536), perfindex(1904), helpindex(1905), defaultscale(0), perfdetail(100) ] uint32 TotalFilterSpeedMBytesPerHr; [ displayname("Binding time (msec)"), countertype(65536), perfindex(1906), helpindex(1907), defaultscale(-1), perfdetail(100) ] uint32 BindingTimeMsec; [ displayname("Filter speed (MBytes/hr)"), countertype(65536), perfindex(1908), helpindex(1909), defaultscale(0), perfdetail(100) ] uint32 FilterSpeedMBytesPerHr; }; [ costly, vendor("Microsoft"), guid(""), locale("ms:\\0x0409"), displayname("Content Index"), perfindex(1880), helpindex(1881), perfdetail(100) ] class Win32Perf_ContentIndex : Win32_PerfFormattedData { [key] string Name; uint64 Timestamp; [ perfdefault, displayname("Wordlists"), countertype(65536), perfindex(1882), helpindex(1883), defaultscale(0), perfdetail(100) ] uint32 Wordlists; [ displayname("Persistent indexes"), countertype(65536), perfindex(1884), helpindex(1885), defaultscale(0), perfdetail(100) ] uint32 PersistentIndexes; [ displayname("Index size (MBytes)"), countertype(65536), perfindex(1886), helpindex(1887), defaultscale(0), perfdetail(100) ] uint32 IndexSizeMBytes; [ displayname("Files to be filtered"), countertype(65536), perfindex(1888), helpindex(1889), defaultscale(0), perfdetail(100) ] uint32 FilesToBeFiltered; [ displayname("Unique keys"), countertype(65536), perfindex(1890), helpindex(1891), defaultscale(0), perfdetail(100) ] uint32 UniqueKeys; [ displayname("Running queries"), countertype(65536), perfindex(1892), helpindex(1893), defaultscale(0), perfdetail(100) ] uint32 RunningQueries; [ displayname("Merge progress"), countertype(65536), perfindex(1894), helpindex(1895), defaultscale(0), perfdetail(100) ] uint32 MergeProgress; [ displayname("# documents filtered"), countertype(65536), perfindex(1896), helpindex(1897), defaultscale(0), perfdetail(100) ] uint32 NumberOfDocumentsFiltered; [ displayname("Total # documents"), countertype(65536), perfindex(1898), helpindex(1899), defaultscale(0), perfdetail(100) ] uint32 TotalNumberOfDocuments; [ displayname("Total # of queries"), countertype(65536), perfindex(1900), helpindex(1901), defaultscale(0), perfdetail(100) ] uint32 TotalNumberOfOfQueries; }; [ costly, vendor("Microsoft"), guid(""), locale("ms:\\0x0409"), displayname("Content Index"), perfindex(1880), helpindex(1881), perfdetail(100) ] class Win32Perf_RawContentIndex : Win32_PerfRawData { [key] string Name; uint64 Timestamp; [ perfdefault, displayname("Wordlists"), countertype(65536), perfindex(1882), helpindex(1883), defaultscale(0), perfdetail(100) ] uint32 Wordlists; [ displayname("Persistent indexes"), countertype(65536), perfindex(1884), helpindex(1885), defaultscale(0), perfdetail(100) ] uint32 PersistentIndexes; [ displayname("Index size (MBytes)"), countertype(65536), perfindex(1886), helpindex(1887), defaultscale(0), perfdetail(100) ] uint32 IndexSizeMBytes; [ displayname("Files to be filtered"), countertype(65536), perfindex(1888), helpindex(1889), defaultscale(0), perfdetail(100) ] uint32 FilesToBeFiltered; [ displayname("Unique keys"), countertype(65536), perfindex(1890), helpindex(1891), defaultscale(0), perfdetail(100) ] uint32 UniqueKeys; [ displayname("Running queries"), countertype(65536), perfindex(1892), helpindex(1893), defaultscale(0), perfdetail(100) ] uint32 RunningQueries; [ displayname("Merge progress"), countertype(65536), perfindex(1894), helpindex(1895), defaultscale(0), perfdetail(100) ] uint32 MergeProgress; [ displayname("# documents filtered"), countertype(65536), perfindex(1896), helpindex(1897), defaultscale(0), perfdetail(100) ] uint32 NumberOfDocumentsFiltered; [ displayname("Total # documents"), countertype(65536), perfindex(1898), helpindex(1899), defaultscale(0), perfdetail(100) ] uint32 TotalNumberOfDocuments; [ displayname("Total # of queries"), countertype(65536), perfindex(1900), helpindex(1901), defaultscale(0), perfdetail(100) ] uint32 TotalNumberOfOfQueries; }; [ singleton, costly, vendor("Microsoft"), guid(""), locale("ms:\\0x0409"), displayname("Http Content Index"), perfindex(1910), helpindex(1911), perfdetail(100) ] class Win32Perf_HttpContentIndex : Win32_PerfFormattedData { uint64 Timestamp; [ displayname("Cache items"), countertype(65536), perfindex(1912), helpindex(1913), defaultscale(0), perfdetail(100) ] uint32 CacheItems; [ perfdefault, displayname("% Cache hits"), countertype(537003008), perfindex(1914), helpindex(1915), defaultscale(-1), perfdetail(100) ] real64 PercentCacheHits; [ displayname("% Cache misses"), countertype(537003008), perfindex(1918), helpindex(1919), defaultscale(0), perfdetail(100) ] real64 PercentCacheMisses; [ displayname("Active queries"), countertype(65536), perfindex(1922), helpindex(1923), defaultscale(0), perfdetail(100) ] uint32 ActiveQueries; [ displayname("Total queries"), countertype(65536), perfindex(1924), helpindex(1925), defaultscale(0), perfdetail(100) ] uint32 TotalQueries; [ displayname("Queries per minute"), countertype(65536), perfindex(1926), helpindex(1927), defaultscale(0), perfdetail(100) ] uint32 QueriesPerMinute; [ displayname("Current requests queued"), countertype(65536), perfindex(1928), helpindex(1929), defaultscale(0), perfdetail(100) ] uint32 CurrentRequestsQueued; [ displayname("Total requests rejected"), countertype(65536), perfindex(1930), helpindex(1931), defaultscale(0), perfdetail(100) ] uint32 TotalRequestsRejected; }; [ singleton, costly, vendor("Microsoft"), guid(""), locale("ms:\\0x0409"), displayname("Http Content Index"), perfindex(1910), helpindex(1911), perfdetail(100) ] class Win32Perf_RawHttpContentIndex : Win32_PerfRawData { uint64 Timestamp; [ displayname("Cache items"), countertype(65536), perfindex(1912), helpindex(1913), defaultscale(0), perfdetail(100) ] uint32 CacheItems; [ perfdefault, displayname("% Cache hits"), countertype(537003008), perfindex(1914), helpindex(1915), defaultscale(-1), perfdetail(100) ] uint32 PercentCacheHits; [ displayname("Total cache accesses"), countertype(1073939459), perfindex(1916), helpindex(1917), defaultscale(-1), perfdetail(100) ] uint32 TotalCacheAccesses_Base; [ displayname("% Cache misses"), countertype(537003008), perfindex(1918), helpindex(1919), defaultscale(0), perfdetail(100) ] uint32 PercentCacheMisses; [ displayname("Active queries"), countertype(65536), perfindex(1922), helpindex(1923), defaultscale(0), perfdetail(100) ] uint32 ActiveQueries; [ displayname("Total queries"), countertype(65536), perfindex(1924), helpindex(1925), defaultscale(0), perfdetail(100) ] uint32 TotalQueries; [ displayname("Queries per minute"), countertype(65536), perfindex(1926), helpindex(1927), defaultscale(0), perfdetail(100) ] uint32 QueriesPerMinute; [ displayname("Current requests queued"), countertype(65536), perfindex(1928), helpindex(1929), defaultscale(0), perfdetail(100) ] uint32 CurrentRequestsQueued; [ displayname("Total requests rejected"), countertype(65536), perfindex(1930), helpindex(1931), defaultscale(0), perfdetail(100) ] uint32 TotalRequestsRejected; }; instance of Win32Perf_RawHttpContentIndex { Timestamp = 0x01bd4e069ebeb49c; CacheItems = 0x00000000; PercentCacheHits = 0x00000000; TotalCacheAccesses_Base = 0x00000000; PercentCacheMisses = 0x00000000; ActiveQueries = 0x00000000; TotalQueries = 0x00000000; QueriesPerMinute = 0x00000000; CurrentRequestsQueued = 0x00000000; TotalRequestsRejected = 0x00000000; }; [ costly, vendor("Microsoft"), guid(""), locale("ms:\\0x0409"), displayname("Client Service For NetWare"), perfindex(1230), helpindex(1231), perfdetail(100) ] class Win32Perf_ClientServiceForNetWare : Win32_PerfFormattedData { [key] string Name; uint64 Timestamp; [ perfdefault, displayname("Bytes Total/sec"), countertype(272696576), perfindex(388), helpindex(389), defaultscale(-4), perfdetail(100) ] real64 BytesTotalPerSec; [ displayname("File Data Operations/sec"), countertype(272696320), perfindex(406), helpindex(391), defaultscale(0), perfdetail(100) ] real64 FileDataOperationsPerSec; [ displayname("Packets/sec"), countertype(272696576), perfindex(400), helpindex(401), defaultscale(-1), perfdetail(100) ] real64 PacketsPerSec; [ displayname("Bytes Received/sec"), countertype(272696576), perfindex(264), helpindex(265), defaultscale(-4), perfdetail(200) ] real64 BytesReceivedPerSec; [ displayname("Packets Received/sec"), countertype(272696576), perfindex(266), helpindex(267), defaultscale(-1), perfdetail(200) ] real64 PacketsReceivedPerSec; [ displayname("Bytes Transmitted/sec"), countertype(272696576), perfindex(276), helpindex(277), defaultscale(-4), perfdetail(200) ] real64 BytesTransmittedPerSec; [ displayname("Packets Transmitted/sec"), countertype(272696576), perfindex(278), helpindex(279), defaultscale(-1), perfdetail(200) ] real64 PacketsTransmittedPerSec; [ displayname("File Read Operations/sec"), countertype(272696320), perfindex(10), helpindex(289), defaultscale(0), perfdetail(100) ] real64 FileReadOperationsPerSec; [ displayname("Read Operations Random/sec"), countertype(272696320), perfindex(290), helpindex(291), defaultscale(-1), perfdetail(200) ] real64 ReadOperationsRandomPerSec; [ displayname("Read Packets/sec"), countertype(272696320), perfindex(292), helpindex(293), defaultscale(-1), perfdetail(200) ] real64 ReadPacketsPerSec; [ displayname("File Write Operations/sec"), countertype(272696320), perfindex(12), helpindex(299), defaultscale(0), perfdetail(100) ] real64 FileWriteOperationsPerSec; [ displayname("Write Operations Random/sec"), countertype(272696320), perfindex(300), helpindex(301), defaultscale(-1), perfdetail(200) ] real64 WriteOperationsRandomPerSec; [ displayname("Write Packets/sec"), countertype(272696320), perfindex(302), helpindex(303), defaultscale(-1), perfdetail(200) ] real64 WritePacketsPerSec; [ displayname("Server Sessions"), countertype(65536), perfindex(314), helpindex(315), defaultscale(0), perfdetail(100) ] uint32 ServerSessions; [ displayname("Server Reconnects"), countertype(65536), perfindex(316), helpindex(317), defaultscale(0), perfdetail(200) ] uint32 ServerReconnects; [ displayname("Connect NetWare 2.x"), countertype(65536), perfindex(1242), helpindex(1243), defaultscale(0), perfdetail(200) ] uint32 ConnectNetWare2X; [ displayname("Connect NetWare 3.x"), countertype(65536), perfindex(1244), helpindex(1245), defaultscale(0), perfdetail(200) ] uint32 ConnectNetWare3X; [ displayname("Connect NetWare 4.x"), countertype(65536), perfindex(1246), helpindex(1247), defaultscale(0), perfdetail(200) ] uint32 ConnectNetWare4X; [ displayname("Server Disconnects"), countertype(65536), perfindex(326), helpindex(327), defaultscale(0), perfdetail(200) ] uint32 ServerDisconnects; [ displayname("Packet Burst Read NCP Count/sec"), countertype(272696320), perfindex(1232), helpindex(1233), defaultscale(0), perfdetail(200) ] real64 PacketBurstReadNCPCountPerSec; [ displayname("Packet Burst Read Timeouts/sec"), countertype(272696320), perfindex(1234), helpindex(1235), defaultscale(0), perfdetail(200) ] real64 PacketBurstReadTimeoutsPerSec; [ displayname("Packet Burst Write NCP Count/sec"), countertype(272696320), perfindex(1236), helpindex(1237), defaultscale(0), perfdetail(200) ] real64 PacketBurstWriteNCPCountPerSec; [ displayname("Packet Burst Write Timeouts/sec"), countertype(272696320), perfindex(1238), helpindex(1239), defaultscale(0), perfdetail(200) ] real64 PacketBurstWriteTimeoutsPerSec; [ displayname("Packet Burst IO/sec"), countertype(272696320), perfindex(1240), helpindex(1241), defaultscale(0), perfdetail(200) ] real64 PacketBurstIOPerSec; }; [ costly, vendor("Microsoft"), guid(""), locale("ms:\\0x0409"), displayname("Client Service For NetWare"), perfindex(1230), helpindex(1231), perfdetail(100) ] class Win32Perf_RawClientServiceForNetWare : Win32_PerfRawData { [key] string Name; uint64 Timestamp; [ perfdefault, displayname("Bytes Total/sec"), countertype(272696576), perfindex(388), helpindex(389), defaultscale(-4), perfdetail(100) ] uint64 BytesTotalPerSec; [ displayname("File Data Operations/sec"), countertype(272696320), perfindex(406), helpindex(391), defaultscale(0), perfdetail(100) ] uint32 FileDataOperationsPerSec; [ displayname("Packets/sec"), countertype(272696576), perfindex(400), helpindex(401), defaultscale(-1), perfdetail(100) ] uint64 PacketsPerSec; [ displayname("Bytes Received/sec"), countertype(272696576), perfindex(264), helpindex(265), defaultscale(-4), perfdetail(200) ] uint64 BytesReceivedPerSec; [ displayname("Packets Received/sec"), countertype(272696576), perfindex(266), helpindex(267), defaultscale(-1), perfdetail(200) ] uint64 PacketsReceivedPerSec; [ displayname("Bytes Transmitted/sec"), countertype(272696576), perfindex(276), helpindex(277), defaultscale(-4), perfdetail(200) ] uint64 BytesTransmittedPerSec; [ displayname("Packets Transmitted/sec"), countertype(272696576), perfindex(278), helpindex(279), defaultscale(-1), perfdetail(200) ] uint64 PacketsTransmittedPerSec; [ displayname("File Read Operations/sec"), countertype(272696320), perfindex(10), helpindex(289), defaultscale(0), perfdetail(100) ] uint32 FileReadOperationsPerSec; [ displayname("Read Operations Random/sec"), countertype(272696320), perfindex(290), helpindex(291), defaultscale(-1), perfdetail(200) ] uint32 ReadOperationsRandomPerSec; [ displayname("Read Packets/sec"), countertype(272696320), perfindex(292), helpindex(293), defaultscale(-1), perfdetail(200) ] uint32 ReadPacketsPerSec; [ displayname("File Write Operations/sec"), countertype(272696320), perfindex(12), helpindex(299), defaultscale(0), perfdetail(100) ] uint32 FileWriteOperationsPerSec; [ displayname("Write Operations Random/sec"), countertype(272696320), perfindex(300), helpindex(301), defaultscale(-1), perfdetail(200) ] uint32 WriteOperationsRandomPerSec; [ displayname("Write Packets/sec"), countertype(272696320), perfindex(302), helpindex(303), defaultscale(-1), perfdetail(200) ] uint32 WritePacketsPerSec; [ displayname("Server Sessions"), countertype(65536), perfindex(314), helpindex(315), defaultscale(0), perfdetail(100) ] uint32 ServerSessions; [ displayname("Server Reconnects"), countertype(65536), perfindex(316), helpindex(317), defaultscale(0), perfdetail(200) ] uint32 ServerReconnects; [ displayname("Connect NetWare 2.x"), countertype(65536), perfindex(1242), helpindex(1243), defaultscale(0), perfdetail(200) ] uint32 ConnectNetWare2X; [ displayname("Connect NetWare 3.x"), countertype(65536), perfindex(1244), helpindex(1245), defaultscale(0), perfdetail(200) ] uint32 ConnectNetWare3X; [ displayname("Connect NetWare 4.x"), countertype(65536), perfindex(1246), helpindex(1247), defaultscale(0), perfdetail(200) ] uint32 ConnectNetWare4X; [ displayname("Server Disconnects"), countertype(65536), perfindex(326), helpindex(327), defaultscale(0), perfdetail(200) ] uint32 ServerDisconnects; [ displayname("Packet Burst Read NCP Count/sec"), countertype(272696320), perfindex(1232), helpindex(1233), defaultscale(0), perfdetail(200) ] uint32 PacketBurstReadNCPCountPerSec; [ displayname("Packet Burst Read Timeouts/sec"), countertype(272696320), perfindex(1234), helpindex(1235), defaultscale(0), perfdetail(200) ] uint32 PacketBurstReadTimeoutsPerSec; [ displayname("Packet Burst Write NCP Count/sec"), countertype(272696320), perfindex(1236), helpindex(1237), defaultscale(0), perfdetail(200) ] uint32 PacketBurstWriteNCPCountPerSec; [ displayname("Packet Burst Write Timeouts/sec"), countertype(272696320), perfindex(1238), helpindex(1239), defaultscale(0), perfdetail(200) ] uint32 PacketBurstWriteTimeoutsPerSec; [ displayname("Packet Burst IO/sec"), countertype(272696320), perfindex(1240), helpindex(1241), defaultscale(0), perfdetail(200) ] uint32 PacketBurstIOPerSec; }; [ costly, vendor("Microsoft"), guid("{5C7A4F6A-9E4D-11d1-BB3C-00A0C913CAD4}"), locale("ms:\\0x0409"), displayname("Process Address Space"), perfindex(786), helpindex(787), perfdetail(400) ] class Win32Perf_ProcessAddressSpace : Win32_PerfFormattedData { [key] string Name; uint64 Timestamp; [ perfdefault, displayname("ID Process"), countertype(65536), perfindex(784), helpindex(785), defaultscale(0), perfdetail(400) ] uint32 IDProcess; [ displayname("Bytes Image Reserved"), countertype(65536), perfindex(776), helpindex(777), defaultscale(-4), perfdetail(400) ] uint32 BytesImageReserved; [ displayname("Bytes Image Free"), countertype(65536), perfindex(778), helpindex(779), defaultscale(-4), perfdetail(400) ] uint32 BytesImageFree; [ displayname("Bytes Reserved"), countertype(65536), perfindex(780), helpindex(781), defaultscale(-4), perfdetail(400) ] uint32 BytesReserved; [ displayname("Bytes Free"), countertype(65536), perfindex(782), helpindex(783), defaultscale(-4), perfdetail(400) ] uint32 BytesFree; [ displayname("Mapped Space No Access"), countertype(65536), perfindex(710), helpindex(711), defaultscale(-5), perfdetail(400) ] uint32 MappedSpaceNoAccess; [ displayname("Mapped Space Read Only"), countertype(65536), perfindex(712), helpindex(713), defaultscale(-5), perfdetail(400) ] uint32 MappedSpaceReadOnly; [ displayname("Mapped Space Read/Write"), countertype(65536), perfindex(714), helpindex(715), defaultscale(-5), perfdetail(400) ] uint32 MappedSpaceReadPerWrite; [ displayname("Mapped Space Write Copy"), countertype(65536), perfindex(716), helpindex(717), defaultscale(-5), perfdetail(400) ] uint32 MappedSpaceWriteCopy; [ displayname("Mapped Space Executable"), countertype(65536), perfindex(718), helpindex(719), defaultscale(-5), perfdetail(400) ] uint32 MappedSpaceExecutable; [ displayname("Mapped Space Exec Read Only"), countertype(65536), perfindex(720), helpindex(721), defaultscale(-5), perfdetail(400) ] uint32 MappedSpaceExecReadOnly; [ displayname("Mapped Space Exec Read/Write"), countertype(65536), perfindex(722), helpindex(723), defaultscale(-5), perfdetail(400) ] uint32 MappedSpaceExecReadPerWrite; [ displayname("Mapped Space Exec Write Copy"), countertype(65536), perfindex(724), helpindex(725), defaultscale(-5), perfdetail(400) ] uint32 MappedSpaceExecWriteCopy; [ displayname("Reserved Space No Access"), countertype(65536), perfindex(726), helpindex(727), defaultscale(-5), perfdetail(400) ] uint32 ReservedSpaceNoAccess; [ displayname("Reserved Space Read Only"), countertype(65536), perfindex(728), helpindex(729), defaultscale(-5), perfdetail(400) ] uint32 ReservedSpaceReadOnly; [ displayname("Reserved Space Read/Write"), countertype(65536), perfindex(730), helpindex(731), defaultscale(-5), perfdetail(400) ] uint32 ReservedSpaceReadPerWrite; [ displayname("Reserved Space Write Copy"), countertype(65536), perfindex(732), helpindex(733), defaultscale(-5), perfdetail(400) ] uint32 ReservedSpaceWriteCopy; [ displayname("Reserved Space Executable"), countertype(65536), perfindex(734), helpindex(735), defaultscale(-5), perfdetail(400) ] uint32 ReservedSpaceExecutable; [ displayname("Reserved Space Exec Read Only"), countertype(65536), perfindex(736), helpindex(737), defaultscale(-5), perfdetail(400) ] uint32 ReservedSpaceExecReadOnly; [ displayname("Reserved Space Exec Read/Write"), countertype(65536), perfindex(738), helpindex(739), defaultscale(-5), perfdetail(400) ] uint32 ReservedSpaceExecReadPerWrite; [ displayname("Reserved Space Exec Write Copy"), countertype(65536), perfindex(742), helpindex(743), defaultscale(-5), perfdetail(400) ] uint32 ReservedSpaceExecWriteCopy; [ displayname("Unassigned Space No Access"), countertype(65536), perfindex(744), helpindex(745), defaultscale(-5), perfdetail(400) ] uint32 UnassignedSpaceNoAccess; [ displayname("Unassigned Space Read Only"), countertype(65536), perfindex(746), helpindex(747), defaultscale(-5), perfdetail(400) ] uint32 UnassignedSpaceReadOnly; [ displayname("Unassigned Space Read/Write"), countertype(65536), perfindex(748), helpindex(749), defaultscale(-5), perfdetail(400) ] uint32 UnassignedSpaceReadPerWrite; [ displayname("Unassigned Space Write Copy"), countertype(65536), perfindex(750), helpindex(751), defaultscale(-5), perfdetail(400) ] uint32 UnassignedSpaceWriteCopy; [ displayname("Unassigned Space Executable"), countertype(65536), perfindex(752), helpindex(753), defaultscale(-5), perfdetail(400) ] uint32 UnassignedSpaceExecutable; [ displayname("Unassigned Space Exec Read Only"), countertype(65536), perfindex(754), helpindex(755), defaultscale(-5), perfdetail(400) ] uint32 UnassignedSpaceExecReadOnly; [ displayname("Unassigned Space Exec Read/Write"), countertype(65536), perfindex(756), helpindex(757), defaultscale(-5), perfdetail(400) ] uint32 UnassignedSpaceExecReadPerWrite; [ displayname("Unassigned Space Exec Write Copy"), countertype(65536), perfindex(758), helpindex(759), defaultscale(-5), perfdetail(400) ] uint32 UnassignedSpaceExecWriteCopy; [ displayname("Image Space No Access"), countertype(65536), perfindex(760), helpindex(761), defaultscale(-5), perfdetail(400) ] uint32 ImageSpaceNoAccess; [ displayname("Image Space Read Only"), countertype(65536), perfindex(762), helpindex(763), defaultscale(-5), perfdetail(400) ] uint32 ImageSpaceReadOnly; [ displayname("Image Space Read/Write"), countertype(65536), perfindex(764), helpindex(765), defaultscale(-5), perfdetail(400) ] uint32 ImageSpaceReadPerWrite; [ displayname("Image Space Write Copy"), countertype(65536), perfindex(766), helpindex(767), defaultscale(-5), perfdetail(400) ] uint32 ImageSpaceWriteCopy; [ displayname("Image Space Executable"), countertype(65536), perfindex(768), helpindex(769), defaultscale(-5), perfdetail(400) ] uint32 ImageSpaceExecutable; [ displayname("Image Space Exec Read Only"), countertype(65536), perfindex(770), helpindex(771), defaultscale(-5), perfdetail(400) ] uint32 ImageSpaceExecReadOnly; [ displayname("Image Space Exec Read/Write"), countertype(65536), perfindex(772), helpindex(773), defaultscale(-5), perfdetail(400) ] uint32 ImageSpaceExecReadPerWrite; [ displayname("Image Space Exec Write Copy"), countertype(65536), perfindex(774), helpindex(775), defaultscale(-5), perfdetail(400) ] uint32 ImageSpaceExecWriteCopy; }; [ costly, vendor("Microsoft"), guid("{5C7A4F6A-9E4D-11d1-BB3C-00A0C913CAD4}"), locale("ms:\\0x0409"), displayname("Process Address Space"), perfindex(786), helpindex(787), perfdetail(400) ] class Win32Perf_RawProcessAddressSpace : Win32_PerfRawData { [key] string Name; uint64 Timestamp; [ perfdefault, displayname("ID Process"), countertype(65536), perfindex(784), helpindex(785), defaultscale(0), perfdetail(400) ] uint32 IDProcess; [ displayname("Bytes Image Reserved"), countertype(65536), perfindex(776), helpindex(777), defaultscale(-4), perfdetail(400) ] uint32 BytesImageReserved; [ displayname("Bytes Image Free"), countertype(65536), perfindex(778), helpindex(779), defaultscale(-4), perfdetail(400) ] uint32 BytesImageFree; [ displayname("Bytes Reserved"), countertype(65536), perfindex(780), helpindex(781), defaultscale(-4), perfdetail(400) ] uint32 BytesReserved; [ displayname("Bytes Free"), countertype(65536), perfindex(782), helpindex(783), defaultscale(-4), perfdetail(400) ] uint32 BytesFree; [ displayname("Mapped Space No Access"), countertype(65536), perfindex(710), helpindex(711), defaultscale(-5), perfdetail(400) ] uint32 MappedSpaceNoAccess; [ displayname("Mapped Space Read Only"), countertype(65536), perfindex(712), helpindex(713), defaultscale(-5), perfdetail(400) ] uint32 MappedSpaceReadOnly; [ displayname("Mapped Space Read/Write"), countertype(65536), perfindex(714), helpindex(715), defaultscale(-5), perfdetail(400) ] uint32 MappedSpaceReadPerWrite; [ displayname("Mapped Space Write Copy"), countertype(65536), perfindex(716), helpindex(717), defaultscale(-5), perfdetail(400) ] uint32 MappedSpaceWriteCopy; [ displayname("Mapped Space Executable"), countertype(65536), perfindex(718), helpindex(719), defaultscale(-5), perfdetail(400) ] uint32 MappedSpaceExecutable; [ displayname("Mapped Space Exec Read Only"), countertype(65536), perfindex(720), helpindex(721), defaultscale(-5), perfdetail(400) ] uint32 MappedSpaceExecReadOnly; [ displayname("Mapped Space Exec Read/Write"), countertype(65536), perfindex(722), helpindex(723), defaultscale(-5), perfdetail(400) ] uint32 MappedSpaceExecReadPerWrite; [ displayname("Mapped Space Exec Write Copy"), countertype(65536), perfindex(724), helpindex(725), defaultscale(-5), perfdetail(400) ] uint32 MappedSpaceExecWriteCopy; [ displayname("Reserved Space No Access"), countertype(65536), perfindex(726), helpindex(727), defaultscale(-5), perfdetail(400) ] uint32 ReservedSpaceNoAccess; [ displayname("Reserved Space Read Only"), countertype(65536), perfindex(728), helpindex(729), defaultscale(-5), perfdetail(400) ] uint32 ReservedSpaceReadOnly; [ displayname("Reserved Space Read/Write"), countertype(65536), perfindex(730), helpindex(731), defaultscale(-5), perfdetail(400) ] uint32 ReservedSpaceReadPerWrite; [ displayname("Reserved Space Write Copy"), countertype(65536), perfindex(732), helpindex(733), defaultscale(-5), perfdetail(400) ] uint32 ReservedSpaceWriteCopy; [ displayname("Reserved Space Executable"), countertype(65536), perfindex(734), helpindex(735), defaultscale(-5), perfdetail(400) ] uint32 ReservedSpaceExecutable; [ displayname("Reserved Space Exec Read Only"), countertype(65536), perfindex(736), helpindex(737), defaultscale(-5), perfdetail(400) ] uint32 ReservedSpaceExecReadOnly; [ displayname("Reserved Space Exec Read/Write"), countertype(65536), perfindex(738), helpindex(739), defaultscale(-5), perfdetail(400) ] uint32 ReservedSpaceExecReadPerWrite; [ displayname("Reserved Space Exec Write Copy"), countertype(65536), perfindex(742), helpindex(743), defaultscale(-5), perfdetail(400) ] uint32 ReservedSpaceExecWriteCopy; [ displayname("Unassigned Space No Access"), countertype(65536), perfindex(744), helpindex(745), defaultscale(-5), perfdetail(400) ] uint32 UnassignedSpaceNoAccess; [ displayname("Unassigned Space Read Only"), countertype(65536), perfindex(746), helpindex(747), defaultscale(-5), perfdetail(400) ] uint32 UnassignedSpaceReadOnly; [ displayname("Unassigned Space Read/Write"), countertype(65536), perfindex(748), helpindex(749), defaultscale(-5), perfdetail(400) ] uint32 UnassignedSpaceReadPerWrite; [ displayname("Unassigned Space Write Copy"), countertype(65536), perfindex(750), helpindex(751), defaultscale(-5), perfdetail(400) ] uint32 UnassignedSpaceWriteCopy; [ displayname("Unassigned Space Executable"), countertype(65536), perfindex(752), helpindex(753), defaultscale(-5), perfdetail(400) ] uint32 UnassignedSpaceExecutable; [ displayname("Unassigned Space Exec Read Only"), countertype(65536), perfindex(754), helpindex(755), defaultscale(-5), perfdetail(400) ] uint32 UnassignedSpaceExecReadOnly; [ displayname("Unassigned Space Exec Read/Write"), countertype(65536), perfindex(756), helpindex(757), defaultscale(-5), perfdetail(400) ] uint32 UnassignedSpaceExecReadPerWrite; [ displayname("Unassigned Space Exec Write Copy"), countertype(65536), perfindex(758), helpindex(759), defaultscale(-5), perfdetail(400) ] uint32 UnassignedSpaceExecWriteCopy; [ displayname("Image Space No Access"), countertype(65536), perfindex(760), helpindex(761), defaultscale(-5), perfdetail(400) ] uint32 ImageSpaceNoAccess; [ displayname("Image Space Read Only"), countertype(65536), perfindex(762), helpindex(763), defaultscale(-5), perfdetail(400) ] uint32 ImageSpaceReadOnly; [ displayname("Image Space Read/Write"), countertype(65536), perfindex(764), helpindex(765), defaultscale(-5), perfdetail(400) ] uint32 ImageSpaceReadPerWrite; [ displayname("Image Space Write Copy"), countertype(65536), perfindex(766), helpindex(767), defaultscale(-5), perfdetail(400) ] uint32 ImageSpaceWriteCopy; [ displayname("Image Space Executable"), countertype(65536), perfindex(768), helpindex(769), defaultscale(-5), perfdetail(400) ] uint32 ImageSpaceExecutable; [ displayname("Image Space Exec Read Only"), countertype(65536), perfindex(770), helpindex(771), defaultscale(-5), perfdetail(400) ] uint32 ImageSpaceExecReadOnly; [ displayname("Image Space Exec Read/Write"), countertype(65536), perfindex(772), helpindex(773), defaultscale(-5), perfdetail(400) ] uint32 ImageSpaceExecReadPerWrite; [ displayname("Image Space Exec Write Copy"), countertype(65536), perfindex(774), helpindex(775), defaultscale(-5), perfdetail(400) ] uint32 ImageSpaceExecWriteCopy; }; instance of Win32Perf_RawProcessAddressSpace { Name = "Idle"; IDProcess = 0x00000000; BytesImageReserved = 0x00000000; BytesImageFree = 0x00000000; BytesReserved = 0x00000000; BytesFree = 0x00000000; MappedSpaceNoAccess = 0x00000000; MappedSpaceReadOnly = 0x00000000; MappedSpaceReadPerWrite = 0x00000000; MappedSpaceWriteCopy = 0x00000000; MappedSpaceExecutable = 0x00000000; MappedSpaceExecReadOnly = 0x00000000; MappedSpaceExecReadPerWrite = 0x00000000; MappedSpaceExecWriteCopy = 0x00000000; ReservedSpaceNoAccess = 0x00000000; ReservedSpaceReadOnly = 0x00000000; ReservedSpaceReadPerWrite = 0x00000000; ReservedSpaceWriteCopy = 0x00000000; ReservedSpaceExecutable = 0x00000000; ReservedSpaceExecReadOnly = 0x00000000; ReservedSpaceExecReadPerWrite = 0x00000000; ReservedSpaceExecWriteCopy = 0x00000000; UnassignedSpaceNoAccess = 0x00000000; UnassignedSpaceReadOnly = 0x00000000; UnassignedSpaceReadPerWrite = 0x00000000; UnassignedSpaceWriteCopy = 0x00000000; UnassignedSpaceExecutable = 0x00000000; UnassignedSpaceExecReadOnly = 0x00000000; UnassignedSpaceExecReadPerWrite = 0x00000000; UnassignedSpaceExecWriteCopy = 0x00000000; ImageSpaceNoAccess = 0x00000000; ImageSpaceReadOnly = 0x00000000; ImageSpaceReadPerWrite = 0x00000000; ImageSpaceWriteCopy = 0x00000000; ImageSpaceExecutable = 0x00000000; ImageSpaceExecReadOnly = 0x00000000; ImageSpaceExecReadPerWrite = 0x00000000; ImageSpaceExecWriteCopy = 0x00000000; }; instance of Win32Perf_RawProcessAddressSpace { Name = "System"; IDProcess = 0x00000008; BytesImageReserved = 0x00000000; BytesImageFree = 0x00000000; BytesReserved = 0x00000000; BytesFree = 0x00000000; MappedSpaceNoAccess = 0x00000000; MappedSpaceReadOnly = 0x00000000; MappedSpaceReadPerWrite = 0x00000000; MappedSpaceWriteCopy = 0x00000000; MappedSpaceExecutable = 0x00000000; MappedSpaceExecReadOnly = 0x00000000; MappedSpaceExecReadPerWrite = 0x00000000; MappedSpaceExecWriteCopy = 0x00000000; ReservedSpaceNoAccess = 0x00000000; ReservedSpaceReadOnly = 0x00000000; ReservedSpaceReadPerWrite = 0x00000000; ReservedSpaceWriteCopy = 0x00000000; ReservedSpaceExecutable = 0x00000000; ReservedSpaceExecReadOnly = 0x00000000; ReservedSpaceExecReadPerWrite = 0x00000000; ReservedSpaceExecWriteCopy = 0x00000000; UnassignedSpaceNoAccess = 0x00000000; UnassignedSpaceReadOnly = 0x00000000; UnassignedSpaceReadPerWrite = 0x00000000; UnassignedSpaceWriteCopy = 0x00000000; UnassignedSpaceExecutable = 0x00000000; UnassignedSpaceExecReadOnly = 0x00000000; UnassignedSpaceExecReadPerWrite = 0x00000000; UnassignedSpaceExecWriteCopy = 0x00000000; ImageSpaceNoAccess = 0x00000000; ImageSpaceReadOnly = 0x00000000; ImageSpaceReadPerWrite = 0x00000000; ImageSpaceWriteCopy = 0x00000000; ImageSpaceExecutable = 0x00000000; ImageSpaceExecReadOnly = 0x00000000; ImageSpaceExecReadPerWrite = 0x00000000; ImageSpaceExecWriteCopy = 0x00000000; }; instance of Win32Perf_RawProcessAddressSpace { Name = "smss"; IDProcess = 0x00000060; BytesImageReserved = 0x00000000; BytesImageFree = 0x00000000; BytesReserved = 0x00000000; BytesFree = 0x00000000; MappedSpaceNoAccess = 0x00000000; MappedSpaceReadOnly = 0x00000000; MappedSpaceReadPerWrite = 0x00000000; MappedSpaceWriteCopy = 0x00000000; MappedSpaceExecutable = 0x00000000; MappedSpaceExecReadOnly = 0x00000000; MappedSpaceExecReadPerWrite = 0x00000000; MappedSpaceExecWriteCopy = 0x00000000; ReservedSpaceNoAccess = 0x00000000; ReservedSpaceReadOnly = 0x00000000; ReservedSpaceReadPerWrite = 0x00000000; ReservedSpaceWriteCopy = 0x00000000; ReservedSpaceExecutable = 0x00000000; ReservedSpaceExecReadOnly = 0x00000000; ReservedSpaceExecReadPerWrite = 0x00000000; ReservedSpaceExecWriteCopy = 0x00000000; UnassignedSpaceNoAccess = 0x00000000; UnassignedSpaceReadOnly = 0x00000000; UnassignedSpaceReadPerWrite = 0x00000000; UnassignedSpaceWriteCopy = 0x00000000; UnassignedSpaceExecutable = 0x00000000; UnassignedSpaceExecReadOnly = 0x00000000; UnassignedSpaceExecReadPerWrite = 0x00000000; UnassignedSpaceExecWriteCopy = 0x00000000; ImageSpaceNoAccess = 0x00000000; ImageSpaceReadOnly = 0x00000000; ImageSpaceReadPerWrite = 0x00000000; ImageSpaceWriteCopy = 0x00000000; ImageSpaceExecutable = 0x00000000; ImageSpaceExecReadOnly = 0x00000000; ImageSpaceExecReadPerWrite = 0x00000000; ImageSpaceExecWriteCopy = 0x00000000; }; instance of Win32Perf_RawProcessAddressSpace { Name = "csrss"; IDProcess = 0x00000080; BytesImageReserved = 0x00000000; BytesImageFree = 0x00000000; BytesReserved = 0x00000000; BytesFree = 0x00000000; MappedSpaceNoAccess = 0x00000000; MappedSpaceReadOnly = 0x00000000; MappedSpaceReadPerWrite = 0x00000000; MappedSpaceWriteCopy = 0x00000000; MappedSpaceExecutable = 0x00000000; MappedSpaceExecReadOnly = 0x00000000; MappedSpaceExecReadPerWrite = 0x00000000; MappedSpaceExecWriteCopy = 0x00000000; ReservedSpaceNoAccess = 0x00000000; ReservedSpaceReadOnly = 0x00000000; ReservedSpaceReadPerWrite = 0x00000000; ReservedSpaceWriteCopy = 0x00000000; ReservedSpaceExecutable = 0x00000000; ReservedSpaceExecReadOnly = 0x00000000; ReservedSpaceExecReadPerWrite = 0x00000000; ReservedSpaceExecWriteCopy = 0x00000000; UnassignedSpaceNoAccess = 0x00000000; UnassignedSpaceReadOnly = 0x00000000; UnassignedSpaceReadPerWrite = 0x00000000; UnassignedSpaceWriteCopy = 0x00000000; UnassignedSpaceExecutable = 0x00000000; UnassignedSpaceExecReadOnly = 0x00000000; UnassignedSpaceExecReadPerWrite = 0x00000000; UnassignedSpaceExecWriteCopy = 0x00000000; ImageSpaceNoAccess = 0x00000000; ImageSpaceReadOnly = 0x00000000; ImageSpaceReadPerWrite = 0x00000000; ImageSpaceWriteCopy = 0x00000000; ImageSpaceExecutable = 0x00000000; ImageSpaceExecReadOnly = 0x00000000; ImageSpaceExecReadPerWrite = 0x00000000; ImageSpaceExecWriteCopy = 0x00000000; }; instance of Win32Perf_RawProcessAddressSpace { Name = "winlogon"; IDProcess = 0x00000094; BytesImageReserved = 0x00000000; BytesImageFree = 0x00000000; BytesReserved = 0x00000000; BytesFree = 0x00000000; MappedSpaceNoAccess = 0x00000000; MappedSpaceReadOnly = 0x00000000; MappedSpaceReadPerWrite = 0x00000000; MappedSpaceWriteCopy = 0x00000000; MappedSpaceExecutable = 0x00000000; MappedSpaceExecReadOnly = 0x00000000; MappedSpaceExecReadPerWrite = 0x00000000; MappedSpaceExecWriteCopy = 0x00000000; ReservedSpaceNoAccess = 0x00000000; ReservedSpaceReadOnly = 0x00000000; ReservedSpaceReadPerWrite = 0x00000000; ReservedSpaceWriteCopy = 0x00000000; ReservedSpaceExecutable = 0x00000000; ReservedSpaceExecReadOnly = 0x00000000; ReservedSpaceExecReadPerWrite = 0x00000000; ReservedSpaceExecWriteCopy = 0x00000000; UnassignedSpaceNoAccess = 0x00000000; UnassignedSpaceReadOnly = 0x00000000; UnassignedSpaceReadPerWrite = 0x00000000; UnassignedSpaceWriteCopy = 0x00000000; UnassignedSpaceExecutable = 0x00000000; UnassignedSpaceExecReadOnly = 0x00000000; UnassignedSpaceExecReadPerWrite = 0x00000000; UnassignedSpaceExecWriteCopy = 0x00000000; ImageSpaceNoAccess = 0x00000000; ImageSpaceReadOnly = 0x00000000; ImageSpaceReadPerWrite = 0x00000000; ImageSpaceWriteCopy = 0x00000000; ImageSpaceExecutable = 0x00000000; ImageSpaceExecReadOnly = 0x00000000; ImageSpaceExecReadPerWrite = 0x00000000; ImageSpaceExecWriteCopy = 0x00000000; }; instance of Win32Perf_RawProcessAddressSpace { Name = "services"; IDProcess = 0x000000b8; BytesImageReserved = 0x00000000; BytesImageFree = 0x00000000; BytesReserved = 0x00000000; BytesFree = 0x00000000; MappedSpaceNoAccess = 0x00000000; MappedSpaceReadOnly = 0x00000000; MappedSpaceReadPerWrite = 0x00000000; MappedSpaceWriteCopy = 0x00000000; MappedSpaceExecutable = 0x00000000; MappedSpaceExecReadOnly = 0x00000000; MappedSpaceExecReadPerWrite = 0x00000000; MappedSpaceExecWriteCopy = 0x00000000; ReservedSpaceNoAccess = 0x00000000; ReservedSpaceReadOnly = 0x00000000; ReservedSpaceReadPerWrite = 0x00000000; ReservedSpaceWriteCopy = 0x00000000; ReservedSpaceExecutable = 0x00000000; ReservedSpaceExecReadOnly = 0x00000000; ReservedSpaceExecReadPerWrite = 0x00000000; ReservedSpaceExecWriteCopy = 0x00000000; UnassignedSpaceNoAccess = 0x00000000; UnassignedSpaceReadOnly = 0x00000000; UnassignedSpaceReadPerWrite = 0x00000000; UnassignedSpaceWriteCopy = 0x00000000; UnassignedSpaceExecutable = 0x00000000; UnassignedSpaceExecReadOnly = 0x00000000; UnassignedSpaceExecReadPerWrite = 0x00000000; UnassignedSpaceExecWriteCopy = 0x00000000; ImageSpaceNoAccess = 0x00000000; ImageSpaceReadOnly = 0x00000000; ImageSpaceReadPerWrite = 0x00000000; ImageSpaceWriteCopy = 0x00000000; ImageSpaceExecutable = 0x00000000; ImageSpaceExecReadOnly = 0x00000000; ImageSpaceExecReadPerWrite = 0x00000000; ImageSpaceExecWriteCopy = 0x00000000; }; instance of Win32Perf_RawProcessAddressSpace { Name = "lsass"; IDProcess = 0x000000c4; BytesImageReserved = 0x00000000; BytesImageFree = 0x00000000; BytesReserved = 0x00000000; BytesFree = 0x00000000; MappedSpaceNoAccess = 0x00000000; MappedSpaceReadOnly = 0x00000000; MappedSpaceReadPerWrite = 0x00000000; MappedSpaceWriteCopy = 0x00000000; MappedSpaceExecutable = 0x00000000; MappedSpaceExecReadOnly = 0x00000000; MappedSpaceExecReadPerWrite = 0x00000000; MappedSpaceExecWriteCopy = 0x00000000; ReservedSpaceNoAccess = 0x00000000; ReservedSpaceReadOnly = 0x00000000; ReservedSpaceReadPerWrite = 0x00000000; ReservedSpaceWriteCopy = 0x00000000; ReservedSpaceExecutable = 0x00000000; ReservedSpaceExecReadOnly = 0x00000000; ReservedSpaceExecReadPerWrite = 0x00000000; ReservedSpaceExecWriteCopy = 0x00000000; UnassignedSpaceNoAccess = 0x00000000; UnassignedSpaceReadOnly = 0x00000000; UnassignedSpaceReadPerWrite = 0x00000000; UnassignedSpaceWriteCopy = 0x00000000; UnassignedSpaceExecutable = 0x00000000; UnassignedSpaceExecReadOnly = 0x00000000; UnassignedSpaceExecReadPerWrite = 0x00000000; UnassignedSpaceExecWriteCopy = 0x00000000; ImageSpaceNoAccess = 0x00000000; ImageSpaceReadOnly = 0x00000000; ImageSpaceReadPerWrite = 0x00000000; ImageSpaceWriteCopy = 0x00000000; ImageSpaceExecutable = 0x00000000; ImageSpaceExecReadOnly = 0x00000000; ImageSpaceExecReadPerWrite = 0x00000000; ImageSpaceExecWriteCopy = 0x00000000; }; instance of Win32Perf_RawProcessAddressSpace { Name = "spoolsv"; IDProcess = 0x00000144; BytesImageReserved = 0x00000000; BytesImageFree = 0x00000000; BytesReserved = 0x00000000; BytesFree = 0x00000000; MappedSpaceNoAccess = 0x00000000; MappedSpaceReadOnly = 0x00000000; MappedSpaceReadPerWrite = 0x00000000; MappedSpaceWriteCopy = 0x00000000; MappedSpaceExecutable = 0x00000000; MappedSpaceExecReadOnly = 0x00000000; MappedSpaceExecReadPerWrite = 0x00000000; MappedSpaceExecWriteCopy = 0x00000000; ReservedSpaceNoAccess = 0x00000000; ReservedSpaceReadOnly = 0x00000000; ReservedSpaceReadPerWrite = 0x00000000; ReservedSpaceWriteCopy = 0x00000000; ReservedSpaceExecutable = 0x00000000; ReservedSpaceExecReadOnly = 0x00000000; ReservedSpaceExecReadPerWrite = 0x00000000; ReservedSpaceExecWriteCopy = 0x00000000; UnassignedSpaceNoAccess = 0x00000000; UnassignedSpaceReadOnly = 0x00000000; UnassignedSpaceReadPerWrite = 0x00000000; UnassignedSpaceWriteCopy = 0x00000000; UnassignedSpaceExecutable = 0x00000000; UnassignedSpaceExecReadOnly = 0x00000000; UnassignedSpaceExecReadPerWrite = 0x00000000; UnassignedSpaceExecWriteCopy = 0x00000000; ImageSpaceNoAccess = 0x00000000; ImageSpaceReadOnly = 0x00000000; ImageSpaceReadPerWrite = 0x00000000; ImageSpaceWriteCopy = 0x00000000; ImageSpaceExecutable = 0x00000000; ImageSpaceExecReadOnly = 0x00000000; ImageSpaceExecReadPerWrite = 0x00000000; ImageSpaceExecWriteCopy = 0x00000000; }; instance of Win32Perf_RawProcessAddressSpace { Name = "RpcSs"; IDProcess = 0x000001a0; BytesImageReserved = 0x00000000; BytesImageFree = 0x00000000; BytesReserved = 0x00000000; BytesFree = 0x00000000; MappedSpaceNoAccess = 0x00000000; MappedSpaceReadOnly = 0x00000000; MappedSpaceReadPerWrite = 0x00000000; MappedSpaceWriteCopy = 0x00000000; MappedSpaceExecutable = 0x00000000; MappedSpaceExecReadOnly = 0x00000000; MappedSpaceExecReadPerWrite = 0x00000000; MappedSpaceExecWriteCopy = 0x00000000; ReservedSpaceNoAccess = 0x00000000; ReservedSpaceReadOnly = 0x00000000; ReservedSpaceReadPerWrite = 0x00000000; ReservedSpaceWriteCopy = 0x00000000; ReservedSpaceExecutable = 0x00000000; ReservedSpaceExecReadOnly = 0x00000000; ReservedSpaceExecReadPerWrite = 0x00000000; ReservedSpaceExecWriteCopy = 0x00000000; UnassignedSpaceNoAccess = 0x00000000; UnassignedSpaceReadOnly = 0x00000000; UnassignedSpaceReadPerWrite = 0x00000000; UnassignedSpaceWriteCopy = 0x00000000; UnassignedSpaceExecutable = 0x00000000; UnassignedSpaceExecReadOnly = 0x00000000; UnassignedSpaceExecReadPerWrite = 0x00000000; UnassignedSpaceExecWriteCopy = 0x00000000; ImageSpaceNoAccess = 0x00000000; ImageSpaceReadOnly = 0x00000000; ImageSpaceReadPerWrite = 0x00000000; ImageSpaceWriteCopy = 0x00000000; ImageSpaceExecutable = 0x00000000; ImageSpaceExecReadOnly = 0x00000000; ImageSpaceExecReadPerWrite = 0x00000000; ImageSpaceExecWriteCopy = 0x00000000; }; instance of Win32Perf_RawProcessAddressSpace { Name = "ntmssvc"; IDProcess = 0x00000224; BytesImageReserved = 0x00000000; BytesImageFree = 0x00000000; BytesReserved = 0x00000000; BytesFree = 0x00000000; MappedSpaceNoAccess = 0x00000000; MappedSpaceReadOnly = 0x00000000; MappedSpaceReadPerWrite = 0x00000000; MappedSpaceWriteCopy = 0x00000000; MappedSpaceExecutable = 0x00000000; MappedSpaceExecReadOnly = 0x00000000; MappedSpaceExecReadPerWrite = 0x00000000; MappedSpaceExecWriteCopy = 0x00000000; ReservedSpaceNoAccess = 0x00000000; ReservedSpaceReadOnly = 0x00000000; ReservedSpaceReadPerWrite = 0x00000000; ReservedSpaceWriteCopy = 0x00000000; ReservedSpaceExecutable = 0x00000000; ReservedSpaceExecReadOnly = 0x00000000; ReservedSpaceExecReadPerWrite = 0x00000000; ReservedSpaceExecWriteCopy = 0x00000000; UnassignedSpaceNoAccess = 0x00000000; UnassignedSpaceReadOnly = 0x00000000; UnassignedSpaceReadPerWrite = 0x00000000; UnassignedSpaceWriteCopy = 0x00000000; UnassignedSpaceExecutable = 0x00000000; UnassignedSpaceExecReadOnly = 0x00000000; UnassignedSpaceExecReadPerWrite = 0x00000000; UnassignedSpaceExecWriteCopy = 0x00000000; ImageSpaceNoAccess = 0x00000000; ImageSpaceReadOnly = 0x00000000; ImageSpaceReadPerWrite = 0x00000000; ImageSpaceWriteCopy = 0x00000000; ImageSpaceExecutable = 0x00000000; ImageSpaceExecReadOnly = 0x00000000; ImageSpaceExecReadPerWrite = 0x00000000; ImageSpaceExecWriteCopy = 0x00000000; }; instance of Win32Perf_RawProcessAddressSpace { Name = "Explorer"; IDProcess = 0x000001e8; BytesImageReserved = 0x00000000; BytesImageFree = 0x00000000; BytesReserved = 0x013cb000; BytesFree = 0x7da6e000; MappedSpaceNoAccess = 0x00000000; MappedSpaceReadOnly = 0x000f6000; MappedSpaceReadPerWrite = 0x00003000; MappedSpaceWriteCopy = 0x00000000; MappedSpaceExecutable = 0x00000000; MappedSpaceExecReadOnly = 0x00038000; MappedSpaceExecReadPerWrite = 0x00000000; MappedSpaceExecWriteCopy = 0x00000000; ReservedSpaceNoAccess = 0x00000000; ReservedSpaceReadOnly = 0x00001000; ReservedSpaceReadPerWrite = 0x0012b000; ReservedSpaceWriteCopy = 0x00000000; ReservedSpaceExecutable = 0x00000000; ReservedSpaceExecReadOnly = 0x00000000; ReservedSpaceExecReadPerWrite = 0x00009000; ReservedSpaceExecWriteCopy = 0x00000000; UnassignedSpaceNoAccess = 0x00000000; UnassignedSpaceReadOnly = 0x004ae000; UnassignedSpaceReadPerWrite = 0x00032000; UnassignedSpaceWriteCopy = 0x0000e000; UnassignedSpaceExecutable = 0x00000000; UnassignedSpaceExecReadOnly = 0x009d4000; UnassignedSpaceExecReadPerWrite = 0x00000000; UnassignedSpaceExecWriteCopy = 0x00000000; ImageSpaceNoAccess = 0x00000000; ImageSpaceReadOnly = 0x004e9000; ImageSpaceReadPerWrite = 0x0006b000; ImageSpaceWriteCopy = 0x00027000; ImageSpaceExecutable = 0x00000000; ImageSpaceExecReadOnly = 0x009d6000; ImageSpaceExecReadPerWrite = 0x00000000; ImageSpaceExecWriteCopy = 0x00000000; }; instance of Win32Perf_RawProcessAddressSpace { Name = "SysTray"; IDProcess = 0x00000238; BytesImageReserved = 0x00000000; BytesImageFree = 0x00000000; BytesReserved = 0x00a57000; BytesFree = 0x7ebc0000; MappedSpaceNoAccess = 0x00000000; MappedSpaceReadOnly = 0x000f5000; MappedSpaceReadPerWrite = 0x00003000; MappedSpaceWriteCopy = 0x00000000; MappedSpaceExecutable = 0x00000000; MappedSpaceExecReadOnly = 0x00038000; MappedSpaceExecReadPerWrite = 0x00000000; MappedSpaceExecWriteCopy = 0x00000000; ReservedSpaceNoAccess = 0x00000000; ReservedSpaceReadOnly = 0x00001000; ReservedSpaceReadPerWrite = 0x0004e000; ReservedSpaceWriteCopy = 0x00000000; ReservedSpaceExecutable = 0x00000000; ReservedSpaceExecReadOnly = 0x00000000; ReservedSpaceExecReadPerWrite = 0x00002000; ReservedSpaceExecWriteCopy = 0x00000000; UnassignedSpaceNoAccess = 0x00000000; UnassignedSpaceReadOnly = 0x0024e000; UnassignedSpaceReadPerWrite = 0x00016000; UnassignedSpaceWriteCopy = 0x0000b000; UnassignedSpaceExecutable = 0x00000000; UnassignedSpaceExecReadOnly = 0x0058d000; UnassignedSpaceExecReadPerWrite = 0x00000000; UnassignedSpaceExecWriteCopy = 0x00000000; ImageSpaceNoAccess = 0x00000000; ImageSpaceReadOnly = 0x00273000; ImageSpaceReadPerWrite = 0x00031000; ImageSpaceWriteCopy = 0x00023000; ImageSpaceExecutable = 0x00000000; ImageSpaceExecReadOnly = 0x00591000; ImageSpaceExecReadPerWrite = 0x00000000; ImageSpaceExecWriteCopy = 0x00000000; }; instance of Win32Perf_RawProcessAddressSpace { Name = "netman"; IDProcess = 0x000001c0; BytesImageReserved = 0x00000000; BytesImageFree = 0x00000000; BytesReserved = 0x00000000; BytesFree = 0x00000000; MappedSpaceNoAccess = 0x00000000; MappedSpaceReadOnly = 0x00000000; MappedSpaceReadPerWrite = 0x00000000; MappedSpaceWriteCopy = 0x00000000; MappedSpaceExecutable = 0x00000000; MappedSpaceExecReadOnly = 0x00000000; MappedSpaceExecReadPerWrite = 0x00000000; MappedSpaceExecWriteCopy = 0x00000000; ReservedSpaceNoAccess = 0x00000000; ReservedSpaceReadOnly = 0x00000000; ReservedSpaceReadPerWrite = 0x00000000; ReservedSpaceWriteCopy = 0x00000000; ReservedSpaceExecutable = 0x00000000; ReservedSpaceExecReadOnly = 0x00000000; ReservedSpaceExecReadPerWrite = 0x00000000; ReservedSpaceExecWriteCopy = 0x00000000; UnassignedSpaceNoAccess = 0x00000000; UnassignedSpaceReadOnly = 0x00000000; UnassignedSpaceReadPerWrite = 0x00000000; UnassignedSpaceWriteCopy = 0x00000000; UnassignedSpaceExecutable = 0x00000000; UnassignedSpaceExecReadOnly = 0x00000000; UnassignedSpaceExecReadPerWrite = 0x00000000; UnassignedSpaceExecWriteCopy = 0x00000000; ImageSpaceNoAccess = 0x00000000; ImageSpaceReadOnly = 0x00000000; ImageSpaceReadPerWrite = 0x00000000; ImageSpaceWriteCopy = 0x00000000; ImageSpaceExecutable = 0x00000000; ImageSpaceExecReadOnly = 0x00000000; ImageSpaceExecReadPerWrite = 0x00000000; ImageSpaceExecWriteCopy = 0x00000000; }; instance of Win32Perf_RawProcessAddressSpace { Name = "CMD"; IDProcess = 0x00000274; BytesImageReserved = 0x00000000; BytesImageFree = 0x00000000; BytesReserved = 0x00abd000; BytesFree = 0x7f1e4000; MappedSpaceNoAccess = 0x00000000; MappedSpaceReadOnly = 0x000f5000; MappedSpaceReadPerWrite = 0x00003000; MappedSpaceWriteCopy = 0x00000000; MappedSpaceExecutable = 0x00000000; MappedSpaceExecReadOnly = 0x00038000; MappedSpaceExecReadPerWrite = 0x00000000; MappedSpaceExecWriteCopy = 0x00000000; ReservedSpaceNoAccess = 0x00000000; ReservedSpaceReadOnly = 0x00001000; ReservedSpaceReadPerWrite = 0x00026000; ReservedSpaceWriteCopy = 0x00000000; ReservedSpaceExecutable = 0x00000000; ReservedSpaceExecReadOnly = 0x00000000; ReservedSpaceExecReadPerWrite = 0x00002000; ReservedSpaceExecWriteCopy = 0x00000000; UnassignedSpaceNoAccess = 0x00000000; UnassignedSpaceReadOnly = 0x00060000; UnassignedSpaceReadPerWrite = 0x0000c000; UnassignedSpaceWriteCopy = 0x00000000; UnassignedSpaceExecutable = 0x00000000; UnassignedSpaceExecReadOnly = 0x00176000; UnassignedSpaceExecReadPerWrite = 0x00000000; UnassignedSpaceExecWriteCopy = 0x00000000; ImageSpaceNoAccess = 0x00000000; ImageSpaceReadOnly = 0x00066000; ImageSpaceReadPerWrite = 0x00015000; ImageSpaceWriteCopy = 0x00005000; ImageSpaceExecutable = 0x00000000; ImageSpaceExecReadOnly = 0x00176000; ImageSpaceExecReadPerWrite = 0x00000000; ImageSpaceExecWriteCopy = 0x00000000; }; instance of Win32Perf_RawProcessAddressSpace { Name = "CMD"; IDProcess = 0x0000028c; BytesImageReserved = 0x00000000; BytesImageFree = 0x00000000; BytesReserved = 0x00ab0000; BytesFree = 0x7f1e4000; MappedSpaceNoAccess = 0x00000000; MappedSpaceReadOnly = 0x000f5000; MappedSpaceReadPerWrite = 0x00005000; MappedSpaceWriteCopy = 0x00000000; MappedSpaceExecutable = 0x00000000; MappedSpaceExecReadOnly = 0x00038000; MappedSpaceExecReadPerWrite = 0x00000000; MappedSpaceExecWriteCopy = 0x00000000; ReservedSpaceNoAccess = 0x00000000; ReservedSpaceReadOnly = 0x00001000; ReservedSpaceReadPerWrite = 0x00031000; ReservedSpaceWriteCopy = 0x00000000; ReservedSpaceExecutable = 0x00000000; ReservedSpaceExecReadOnly = 0x00000000; ReservedSpaceExecReadPerWrite = 0x00002000; ReservedSpaceExecWriteCopy = 0x00000000; UnassignedSpaceNoAccess = 0x00000000; UnassignedSpaceReadOnly = 0x00060000; UnassignedSpaceReadPerWrite = 0x0000c000; UnassignedSpaceWriteCopy = 0x00000000; UnassignedSpaceExecutable = 0x00000000; UnassignedSpaceExecReadOnly = 0x00176000; UnassignedSpaceExecReadPerWrite = 0x00000000; UnassignedSpaceExecWriteCopy = 0x00000000; ImageSpaceNoAccess = 0x00000000; ImageSpaceReadOnly = 0x00066000; ImageSpaceReadPerWrite = 0x00015000; ImageSpaceWriteCopy = 0x00005000; ImageSpaceExecutable = 0x00000000; ImageSpaceExecReadOnly = 0x00176000; ImageSpaceExecReadPerWrite = 0x00000000; ImageSpaceExecWriteCopy = 0x00000000; }; instance of Win32Perf_RawProcessAddressSpace { Name = "findfast"; IDProcess = 0x000000e0; BytesImageReserved = 0x00000000; BytesImageFree = 0x00000000; BytesReserved = 0x00ccf000; BytesFree = 0x7e50e000; MappedSpaceNoAccess = 0x00000000; MappedSpaceReadOnly = 0x0016c000; MappedSpaceReadPerWrite = 0x00007000; MappedSpaceWriteCopy = 0x00000000; MappedSpaceExecutable = 0x00000000; MappedSpaceExecReadOnly = 0x00038000; MappedSpaceExecReadPerWrite = 0x00000000; MappedSpaceExecWriteCopy = 0x00000000; ReservedSpaceNoAccess = 0x00000000; ReservedSpaceReadOnly = 0x00001000; ReservedSpaceReadPerWrite = 0x000ae000; ReservedSpaceWriteCopy = 0x00000000; ReservedSpaceExecutable = 0x00000000; ReservedSpaceExecReadOnly = 0x00000000; ReservedSpaceExecReadPerWrite = 0x00003000; ReservedSpaceExecWriteCopy = 0x00000000; UnassignedSpaceNoAccess = 0x00000000; UnassignedSpaceReadOnly = 0x00297000; UnassignedSpaceReadPerWrite = 0x0001c000; UnassignedSpaceWriteCopy = 0x00006000; UnassignedSpaceExecutable = 0x00000000; UnassignedSpaceExecReadOnly = 0x008a9000; UnassignedSpaceExecReadPerWrite = 0x00000000; UnassignedSpaceExecWriteCopy = 0x00000000; ImageSpaceNoAccess = 0x00000000; ImageSpaceReadOnly = 0x002bb000; ImageSpaceReadPerWrite = 0x0003c000; ImageSpaceWriteCopy = 0x00015000; ImageSpaceExecutable = 0x00000000; ImageSpaceExecReadOnly = 0x008aa000; ImageSpaceExecReadPerWrite = 0x00000000; ImageSpaceExecWriteCopy = 0x00000000; }; instance of Win32Perf_RawProcessAddressSpace { Name = "CMD"; IDProcess = 0x00000200; BytesImageReserved = 0x00000000; BytesImageFree = 0x00000000; BytesReserved = 0x00abd000; BytesFree = 0x7f1e4000; MappedSpaceNoAccess = 0x00000000; MappedSpaceReadOnly = 0x000f5000; MappedSpaceReadPerWrite = 0x00003000; MappedSpaceWriteCopy = 0x00000000; MappedSpaceExecutable = 0x00000000; MappedSpaceExecReadOnly = 0x00038000; MappedSpaceExecReadPerWrite = 0x00000000; MappedSpaceExecWriteCopy = 0x00000000; ReservedSpaceNoAccess = 0x00000000; ReservedSpaceReadOnly = 0x00001000; ReservedSpaceReadPerWrite = 0x00026000; ReservedSpaceWriteCopy = 0x00000000; ReservedSpaceExecutable = 0x00000000; ReservedSpaceExecReadOnly = 0x00000000; ReservedSpaceExecReadPerWrite = 0x00002000; ReservedSpaceExecWriteCopy = 0x00000000; UnassignedSpaceNoAccess = 0x00000000; UnassignedSpaceReadOnly = 0x00060000; UnassignedSpaceReadPerWrite = 0x0000c000; UnassignedSpaceWriteCopy = 0x00000000; UnassignedSpaceExecutable = 0x00000000; UnassignedSpaceExecReadOnly = 0x00176000; UnassignedSpaceExecReadPerWrite = 0x00000000; UnassignedSpaceExecWriteCopy = 0x00000000; ImageSpaceNoAccess = 0x00000000; ImageSpaceReadOnly = 0x00066000; ImageSpaceReadPerWrite = 0x00015000; ImageSpaceWriteCopy = 0x00005000; ImageSpaceExecutable = 0x00000000; ImageSpaceExecReadOnly = 0x00176000; ImageSpaceExecReadPerWrite = 0x00000000; ImageSpaceExecWriteCopy = 0x00000000; }; instance of Win32Perf_RawProcessAddressSpace { Name = "CMD"; IDProcess = 0x000002d0; BytesImageReserved = 0x00000000; BytesImageFree = 0x00000000; BytesReserved = 0x00ab2000; BytesFree = 0x7f1e4000; MappedSpaceNoAccess = 0x00000000; MappedSpaceReadOnly = 0x000f5000; MappedSpaceReadPerWrite = 0x00005000; MappedSpaceWriteCopy = 0x00000000; MappedSpaceExecutable = 0x00000000; MappedSpaceExecReadOnly = 0x00038000; MappedSpaceExecReadPerWrite = 0x00000000; MappedSpaceExecWriteCopy = 0x00000000; ReservedSpaceNoAccess = 0x00000000; ReservedSpaceReadOnly = 0x00001000; ReservedSpaceReadPerWrite = 0x0002f000; ReservedSpaceWriteCopy = 0x00000000; ReservedSpaceExecutable = 0x00000000; ReservedSpaceExecReadOnly = 0x00000000; ReservedSpaceExecReadPerWrite = 0x00002000; ReservedSpaceExecWriteCopy = 0x00000000; UnassignedSpaceNoAccess = 0x00000000; UnassignedSpaceReadOnly = 0x00060000; UnassignedSpaceReadPerWrite = 0x0000c000; UnassignedSpaceWriteCopy = 0x00000000; UnassignedSpaceExecutable = 0x00000000; UnassignedSpaceExecReadOnly = 0x00176000; UnassignedSpaceExecReadPerWrite = 0x00000000; UnassignedSpaceExecWriteCopy = 0x00000000; ImageSpaceNoAccess = 0x00000000; ImageSpaceReadOnly = 0x00066000; ImageSpaceReadPerWrite = 0x00015000; ImageSpaceWriteCopy = 0x00005000; ImageSpaceExecutable = 0x00000000; ImageSpaceExecReadOnly = 0x00176000; ImageSpaceExecReadPerWrite = 0x00000000; ImageSpaceExecWriteCopy = 0x00000000; }; instance of Win32Perf_RawProcessAddressSpace { Name = "notepad"; IDProcess = 0x0000020c; BytesImageReserved = 0x00000000; BytesImageFree = 0x00000000; BytesReserved = 0x00a52000; BytesFree = 0x7ed98000; MappedSpaceNoAccess = 0x00000000; MappedSpaceReadOnly = 0x000f5000; MappedSpaceReadPerWrite = 0x00003000; MappedSpaceWriteCopy = 0x00000000; MappedSpaceExecutable = 0x00000000; MappedSpaceExecReadOnly = 0x00038000; MappedSpaceExecReadPerWrite = 0x00000000; MappedSpaceExecWriteCopy = 0x00000000; ReservedSpaceNoAccess = 0x00000000; ReservedSpaceReadOnly = 0x00001000; ReservedSpaceReadPerWrite = 0x00058000; ReservedSpaceWriteCopy = 0x00000000; ReservedSpaceExecutable = 0x00000000; ReservedSpaceExecReadOnly = 0x00000000; ReservedSpaceExecReadPerWrite = 0x00002000; ReservedSpaceExecWriteCopy = 0x00000000; UnassignedSpaceNoAccess = 0x00000000; UnassignedSpaceReadOnly = 0x001e3000; UnassignedSpaceReadPerWrite = 0x00007000; UnassignedSpaceWriteCopy = 0x00000000; UnassignedSpaceExecutable = 0x00000000; UnassignedSpaceExecReadOnly = 0x00461000; UnassignedSpaceExecReadPerWrite = 0x00000000; UnassignedSpaceExecWriteCopy = 0x00000000; ImageSpaceNoAccess = 0x00000000; ImageSpaceReadOnly = 0x001f2000; ImageSpaceReadPerWrite = 0x00017000; ImageSpaceWriteCopy = 0x00011000; ImageSpaceExecutable = 0x00000000; ImageSpaceExecReadOnly = 0x00461000; ImageSpaceExecReadPerWrite = 0x00000000; ImageSpaceExecWriteCopy = 0x00000000; }; instance of Win32Perf_RawProcessAddressSpace { Name = "ctrlist"; IDProcess = 0x000001f8; BytesImageReserved = 0x00000000; BytesImageFree = 0x00000000; BytesReserved = 0x01533000; BytesFree = 0x7e13d000; MappedSpaceNoAccess = 0x00000000; MappedSpaceReadOnly = 0x000f8000; MappedSpaceReadPerWrite = 0x00009000; MappedSpaceWriteCopy = 0x00000000; MappedSpaceExecutable = 0x00000000; MappedSpaceExecReadOnly = 0x00038000; MappedSpaceExecReadPerWrite = 0x00000000; MappedSpaceExecWriteCopy = 0x00000000; ReservedSpaceNoAccess = 0x00000000; ReservedSpaceReadOnly = 0x00001000; ReservedSpaceReadPerWrite = 0x00210000; ReservedSpaceWriteCopy = 0x00000000; ReservedSpaceExecutable = 0x00000000; ReservedSpaceExecReadOnly = 0x00000000; ReservedSpaceExecReadPerWrite = 0x00005000; ReservedSpaceExecWriteCopy = 0x00000000; UnassignedSpaceNoAccess = 0x00000000; UnassignedSpaceReadOnly = 0x000e2000; UnassignedSpaceReadPerWrite = 0x00025000; UnassignedSpaceWriteCopy = 0x00006000; UnassignedSpaceExecutable = 0x00000000; UnassignedSpaceExecReadOnly = 0x004e2000; UnassignedSpaceExecReadPerWrite = 0x00000000; UnassignedSpaceExecWriteCopy = 0x00000000; ImageSpaceNoAccess = 0x00000000; ImageSpaceReadOnly = 0x00102000; ImageSpaceReadPerWrite = 0x00038000; ImageSpaceWriteCopy = 0x00012000; ImageSpaceExecutable = 0x00000000; ImageSpaceExecReadOnly = 0x004e5000; ImageSpaceExecReadPerWrite = 0x00000000; ImageSpaceExecWriteCopy = 0x00000000; }; [ costly, vendor("Microsoft"), guid("{5C7A4F6B-9E4D-11d1-BB3C-00A0C913CAD4}"), locale("ms:\\0x0409"), displayname("Image"), perfindex(740), helpindex(741), perfdetail(400) ] class Win32Perf_Image : Win32_PerfFormattedData { [key] string Name; uint64 Timestamp; [ perfdefault, displayname("No Access"), countertype(65536), perfindex(788), helpindex(789), defaultscale(0), perfdetail(400) ] uint32 NoAccess; [ displayname("Read Only"), countertype(65536), perfindex(790), helpindex(791), defaultscale(0), perfdetail(400) ] uint32 ReadOnly; [ displayname("Read/Write"), countertype(65536), perfindex(792), helpindex(793), defaultscale(0), perfdetail(400) ] uint32 ReadPerWrite; [ displayname("Write Copy"), countertype(65536), perfindex(794), helpindex(795), defaultscale(0), perfdetail(400) ] uint32 WriteCopy; [ displayname("Executable"), countertype(65536), perfindex(796), helpindex(797), defaultscale(0), perfdetail(400) ] uint32 Executable; [ displayname("Exec Read Only"), countertype(65536), perfindex(798), helpindex(799), defaultscale(0), perfdetail(400) ] uint32 ExecReadOnly; [ displayname("Exec Read/Write"), countertype(65536), perfindex(800), helpindex(801), defaultscale(0), perfdetail(400) ] uint32 ExecReadPerWrite; [ displayname("Exec Write Copy"), countertype(65536), perfindex(802), helpindex(803), defaultscale(0), perfdetail(400) ] uint32 ExecWriteCopy; }; [ costly, vendor("Microsoft"), guid("{5C7A4F6B-9E4D-11d1-BB3C-00A0C913CAD4}"), locale("ms:\\0x0409"), displayname("Image"), perfindex(740), helpindex(741), perfdetail(400) ] class Win32Perf_RawImage : Win32_PerfRawData { [key] string Name; uint64 Timestamp; [ perfdefault, displayname("No Access"), countertype(65536), perfindex(788), helpindex(789), defaultscale(0), perfdetail(400) ] uint32 NoAccess; [ displayname("Read Only"), countertype(65536), perfindex(790), helpindex(791), defaultscale(0), perfdetail(400) ] uint32 ReadOnly; [ displayname("Read/Write"), countertype(65536), perfindex(792), helpindex(793), defaultscale(0), perfdetail(400) ] uint32 ReadPerWrite; [ displayname("Write Copy"), countertype(65536), perfindex(794), helpindex(795), defaultscale(0), perfdetail(400) ] uint32 WriteCopy; [ displayname("Executable"), countertype(65536), perfindex(796), helpindex(797), defaultscale(0), perfdetail(400) ] uint32 Executable; [ displayname("Exec Read Only"), countertype(65536), perfindex(798), helpindex(799), defaultscale(0), perfdetail(400) ] uint32 ExecReadOnly; [ displayname("Exec Read/Write"), countertype(65536), perfindex(800), helpindex(801), defaultscale(0), perfdetail(400) ] uint32 ExecReadPerWrite; [ displayname("Exec Write Copy"), countertype(65536), perfindex(802), helpindex(803), defaultscale(0), perfdetail(400) ] uint32 ExecWriteCopy; }; instance of Win32Perf_RawImage { Name = "Explorer/Explorer.exe"; NoAccess = 0x00000000; ReadOnly = 0x00001000; ReadPerWrite = 0x00001000; WriteCopy = 0x00000000; Executable = 0x00000000; ExecReadOnly = 0x00000000; ExecReadPerWrite = 0x00000000; ExecWriteCopy = 0x00000000; }; instance of Win32Perf_RawImage { Name = "Explorer/ntdll.dll"; NoAccess = 0x00000000; ReadOnly = 0x00001000; ReadPerWrite = 0x00001000; WriteCopy = 0x00001000; Executable = 0x00000000; ExecReadOnly = 0x00000000; ExecReadPerWrite = 0x00000000; ExecWriteCopy = 0x00000000; }; instance of Win32Perf_RawImage { Name = "Explorer/ADVAPI32.dll"; NoAccess = 0x00000000; ReadOnly = 0x00001000; ReadPerWrite = 0x00001000; WriteCopy = 0x00001000; Executable = 0x00000000; ExecReadOnly = 0x00000000; ExecReadPerWrite = 0x00000000; ExecWriteCopy = 0x00000000; }; instance of Win32Perf_RawImage { Name = "Explorer/KERNEL32.dll"; NoAccess = 0x00000000; ReadOnly = 0x00001000; ReadPerWrite = 0x00002000; WriteCopy = 0x00000000; Executable = 0x00000000; ExecReadOnly = 0x00000000; ExecReadPerWrite = 0x00000000; ExecWriteCopy = 0x00000000; }; instance of Win32Perf_RawImage { Name = "Explorer/GDI32.dll"; NoAccess = 0x00000000; ReadOnly = 0x00001000; ReadPerWrite = 0x00001000; WriteCopy = 0x00000000; Executable = 0x00000000; ExecReadOnly = 0x00000000; ExecReadPerWrite = 0x00000000; ExecWriteCopy = 0x00000000; }; instance of Win32Perf_RawImage { Name = "Explorer/USER32.dll"; NoAccess = 0x00000000; ReadOnly = 0x00001000; ReadPerWrite = 0x00001000; WriteCopy = 0x00000000; Executable = 0x00000000; ExecReadOnly = 0x00000000; ExecReadPerWrite = 0x00000000; ExecWriteCopy = 0x00000000; }; instance of Win32Perf_RawImage { Name = "Explorer/SHLWAPI.dll"; NoAccess = 0x00000000; ReadOnly = 0x00001000; ReadPerWrite = 0x00001000; WriteCopy = 0x00001000; Executable = 0x00000000; ExecReadOnly = 0x00000000; ExecReadPerWrite = 0x00000000; ExecWriteCopy = 0x00000000; }; instance of Win32Perf_RawImage { Name = "Explorer/COMCTL32.dll"; NoAccess = 0x00000000; ReadOnly = 0x00001000; ReadPerWrite = 0x00001000; WriteCopy = 0x00000000; Executable = 0x00000000; ExecReadOnly = 0x00000000; ExecReadPerWrite = 0x00000000; ExecWriteCopy = 0x00000000; }; instance of Win32Perf_RawImage { Name = "Explorer/SHELL32.dll"; NoAccess = 0x00000000; ReadOnly = 0x00001000; ReadPerWrite = 0x00005000; WriteCopy = 0x00000000; Executable = 0x00000000; ExecReadOnly = 0x00000000; ExecReadPerWrite = 0x00000000; ExecWriteCopy = 0x00000000; }; instance of Win32Perf_RawImage { Name = "Explorer/MPR.dll"; NoAccess = 0x00000000; ReadOnly = 0x00001000; ReadPerWrite = 0x00000000; WriteCopy = 0x00000000; Executable = 0x00000000; ExecReadOnly = 0x00000000; ExecReadPerWrite = 0x00000000; ExecWriteCopy = 0x00000000; }; instance of Win32Perf_RawImage { Name = "Explorer/SHDOCVW.DLL"; NoAccess = 0x00000000; ReadOnly = 0x00001000; ReadPerWrite = 0x00001000; WriteCopy = 0x00000000; Executable = 0x00000000; ExecReadOnly = 0x00000000; ExecReadPerWrite = 0x00000000; ExecWriteCopy = 0x00000000; }; instance of Win32Perf_RawImage { Name = "Explorer/OLE32.DLL"; NoAccess = 0x00000000; ReadOnly = 0x00001000; ReadPerWrite = 0x00004000; WriteCopy = 0x00002000; Executable = 0x00000000; ExecReadOnly = 0x00000000; ExecReadPerWrite = 0x00000000; ExecWriteCopy = 0x00000000; }; instance of Win32Perf_RawImage { Name = "Explorer/RPCRT4.dll"; NoAccess = 0x00000000; ReadOnly = 0x00001000; ReadPerWrite = 0x00001000; WriteCopy = 0x00000000; Executable = 0x00000000; ExecReadOnly = 0x00000000; ExecReadPerWrite = 0x00000000; ExecWriteCopy = 0x00000000; }; instance of Win32Perf_RawImage { Name = "Explorer/msi.dll"; NoAccess = 0x00000000; ReadOnly = 0x00001000; ReadPerWrite = 0x00003000; WriteCopy = 0x00004000; Executable = 0x00000000; ExecReadOnly = 0x00000000; ExecReadPerWrite = 0x00000000; ExecWriteCopy = 0x00000000; }; instance of Win32Perf_RawImage { Name = "Explorer/browseui.dll"; NoAccess = 0x00000000; ReadOnly = 0x00001000; ReadPerWrite = 0x00001000; WriteCopy = 0x00000000; Executable = 0x00000000; ExecReadOnly = 0x00000000; ExecReadPerWrite = 0x00000000; ExecWriteCopy = 0x00000000; }; instance of Win32Perf_RawImage { Name = "Explorer/WININET.dll"; NoAccess = 0x00000000; ReadOnly = 0x00001000; ReadPerWrite = 0x00003000; WriteCopy = 0x00000000; Executable = 0x00000000; ExecReadOnly = 0x00000000; ExecReadPerWrite = 0x00000000; ExecWriteCopy = 0x00000000; }; instance of Win32Perf_RawImage { Name = "Explorer/rpclt1.dll"; NoAccess = 0x00000000; ReadOnly = 0x00001000; ReadPerWrite = 0x00000000; WriteCopy = 0x00000000; Executable = 0x00000000; ExecReadOnly = 0x00000000; ExecReadPerWrite = 0x00000000; ExecWriteCopy = 0x00000000; }; instance of Win32Perf_RawImage { Name = "Explorer/mydocs.dll"; NoAccess = 0x00000000; ReadOnly = 0x00001000; ReadPerWrite = 0x00001000; WriteCopy = 0x00000000; Executable = 0x00000000; ExecReadOnly = 0x00000000; ExecReadPerWrite = 0x00000000; ExecWriteCopy = 0x00000000; }; instance of Win32Perf_RawImage { Name = "Explorer/cscui.dll"; NoAccess = 0x00000000; ReadOnly = 0x00001000; ReadPerWrite = 0x00001000; WriteCopy = 0x00000000; Executable = 0x00000000; ExecReadOnly = 0x00000000; ExecReadPerWrite = 0x00000000; ExecWriteCopy = 0x00000000; }; instance of Win32Perf_RawImage { Name = "Explorer/MSVCRT.dll"; NoAccess = 0x00000000; ReadOnly = 0x00001000; ReadPerWrite = 0x00000000; WriteCopy = 0x00001000; Executable = 0x00000000; ExecReadOnly = 0x00000000; ExecReadPerWrite = 0x00000000; ExecWriteCopy = 0x00000000; }; instance of Win32Perf_RawImage { Name = "Explorer/CSCDLL.dll"; NoAccess = 0x00000000; ReadOnly = 0x00002000; ReadPerWrite = 0x00002000; WriteCopy = 0x00003000; Executable = 0x00000000; ExecReadOnly = 0x00000000; ExecReadPerWrite = 0x00000000; ExecWriteCopy = 0x00000000; }; instance of Win32Perf_RawImage { Name = "Explorer/NETAPI32.dll"; NoAccess = 0x00000000; ReadOnly = 0x00001000; ReadPerWrite = 0x00001000; WriteCopy = 0x00001000; Executable = 0x00000000; ExecReadOnly = 0x00000000; ExecReadPerWrite = 0x00000000; ExecWriteCopy = 0x00000000; }; instance of Win32Perf_RawImage { Name = "Explorer/Secur32.dll"; NoAccess = 0x00000000; ReadOnly = 0x00001000; ReadPerWrite = 0x00000000; WriteCopy = 0x00000000; Executable = 0x00000000; ExecReadOnly = 0x00000000; ExecReadPerWrite = 0x00000000; ExecWriteCopy = 0x00000000; }; instance of Win32Perf_RawImage { Name = "Explorer/NETRAP.dll"; NoAccess = 0x00000000; ReadOnly = 0x00001000; ReadPerWrite = 0x00000000; WriteCopy = 0x00001000; Executable = 0x00000000; ExecReadOnly = 0x00000000; ExecReadPerWrite = 0x00000000; ExecWriteCopy = 0x00000000; }; instance of Win32Perf_RawImage { Name = "Explorer/SAMLIB.dll"; NoAccess = 0x00000000; ReadOnly = 0x00001000; ReadPerWrite = 0x00000000; WriteCopy = 0x00000000; Executable = 0x00000000; ExecReadOnly = 0x00000000; ExecReadPerWrite = 0x00000000; ExecWriteCopy = 0x00000000; }; instance of Win32Perf_RawImage { Name = "Explorer/WS2_32.dll"; NoAccess = 0x00000000; ReadOnly = 0x00001000; ReadPerWrite = 0x00001000; WriteCopy = 0x00000000; Executable = 0x00000000; ExecReadOnly = 0x00000000; ExecReadPerWrite = 0x00000000; ExecWriteCopy = 0x00000000; }; instance of Win32Perf_RawImage { Name = "Explorer/WS2HELP.dll"; NoAccess = 0x00000000; ReadOnly = 0x00001000; ReadPerWrite = 0x00000000; WriteCopy = 0x00000000; Executable = 0x00000000; ExecReadOnly = 0x00000000; ExecReadPerWrite = 0x00000000; ExecWriteCopy = 0x00000000; }; instance of Win32Perf_RawImage { Name = "Explorer/WLDAP32.dll"; NoAccess = 0x00000000; ReadOnly = 0x00001000; ReadPerWrite = 0x00000000; WriteCopy = 0x00000000; Executable = 0x00000000; ExecReadOnly = 0x00000000; ExecReadPerWrite = 0x00000000; ExecWriteCopy = 0x00000000; }; instance of Win32Perf_RawImage { Name = "Explorer/DNSAPI.dll"; NoAccess = 0x00000000; ReadOnly = 0x00001000; ReadPerWrite = 0x00000000; WriteCopy = 0x00000000; Executable = 0x00000000; ExecReadOnly = 0x00000000; ExecReadPerWrite = 0x00000000; ExecWriteCopy = 0x00000000; }; instance of Win32Perf_RawImage { Name = "Explorer/WSOCK32.dll"; NoAccess = 0x00000000; ReadOnly = 0x00001000; ReadPerWrite = 0x00000000; WriteCopy = 0x00000000; Executable = 0x00000000; ExecReadOnly = 0x00001000; ExecReadPerWrite = 0x00000000; ExecWriteCopy = 0x00000000; }; instance of Win32Perf_RawImage { Name = "Explorer/nwprovau.dll"; NoAccess = 0x00000000; ReadOnly = 0x00001000; ReadPerWrite = 0x00002000; WriteCopy = 0x00000000; Executable = 0x00000000; ExecReadOnly = 0x00000000; ExecReadPerWrite = 0x00000000; ExecWriteCopy = 0x00000000; }; instance of Win32Perf_RawImage { Name = "Explorer/ntlanman.dll"; NoAccess = 0x00000000; ReadOnly = 0x00001000; ReadPerWrite = 0x00000000; WriteCopy = 0x00000000; Executable = 0x00000000; ExecReadOnly = 0x00000000; ExecReadPerWrite = 0x00000000; ExecWriteCopy = 0x00000000; }; instance of Win32Perf_RawImage { Name = "Explorer/NETUI0.dll"; NoAccess = 0x00000000; ReadOnly = 0x00001000; ReadPerWrite = 0x00001000; WriteCopy = 0x00000000; Executable = 0x00000000; ExecReadOnly = 0x00000000; ExecReadPerWrite = 0x00000000; ExecWriteCopy = 0x00000000; }; instance of Win32Perf_RawImage { Name = "Explorer/NETUI1.dll"; NoAccess = 0x00000000; ReadOnly = 0x00001000; ReadPerWrite = 0x00001000; WriteCopy = 0x00000000; Executable = 0x00000000; ExecReadOnly = 0x00000000; ExecReadPerWrite = 0x00000000; ExecWriteCopy = 0x00000000; }; instance of Win32Perf_RawImage { Name = "Explorer/NETSHELL.dll"; NoAccess = 0x00000000; ReadOnly = 0x00001000; ReadPerWrite = 0x00003000; WriteCopy = 0x00001000; Executable = 0x00000000; ExecReadOnly = 0x00000000; ExecReadPerWrite = 0x00000000; ExecWriteCopy = 0x00000000; }; instance of Win32Perf_RawImage { Name = "Explorer/MSVCP50.dll"; NoAccess = 0x00000000; ReadOnly = 0x00001000; ReadPerWrite = 0x00001000; WriteCopy = 0x00001000; Executable = 0x00000000; ExecReadOnly = 0x00000000; ExecReadPerWrite = 0x00000000; ExecWriteCopy = 0x00000000; }; instance of Win32Perf_RawImage { Name = "Explorer/OLEAUT32.dll"; NoAccess = 0x00000000; ReadOnly = 0x00001000; ReadPerWrite = 0x00000000; WriteCopy = 0x00000000; Executable = 0x00000000; ExecReadOnly = 0x00000000; ExecReadPerWrite = 0x00000000; ExecWriteCopy = 0x00000000; }; instance of Win32Perf_RawImage { Name = "Explorer/RASAPI32.dll"; NoAccess = 0x00000000; ReadOnly = 0x00001000; ReadPerWrite = 0x00001000; WriteCopy = 0x00000000; Executable = 0x00000000; ExecReadOnly = 0x00000000; ExecReadPerWrite = 0x00000000; ExecWriteCopy = 0x00000000; }; instance of Win32Perf_RawImage { Name = "Explorer/TAPI32.dll"; NoAccess = 0x00000000; ReadOnly = 0x00001000; ReadPerWrite = 0x00001000; WriteCopy = 0x00001000; Executable = 0x00000000; ExecReadOnly = 0x00000000; ExecReadPerWrite = 0x00000000; ExecWriteCopy = 0x00000000; }; instance of Win32Perf_RawImage { Name = "Explorer/rasman.dll"; NoAccess = 0x00000000; ReadOnly = 0x00001000; ReadPerWrite = 0x00000000; WriteCopy = 0x00000000; Executable = 0x00000000; ExecReadOnly = 0x00000000; ExecReadPerWrite = 0x00000000; ExecWriteCopy = 0x00000000; }; instance of Win32Perf_RawImage { Name = "Explorer/SETUPAPI.dll"; NoAccess = 0x00000000; ReadOnly = 0x00001000; ReadPerWrite = 0x00001000; WriteCopy = 0x00000000; Executable = 0x00000000; ExecReadOnly = 0x00000000; ExecReadPerWrite = 0x00000000; ExecWriteCopy = 0x00000000; }; instance of Win32Perf_RawImage { Name = "Explorer/LZ32.dll"; NoAccess = 0x00000000; ReadOnly = 0x00001000; ReadPerWrite = 0x00001000; WriteCopy = 0x00000000; Executable = 0x00000000; ExecReadOnly = 0x00000000; ExecReadPerWrite = 0x00000000; ExecWriteCopy = 0x00000000; }; instance of Win32Perf_RawImage { Name = "Explorer/comdlg32.dll"; NoAccess = 0x00000000; ReadOnly = 0x00001000; ReadPerWrite = 0x00001000; WriteCopy = 0x00003000; Executable = 0x00000000; ExecReadOnly = 0x00000000; ExecReadPerWrite = 0x00000000; ExecWriteCopy = 0x00000000; }; instance of Win32Perf_RawImage { Name = "Explorer/WINSPOOL.DRV"; NoAccess = 0x00000000; ReadOnly = 0x00001000; ReadPerWrite = 0x00001000; WriteCopy = 0x00002000; Executable = 0x00000000; ExecReadOnly = 0x00000000; ExecReadPerWrite = 0x00000000; ExecWriteCopy = 0x00000000; }; instance of Win32Perf_RawImage { Name = "Explorer/VERSION.dll"; NoAccess = 0x00000000; ReadOnly = 0x00001000; ReadPerWrite = 0x00000000; WriteCopy = 0x00000000; Executable = 0x00000000; ExecReadOnly = 0x00000000; ExecReadPerWrite = 0x00000000; ExecWriteCopy = 0x00000000; }; instance of Win32Perf_RawImage { Name = "Explorer/Cabinet.DLL"; NoAccess = 0x00000000; ReadOnly = 0x00002000; ReadPerWrite = 0x00000000; WriteCopy = 0x00000000; Executable = 0x00000000; ExecReadOnly = 0x00000000; ExecReadPerWrite = 0x00000000; ExecWriteCopy = 0x00000000; }; instance of Win32Perf_RawImage { Name = "Explorer/CFGMGR32.dll"; NoAccess = 0x00000000; ReadOnly = 0x00001000; ReadPerWrite = 0x00000000; WriteCopy = 0x00000000; Executable = 0x00000000; ExecReadOnly = 0x00000000; ExecReadPerWrite = 0x00000000; ExecWriteCopy = 0x00000000; }; instance of Win32Perf_RawImage { Name = "Explorer/RTUTILS.DLL"; NoAccess = 0x00000000; ReadOnly = 0x00001000; ReadPerWrite = 0x00001000; WriteCopy = 0x00000000; Executable = 0x00000000; ExecReadOnly = 0x00000000; ExecReadPerWrite = 0x00000000; ExecWriteCopy = 0x00000000; }; instance of Win32Perf_RawImage { Name = "Explorer/webcheck.dll"; NoAccess = 0x00000000; ReadOnly = 0x00001000; ReadPerWrite = 0x00002000; WriteCopy = 0x00001000; Executable = 0x00000000; ExecReadOnly = 0x00000000; ExecReadPerWrite = 0x00000000; ExecWriteCopy = 0x00000000; }; instance of Win32Perf_RawImage { Name = "Explorer/LINKINFO.DLL"; NoAccess = 0x00000000; ReadOnly = 0x00001000; ReadPerWrite = 0x00000000; WriteCopy = 0x00000000; Executable = 0x00000000; ExecReadOnly = 0x00000000; ExecReadPerWrite = 0x00000000; ExecWriteCopy = 0x00000000; }; instance of Win32Perf_RawImage { Name = "Explorer/ntshrui.dll"; NoAccess = 0x00000000; ReadOnly = 0x00001000; ReadPerWrite = 0x00001000; WriteCopy = 0x00000000; Executable = 0x00000000; ExecReadOnly = 0x00000000; ExecReadPerWrite = 0x00000000; ExecWriteCopy = 0x00000000; }; instance of Win32Perf_RawImage { Name = "Explorer/msidle.dll"; NoAccess = 0x00000000; ReadOnly = 0x00001000; ReadPerWrite = 0x00000000; WriteCopy = 0x00000000; Executable = 0x00000000; ExecReadOnly = 0x00001000; ExecReadPerWrite = 0x00000000; ExecWriteCopy = 0x00000000; }; instance of Win32Perf_RawImage { Name = "Explorer/urlmon.dll"; NoAccess = 0x00000000; ReadOnly = 0x00001000; ReadPerWrite = 0x00003000; WriteCopy = 0x00001000; Executable = 0x00000000; ExecReadOnly = 0x00000000; ExecReadPerWrite = 0x00000000; ExecWriteCopy = 0x00000000; }; instance of Win32Perf_RawImage { Name = "Explorer/dskquoui.dll"; NoAccess = 0x00000000; ReadOnly = 0x00001000; ReadPerWrite = 0x00001000; WriteCopy = 0x00000000; Executable = 0x00000000; ExecReadOnly = 0x00000000; ExecReadPerWrite = 0x00000000; ExecWriteCopy = 0x00000000; }; instance of Win32Perf_RawImage { Name = "Explorer/dskquota.dll"; NoAccess = 0x00000000; ReadOnly = 0x00001000; ReadPerWrite = 0x00001000; WriteCopy = 0x00000000; Executable = 0x00000000; ExecReadOnly = 0x00000000; ExecReadPerWrite = 0x00000000; ExecWriteCopy = 0x00000000; }; instance of Win32Perf_RawImage { Name = "Explorer/shcompui.dll"; NoAccess = 0x00000000; ReadOnly = 0x00001000; ReadPerWrite = 0x00001000; WriteCopy = 0x00000000; Executable = 0x00000000; ExecReadOnly = 0x00000000; ExecReadPerWrite = 0x00000000; ExecWriteCopy = 0x00000000; }; instance of Win32Perf_RawImage { Name = "Explorer/cryptmnu.dll"; NoAccess = 0x00000000; ReadOnly = 0x00001000; ReadPerWrite = 0x00000000; WriteCopy = 0x00000000; Executable = 0x00000000; ExecReadOnly = 0x00000000; ExecReadPerWrite = 0x00000000; ExecWriteCopy = 0x00000000; }; instance of Win32Perf_RawImage { Name = "SysTray/SysTray.Exe"; NoAccess = 0x00000000; ReadOnly = 0x00001000; ReadPerWrite = 0x00001000; WriteCopy = 0x00002000; Executable = 0x00000000; ExecReadOnly = 0x00000000; ExecReadPerWrite = 0x00000000; ExecWriteCopy = 0x00000000; }; instance of Win32Perf_RawImage { Name = "SysTray/ntdll.dll"; NoAccess = 0x00000000; ReadOnly = 0x00001000; ReadPerWrite = 0x00001000; WriteCopy = 0x00001000; Executable = 0x00000000; ExecReadOnly = 0x00000000; ExecReadPerWrite = 0x00000000; ExecWriteCopy = 0x00000000; }; instance of Win32Perf_RawImage { Name = "SysTray/ADVAPI32.dll"; NoAccess = 0x00000000; ReadOnly = 0x00001000; ReadPerWrite = 0x00001000; WriteCopy = 0x00001000; Executable = 0x00000000; ExecReadOnly = 0x00000000; ExecReadPerWrite = 0x00000000; ExecWriteCopy = 0x00000000; }; instance of Win32Perf_RawImage { Name = "SysTray/KERNEL32.dll"; NoAccess = 0x00000000; ReadOnly = 0x00001000; ReadPerWrite = 0x00002000; WriteCopy = 0x00000000; Executable = 0x00000000; ExecReadOnly = 0x00000000; ExecReadPerWrite = 0x00000000; ExecWriteCopy = 0x00000000; }; instance of Win32Perf_RawImage { Name = "SysTray/USER32.dll"; NoAccess = 0x00000000; ReadOnly = 0x00001000; ReadPerWrite = 0x00001000; WriteCopy = 0x00000000; Executable = 0x00000000; ExecReadOnly = 0x00000000; ExecReadPerWrite = 0x00000000; ExecWriteCopy = 0x00000000; }; instance of Win32Perf_RawImage { Name = "SysTray/GDI32.dll"; NoAccess = 0x00000000; ReadOnly = 0x00001000; ReadPerWrite = 0x00001000; WriteCopy = 0x00000000; Executable = 0x00000000; ExecReadOnly = 0x00000000; ExecReadPerWrite = 0x00000000; ExecWriteCopy = 0x00000000; }; instance of Win32Perf_RawImage { Name = "SysTray/COMCTL32.dll"; NoAccess = 0x00000000; ReadOnly = 0x00001000; ReadPerWrite = 0x00001000; WriteCopy = 0x00000000; Executable = 0x00000000; ExecReadOnly = 0x00000000; ExecReadPerWrite = 0x00000000; ExecWriteCopy = 0x00000000; }; instance of Win32Perf_RawImage { Name = "SysTray/SHELL32.dll"; NoAccess = 0x00000000; ReadOnly = 0x00001000; ReadPerWrite = 0x00001000; WriteCopy = 0x00004000; Executable = 0x00000000; ExecReadOnly = 0x00000000; ExecReadPerWrite = 0x00000000; ExecWriteCopy = 0x00000000; }; instance of Win32Perf_RawImage { Name = "SysTray/SHLWAPI.dll"; NoAccess = 0x00000000; ReadOnly = 0x00001000; ReadPerWrite = 0x00001000; WriteCopy = 0x00001000; Executable = 0x00000000; ExecReadOnly = 0x00000000; ExecReadPerWrite = 0x00000000; ExecWriteCopy = 0x00000000; }; instance of Win32Perf_RawImage { Name = "SysTray/MPR.dll"; NoAccess = 0x00000000; ReadOnly = 0x00001000; ReadPerWrite = 0x00000000; WriteCopy = 0x00000000; Executable = 0x00000000; ExecReadOnly = 0x00000000; ExecReadPerWrite = 0x00000000; ExecWriteCopy = 0x00000000; }; instance of Win32Perf_RawImage { Name = "SysTray/BatMeter.dll"; NoAccess = 0x00000000; ReadOnly = 0x00001000; ReadPerWrite = 0x00001000; WriteCopy = 0x00000000; Executable = 0x00000000; ExecReadOnly = 0x00002000; ExecReadPerWrite = 0x00000000; ExecWriteCopy = 0x00000000; }; instance of Win32Perf_RawImage { Name = "SysTray/SETUPAPI.dll"; NoAccess = 0x00000000; ReadOnly = 0x00001000; ReadPerWrite = 0x00001000; WriteCopy = 0x00000000; Executable = 0x00000000; ExecReadOnly = 0x00000000; ExecReadPerWrite = 0x00000000; ExecWriteCopy = 0x00000000; }; instance of Win32Perf_RawImage { Name = "SysTray/MSVCRT.dll"; NoAccess = 0x00000000; ReadOnly = 0x00001000; ReadPerWrite = 0x00000000; WriteCopy = 0x00001000; Executable = 0x00000000; ExecReadOnly = 0x00000000; ExecReadPerWrite = 0x00000000; ExecWriteCopy = 0x00000000; }; instance of Win32Perf_RawImage { Name = "SysTray/LZ32.dll"; NoAccess = 0x00000000; ReadOnly = 0x00001000; ReadPerWrite = 0x00001000; WriteCopy = 0x00000000; Executable = 0x00000000; ExecReadOnly = 0x00000000; ExecReadPerWrite = 0x00000000; ExecWriteCopy = 0x00000000; }; instance of Win32Perf_RawImage { Name = "SysTray/comdlg32.dll"; NoAccess = 0x00000000; ReadOnly = 0x00001000; ReadPerWrite = 0x00001000; WriteCopy = 0x00003000; Executable = 0x00000000; ExecReadOnly = 0x00000000; ExecReadPerWrite = 0x00000000; ExecWriteCopy = 0x00000000; }; instance of Win32Perf_RawImage { Name = "SysTray/WINSPOOL.DRV"; NoAccess = 0x00000000; ReadOnly = 0x00001000; ReadPerWrite = 0x00001000; WriteCopy = 0x00002000; Executable = 0x00000000; ExecReadOnly = 0x00000000; ExecReadPerWrite = 0x00000000; ExecWriteCopy = 0x00000000; }; instance of Win32Perf_RawImage { Name = "SysTray/RPCRT4.dll"; NoAccess = 0x00000000; ReadOnly = 0x00001000; ReadPerWrite = 0x00001000; WriteCopy = 0x00000000; Executable = 0x00000000; ExecReadOnly = 0x00000000; ExecReadPerWrite = 0x00000000; ExecWriteCopy = 0x00000000; }; instance of Win32Perf_RawImage { Name = "SysTray/ole32.dll"; NoAccess = 0x00000000; ReadOnly = 0x00001000; ReadPerWrite = 0x00002000; WriteCopy = 0x00004000; Executable = 0x00000000; ExecReadOnly = 0x00000000; ExecReadPerWrite = 0x00000000; ExecWriteCopy = 0x00000000; }; instance of Win32Perf_RawImage { Name = "SysTray/VERSION.dll"; NoAccess = 0x00000000; ReadOnly = 0x00001000; ReadPerWrite = 0x00000000; WriteCopy = 0x00000000; Executable = 0x00000000; ExecReadOnly = 0x00000000; ExecReadPerWrite = 0x00000000; ExecWriteCopy = 0x00000000; }; instance of Win32Perf_RawImage { Name = "SysTray/Cabinet.DLL"; NoAccess = 0x00000000; ReadOnly = 0x00002000; ReadPerWrite = 0x00000000; WriteCopy = 0x00000000; Executable = 0x00000000; ExecReadOnly = 0x00000000; ExecReadPerWrite = 0x00000000; ExecWriteCopy = 0x00000000; }; instance of Win32Perf_RawImage { Name = "SysTray/CFGMGR32.dll"; NoAccess = 0x00000000; ReadOnly = 0x00001000; ReadPerWrite = 0x00000000; WriteCopy = 0x00000000; Executable = 0x00000000; ExecReadOnly = 0x00000000; ExecReadPerWrite = 0x00000000; ExecWriteCopy = 0x00000000; }; instance of Win32Perf_RawImage { Name = "SysTray/POWRPROF.dll"; NoAccess = 0x00000000; ReadOnly = 0x00001000; ReadPerWrite = 0x00000000; WriteCopy = 0x00000000; Executable = 0x00000000; ExecReadOnly = 0x00000000; ExecReadPerWrite = 0x00000000; ExecWriteCopy = 0x00000000; }; instance of Win32Perf_RawImage { Name = "SysTray/WINMM.dll"; NoAccess = 0x00000000; ReadOnly = 0x00001000; ReadPerWrite = 0x00004000; WriteCopy = 0x00000000; Executable = 0x00000000; ExecReadOnly = 0x00001000; ExecReadPerWrite = 0x00000000; ExecWriteCopy = 0x00000000; }; instance of Win32Perf_RawImage { Name = "SysTray/DINPUT.dll"; NoAccess = 0x00000000; ReadOnly = 0x00001000; ReadPerWrite = 0x00001000; WriteCopy = 0x00000000; Executable = 0x00000000; ExecReadOnly = 0x00000000; ExecReadPerWrite = 0x00000000; ExecWriteCopy = 0x00000000; }; instance of Win32Perf_RawImage { Name = "SysTray/CSCDLL.dll"; NoAccess = 0x00000000; ReadOnly = 0x00002000; ReadPerWrite = 0x00002000; WriteCopy = 0x00003000; Executable = 0x00000000; ExecReadOnly = 0x00000000; ExecReadPerWrite = 0x00000000; ExecWriteCopy = 0x00000000; }; instance of Win32Perf_RawImage { Name = "SysTray/NETAPI32.dll"; NoAccess = 0x00000000; ReadOnly = 0x00001000; ReadPerWrite = 0x00001000; WriteCopy = 0x00001000; Executable = 0x00000000; ExecReadOnly = 0x00000000; ExecReadPerWrite = 0x00000000; ExecWriteCopy = 0x00000000; }; instance of Win32Perf_RawImage { Name = "SysTray/Secur32.dll"; NoAccess = 0x00000000; ReadOnly = 0x00001000; ReadPerWrite = 0x00000000; WriteCopy = 0x00000000; Executable = 0x00000000; ExecReadOnly = 0x00000000; ExecReadPerWrite = 0x00000000; ExecWriteCopy = 0x00000000; }; instance of Win32Perf_RawImage { Name = "SysTray/NETRAP.dll"; NoAccess = 0x00000000; ReadOnly = 0x00001000; ReadPerWrite = 0x00000000; WriteCopy = 0x00001000; Executable = 0x00000000; ExecReadOnly = 0x00000000; ExecReadPerWrite = 0x00000000; ExecWriteCopy = 0x00000000; }; instance of Win32Perf_RawImage { Name = "SysTray/SAMLIB.dll"; NoAccess = 0x00000000; ReadOnly = 0x00001000; ReadPerWrite = 0x00000000; WriteCopy = 0x00000000; Executable = 0x00000000; ExecReadOnly = 0x00000000; ExecReadPerWrite = 0x00000000; ExecWriteCopy = 0x00000000; }; instance of Win32Perf_RawImage { Name = "SysTray/WS2_32.dll"; NoAccess = 0x00000000; ReadOnly = 0x00001000; ReadPerWrite = 0x00001000; WriteCopy = 0x00000000; Executable = 0x00000000; ExecReadOnly = 0x00000000; ExecReadPerWrite = 0x00000000; ExecWriteCopy = 0x00000000; }; instance of Win32Perf_RawImage { Name = "SysTray/WS2HELP.dll"; NoAccess = 0x00000000; ReadOnly = 0x00001000; ReadPerWrite = 0x00000000; WriteCopy = 0x00000000; Executable = 0x00000000; ExecReadOnly = 0x00000000; ExecReadPerWrite = 0x00000000; ExecWriteCopy = 0x00000000; }; instance of Win32Perf_RawImage { Name = "SysTray/WLDAP32.dll"; NoAccess = 0x00000000; ReadOnly = 0x00001000; ReadPerWrite = 0x00000000; WriteCopy = 0x00000000; Executable = 0x00000000; ExecReadOnly = 0x00000000; ExecReadPerWrite = 0x00000000; ExecWriteCopy = 0x00000000; }; instance of Win32Perf_RawImage { Name = "SysTray/DNSAPI.dll"; NoAccess = 0x00000000; ReadOnly = 0x00001000; ReadPerWrite = 0x00000000; WriteCopy = 0x00000000; Executable = 0x00000000; ExecReadOnly = 0x00000000; ExecReadPerWrite = 0x00000000; ExecWriteCopy = 0x00000000; }; instance of Win32Perf_RawImage { Name = "SysTray/WSOCK32.dll"; NoAccess = 0x00000000; ReadOnly = 0x00001000; ReadPerWrite = 0x00000000; WriteCopy = 0x00000000; Executable = 0x00000000; ExecReadOnly = 0x00001000; ExecReadPerWrite = 0x00000000; ExecWriteCopy = 0x00000000; }; instance of Win32Perf_RawImage { Name = "SysTray/rpclt1.dll"; NoAccess = 0x00000000; ReadOnly = 0x00001000; ReadPerWrite = 0x00000000; WriteCopy = 0x00000000; Executable = 0x00000000; ExecReadOnly = 0x00000000; ExecReadPerWrite = 0x00000000; ExecWriteCopy = 0x00000000; }; instance of Win32Perf_RawImage { Name = "CMD/CMD.exe"; NoAccess = 0x00000000; ReadOnly = 0x00001000; ReadPerWrite = 0x00003000; WriteCopy = 0x00003000; Executable = 0x00000000; ExecReadOnly = 0x00000000; ExecReadPerWrite = 0x00000000; ExecWriteCopy = 0x00000000; }; instance of Win32Perf_RawImage { Name = "CMD/ntdll.dll"; NoAccess = 0x00000000; ReadOnly = 0x00001000; ReadPerWrite = 0x00001000; WriteCopy = 0x00001000; Executable = 0x00000000; ExecReadOnly = 0x00000000; ExecReadPerWrite = 0x00000000; ExecWriteCopy = 0x00000000; }; instance of Win32Perf_RawImage { Name = "CMD/ADVAPI32.dll"; NoAccess = 0x00000000; ReadOnly = 0x00001000; ReadPerWrite = 0x00001000; WriteCopy = 0x00001000; Executable = 0x00000000; ExecReadOnly = 0x00000000; ExecReadPerWrite = 0x00000000; ExecWriteCopy = 0x00000000; }; instance of Win32Perf_RawImage { Name = "CMD/KERNEL32.dll"; NoAccess = 0x00000000; ReadOnly = 0x00001000; ReadPerWrite = 0x00002000; WriteCopy = 0x00000000; Executable = 0x00000000; ExecReadOnly = 0x00000000; ExecReadPerWrite = 0x00000000; ExecWriteCopy = 0x00000000; }; instance of Win32Perf_RawImage { Name = "CMD/USER32.dll"; NoAccess = 0x00000000; ReadOnly = 0x00001000; ReadPerWrite = 0x00001000; WriteCopy = 0x00000000; Executable = 0x00000000; ExecReadOnly = 0x00000000; ExecReadPerWrite = 0x00000000; ExecWriteCopy = 0x00000000; }; instance of Win32Perf_RawImage { Name = "CMD/GDI32.dll"; NoAccess = 0x00000000; ReadOnly = 0x00001000; ReadPerWrite = 0x00001000; WriteCopy = 0x00000000; Executable = 0x00000000; ExecReadOnly = 0x00000000; ExecReadPerWrite = 0x00000000; ExecWriteCopy = 0x00000000; }; instance of Win32Perf_RawImage { Name = "CMD/cmd.exe"; NoAccess = 0x00000000; ReadOnly = 0x00001000; ReadPerWrite = 0x00003000; WriteCopy = 0x00003000; Executable = 0x00000000; ExecReadOnly = 0x00000000; ExecReadPerWrite = 0x00000000; ExecWriteCopy = 0x00000000; }; instance of Win32Perf_RawImage { Name = "CMD/ntdll.dll"; NoAccess = 0x00000000; ReadOnly = 0x00001000; ReadPerWrite = 0x00001000; WriteCopy = 0x00001000; Executable = 0x00000000; ExecReadOnly = 0x00000000; ExecReadPerWrite = 0x00000000; ExecWriteCopy = 0x00000000; }; instance of Win32Perf_RawImage { Name = "CMD/ADVAPI32.dll"; NoAccess = 0x00000000; ReadOnly = 0x00001000; ReadPerWrite = 0x00001000; WriteCopy = 0x00001000; Executable = 0x00000000; ExecReadOnly = 0x00000000; ExecReadPerWrite = 0x00000000; ExecWriteCopy = 0x00000000; }; instance of Win32Perf_RawImage { Name = "CMD/KERNEL32.dll"; NoAccess = 0x00000000; ReadOnly = 0x00001000; ReadPerWrite = 0x00002000; WriteCopy = 0x00000000; Executable = 0x00000000; ExecReadOnly = 0x00000000; ExecReadPerWrite = 0x00000000; ExecWriteCopy = 0x00000000; }; instance of Win32Perf_RawImage { Name = "CMD/USER32.dll"; NoAccess = 0x00000000; ReadOnly = 0x00001000; ReadPerWrite = 0x00001000; WriteCopy = 0x00000000; Executable = 0x00000000; ExecReadOnly = 0x00000000; ExecReadPerWrite = 0x00000000; ExecWriteCopy = 0x00000000; }; instance of Win32Perf_RawImage { Name = "CMD/GDI32.dll"; NoAccess = 0x00000000; ReadOnly = 0x00001000; ReadPerWrite = 0x00001000; WriteCopy = 0x00000000; Executable = 0x00000000; ExecReadOnly = 0x00000000; ExecReadPerWrite = 0x00000000; ExecWriteCopy = 0x00000000; }; instance of Win32Perf_RawImage { Name = "findfast/findfast.exe"; NoAccess = 0x00000000; ReadOnly = 0x00002000; ReadPerWrite = 0x00000000; WriteCopy = 0x00001000; Executable = 0x00000000; ExecReadOnly = 0x00000000; ExecReadPerWrite = 0x00000000; ExecWriteCopy = 0x00000000; }; instance of Win32Perf_RawImage { Name = "findfast/ntdll.dll"; NoAccess = 0x00000000; ReadOnly = 0x00001000; ReadPerWrite = 0x00001000; WriteCopy = 0x00001000; Executable = 0x00000000; ExecReadOnly = 0x00000000; ExecReadPerWrite = 0x00000000; ExecWriteCopy = 0x00000000; }; instance of Win32Perf_RawImage { Name = "findfast/KERNEL32.dll"; NoAccess = 0x00000000; ReadOnly = 0x00001000; ReadPerWrite = 0x00002000; WriteCopy = 0x00000000; Executable = 0x00000000; ExecReadOnly = 0x00000000; ExecReadPerWrite = 0x00000000; ExecWriteCopy = 0x00000000; }; instance of Win32Perf_RawImage { Name = "findfast/USER32.dll"; NoAccess = 0x00000000; ReadOnly = 0x00001000; ReadPerWrite = 0x00001000; WriteCopy = 0x00000000; Executable = 0x00000000; ExecReadOnly = 0x00000000; ExecReadPerWrite = 0x00000000; ExecWriteCopy = 0x00000000; }; instance of Win32Perf_RawImage { Name = "findfast/GDI32.dll"; NoAccess = 0x00000000; ReadOnly = 0x00001000; ReadPerWrite = 0x00001000; WriteCopy = 0x00000000; Executable = 0x00000000; ExecReadOnly = 0x00000000; ExecReadPerWrite = 0x00000000; ExecWriteCopy = 0x00000000; }; instance of Win32Perf_RawImage { Name = "findfast/ADVAPI32.dll"; NoAccess = 0x00000000; ReadOnly = 0x00001000; ReadPerWrite = 0x00001000; WriteCopy = 0x00001000; Executable = 0x00000000; ExecReadOnly = 0x00000000; ExecReadPerWrite = 0x00000000; ExecWriteCopy = 0x00000000; }; instance of Win32Perf_RawImage { Name = "findfast/SHELL32.dll"; NoAccess = 0x00000000; ReadOnly = 0x00001000; ReadPerWrite = 0x00004000; WriteCopy = 0x00001000; Executable = 0x00000000; ExecReadOnly = 0x00000000; ExecReadPerWrite = 0x00000000; ExecWriteCopy = 0x00000000; }; instance of Win32Perf_RawImage { Name = "findfast/SHLWAPI.dll"; NoAccess = 0x00000000; ReadOnly = 0x00001000; ReadPerWrite = 0x00001000; WriteCopy = 0x00001000; Executable = 0x00000000; ExecReadOnly = 0x00000000; ExecReadPerWrite = 0x00000000; ExecWriteCopy = 0x00000000; }; instance of Win32Perf_RawImage { Name = "findfast/MPR.dll"; NoAccess = 0x00000000; ReadOnly = 0x00001000; ReadPerWrite = 0x00000000; WriteCopy = 0x00000000; Executable = 0x00000000; ExecReadOnly = 0x00000000; ExecReadPerWrite = 0x00000000; ExecWriteCopy = 0x00000000; }; instance of Win32Perf_RawImage { Name = "findfast/COMCTL32.dll"; NoAccess = 0x00000000; ReadOnly = 0x00001000; ReadPerWrite = 0x00001000; WriteCopy = 0x00000000; Executable = 0x00000000; ExecReadOnly = 0x00000000; ExecReadPerWrite = 0x00000000; ExecWriteCopy = 0x00000000; }; instance of Win32Perf_RawImage { Name = "findfast/ole32.dll"; NoAccess = 0x00000000; ReadOnly = 0x00001000; ReadPerWrite = 0x00002000; WriteCopy = 0x00004000; Executable = 0x00000000; ExecReadOnly = 0x00000000; ExecReadPerWrite = 0x00000000; ExecWriteCopy = 0x00000000; }; instance of Win32Perf_RawImage { Name = "findfast/RPCRT4.dll"; NoAccess = 0x00000000; ReadOnly = 0x00001000; ReadPerWrite = 0x00001000; WriteCopy = 0x00000000; Executable = 0x00000000; ExecReadOnly = 0x00000000; ExecReadPerWrite = 0x00000000; ExecWriteCopy = 0x00000000; }; instance of Win32Perf_RawImage { Name = "findfast/VERSION.dll"; NoAccess = 0x00000000; ReadOnly = 0x00001000; ReadPerWrite = 0x00000000; WriteCopy = 0x00000000; Executable = 0x00000000; ExecReadOnly = 0x00000000; ExecReadPerWrite = 0x00000000; ExecWriteCopy = 0x00000000; }; instance of Win32Perf_RawImage { Name = "findfast/Cabinet.DLL"; NoAccess = 0x00000000; ReadOnly = 0x00002000; ReadPerWrite = 0x00000000; WriteCopy = 0x00000000; Executable = 0x00000000; ExecReadOnly = 0x00000000; ExecReadPerWrite = 0x00000000; ExecWriteCopy = 0x00000000; }; instance of Win32Perf_RawImage { Name = "findfast/MSO97.DLL"; NoAccess = 0x00000000; ReadOnly = 0x00001000; ReadPerWrite = 0x00007000; WriteCopy = 0x00002000; Executable = 0x00000000; ExecReadOnly = 0x00000000; ExecReadPerWrite = 0x00000000; ExecWriteCopy = 0x00000000; }; instance of Win32Perf_RawImage { Name = "findfast/riched20.dll"; NoAccess = 0x00000000; ReadOnly = 0x00001000; ReadPerWrite = 0x00002000; WriteCopy = 0x00001000; Executable = 0x00000000; ExecReadOnly = 0x00000000; ExecReadPerWrite = 0x00000000; ExecWriteCopy = 0x00000000; }; instance of Win32Perf_RawImage { Name = "findfast/MSVCRT.dll"; NoAccess = 0x00000000; ReadOnly = 0x00001000; ReadPerWrite = 0x00000000; WriteCopy = 0x00001000; Executable = 0x00000000; ExecReadOnly = 0x00000000; ExecReadPerWrite = 0x00000000; ExecWriteCopy = 0x00000000; }; instance of Win32Perf_RawImage { Name = "findfast/imm32.dll"; NoAccess = 0x00000000; ReadOnly = 0x00001000; ReadPerWrite = 0x00001000; WriteCopy = 0x00000000; Executable = 0x00000000; ExecReadOnly = 0x00000000; ExecReadPerWrite = 0x00000000; ExecWriteCopy = 0x00000000; }; instance of Win32Perf_RawImage { Name = "findfast/rpclt1.dll"; NoAccess = 0x00000000; ReadOnly = 0x00001000; ReadPerWrite = 0x00000000; WriteCopy = 0x00000000; Executable = 0x00000000; ExecReadOnly = 0x00000000; ExecReadPerWrite = 0x00000000; ExecWriteCopy = 0x00000000; }; instance of Win32Perf_RawImage { Name = "findfast/ntshrui.dll"; NoAccess = 0x00000000; ReadOnly = 0x00001000; ReadPerWrite = 0x00001000; WriteCopy = 0x00000000; Executable = 0x00000000; ExecReadOnly = 0x00000000; ExecReadPerWrite = 0x00000000; ExecWriteCopy = 0x00000000; }; instance of Win32Perf_RawImage { Name = "findfast/NETAPI32.dll"; NoAccess = 0x00000000; ReadOnly = 0x00001000; ReadPerWrite = 0x00001000; WriteCopy = 0x00001000; Executable = 0x00000000; ExecReadOnly = 0x00000000; ExecReadPerWrite = 0x00000000; ExecWriteCopy = 0x00000000; }; instance of Win32Perf_RawImage { Name = "findfast/Secur32.dll"; NoAccess = 0x00000000; ReadOnly = 0x00001000; ReadPerWrite = 0x00000000; WriteCopy = 0x00000000; Executable = 0x00000000; ExecReadOnly = 0x00000000; ExecReadPerWrite = 0x00000000; ExecWriteCopy = 0x00000000; }; instance of Win32Perf_RawImage { Name = "findfast/NETRAP.dll"; NoAccess = 0x00000000; ReadOnly = 0x00001000; ReadPerWrite = 0x00000000; WriteCopy = 0x00001000; Executable = 0x00000000; ExecReadOnly = 0x00000000; ExecReadPerWrite = 0x00000000; ExecWriteCopy = 0x00000000; }; instance of Win32Perf_RawImage { Name = "findfast/SAMLIB.dll"; NoAccess = 0x00000000; ReadOnly = 0x00001000; ReadPerWrite = 0x00000000; WriteCopy = 0x00000000; Executable = 0x00000000; ExecReadOnly = 0x00000000; ExecReadPerWrite = 0x00000000; ExecWriteCopy = 0x00000000; }; instance of Win32Perf_RawImage { Name = "findfast/WS2_32.dll"; NoAccess = 0x00000000; ReadOnly = 0x00001000; ReadPerWrite = 0x00001000; WriteCopy = 0x00000000; Executable = 0x00000000; ExecReadOnly = 0x00000000; ExecReadPerWrite = 0x00000000; ExecWriteCopy = 0x00000000; }; instance of Win32Perf_RawImage { Name = "findfast/WS2HELP.dll"; NoAccess = 0x00000000; ReadOnly = 0x00001000; ReadPerWrite = 0x00000000; WriteCopy = 0x00000000; Executable = 0x00000000; ExecReadOnly = 0x00000000; ExecReadPerWrite = 0x00000000; ExecWriteCopy = 0x00000000; }; instance of Win32Perf_RawImage { Name = "findfast/WLDAP32.dll"; NoAccess = 0x00000000; ReadOnly = 0x00001000; ReadPerWrite = 0x00000000; WriteCopy = 0x00000000; Executable = 0x00000000; ExecReadOnly = 0x00000000; ExecReadPerWrite = 0x00000000; ExecWriteCopy = 0x00000000; }; instance of Win32Perf_RawImage { Name = "findfast/DNSAPI.dll"; NoAccess = 0x00000000; ReadOnly = 0x00001000; ReadPerWrite = 0x00000000; WriteCopy = 0x00000000; Executable = 0x00000000; ExecReadOnly = 0x00000000; ExecReadPerWrite = 0x00000000; ExecWriteCopy = 0x00000000; }; instance of Win32Perf_RawImage { Name = "findfast/WSOCK32.dll"; NoAccess = 0x00000000; ReadOnly = 0x00001000; ReadPerWrite = 0x00000000; WriteCopy = 0x00000000; Executable = 0x00000000; ExecReadOnly = 0x00001000; ExecReadPerWrite = 0x00000000; ExecWriteCopy = 0x00000000; }; instance of Win32Perf_RawImage { Name = "findfast/LINKINFO.DLL"; NoAccess = 0x00000000; ReadOnly = 0x00001000; ReadPerWrite = 0x00000000; WriteCopy = 0x00000000; Executable = 0x00000000; ExecReadOnly = 0x00000000; ExecReadPerWrite = 0x00000000; ExecWriteCopy = 0x00000000; }; instance of Win32Perf_RawImage { Name = "findfast/nwprovau.dll"; NoAccess = 0x00000000; ReadOnly = 0x00001000; ReadPerWrite = 0x00002000; WriteCopy = 0x00000000; Executable = 0x00000000; ExecReadOnly = 0x00000000; ExecReadPerWrite = 0x00000000; ExecWriteCopy = 0x00000000; }; instance of Win32Perf_RawImage { Name = "findfast/ntlanman.dll"; NoAccess = 0x00000000; ReadOnly = 0x00001000; ReadPerWrite = 0x00000000; WriteCopy = 0x00000000; Executable = 0x00000000; ExecReadOnly = 0x00000000; ExecReadPerWrite = 0x00000000; ExecWriteCopy = 0x00000000; }; instance of Win32Perf_RawImage { Name = "findfast/NETUI0.dll"; NoAccess = 0x00000000; ReadOnly = 0x00001000; ReadPerWrite = 0x00001000; WriteCopy = 0x00000000; Executable = 0x00000000; ExecReadOnly = 0x00000000; ExecReadPerWrite = 0x00000000; ExecWriteCopy = 0x00000000; }; instance of Win32Perf_RawImage { Name = "findfast/NETUI1.dll"; NoAccess = 0x00000000; ReadOnly = 0x00001000; ReadPerWrite = 0x00001000; WriteCopy = 0x00000000; Executable = 0x00000000; ExecReadOnly = 0x00000000; ExecReadPerWrite = 0x00000000; ExecWriteCopy = 0x00000000; }; instance of Win32Perf_RawImage { Name = "CMD/CMD.exe"; NoAccess = 0x00000000; ReadOnly = 0x00001000; ReadPerWrite = 0x00003000; WriteCopy = 0x00003000; Executable = 0x00000000; ExecReadOnly = 0x00000000; ExecReadPerWrite = 0x00000000; ExecWriteCopy = 0x00000000; }; instance of Win32Perf_RawImage { Name = "CMD/ntdll.dll"; NoAccess = 0x00000000; ReadOnly = 0x00001000; ReadPerWrite = 0x00001000; WriteCopy = 0x00001000; Executable = 0x00000000; ExecReadOnly = 0x00000000; ExecReadPerWrite = 0x00000000; ExecWriteCopy = 0x00000000; }; instance of Win32Perf_RawImage { Name = "CMD/ADVAPI32.dll"; NoAccess = 0x00000000; ReadOnly = 0x00001000; ReadPerWrite = 0x00001000; WriteCopy = 0x00001000; Executable = 0x00000000; ExecReadOnly = 0x00000000; ExecReadPerWrite = 0x00000000; ExecWriteCopy = 0x00000000; }; instance of Win32Perf_RawImage { Name = "CMD/KERNEL32.dll"; NoAccess = 0x00000000; ReadOnly = 0x00001000; ReadPerWrite = 0x00002000; WriteCopy = 0x00000000; Executable = 0x00000000; ExecReadOnly = 0x00000000; ExecReadPerWrite = 0x00000000; ExecWriteCopy = 0x00000000; }; instance of Win32Perf_RawImage { Name = "CMD/USER32.dll"; NoAccess = 0x00000000; ReadOnly = 0x00001000; ReadPerWrite = 0x00001000; WriteCopy = 0x00000000; Executable = 0x00000000; ExecReadOnly = 0x00000000; ExecReadPerWrite = 0x00000000; ExecWriteCopy = 0x00000000; }; instance of Win32Perf_RawImage { Name = "CMD/GDI32.dll"; NoAccess = 0x00000000; ReadOnly = 0x00001000; ReadPerWrite = 0x00001000; WriteCopy = 0x00000000; Executable = 0x00000000; ExecReadOnly = 0x00000000; ExecReadPerWrite = 0x00000000; ExecWriteCopy = 0x00000000; }; instance of Win32Perf_RawImage { Name = "CMD/cmd.exe"; NoAccess = 0x00000000; ReadOnly = 0x00001000; ReadPerWrite = 0x00003000; WriteCopy = 0x00003000; Executable = 0x00000000; ExecReadOnly = 0x00000000; ExecReadPerWrite = 0x00000000; ExecWriteCopy = 0x00000000; }; instance of Win32Perf_RawImage { Name = "CMD/ntdll.dll"; NoAccess = 0x00000000; ReadOnly = 0x00001000; ReadPerWrite = 0x00001000; WriteCopy = 0x00001000; Executable = 0x00000000; ExecReadOnly = 0x00000000; ExecReadPerWrite = 0x00000000; ExecWriteCopy = 0x00000000; }; instance of Win32Perf_RawImage { Name = "CMD/ADVAPI32.dll"; NoAccess = 0x00000000; ReadOnly = 0x00001000; ReadPerWrite = 0x00001000; WriteCopy = 0x00001000; Executable = 0x00000000; ExecReadOnly = 0x00000000; ExecReadPerWrite = 0x00000000; ExecWriteCopy = 0x00000000; }; instance of Win32Perf_RawImage { Name = "CMD/KERNEL32.dll"; NoAccess = 0x00000000; ReadOnly = 0x00001000; ReadPerWrite = 0x00002000; WriteCopy = 0x00000000; Executable = 0x00000000; ExecReadOnly = 0x00000000; ExecReadPerWrite = 0x00000000; ExecWriteCopy = 0x00000000; }; instance of Win32Perf_RawImage { Name = "CMD/USER32.dll"; NoAccess = 0x00000000; ReadOnly = 0x00001000; ReadPerWrite = 0x00001000; WriteCopy = 0x00000000; Executable = 0x00000000; ExecReadOnly = 0x00000000; ExecReadPerWrite = 0x00000000; ExecWriteCopy = 0x00000000; }; instance of Win32Perf_RawImage { Name = "CMD/GDI32.dll"; NoAccess = 0x00000000; ReadOnly = 0x00001000; ReadPerWrite = 0x00001000; WriteCopy = 0x00000000; Executable = 0x00000000; ExecReadOnly = 0x00000000; ExecReadPerWrite = 0x00000000; ExecWriteCopy = 0x00000000; }; instance of Win32Perf_RawImage { Name = "notepad/notepad.exe"; NoAccess = 0x00000000; ReadOnly = 0x00001000; ReadPerWrite = 0x00002000; WriteCopy = 0x00000000; Executable = 0x00000000; ExecReadOnly = 0x00000000; ExecReadPerWrite = 0x00000000; ExecWriteCopy = 0x00000000; }; instance of Win32Perf_RawImage { Name = "notepad/ntdll.dll"; NoAccess = 0x00000000; ReadOnly = 0x00001000; ReadPerWrite = 0x00001000; WriteCopy = 0x00001000; Executable = 0x00000000; ExecReadOnly = 0x00000000; ExecReadPerWrite = 0x00000000; ExecWriteCopy = 0x00000000; }; instance of Win32Perf_RawImage { Name = "notepad/comdlg32.dll"; NoAccess = 0x00000000; ReadOnly = 0x00001000; ReadPerWrite = 0x00001000; WriteCopy = 0x00003000; Executable = 0x00000000; ExecReadOnly = 0x00000000; ExecReadPerWrite = 0x00000000; ExecWriteCopy = 0x00000000; }; instance of Win32Perf_RawImage { Name = "notepad/KERNEL32.dll"; NoAccess = 0x00000000; ReadOnly = 0x00001000; ReadPerWrite = 0x00002000; WriteCopy = 0x00000000; Executable = 0x00000000; ExecReadOnly = 0x00000000; ExecReadPerWrite = 0x00000000; ExecWriteCopy = 0x00000000; }; instance of Win32Perf_RawImage { Name = "notepad/USER32.dll"; NoAccess = 0x00000000; ReadOnly = 0x00001000; ReadPerWrite = 0x00001000; WriteCopy = 0x00000000; Executable = 0x00000000; ExecReadOnly = 0x00000000; ExecReadPerWrite = 0x00000000; ExecWriteCopy = 0x00000000; }; instance of Win32Perf_RawImage { Name = "notepad/GDI32.dll"; NoAccess = 0x00000000; ReadOnly = 0x00001000; ReadPerWrite = 0x00001000; WriteCopy = 0x00000000; Executable = 0x00000000; ExecReadOnly = 0x00000000; ExecReadPerWrite = 0x00000000; ExecWriteCopy = 0x00000000; }; instance of Win32Perf_RawImage { Name = "notepad/ADVAPI32.dll"; NoAccess = 0x00000000; ReadOnly = 0x00001000; ReadPerWrite = 0x00001000; WriteCopy = 0x00001000; Executable = 0x00000000; ExecReadOnly = 0x00000000; ExecReadPerWrite = 0x00000000; ExecWriteCopy = 0x00000000; }; instance of Win32Perf_RawImage { Name = "notepad/COMCTL32.dll"; NoAccess = 0x00000000; ReadOnly = 0x00001000; ReadPerWrite = 0x00001000; WriteCopy = 0x00000000; Executable = 0x00000000; ExecReadOnly = 0x00000000; ExecReadPerWrite = 0x00000000; ExecWriteCopy = 0x00000000; }; instance of Win32Perf_RawImage { Name = "notepad/SHELL32.dll"; NoAccess = 0x00000000; ReadOnly = 0x00001000; ReadPerWrite = 0x00001000; WriteCopy = 0x00004000; Executable = 0x00000000; ExecReadOnly = 0x00000000; ExecReadPerWrite = 0x00000000; ExecWriteCopy = 0x00000000; }; instance of Win32Perf_RawImage { Name = "notepad/SHLWAPI.dll"; NoAccess = 0x00000000; ReadOnly = 0x00001000; ReadPerWrite = 0x00001000; WriteCopy = 0x00001000; Executable = 0x00000000; ExecReadOnly = 0x00000000; ExecReadPerWrite = 0x00000000; ExecWriteCopy = 0x00000000; }; instance of Win32Perf_RawImage { Name = "notepad/MPR.dll"; NoAccess = 0x00000000; ReadOnly = 0x00001000; ReadPerWrite = 0x00000000; WriteCopy = 0x00000000; Executable = 0x00000000; ExecReadOnly = 0x00000000; ExecReadPerWrite = 0x00000000; ExecWriteCopy = 0x00000000; }; instance of Win32Perf_RawImage { Name = "notepad/WINSPOOL.DRV"; NoAccess = 0x00000000; ReadOnly = 0x00001000; ReadPerWrite = 0x00001000; WriteCopy = 0x00002000; Executable = 0x00000000; ExecReadOnly = 0x00000000; ExecReadPerWrite = 0x00000000; ExecWriteCopy = 0x00000000; }; instance of Win32Perf_RawImage { Name = "notepad/RPCRT4.dll"; NoAccess = 0x00000000; ReadOnly = 0x00001000; ReadPerWrite = 0x00001000; WriteCopy = 0x00000000; Executable = 0x00000000; ExecReadOnly = 0x00000000; ExecReadPerWrite = 0x00000000; ExecWriteCopy = 0x00000000; }; instance of Win32Perf_RawImage { Name = "notepad/ole32.dll"; NoAccess = 0x00000000; ReadOnly = 0x00001000; ReadPerWrite = 0x00002000; WriteCopy = 0x00004000; Executable = 0x00000000; ExecReadOnly = 0x00000000; ExecReadPerWrite = 0x00000000; ExecWriteCopy = 0x00000000; }; instance of Win32Perf_RawImage { Name = "notepad/MSVCRT.dll"; NoAccess = 0x00000000; ReadOnly = 0x00001000; ReadPerWrite = 0x00000000; WriteCopy = 0x00001000; Executable = 0x00000000; ExecReadOnly = 0x00000000; ExecReadPerWrite = 0x00000000; ExecWriteCopy = 0x00000000; }; instance of Win32Perf_RawImage { Name = "ctrlist/ctrlist.exe"; NoAccess = 0x00000000; ReadOnly = 0x00001000; ReadPerWrite = 0x00000000; WriteCopy = 0x00000000; Executable = 0x00000000; ExecReadOnly = 0x00000000; ExecReadPerWrite = 0x00000000; ExecWriteCopy = 0x00000000; }; instance of Win32Perf_RawImage { Name = "ctrlist/ntdll.dll"; NoAccess = 0x00000000; ReadOnly = 0x00001000; ReadPerWrite = 0x00002000; WriteCopy = 0x00000000; Executable = 0x00000000; ExecReadOnly = 0x00000000; ExecReadPerWrite = 0x00000000; ExecWriteCopy = 0x00000000; }; instance of Win32Perf_RawImage { Name = "ctrlist/ADVAPI32.dll"; NoAccess = 0x00000000; ReadOnly = 0x00001000; ReadPerWrite = 0x00001000; WriteCopy = 0x00001000; Executable = 0x00000000; ExecReadOnly = 0x00000000; ExecReadPerWrite = 0x00000000; ExecWriteCopy = 0x00000000; }; instance of Win32Perf_RawImage { Name = "ctrlist/KERNEL32.dll"; NoAccess = 0x00000000; ReadOnly = 0x00001000; ReadPerWrite = 0x00002000; WriteCopy = 0x00000000; Executable = 0x00000000; ExecReadOnly = 0x00000000; ExecReadPerWrite = 0x00000000; ExecWriteCopy = 0x00000000; }; instance of Win32Perf_RawImage { Name = "ctrlist/RPCRT4.dll"; NoAccess = 0x00000000; ReadOnly = 0x00001000; ReadPerWrite = 0x00001000; WriteCopy = 0x00000000; Executable = 0x00000000; ExecReadOnly = 0x00000000; ExecReadPerWrite = 0x00000000; ExecWriteCopy = 0x00000000; }; instance of Win32Perf_RawImage { Name = "ctrlist/rpclt1.dll"; NoAccess = 0x00000000; ReadOnly = 0x00001000; ReadPerWrite = 0x00000000; WriteCopy = 0x00000000; Executable = 0x00000000; ExecReadOnly = 0x00000000; ExecReadPerWrite = 0x00000000; ExecWriteCopy = 0x00000000; }; instance of Win32Perf_RawImage { Name = "ctrlist/MSVCRT.dll"; NoAccess = 0x00000000; ReadOnly = 0x00001000; ReadPerWrite = 0x00000000; WriteCopy = 0x00001000; Executable = 0x00000000; ExecReadOnly = 0x00000000; ExecReadPerWrite = 0x00000000; ExecWriteCopy = 0x00000000; }; instance of Win32Perf_RawImage { Name = "ctrlist/GDI32.dll"; NoAccess = 0x00000000; ReadOnly = 0x00001000; ReadPerWrite = 0x00001000; WriteCopy = 0x00000000; Executable = 0x00000000; ExecReadOnly = 0x00000000; ExecReadPerWrite = 0x00000000; ExecWriteCopy = 0x00000000; }; instance of Win32Perf_RawImage { Name = "ctrlist/USER32.dll"; NoAccess = 0x00000000; ReadOnly = 0x00001000; ReadPerWrite = 0x00001000; WriteCopy = 0x00000000; Executable = 0x00000000; ExecReadOnly = 0x00000000; ExecReadPerWrite = 0x00000000; ExecWriteCopy = 0x00000000; }; instance of Win32Perf_RawImage { Name = "ctrlist/NetApi32.Dll"; NoAccess = 0x00000000; ReadOnly = 0x00001000; ReadPerWrite = 0x00001000; WriteCopy = 0x00001000; Executable = 0x00000000; ExecReadOnly = 0x00000000; ExecReadPerWrite = 0x00000000; ExecWriteCopy = 0x00000000; }; instance of Win32Perf_RawImage { Name = "ctrlist/Secur32.dll"; NoAccess = 0x00000000; ReadOnly = 0x00001000; ReadPerWrite = 0x00000000; WriteCopy = 0x00000000; Executable = 0x00000000; ExecReadOnly = 0x00000000; ExecReadPerWrite = 0x00000000; ExecWriteCopy = 0x00000000; }; instance of Win32Perf_RawImage { Name = "ctrlist/NETRAP.dll"; NoAccess = 0x00000000; ReadOnly = 0x00001000; ReadPerWrite = 0x00000000; WriteCopy = 0x00001000; Executable = 0x00000000; ExecReadOnly = 0x00000000; ExecReadPerWrite = 0x00000000; ExecWriteCopy = 0x00000000; }; instance of Win32Perf_RawImage { Name = "ctrlist/SAMLIB.dll"; NoAccess = 0x00000000; ReadOnly = 0x00001000; ReadPerWrite = 0x00000000; WriteCopy = 0x00000000; Executable = 0x00000000; ExecReadOnly = 0x00000000; ExecReadPerWrite = 0x00000000; ExecWriteCopy = 0x00000000; }; instance of Win32Perf_RawImage { Name = "ctrlist/WS2_32.dll"; NoAccess = 0x00000000; ReadOnly = 0x00001000; ReadPerWrite = 0x00001000; WriteCopy = 0x00000000; Executable = 0x00000000; ExecReadOnly = 0x00000000; ExecReadPerWrite = 0x00000000; ExecWriteCopy = 0x00000000; }; instance of Win32Perf_RawImage { Name = "ctrlist/WS2HELP.dll"; NoAccess = 0x00000000; ReadOnly = 0x00001000; ReadPerWrite = 0x00000000; WriteCopy = 0x00000000; Executable = 0x00000000; ExecReadOnly = 0x00000000; ExecReadPerWrite = 0x00000000; ExecWriteCopy = 0x00000000; }; instance of Win32Perf_RawImage { Name = "ctrlist/WLDAP32.dll"; NoAccess = 0x00000000; ReadOnly = 0x00001000; ReadPerWrite = 0x00000000; WriteCopy = 0x00000000; Executable = 0x00000000; ExecReadOnly = 0x00000000; ExecReadPerWrite = 0x00000000; ExecWriteCopy = 0x00000000; }; instance of Win32Perf_RawImage { Name = "ctrlist/DNSAPI.dll"; NoAccess = 0x00000000; ReadOnly = 0x00001000; ReadPerWrite = 0x00000000; WriteCopy = 0x00000000; Executable = 0x00000000; ExecReadOnly = 0x00000000; ExecReadPerWrite = 0x00000000; ExecWriteCopy = 0x00000000; }; instance of Win32Perf_RawImage { Name = "ctrlist/WSOCK32.dll"; NoAccess = 0x00000000; ReadOnly = 0x00001000; ReadPerWrite = 0x00000000; WriteCopy = 0x00000000; Executable = 0x00000000; ExecReadOnly = 0x00001000; ExecReadPerWrite = 0x00000000; ExecWriteCopy = 0x00000000; }; instance of Win32Perf_RawImage { Name = "ctrlist/ntciutil.dll"; NoAccess = 0x00000000; ReadOnly = 0x00001000; ReadPerWrite = 0x00001000; WriteCopy = 0x00000000; Executable = 0x00000000; ExecReadOnly = 0x00000000; ExecReadPerWrite = 0x00000000; ExecWriteCopy = 0x00000000; }; instance of Win32Perf_RawImage { Name = "ctrlist/query.dll"; NoAccess = 0x00000000; ReadOnly = 0x00001000; ReadPerWrite = 0x00000000; WriteCopy = 0x00000000; Executable = 0x00000000; ExecReadOnly = 0x00000000; ExecReadPerWrite = 0x00000000; ExecWriteCopy = 0x00000000; }; instance of Win32Perf_RawImage { Name = "ctrlist/MSVCIRT.dll"; NoAccess = 0x00000000; ReadOnly = 0x00001000; ReadPerWrite = 0x00000000; WriteCopy = 0x00000000; Executable = 0x00000000; ExecReadOnly = 0x00000000; ExecReadPerWrite = 0x00000000; ExecWriteCopy = 0x00000000; }; instance of Win32Perf_RawImage { Name = "ctrlist/OLEAUT32.dll"; NoAccess = 0x00000000; ReadOnly = 0x00001000; ReadPerWrite = 0x00000000; WriteCopy = 0x00000000; Executable = 0x00000000; ExecReadOnly = 0x00000000; ExecReadPerWrite = 0x00000000; ExecWriteCopy = 0x00000000; }; instance of Win32Perf_RawImage { Name = "ctrlist/ole32.dll"; NoAccess = 0x00000000; ReadOnly = 0x00001000; ReadPerWrite = 0x00002000; WriteCopy = 0x00004000; Executable = 0x00000000; ExecReadOnly = 0x00000000; ExecReadPerWrite = 0x00000000; ExecWriteCopy = 0x00000000; }; instance of Win32Perf_RawImage { Name = "ctrlist/COMCTL32.dll"; NoAccess = 0x00000000; ReadOnly = 0x00001000; ReadPerWrite = 0x00001000; WriteCopy = 0x00000000; Executable = 0x00000000; ExecReadOnly = 0x00000000; ExecReadPerWrite = 0x00000000; ExecWriteCopy = 0x00000000; }; instance of Win32Perf_RawImage { Name = "ctrlist/faxperf.dll"; NoAccess = 0x00000000; ReadOnly = 0x00001000; ReadPerWrite = 0x00000000; WriteCopy = 0x00000000; Executable = 0x00000000; ExecReadOnly = 0x00001000; ExecReadPerWrite = 0x00000000; ExecWriteCopy = 0x00000000; }; instance of Win32Perf_RawImage { Name = "ctrlist/perfctrs.dll"; NoAccess = 0x00000000; ReadOnly = 0x00001000; ReadPerWrite = 0x00000000; WriteCopy = 0x00001000; Executable = 0x00000000; ExecReadOnly = 0x00000000; ExecReadPerWrite = 0x00000000; ExecWriteCopy = 0x00000000; }; instance of Win32Perf_RawImage { Name = "ctrlist/perfnw.dll"; NoAccess = 0x00000000; ReadOnly = 0x00001000; ReadPerWrite = 0x00001000; WriteCopy = 0x00000000; Executable = 0x00000000; ExecReadOnly = 0x00001000; ExecReadPerWrite = 0x00000000; ExecWriteCopy = 0x00000000; }; instance of Win32Perf_RawImage { Name = "ctrlist/perfdisk.dll"; NoAccess = 0x00000000; ReadOnly = 0x00001000; ReadPerWrite = 0x00001000; WriteCopy = 0x00000000; Executable = 0x00000000; ExecReadOnly = 0x00000000; ExecReadPerWrite = 0x00000000; ExecWriteCopy = 0x00000000; }; instance of Win32Perf_RawImage { Name = "ctrlist/wmi.dll"; NoAccess = 0x00000000; ReadOnly = 0x00001000; ReadPerWrite = 0x00000000; WriteCopy = 0x00000000; Executable = 0x00000000; ExecReadOnly = 0x00000000; ExecReadPerWrite = 0x00000000; ExecWriteCopy = 0x00000000; }; instance of Win32Perf_RawImage { Name = "ctrlist/perfnet.dll"; NoAccess = 0x00000000; ReadOnly = 0x00001000; ReadPerWrite = 0x00001000; WriteCopy = 0x00001000; Executable = 0x00000000; ExecReadOnly = 0x00000000; ExecReadPerWrite = 0x00000000; ExecWriteCopy = 0x00000000; }; instance of Win32Perf_RawImage { Name = "ctrlist/perfos.dll"; NoAccess = 0x00000000; ReadOnly = 0x00001000; ReadPerWrite = 0x00001000; WriteCopy = 0x00001000; Executable = 0x00000000; ExecReadOnly = 0x00000000; ExecReadPerWrite = 0x00000000; ExecWriteCopy = 0x00000000; }; instance of Win32Perf_RawImage { Name = "ctrlist/perfproc.dll"; NoAccess = 0x00000000; ReadOnly = 0x00001000; ReadPerWrite = 0x00001000; WriteCopy = 0x00001000; Executable = 0x00000000; ExecReadOnly = 0x00000000; ExecReadPerWrite = 0x00000000; ExecWriteCopy = 0x00000000; }; [ costly, vendor("Microsoft"), guid("{5C7A4F6D-9E4D-11d1-BB3C-00A0C913CAD4}"), locale("ms:\\0x0409"), displayname("Full Image"), perfindex(1408), helpindex(1409), perfdetail(400) ] class Win32Perf_FullImage : Win32_PerfFormattedData { [key] string Name; uint64 Timestamp; [ perfdefault, displayname("No Access"), countertype(65536), perfindex(788), helpindex(789), defaultscale(0), perfdetail(400) ] uint32 NoAccess; [ displayname("Read Only"), countertype(65536), perfindex(790), helpindex(791), defaultscale(0), perfdetail(400) ] uint32 ReadOnly; [ displayname("Read/Write"), countertype(65536), perfindex(792), helpindex(793), defaultscale(0), perfdetail(400) ] uint32 ReadPerWrite; [ displayname("Write Copy"), countertype(65536), perfindex(794), helpindex(795), defaultscale(0), perfdetail(400) ] uint32 WriteCopy; [ displayname("Executable"), countertype(65536), perfindex(796), helpindex(797), defaultscale(0), perfdetail(400) ] uint32 Executable; [ displayname("Exec Read Only"), countertype(65536), perfindex(798), helpindex(799), defaultscale(0), perfdetail(400) ] uint32 ExecReadOnly; [ displayname("Exec Read/Write"), countertype(65536), perfindex(800), helpindex(801), defaultscale(0), perfdetail(400) ] uint32 ExecReadPerWrite; [ displayname("Exec Write Copy"), countertype(65536), perfindex(802), helpindex(803), defaultscale(0), perfdetail(400) ] uint32 ExecWriteCopy; }; [ costly, vendor("Microsoft"), guid("{5C7A4F6D-9E4D-11d1-BB3C-00A0C913CAD4}"), locale("ms:\\0x0409"), displayname("Full Image"), perfindex(1408), helpindex(1409), perfdetail(400) ] class Win32Perf_RawFullImage : Win32_PerfRawData { [key] string Name; uint64 Timestamp; [ perfdefault, displayname("No Access"), countertype(65536), perfindex(788), helpindex(789), defaultscale(0), perfdetail(400) ] uint32 NoAccess; [ displayname("Read Only"), countertype(65536), perfindex(790), helpindex(791), defaultscale(0), perfdetail(400) ] uint32 ReadOnly; [ displayname("Read/Write"), countertype(65536), perfindex(792), helpindex(793), defaultscale(0), perfdetail(400) ] uint32 ReadPerWrite; [ displayname("Write Copy"), countertype(65536), perfindex(794), helpindex(795), defaultscale(0), perfdetail(400) ] uint32 WriteCopy; [ displayname("Executable"), countertype(65536), perfindex(796), helpindex(797), defaultscale(0), perfdetail(400) ] uint32 Executable; [ displayname("Exec Read Only"), countertype(65536), perfindex(798), helpindex(799), defaultscale(0), perfdetail(400) ] uint32 ExecReadOnly; [ displayname("Exec Read/Write"), countertype(65536), perfindex(800), helpindex(801), defaultscale(0), perfdetail(400) ] uint32 ExecReadPerWrite; [ displayname("Exec Write Copy"), countertype(65536), perfindex(802), helpindex(803), defaultscale(0), perfdetail(400) ] uint32 ExecWriteCopy; }; instance of Win32Perf_RawFullImage { Name = "Explorer/C:\\WINNT50\\Explorer.exe"; NoAccess = 0x00000000; ReadOnly = 0x00001000; ReadPerWrite = 0x00001000; WriteCopy = 0x00000000; Executable = 0x00000000; ExecReadOnly = 0x00000000; ExecReadPerWrite = 0x00000000; ExecWriteCopy = 0x00000000; }; instance of Win32Perf_RawFullImage { Name = "Explorer/C:\\WINNT50\\System32\\ntdll.dll"; NoAccess = 0x00000000; ReadOnly = 0x00001000; ReadPerWrite = 0x00001000; WriteCopy = 0x00001000; Executable = 0x00000000; ExecReadOnly = 0x00000000; ExecReadPerWrite = 0x00000000; ExecWriteCopy = 0x00000000; }; instance of Win32Perf_RawFullImage { Name = "Explorer/C:\\WINNT50\\system32\\ADVAPI32.dll"; NoAccess = 0x00000000; ReadOnly = 0x00001000; ReadPerWrite = 0x00001000; WriteCopy = 0x00001000; Executable = 0x00000000; ExecReadOnly = 0x00000000; ExecReadPerWrite = 0x00000000; ExecWriteCopy = 0x00000000; }; instance of Win32Perf_RawFullImage { Name = "Explorer/C:\\WINNT50\\system32\\KERNEL32.dll"; NoAccess = 0x00000000; ReadOnly = 0x00001000; ReadPerWrite = 0x00002000; WriteCopy = 0x00000000; Executable = 0x00000000; ExecReadOnly = 0x00000000; ExecReadPerWrite = 0x00000000; ExecWriteCopy = 0x00000000; }; instance of Win32Perf_RawFullImage { Name = "Explorer/C:\\WINNT50\\system32\\GDI32.dll"; NoAccess = 0x00000000; ReadOnly = 0x00001000; ReadPerWrite = 0x00001000; WriteCopy = 0x00000000; Executable = 0x00000000; ExecReadOnly = 0x00000000; ExecReadPerWrite = 0x00000000; ExecWriteCopy = 0x00000000; }; instance of Win32Perf_RawFullImage { Name = "Explorer/C:\\WINNT50\\system32\\USER32.dll"; NoAccess = 0x00000000; ReadOnly = 0x00001000; ReadPerWrite = 0x00001000; WriteCopy = 0x00000000; Executable = 0x00000000; ExecReadOnly = 0x00000000; ExecReadPerWrite = 0x00000000; ExecWriteCopy = 0x00000000; }; instance of Win32Perf_RawFullImage { Name = "Explorer/C:\\WINNT50\\system32\\SHLWAPI.dll"; NoAccess = 0x00000000; ReadOnly = 0x00001000; ReadPerWrite = 0x00001000; WriteCopy = 0x00001000; Executable = 0x00000000; ExecReadOnly = 0x00000000; ExecReadPerWrite = 0x00000000; ExecWriteCopy = 0x00000000; }; instance of Win32Perf_RawFullImage { Name = "Explorer/C:\\WINNT50\\system32\\COMCTL32.dll"; NoAccess = 0x00000000; ReadOnly = 0x00001000; ReadPerWrite = 0x00001000; WriteCopy = 0x00000000; Executable = 0x00000000; ExecReadOnly = 0x00000000; ExecReadPerWrite = 0x00000000; ExecWriteCopy = 0x00000000; }; instance of Win32Perf_RawFullImage { Name = "Explorer/C:\\WINNT50\\System32\\SHELL32.dll"; NoAccess = 0x00000000; ReadOnly = 0x00001000; ReadPerWrite = 0x00005000; WriteCopy = 0x00000000; Executable = 0x00000000; ExecReadOnly = 0x00000000; ExecReadPerWrite = 0x00000000; ExecWriteCopy = 0x00000000; }; instance of Win32Perf_RawFullImage { Name = "Explorer/C:\\WINNT50\\system32\\MPR.dll"; NoAccess = 0x00000000; ReadOnly = 0x00001000; ReadPerWrite = 0x00000000; WriteCopy = 0x00000000; Executable = 0x00000000; ExecReadOnly = 0x00000000; ExecReadPerWrite = 0x00000000; ExecWriteCopy = 0x00000000; }; instance of Win32Perf_RawFullImage { Name = "Explorer/C:\\WINNT50\\System32\\SHDOCVW.DLL"; NoAccess = 0x00000000; ReadOnly = 0x00001000; ReadPerWrite = 0x00001000; WriteCopy = 0x00000000; Executable = 0x00000000; ExecReadOnly = 0x00000000; ExecReadPerWrite = 0x00000000; ExecWriteCopy = 0x00000000; }; instance of Win32Perf_RawFullImage { Name = "Explorer/C:\\WINNT50\\System32\\OLE32.DLL"; NoAccess = 0x00000000; ReadOnly = 0x00001000; ReadPerWrite = 0x00004000; WriteCopy = 0x00002000; Executable = 0x00000000; ExecReadOnly = 0x00000000; ExecReadPerWrite = 0x00000000; ExecWriteCopy = 0x00000000; }; instance of Win32Perf_RawFullImage { Name = "Explorer/C:\\WINNT50\\system32\\RPCRT4.dll"; NoAccess = 0x00000000; ReadOnly = 0x00001000; ReadPerWrite = 0x00001000; WriteCopy = 0x00000000; Executable = 0x00000000; ExecReadOnly = 0x00000000; ExecReadPerWrite = 0x00000000; ExecWriteCopy = 0x00000000; }; instance of Win32Perf_RawFullImage { Name = "Explorer/C:\\WINNT50\\System32\\msi.dll"; NoAccess = 0x00000000; ReadOnly = 0x00001000; ReadPerWrite = 0x00003000; WriteCopy = 0x00004000; Executable = 0x00000000; ExecReadOnly = 0x00000000; ExecReadPerWrite = 0x00000000; ExecWriteCopy = 0x00000000; }; instance of Win32Perf_RawFullImage { Name = "Explorer/C:\\Program Files\\Internet Explorer\\browseui.dll"; NoAccess = 0x00000000; ReadOnly = 0x00001000; ReadPerWrite = 0x00001000; WriteCopy = 0x00000000; Executable = 0x00000000; ExecReadOnly = 0x00000000; ExecReadPerWrite = 0x00000000; ExecWriteCopy = 0x00000000; }; instance of Win32Perf_RawFullImage { Name = "Explorer/C:\\WINNT50\\system32\\WININET.dll"; NoAccess = 0x00000000; ReadOnly = 0x00001000; ReadPerWrite = 0x00003000; WriteCopy = 0x00000000; Executable = 0x00000000; ExecReadOnly = 0x00000000; ExecReadPerWrite = 0x00000000; ExecWriteCopy = 0x00000000; }; instance of Win32Perf_RawFullImage { Name = "Explorer/C:\\WINNT50\\System32\\rpclt1.dll"; NoAccess = 0x00000000; ReadOnly = 0x00001000; ReadPerWrite = 0x00000000; WriteCopy = 0x00000000; Executable = 0x00000000; ExecReadOnly = 0x00000000; ExecReadPerWrite = 0x00000000; ExecWriteCopy = 0x00000000; }; instance of Win32Perf_RawFullImage { Name = "Explorer/C:\\WINNT50\\System32\\mydocs.dll"; NoAccess = 0x00000000; ReadOnly = 0x00001000; ReadPerWrite = 0x00001000; WriteCopy = 0x00000000; Executable = 0x00000000; ExecReadOnly = 0x00000000; ExecReadPerWrite = 0x00000000; ExecWriteCopy = 0x00000000; }; instance of Win32Perf_RawFullImage { Name = "Explorer/C:\\WINNT50\\System32\\cscui.dll"; NoAccess = 0x00000000; ReadOnly = 0x00001000; ReadPerWrite = 0x00001000; WriteCopy = 0x00000000; Executable = 0x00000000; ExecReadOnly = 0x00000000; ExecReadPerWrite = 0x00000000; ExecWriteCopy = 0x00000000; }; instance of Win32Perf_RawFullImage { Name = "Explorer/C:\\WINNT50\\system32\\MSVCRT.dll"; NoAccess = 0x00000000; ReadOnly = 0x00001000; ReadPerWrite = 0x00000000; WriteCopy = 0x00001000; Executable = 0x00000000; ExecReadOnly = 0x00000000; ExecReadPerWrite = 0x00000000; ExecWriteCopy = 0x00000000; }; instance of Win32Perf_RawFullImage { Name = "Explorer/C:\\WINNT50\\System32\\CSCDLL.dll"; NoAccess = 0x00000000; ReadOnly = 0x00002000; ReadPerWrite = 0x00002000; WriteCopy = 0x00003000; Executable = 0x00000000; ExecReadOnly = 0x00000000; ExecReadPerWrite = 0x00000000; ExecWriteCopy = 0x00000000; }; instance of Win32Perf_RawFullImage { Name = "Explorer/C:\\WINNT50\\System32\\NETAPI32.dll"; NoAccess = 0x00000000; ReadOnly = 0x00001000; ReadPerWrite = 0x00001000; WriteCopy = 0x00001000; Executable = 0x00000000; ExecReadOnly = 0x00000000; ExecReadPerWrite = 0x00000000; ExecWriteCopy = 0x00000000; }; instance of Win32Perf_RawFullImage { Name = "Explorer/C:\\WINNT50\\System32\\Secur32.dll"; NoAccess = 0x00000000; ReadOnly = 0x00001000; ReadPerWrite = 0x00000000; WriteCopy = 0x00000000; Executable = 0x00000000; ExecReadOnly = 0x00000000; ExecReadPerWrite = 0x00000000; ExecWriteCopy = 0x00000000; }; instance of Win32Perf_RawFullImage { Name = "Explorer/C:\\WINNT50\\System32\\NETRAP.dll"; NoAccess = 0x00000000; ReadOnly = 0x00001000; ReadPerWrite = 0x00000000; WriteCopy = 0x00001000; Executable = 0x00000000; ExecReadOnly = 0x00000000; ExecReadPerWrite = 0x00000000; ExecWriteCopy = 0x00000000; }; instance of Win32Perf_RawFullImage { Name = "Explorer/C:\\WINNT50\\System32\\SAMLIB.dll"; NoAccess = 0x00000000; ReadOnly = 0x00001000; ReadPerWrite = 0x00000000; WriteCopy = 0x00000000; Executable = 0x00000000; ExecReadOnly = 0x00000000; ExecReadPerWrite = 0x00000000; ExecWriteCopy = 0x00000000; }; instance of Win32Perf_RawFullImage { Name = "Explorer/C:\\WINNT50\\System32\\WS2_32.dll"; NoAccess = 0x00000000; ReadOnly = 0x00001000; ReadPerWrite = 0x00001000; WriteCopy = 0x00000000; Executable = 0x00000000; ExecReadOnly = 0x00000000; ExecReadPerWrite = 0x00000000; ExecWriteCopy = 0x00000000; }; instance of Win32Perf_RawFullImage { Name = "Explorer/C:\\WINNT50\\System32\\WS2HELP.dll"; NoAccess = 0x00000000; ReadOnly = 0x00001000; ReadPerWrite = 0x00000000; WriteCopy = 0x00000000; Executable = 0x00000000; ExecReadOnly = 0x00000000; ExecReadPerWrite = 0x00000000; ExecWriteCopy = 0x00000000; }; instance of Win32Perf_RawFullImage { Name = "Explorer/C:\\WINNT50\\System32\\WLDAP32.dll"; NoAccess = 0x00000000; ReadOnly = 0x00001000; ReadPerWrite = 0x00000000; WriteCopy = 0x00000000; Executable = 0x00000000; ExecReadOnly = 0x00000000; ExecReadPerWrite = 0x00000000; ExecWriteCopy = 0x00000000; }; instance of Win32Perf_RawFullImage { Name = "Explorer/C:\\WINNT50\\System32\\DNSAPI.dll"; NoAccess = 0x00000000; ReadOnly = 0x00001000; ReadPerWrite = 0x00000000; WriteCopy = 0x00000000; Executable = 0x00000000; ExecReadOnly = 0x00000000; ExecReadPerWrite = 0x00000000; ExecWriteCopy = 0x00000000; }; instance of Win32Perf_RawFullImage { Name = "Explorer/C:\\WINNT50\\System32\\WSOCK32.dll"; NoAccess = 0x00000000; ReadOnly = 0x00001000; ReadPerWrite = 0x00000000; WriteCopy = 0x00000000; Executable = 0x00000000; ExecReadOnly = 0x00001000; ExecReadPerWrite = 0x00000000; ExecWriteCopy = 0x00000000; }; instance of Win32Perf_RawFullImage { Name = "Explorer/C:\\WINNT50\\System32\\nwprovau.dll"; NoAccess = 0x00000000; ReadOnly = 0x00001000; ReadPerWrite = 0x00002000; WriteCopy = 0x00000000; Executable = 0x00000000; ExecReadOnly = 0x00000000; ExecReadPerWrite = 0x00000000; ExecWriteCopy = 0x00000000; }; instance of Win32Perf_RawFullImage { Name = "Explorer/C:\\WINNT50\\System32\\ntlanman.dll"; NoAccess = 0x00000000; ReadOnly = 0x00001000; ReadPerWrite = 0x00000000; WriteCopy = 0x00000000; Executable = 0x00000000; ExecReadOnly = 0x00000000; ExecReadPerWrite = 0x00000000; ExecWriteCopy = 0x00000000; }; instance of Win32Perf_RawFullImage { Name = "Explorer/C:\\WINNT50\\System32\\NETUI0.dll"; NoAccess = 0x00000000; ReadOnly = 0x00001000; ReadPerWrite = 0x00001000; WriteCopy = 0x00000000; Executable = 0x00000000; ExecReadOnly = 0x00000000; ExecReadPerWrite = 0x00000000; ExecWriteCopy = 0x00000000; }; instance of Win32Perf_RawFullImage { Name = "Explorer/C:\\WINNT50\\System32\\NETUI1.dll"; NoAccess = 0x00000000; ReadOnly = 0x00001000; ReadPerWrite = 0x00001000; WriteCopy = 0x00000000; Executable = 0x00000000; ExecReadOnly = 0x00000000; ExecReadPerWrite = 0x00000000; ExecWriteCopy = 0x00000000; }; instance of Win32Perf_RawFullImage { Name = "Explorer/C:\\WINNT50\\system32\\NETSHELL.dll"; NoAccess = 0x00000000; ReadOnly = 0x00001000; ReadPerWrite = 0x00003000; WriteCopy = 0x00001000; Executable = 0x00000000; ExecReadOnly = 0x00000000; ExecReadPerWrite = 0x00000000; ExecWriteCopy = 0x00000000; }; instance of Win32Perf_RawFullImage { Name = "Explorer/C:\\WINNT50\\system32\\MSVCP50.dll"; NoAccess = 0x00000000; ReadOnly = 0x00001000; ReadPerWrite = 0x00001000; WriteCopy = 0x00001000; Executable = 0x00000000; ExecReadOnly = 0x00000000; ExecReadPerWrite = 0x00000000; ExecWriteCopy = 0x00000000; }; instance of Win32Perf_RawFullImage { Name = "Explorer/C:\\WINNT50\\system32\\OLEAUT32.dll"; NoAccess = 0x00000000; ReadOnly = 0x00001000; ReadPerWrite = 0x00000000; WriteCopy = 0x00000000; Executable = 0x00000000; ExecReadOnly = 0x00000000; ExecReadPerWrite = 0x00000000; ExecWriteCopy = 0x00000000; }; instance of Win32Perf_RawFullImage { Name = "Explorer/C:\\WINNT50\\system32\\RASAPI32.dll"; NoAccess = 0x00000000; ReadOnly = 0x00001000; ReadPerWrite = 0x00001000; WriteCopy = 0x00000000; Executable = 0x00000000; ExecReadOnly = 0x00000000; ExecReadPerWrite = 0x00000000; ExecWriteCopy = 0x00000000; }; instance of Win32Perf_RawFullImage { Name = "Explorer/C:\\WINNT50\\system32\\TAPI32.dll"; NoAccess = 0x00000000; ReadOnly = 0x00001000; ReadPerWrite = 0x00001000; WriteCopy = 0x00001000; Executable = 0x00000000; ExecReadOnly = 0x00000000; ExecReadPerWrite = 0x00000000; ExecWriteCopy = 0x00000000; }; instance of Win32Perf_RawFullImage { Name = "Explorer/C:\\WINNT50\\system32\\rasman.dll"; NoAccess = 0x00000000; ReadOnly = 0x00001000; ReadPerWrite = 0x00000000; WriteCopy = 0x00000000; Executable = 0x00000000; ExecReadOnly = 0x00000000; ExecReadPerWrite = 0x00000000; ExecWriteCopy = 0x00000000; }; instance of Win32Perf_RawFullImage { Name = "Explorer/C:\\WINNT50\\system32\\SETUPAPI.dll"; NoAccess = 0x00000000; ReadOnly = 0x00001000; ReadPerWrite = 0x00001000; WriteCopy = 0x00000000; Executable = 0x00000000; ExecReadOnly = 0x00000000; ExecReadPerWrite = 0x00000000; ExecWriteCopy = 0x00000000; }; instance of Win32Perf_RawFullImage { Name = "Explorer/C:\\WINNT50\\system32\\LZ32.dll"; NoAccess = 0x00000000; ReadOnly = 0x00001000; ReadPerWrite = 0x00001000; WriteCopy = 0x00000000; Executable = 0x00000000; ExecReadOnly = 0x00000000; ExecReadPerWrite = 0x00000000; ExecWriteCopy = 0x00000000; }; instance of Win32Perf_RawFullImage { Name = "Explorer/C:\\WINNT50\\system32\\comdlg32.dll"; NoAccess = 0x00000000; ReadOnly = 0x00001000; ReadPerWrite = 0x00001000; WriteCopy = 0x00003000; Executable = 0x00000000; ExecReadOnly = 0x00000000; ExecReadPerWrite = 0x00000000; ExecWriteCopy = 0x00000000; }; instance of Win32Perf_RawFullImage { Name = "Explorer/C:\\WINNT50\\system32\\WINSPOOL.DRV"; NoAccess = 0x00000000; ReadOnly = 0x00001000; ReadPerWrite = 0x00001000; WriteCopy = 0x00002000; Executable = 0x00000000; ExecReadOnly = 0x00000000; ExecReadPerWrite = 0x00000000; ExecWriteCopy = 0x00000000; }; instance of Win32Perf_RawFullImage { Name = "Explorer/C:\\WINNT50\\system32\\VERSION.dll"; NoAccess = 0x00000000; ReadOnly = 0x00001000; ReadPerWrite = 0x00000000; WriteCopy = 0x00000000; Executable = 0x00000000; ExecReadOnly = 0x00000000; ExecReadPerWrite = 0x00000000; ExecWriteCopy = 0x00000000; }; instance of Win32Perf_RawFullImage { Name = "Explorer/C:\\WINNT50\\system32\\Cabinet.DLL"; NoAccess = 0x00000000; ReadOnly = 0x00002000; ReadPerWrite = 0x00000000; WriteCopy = 0x00000000; Executable = 0x00000000; ExecReadOnly = 0x00000000; ExecReadPerWrite = 0x00000000; ExecWriteCopy = 0x00000000; }; instance of Win32Perf_RawFullImage { Name = "Explorer/C:\\WINNT50\\system32\\CFGMGR32.dll"; NoAccess = 0x00000000; ReadOnly = 0x00001000; ReadPerWrite = 0x00000000; WriteCopy = 0x00000000; Executable = 0x00000000; ExecReadOnly = 0x00000000; ExecReadPerWrite = 0x00000000; ExecWriteCopy = 0x00000000; }; instance of Win32Perf_RawFullImage { Name = "Explorer/C:\\WINNT50\\System32\\RTUTILS.DLL"; NoAccess = 0x00000000; ReadOnly = 0x00001000; ReadPerWrite = 0x00001000; WriteCopy = 0x00000000; Executable = 0x00000000; ExecReadOnly = 0x00000000; ExecReadPerWrite = 0x00000000; ExecWriteCopy = 0x00000000; }; instance of Win32Perf_RawFullImage { Name = "Explorer/C:\\WINNT50\\System32\\webcheck.dll"; NoAccess = 0x00000000; ReadOnly = 0x00001000; ReadPerWrite = 0x00002000; WriteCopy = 0x00001000; Executable = 0x00000000; ExecReadOnly = 0x00000000; ExecReadPerWrite = 0x00000000; ExecWriteCopy = 0x00000000; }; instance of Win32Perf_RawFullImage { Name = "Explorer/C:\\WINNT50\\System32\\LINKINFO.DLL"; NoAccess = 0x00000000; ReadOnly = 0x00001000; ReadPerWrite = 0x00000000; WriteCopy = 0x00000000; Executable = 0x00000000; ExecReadOnly = 0x00000000; ExecReadPerWrite = 0x00000000; ExecWriteCopy = 0x00000000; }; instance of Win32Perf_RawFullImage { Name = "Explorer/C:\\WINNT50\\System32\\ntshrui.dll"; NoAccess = 0x00000000; ReadOnly = 0x00001000; ReadPerWrite = 0x00001000; WriteCopy = 0x00000000; Executable = 0x00000000; ExecReadOnly = 0x00000000; ExecReadPerWrite = 0x00000000; ExecWriteCopy = 0x00000000; }; instance of Win32Perf_RawFullImage { Name = "Explorer/C:\\WINNT50\\System32\\msidle.dll"; NoAccess = 0x00000000; ReadOnly = 0x00001000; ReadPerWrite = 0x00000000; WriteCopy = 0x00000000; Executable = 0x00000000; ExecReadOnly = 0x00001000; ExecReadPerWrite = 0x00000000; ExecWriteCopy = 0x00000000; }; instance of Win32Perf_RawFullImage { Name = "Explorer/C:\\WINNT50\\System32\\urlmon.dll"; NoAccess = 0x00000000; ReadOnly = 0x00001000; ReadPerWrite = 0x00003000; WriteCopy = 0x00001000; Executable = 0x00000000; ExecReadOnly = 0x00000000; ExecReadPerWrite = 0x00000000; ExecWriteCopy = 0x00000000; }; instance of Win32Perf_RawFullImage { Name = "Explorer/C:\\WINNT50\\System32\\dskquoui.dll"; NoAccess = 0x00000000; ReadOnly = 0x00001000; ReadPerWrite = 0x00001000; WriteCopy = 0x00000000; Executable = 0x00000000; ExecReadOnly = 0x00000000; ExecReadPerWrite = 0x00000000; ExecWriteCopy = 0x00000000; }; instance of Win32Perf_RawFullImage { Name = "Explorer/C:\\WINNT50\\System32\\dskquota.dll"; NoAccess = 0x00000000; ReadOnly = 0x00001000; ReadPerWrite = 0x00001000; WriteCopy = 0x00000000; Executable = 0x00000000; ExecReadOnly = 0x00000000; ExecReadPerWrite = 0x00000000; ExecWriteCopy = 0x00000000; }; instance of Win32Perf_RawFullImage { Name = "Explorer/C:\\WINNT50\\System32\\shcompui.dll"; NoAccess = 0x00000000; ReadOnly = 0x00001000; ReadPerWrite = 0x00001000; WriteCopy = 0x00000000; Executable = 0x00000000; ExecReadOnly = 0x00000000; ExecReadPerWrite = 0x00000000; ExecWriteCopy = 0x00000000; }; instance of Win32Perf_RawFullImage { Name = "Explorer/C:\\WINNT50\\System32\\cryptmnu.dll"; NoAccess = 0x00000000; ReadOnly = 0x00001000; ReadPerWrite = 0x00000000; WriteCopy = 0x00000000; Executable = 0x00000000; ExecReadOnly = 0x00000000; ExecReadPerWrite = 0x00000000; ExecWriteCopy = 0x00000000; }; instance of Win32Perf_RawFullImage { Name = "SysTray/C:\\WINNT50\\System32\\SysTray.Exe"; NoAccess = 0x00000000; ReadOnly = 0x00001000; ReadPerWrite = 0x00001000; WriteCopy = 0x00002000; Executable = 0x00000000; ExecReadOnly = 0x00000000; ExecReadPerWrite = 0x00000000; ExecWriteCopy = 0x00000000; }; instance of Win32Perf_RawFullImage { Name = "SysTray/C:\\WINNT50\\System32\\ntdll.dll"; NoAccess = 0x00000000; ReadOnly = 0x00001000; ReadPerWrite = 0x00001000; WriteCopy = 0x00001000; Executable = 0x00000000; ExecReadOnly = 0x00000000; ExecReadPerWrite = 0x00000000; ExecWriteCopy = 0x00000000; }; instance of Win32Perf_RawFullImage { Name = "SysTray/C:\\WINNT50\\system32\\ADVAPI32.dll"; NoAccess = 0x00000000; ReadOnly = 0x00001000; ReadPerWrite = 0x00001000; WriteCopy = 0x00001000; Executable = 0x00000000; ExecReadOnly = 0x00000000; ExecReadPerWrite = 0x00000000; ExecWriteCopy = 0x00000000; }; instance of Win32Perf_RawFullImage { Name = "SysTray/C:\\WINNT50\\system32\\KERNEL32.dll"; NoAccess = 0x00000000; ReadOnly = 0x00001000; ReadPerWrite = 0x00002000; WriteCopy = 0x00000000; Executable = 0x00000000; ExecReadOnly = 0x00000000; ExecReadPerWrite = 0x00000000; ExecWriteCopy = 0x00000000; }; instance of Win32Perf_RawFullImage { Name = "SysTray/C:\\WINNT50\\system32\\USER32.dll"; NoAccess = 0x00000000; ReadOnly = 0x00001000; ReadPerWrite = 0x00001000; WriteCopy = 0x00000000; Executable = 0x00000000; ExecReadOnly = 0x00000000; ExecReadPerWrite = 0x00000000; ExecWriteCopy = 0x00000000; }; instance of Win32Perf_RawFullImage { Name = "SysTray/C:\\WINNT50\\system32\\GDI32.dll"; NoAccess = 0x00000000; ReadOnly = 0x00001000; ReadPerWrite = 0x00001000; WriteCopy = 0x00000000; Executable = 0x00000000; ExecReadOnly = 0x00000000; ExecReadPerWrite = 0x00000000; ExecWriteCopy = 0x00000000; }; instance of Win32Perf_RawFullImage { Name = "SysTray/C:\\WINNT50\\system32\\COMCTL32.dll"; NoAccess = 0x00000000; ReadOnly = 0x00001000; ReadPerWrite = 0x00001000; WriteCopy = 0x00000000; Executable = 0x00000000; ExecReadOnly = 0x00000000; ExecReadPerWrite = 0x00000000; ExecWriteCopy = 0x00000000; }; instance of Win32Perf_RawFullImage { Name = "SysTray/C:\\WINNT50\\system32\\SHELL32.dll"; NoAccess = 0x00000000; ReadOnly = 0x00001000; ReadPerWrite = 0x00001000; WriteCopy = 0x00004000; Executable = 0x00000000; ExecReadOnly = 0x00000000; ExecReadPerWrite = 0x00000000; ExecWriteCopy = 0x00000000; }; instance of Win32Perf_RawFullImage { Name = "SysTray/C:\\WINNT50\\system32\\SHLWAPI.dll"; NoAccess = 0x00000000; ReadOnly = 0x00001000; ReadPerWrite = 0x00001000; WriteCopy = 0x00001000; Executable = 0x00000000; ExecReadOnly = 0x00000000; ExecReadPerWrite = 0x00000000; ExecWriteCopy = 0x00000000; }; instance of Win32Perf_RawFullImage { Name = "SysTray/C:\\WINNT50\\system32\\MPR.dll"; NoAccess = 0x00000000; ReadOnly = 0x00001000; ReadPerWrite = 0x00000000; WriteCopy = 0x00000000; Executable = 0x00000000; ExecReadOnly = 0x00000000; ExecReadPerWrite = 0x00000000; ExecWriteCopy = 0x00000000; }; instance of Win32Perf_RawFullImage { Name = "SysTray/C:\\WINNT50\\System32\\BatMeter.dll"; NoAccess = 0x00000000; ReadOnly = 0x00001000; ReadPerWrite = 0x00001000; WriteCopy = 0x00000000; Executable = 0x00000000; ExecReadOnly = 0x00002000; ExecReadPerWrite = 0x00000000; ExecWriteCopy = 0x00000000; }; instance of Win32Perf_RawFullImage { Name = "SysTray/C:\\WINNT50\\System32\\SETUPAPI.dll"; NoAccess = 0x00000000; ReadOnly = 0x00001000; ReadPerWrite = 0x00001000; WriteCopy = 0x00000000; Executable = 0x00000000; ExecReadOnly = 0x00000000; ExecReadPerWrite = 0x00000000; ExecWriteCopy = 0x00000000; }; instance of Win32Perf_RawFullImage { Name = "SysTray/C:\\WINNT50\\system32\\MSVCRT.dll"; NoAccess = 0x00000000; ReadOnly = 0x00001000; ReadPerWrite = 0x00000000; WriteCopy = 0x00001000; Executable = 0x00000000; ExecReadOnly = 0x00000000; ExecReadPerWrite = 0x00000000; ExecWriteCopy = 0x00000000; }; instance of Win32Perf_RawFullImage { Name = "SysTray/C:\\WINNT50\\system32\\LZ32.dll"; NoAccess = 0x00000000; ReadOnly = 0x00001000; ReadPerWrite = 0x00001000; WriteCopy = 0x00000000; Executable = 0x00000000; ExecReadOnly = 0x00000000; ExecReadPerWrite = 0x00000000; ExecWriteCopy = 0x00000000; }; instance of Win32Perf_RawFullImage { Name = "SysTray/C:\\WINNT50\\system32\\comdlg32.dll"; NoAccess = 0x00000000; ReadOnly = 0x00001000; ReadPerWrite = 0x00001000; WriteCopy = 0x00003000; Executable = 0x00000000; ExecReadOnly = 0x00000000; ExecReadPerWrite = 0x00000000; ExecWriteCopy = 0x00000000; }; instance of Win32Perf_RawFullImage { Name = "SysTray/C:\\WINNT50\\system32\\WINSPOOL.DRV"; NoAccess = 0x00000000; ReadOnly = 0x00001000; ReadPerWrite = 0x00001000; WriteCopy = 0x00002000; Executable = 0x00000000; ExecReadOnly = 0x00000000; ExecReadPerWrite = 0x00000000; ExecWriteCopy = 0x00000000; }; instance of Win32Perf_RawFullImage { Name = "SysTray/C:\\WINNT50\\system32\\RPCRT4.dll"; NoAccess = 0x00000000; ReadOnly = 0x00001000; ReadPerWrite = 0x00001000; WriteCopy = 0x00000000; Executable = 0x00000000; ExecReadOnly = 0x00000000; ExecReadPerWrite = 0x00000000; ExecWriteCopy = 0x00000000; }; instance of Win32Perf_RawFullImage { Name = "SysTray/C:\\WINNT50\\system32\\ole32.dll"; NoAccess = 0x00000000; ReadOnly = 0x00001000; ReadPerWrite = 0x00002000; WriteCopy = 0x00004000; Executable = 0x00000000; ExecReadOnly = 0x00000000; ExecReadPerWrite = 0x00000000; ExecWriteCopy = 0x00000000; }; instance of Win32Perf_RawFullImage { Name = "SysTray/C:\\WINNT50\\system32\\VERSION.dll"; NoAccess = 0x00000000; ReadOnly = 0x00001000; ReadPerWrite = 0x00000000; WriteCopy = 0x00000000; Executable = 0x00000000; ExecReadOnly = 0x00000000; ExecReadPerWrite = 0x00000000; ExecWriteCopy = 0x00000000; }; instance of Win32Perf_RawFullImage { Name = "SysTray/C:\\WINNT50\\system32\\Cabinet.DLL"; NoAccess = 0x00000000; ReadOnly = 0x00002000; ReadPerWrite = 0x00000000; WriteCopy = 0x00000000; Executable = 0x00000000; ExecReadOnly = 0x00000000; ExecReadPerWrite = 0x00000000; ExecWriteCopy = 0x00000000; }; instance of Win32Perf_RawFullImage { Name = "SysTray/C:\\WINNT50\\System32\\CFGMGR32.dll"; NoAccess = 0x00000000; ReadOnly = 0x00001000; ReadPerWrite = 0x00000000; WriteCopy = 0x00000000; Executable = 0x00000000; ExecReadOnly = 0x00000000; ExecReadPerWrite = 0x00000000; ExecWriteCopy = 0x00000000; }; instance of Win32Perf_RawFullImage { Name = "SysTray/C:\\WINNT50\\System32\\POWRPROF.dll"; NoAccess = 0x00000000; ReadOnly = 0x00001000; ReadPerWrite = 0x00000000; WriteCopy = 0x00000000; Executable = 0x00000000; ExecReadOnly = 0x00000000; ExecReadPerWrite = 0x00000000; ExecWriteCopy = 0x00000000; }; instance of Win32Perf_RawFullImage { Name = "SysTray/C:\\WINNT50\\System32\\WINMM.dll"; NoAccess = 0x00000000; ReadOnly = 0x00001000; ReadPerWrite = 0x00004000; WriteCopy = 0x00000000; Executable = 0x00000000; ExecReadOnly = 0x00001000; ExecReadPerWrite = 0x00000000; ExecWriteCopy = 0x00000000; }; instance of Win32Perf_RawFullImage { Name = "SysTray/C:\\WINNT50\\System32\\DINPUT.dll"; NoAccess = 0x00000000; ReadOnly = 0x00001000; ReadPerWrite = 0x00001000; WriteCopy = 0x00000000; Executable = 0x00000000; ExecReadOnly = 0x00000000; ExecReadPerWrite = 0x00000000; ExecWriteCopy = 0x00000000; }; instance of Win32Perf_RawFullImage { Name = "SysTray/C:\\WINNT50\\System32\\CSCDLL.dll"; NoAccess = 0x00000000; ReadOnly = 0x00002000; ReadPerWrite = 0x00002000; WriteCopy = 0x00003000; Executable = 0x00000000; ExecReadOnly = 0x00000000; ExecReadPerWrite = 0x00000000; ExecWriteCopy = 0x00000000; }; instance of Win32Perf_RawFullImage { Name = "SysTray/C:\\WINNT50\\System32\\NETAPI32.dll"; NoAccess = 0x00000000; ReadOnly = 0x00001000; ReadPerWrite = 0x00001000; WriteCopy = 0x00001000; Executable = 0x00000000; ExecReadOnly = 0x00000000; ExecReadPerWrite = 0x00000000; ExecWriteCopy = 0x00000000; }; instance of Win32Perf_RawFullImage { Name = "SysTray/C:\\WINNT50\\System32\\Secur32.dll"; NoAccess = 0x00000000; ReadOnly = 0x00001000; ReadPerWrite = 0x00000000; WriteCopy = 0x00000000; Executable = 0x00000000; ExecReadOnly = 0x00000000; ExecReadPerWrite = 0x00000000; ExecWriteCopy = 0x00000000; }; instance of Win32Perf_RawFullImage { Name = "SysTray/C:\\WINNT50\\System32\\NETRAP.dll"; NoAccess = 0x00000000; ReadOnly = 0x00001000; ReadPerWrite = 0x00000000; WriteCopy = 0x00001000; Executable = 0x00000000; ExecReadOnly = 0x00000000; ExecReadPerWrite = 0x00000000; ExecWriteCopy = 0x00000000; }; instance of Win32Perf_RawFullImage { Name = "SysTray/C:\\WINNT50\\System32\\SAMLIB.dll"; NoAccess = 0x00000000; ReadOnly = 0x00001000; ReadPerWrite = 0x00000000; WriteCopy = 0x00000000; Executable = 0x00000000; ExecReadOnly = 0x00000000; ExecReadPerWrite = 0x00000000; ExecWriteCopy = 0x00000000; }; instance of Win32Perf_RawFullImage { Name = "SysTray/C:\\WINNT50\\System32\\WS2_32.dll"; NoAccess = 0x00000000; ReadOnly = 0x00001000; ReadPerWrite = 0x00001000; WriteCopy = 0x00000000; Executable = 0x00000000; ExecReadOnly = 0x00000000; ExecReadPerWrite = 0x00000000; ExecWriteCopy = 0x00000000; }; instance of Win32Perf_RawFullImage { Name = "SysTray/C:\\WINNT50\\System32\\WS2HELP.dll"; NoAccess = 0x00000000; ReadOnly = 0x00001000; ReadPerWrite = 0x00000000; WriteCopy = 0x00000000; Executable = 0x00000000; ExecReadOnly = 0x00000000; ExecReadPerWrite = 0x00000000; ExecWriteCopy = 0x00000000; }; instance of Win32Perf_RawFullImage { Name = "SysTray/C:\\WINNT50\\System32\\WLDAP32.dll"; NoAccess = 0x00000000; ReadOnly = 0x00001000; ReadPerWrite = 0x00000000; WriteCopy = 0x00000000; Executable = 0x00000000; ExecReadOnly = 0x00000000; ExecReadPerWrite = 0x00000000; ExecWriteCopy = 0x00000000; }; instance of Win32Perf_RawFullImage { Name = "SysTray/C:\\WINNT50\\System32\\DNSAPI.dll"; NoAccess = 0x00000000; ReadOnly = 0x00001000; ReadPerWrite = 0x00000000; WriteCopy = 0x00000000; Executable = 0x00000000; ExecReadOnly = 0x00000000; ExecReadPerWrite = 0x00000000; ExecWriteCopy = 0x00000000; }; instance of Win32Perf_RawFullImage { Name = "SysTray/C:\\WINNT50\\System32\\WSOCK32.dll"; NoAccess = 0x00000000; ReadOnly = 0x00001000; ReadPerWrite = 0x00000000; WriteCopy = 0x00000000; Executable = 0x00000000; ExecReadOnly = 0x00001000; ExecReadPerWrite = 0x00000000; ExecWriteCopy = 0x00000000; }; instance of Win32Perf_RawFullImage { Name = "SysTray/C:\\WINNT50\\System32\\rpclt1.dll"; NoAccess = 0x00000000; ReadOnly = 0x00001000; ReadPerWrite = 0x00000000; WriteCopy = 0x00000000; Executable = 0x00000000; ExecReadOnly = 0x00000000; ExecReadPerWrite = 0x00000000; ExecWriteCopy = 0x00000000; }; instance of Win32Perf_RawFullImage { Name = "CMD/C:\\WINNT50\\System32\\CMD.exe"; NoAccess = 0x00000000; ReadOnly = 0x00001000; ReadPerWrite = 0x00003000; WriteCopy = 0x00003000; Executable = 0x00000000; ExecReadOnly = 0x00000000; ExecReadPerWrite = 0x00000000; ExecWriteCopy = 0x00000000; }; instance of Win32Perf_RawFullImage { Name = "CMD/C:\\WINNT50\\System32\\ntdll.dll"; NoAccess = 0x00000000; ReadOnly = 0x00001000; ReadPerWrite = 0x00001000; WriteCopy = 0x00001000; Executable = 0x00000000; ExecReadOnly = 0x00000000; ExecReadPerWrite = 0x00000000; ExecWriteCopy = 0x00000000; }; instance of Win32Perf_RawFullImage { Name = "CMD/C:\\WINNT50\\system32\\ADVAPI32.dll"; NoAccess = 0x00000000; ReadOnly = 0x00001000; ReadPerWrite = 0x00001000; WriteCopy = 0x00001000; Executable = 0x00000000; ExecReadOnly = 0x00000000; ExecReadPerWrite = 0x00000000; ExecWriteCopy = 0x00000000; }; instance of Win32Perf_RawFullImage { Name = "CMD/C:\\WINNT50\\system32\\KERNEL32.dll"; NoAccess = 0x00000000; ReadOnly = 0x00001000; ReadPerWrite = 0x00002000; WriteCopy = 0x00000000; Executable = 0x00000000; ExecReadOnly = 0x00000000; ExecReadPerWrite = 0x00000000; ExecWriteCopy = 0x00000000; }; instance of Win32Perf_RawFullImage { Name = "CMD/C:\\WINNT50\\System32\\USER32.dll"; NoAccess = 0x00000000; ReadOnly = 0x00001000; ReadPerWrite = 0x00001000; WriteCopy = 0x00000000; Executable = 0x00000000; ExecReadOnly = 0x00000000; ExecReadPerWrite = 0x00000000; ExecWriteCopy = 0x00000000; }; instance of Win32Perf_RawFullImage { Name = "CMD/C:\\WINNT50\\system32\\GDI32.dll"; NoAccess = 0x00000000; ReadOnly = 0x00001000; ReadPerWrite = 0x00001000; WriteCopy = 0x00000000; Executable = 0x00000000; ExecReadOnly = 0x00000000; ExecReadPerWrite = 0x00000000; ExecWriteCopy = 0x00000000; }; instance of Win32Perf_RawFullImage { Name = "CMD/C:\\WINNT50\\system32\\cmd.exe"; NoAccess = 0x00000000; ReadOnly = 0x00001000; ReadPerWrite = 0x00003000; WriteCopy = 0x00003000; Executable = 0x00000000; ExecReadOnly = 0x00000000; ExecReadPerWrite = 0x00000000; ExecWriteCopy = 0x00000000; }; instance of Win32Perf_RawFullImage { Name = "CMD/C:\\WINNT50\\System32\\ntdll.dll"; NoAccess = 0x00000000; ReadOnly = 0x00001000; ReadPerWrite = 0x00001000; WriteCopy = 0x00001000; Executable = 0x00000000; ExecReadOnly = 0x00000000; ExecReadPerWrite = 0x00000000; ExecWriteCopy = 0x00000000; }; instance of Win32Perf_RawFullImage { Name = "CMD/C:\\WINNT50\\system32\\ADVAPI32.dll"; NoAccess = 0x00000000; ReadOnly = 0x00001000; ReadPerWrite = 0x00001000; WriteCopy = 0x00001000; Executable = 0x00000000; ExecReadOnly = 0x00000000; ExecReadPerWrite = 0x00000000; ExecWriteCopy = 0x00000000; }; instance of Win32Perf_RawFullImage { Name = "CMD/C:\\WINNT50\\system32\\KERNEL32.dll"; NoAccess = 0x00000000; ReadOnly = 0x00001000; ReadPerWrite = 0x00002000; WriteCopy = 0x00000000; Executable = 0x00000000; ExecReadOnly = 0x00000000; ExecReadPerWrite = 0x00000000; ExecWriteCopy = 0x00000000; }; instance of Win32Perf_RawFullImage { Name = "CMD/C:\\WINNT50\\system32\\USER32.dll"; NoAccess = 0x00000000; ReadOnly = 0x00001000; ReadPerWrite = 0x00001000; WriteCopy = 0x00000000; Executable = 0x00000000; ExecReadOnly = 0x00000000; ExecReadPerWrite = 0x00000000; ExecWriteCopy = 0x00000000; }; instance of Win32Perf_RawFullImage { Name = "CMD/C:\\WINNT50\\system32\\GDI32.dll"; NoAccess = 0x00000000; ReadOnly = 0x00001000; ReadPerWrite = 0x00001000; WriteCopy = 0x00000000; Executable = 0x00000000; ExecReadOnly = 0x00000000; ExecReadPerWrite = 0x00000000; ExecWriteCopy = 0x00000000; }; instance of Win32Perf_RawFullImage { Name = "findfast/D:\\Program Files\\Microsoft Office\\Office\\findfast.exe"; NoAccess = 0x00000000; ReadOnly = 0x00002000; ReadPerWrite = 0x00000000; WriteCopy = 0x00001000; Executable = 0x00000000; ExecReadOnly = 0x00000000; ExecReadPerWrite = 0x00000000; ExecWriteCopy = 0x00000000; }; instance of Win32Perf_RawFullImage { Name = "findfast/C:\\WINNT50\\System32\\ntdll.dll"; NoAccess = 0x00000000; ReadOnly = 0x00001000; ReadPerWrite = 0x00001000; WriteCopy = 0x00001000; Executable = 0x00000000; ExecReadOnly = 0x00000000; ExecReadPerWrite = 0x00000000; ExecWriteCopy = 0x00000000; }; instance of Win32Perf_RawFullImage { Name = "findfast/C:\\WINNT50\\system32\\KERNEL32.dll"; NoAccess = 0x00000000; ReadOnly = 0x00001000; ReadPerWrite = 0x00002000; WriteCopy = 0x00000000; Executable = 0x00000000; ExecReadOnly = 0x00000000; ExecReadPerWrite = 0x00000000; ExecWriteCopy = 0x00000000; }; instance of Win32Perf_RawFullImage { Name = "findfast/C:\\WINNT50\\system32\\USER32.dll"; NoAccess = 0x00000000; ReadOnly = 0x00001000; ReadPerWrite = 0x00001000; WriteCopy = 0x00000000; Executable = 0x00000000; ExecReadOnly = 0x00000000; ExecReadPerWrite = 0x00000000; ExecWriteCopy = 0x00000000; }; instance of Win32Perf_RawFullImage { Name = "findfast/C:\\WINNT50\\system32\\GDI32.dll"; NoAccess = 0x00000000; ReadOnly = 0x00001000; ReadPerWrite = 0x00001000; WriteCopy = 0x00000000; Executable = 0x00000000; ExecReadOnly = 0x00000000; ExecReadPerWrite = 0x00000000; ExecWriteCopy = 0x00000000; }; instance of Win32Perf_RawFullImage { Name = "findfast/C:\\WINNT50\\system32\\ADVAPI32.dll"; NoAccess = 0x00000000; ReadOnly = 0x00001000; ReadPerWrite = 0x00001000; WriteCopy = 0x00001000; Executable = 0x00000000; ExecReadOnly = 0x00000000; ExecReadPerWrite = 0x00000000; ExecWriteCopy = 0x00000000; }; instance of Win32Perf_RawFullImage { Name = "findfast/C:\\WINNT50\\system32\\SHELL32.dll"; NoAccess = 0x00000000; ReadOnly = 0x00001000; ReadPerWrite = 0x00004000; WriteCopy = 0x00001000; Executable = 0x00000000; ExecReadOnly = 0x00000000; ExecReadPerWrite = 0x00000000; ExecWriteCopy = 0x00000000; }; instance of Win32Perf_RawFullImage { Name = "findfast/C:\\WINNT50\\system32\\SHLWAPI.dll"; NoAccess = 0x00000000; ReadOnly = 0x00001000; ReadPerWrite = 0x00001000; WriteCopy = 0x00001000; Executable = 0x00000000; ExecReadOnly = 0x00000000; ExecReadPerWrite = 0x00000000; ExecWriteCopy = 0x00000000; }; instance of Win32Perf_RawFullImage { Name = "findfast/C:\\WINNT50\\system32\\MPR.dll"; NoAccess = 0x00000000; ReadOnly = 0x00001000; ReadPerWrite = 0x00000000; WriteCopy = 0x00000000; Executable = 0x00000000; ExecReadOnly = 0x00000000; ExecReadPerWrite = 0x00000000; ExecWriteCopy = 0x00000000; }; instance of Win32Perf_RawFullImage { Name = "findfast/C:\\WINNT50\\system32\\COMCTL32.dll"; NoAccess = 0x00000000; ReadOnly = 0x00001000; ReadPerWrite = 0x00001000; WriteCopy = 0x00000000; Executable = 0x00000000; ExecReadOnly = 0x00000000; ExecReadPerWrite = 0x00000000; ExecWriteCopy = 0x00000000; }; instance of Win32Perf_RawFullImage { Name = "findfast/C:\\WINNT50\\system32\\ole32.dll"; NoAccess = 0x00000000; ReadOnly = 0x00001000; ReadPerWrite = 0x00002000; WriteCopy = 0x00004000; Executable = 0x00000000; ExecReadOnly = 0x00000000; ExecReadPerWrite = 0x00000000; ExecWriteCopy = 0x00000000; }; instance of Win32Perf_RawFullImage { Name = "findfast/C:\\WINNT50\\system32\\RPCRT4.dll"; NoAccess = 0x00000000; ReadOnly = 0x00001000; ReadPerWrite = 0x00001000; WriteCopy = 0x00000000; Executable = 0x00000000; ExecReadOnly = 0x00000000; ExecReadPerWrite = 0x00000000; ExecWriteCopy = 0x00000000; }; instance of Win32Perf_RawFullImage { Name = "findfast/C:\\WINNT50\\system32\\VERSION.dll"; NoAccess = 0x00000000; ReadOnly = 0x00001000; ReadPerWrite = 0x00000000; WriteCopy = 0x00000000; Executable = 0x00000000; ExecReadOnly = 0x00000000; ExecReadPerWrite = 0x00000000; ExecWriteCopy = 0x00000000; }; instance of Win32Perf_RawFullImage { Name = "findfast/C:\\WINNT50\\system32\\Cabinet.DLL"; NoAccess = 0x00000000; ReadOnly = 0x00002000; ReadPerWrite = 0x00000000; WriteCopy = 0x00000000; Executable = 0x00000000; ExecReadOnly = 0x00000000; ExecReadPerWrite = 0x00000000; ExecWriteCopy = 0x00000000; }; instance of Win32Perf_RawFullImage { Name = "findfast/D:\\Program Files\\Microsoft Office\\Office\\MSO97.DLL"; NoAccess = 0x00000000; ReadOnly = 0x00001000; ReadPerWrite = 0x00007000; WriteCopy = 0x00002000; Executable = 0x00000000; ExecReadOnly = 0x00000000; ExecReadPerWrite = 0x00000000; ExecWriteCopy = 0x00000000; }; instance of Win32Perf_RawFullImage { Name = "findfast/C:\\WINNT50\\System32\\riched20.dll"; NoAccess = 0x00000000; ReadOnly = 0x00001000; ReadPerWrite = 0x00002000; WriteCopy = 0x00001000; Executable = 0x00000000; ExecReadOnly = 0x00000000; ExecReadPerWrite = 0x00000000; ExecWriteCopy = 0x00000000; }; instance of Win32Perf_RawFullImage { Name = "findfast/C:\\WINNT50\\system32\\MSVCRT.dll"; NoAccess = 0x00000000; ReadOnly = 0x00001000; ReadPerWrite = 0x00000000; WriteCopy = 0x00001000; Executable = 0x00000000; ExecReadOnly = 0x00000000; ExecReadPerWrite = 0x00000000; ExecWriteCopy = 0x00000000; }; instance of Win32Perf_RawFullImage { Name = "findfast/C:\\WINNT50\\System32\\imm32.dll"; NoAccess = 0x00000000; ReadOnly = 0x00001000; ReadPerWrite = 0x00001000; WriteCopy = 0x00000000; Executable = 0x00000000; ExecReadOnly = 0x00000000; ExecReadPerWrite = 0x00000000; ExecWriteCopy = 0x00000000; }; instance of Win32Perf_RawFullImage { Name = "findfast/C:\\WINNT50\\System32\\rpclt1.dll"; NoAccess = 0x00000000; ReadOnly = 0x00001000; ReadPerWrite = 0x00000000; WriteCopy = 0x00000000; Executable = 0x00000000; ExecReadOnly = 0x00000000; ExecReadPerWrite = 0x00000000; ExecWriteCopy = 0x00000000; }; instance of Win32Perf_RawFullImage { Name = "findfast/C:\\WINNT50\\System32\\ntshrui.dll"; NoAccess = 0x00000000; ReadOnly = 0x00001000; ReadPerWrite = 0x00001000; WriteCopy = 0x00000000; Executable = 0x00000000; ExecReadOnly = 0x00000000; ExecReadPerWrite = 0x00000000; ExecWriteCopy = 0x00000000; }; instance of Win32Perf_RawFullImage { Name = "findfast/C:\\WINNT50\\System32\\NETAPI32.dll"; NoAccess = 0x00000000; ReadOnly = 0x00001000; ReadPerWrite = 0x00001000; WriteCopy = 0x00001000; Executable = 0x00000000; ExecReadOnly = 0x00000000; ExecReadPerWrite = 0x00000000; ExecWriteCopy = 0x00000000; }; instance of Win32Perf_RawFullImage { Name = "findfast/C:\\WINNT50\\System32\\Secur32.dll"; NoAccess = 0x00000000; ReadOnly = 0x00001000; ReadPerWrite = 0x00000000; WriteCopy = 0x00000000; Executable = 0x00000000; ExecReadOnly = 0x00000000; ExecReadPerWrite = 0x00000000; ExecWriteCopy = 0x00000000; }; instance of Win32Perf_RawFullImage { Name = "findfast/C:\\WINNT50\\System32\\NETRAP.dll"; NoAccess = 0x00000000; ReadOnly = 0x00001000; ReadPerWrite = 0x00000000; WriteCopy = 0x00001000; Executable = 0x00000000; ExecReadOnly = 0x00000000; ExecReadPerWrite = 0x00000000; ExecWriteCopy = 0x00000000; }; instance of Win32Perf_RawFullImage { Name = "findfast/C:\\WINNT50\\System32\\SAMLIB.dll"; NoAccess = 0x00000000; ReadOnly = 0x00001000; ReadPerWrite = 0x00000000; WriteCopy = 0x00000000; Executable = 0x00000000; ExecReadOnly = 0x00000000; ExecReadPerWrite = 0x00000000; ExecWriteCopy = 0x00000000; }; instance of Win32Perf_RawFullImage { Name = "findfast/C:\\WINNT50\\System32\\WS2_32.dll"; NoAccess = 0x00000000; ReadOnly = 0x00001000; ReadPerWrite = 0x00001000; WriteCopy = 0x00000000; Executable = 0x00000000; ExecReadOnly = 0x00000000; ExecReadPerWrite = 0x00000000; ExecWriteCopy = 0x00000000; }; instance of Win32Perf_RawFullImage { Name = "findfast/C:\\WINNT50\\System32\\WS2HELP.dll"; NoAccess = 0x00000000; ReadOnly = 0x00001000; ReadPerWrite = 0x00000000; WriteCopy = 0x00000000; Executable = 0x00000000; ExecReadOnly = 0x00000000; ExecReadPerWrite = 0x00000000; ExecWriteCopy = 0x00000000; }; instance of Win32Perf_RawFullImage { Name = "findfast/C:\\WINNT50\\System32\\WLDAP32.dll"; NoAccess = 0x00000000; ReadOnly = 0x00001000; ReadPerWrite = 0x00000000; WriteCopy = 0x00000000; Executable = 0x00000000; ExecReadOnly = 0x00000000; ExecReadPerWrite = 0x00000000; ExecWriteCopy = 0x00000000; }; instance of Win32Perf_RawFullImage { Name = "findfast/C:\\WINNT50\\System32\\DNSAPI.dll"; NoAccess = 0x00000000; ReadOnly = 0x00001000; ReadPerWrite = 0x00000000; WriteCopy = 0x00000000; Executable = 0x00000000; ExecReadOnly = 0x00000000; ExecReadPerWrite = 0x00000000; ExecWriteCopy = 0x00000000; }; instance of Win32Perf_RawFullImage { Name = "findfast/C:\\WINNT50\\System32\\WSOCK32.dll"; NoAccess = 0x00000000; ReadOnly = 0x00001000; ReadPerWrite = 0x00000000; WriteCopy = 0x00000000; Executable = 0x00000000; ExecReadOnly = 0x00001000; ExecReadPerWrite = 0x00000000; ExecWriteCopy = 0x00000000; }; instance of Win32Perf_RawFullImage { Name = "findfast/C:\\WINNT50\\System32\\LINKINFO.DLL"; NoAccess = 0x00000000; ReadOnly = 0x00001000; ReadPerWrite = 0x00000000; WriteCopy = 0x00000000; Executable = 0x00000000; ExecReadOnly = 0x00000000; ExecReadPerWrite = 0x00000000; ExecWriteCopy = 0x00000000; }; instance of Win32Perf_RawFullImage { Name = "findfast/C:\\WINNT50\\System32\\nwprovau.dll"; NoAccess = 0x00000000; ReadOnly = 0x00001000; ReadPerWrite = 0x00002000; WriteCopy = 0x00000000; Executable = 0x00000000; ExecReadOnly = 0x00000000; ExecReadPerWrite = 0x00000000; ExecWriteCopy = 0x00000000; }; instance of Win32Perf_RawFullImage { Name = "findfast/C:\\WINNT50\\System32\\ntlanman.dll"; NoAccess = 0x00000000; ReadOnly = 0x00001000; ReadPerWrite = 0x00000000; WriteCopy = 0x00000000; Executable = 0x00000000; ExecReadOnly = 0x00000000; ExecReadPerWrite = 0x00000000; ExecWriteCopy = 0x00000000; }; instance of Win32Perf_RawFullImage { Name = "findfast/C:\\WINNT50\\System32\\NETUI0.dll"; NoAccess = 0x00000000; ReadOnly = 0x00001000; ReadPerWrite = 0x00001000; WriteCopy = 0x00000000; Executable = 0x00000000; ExecReadOnly = 0x00000000; ExecReadPerWrite = 0x00000000; ExecWriteCopy = 0x00000000; }; instance of Win32Perf_RawFullImage { Name = "findfast/C:\\WINNT50\\System32\\NETUI1.dll"; NoAccess = 0x00000000; ReadOnly = 0x00001000; ReadPerWrite = 0x00001000; WriteCopy = 0x00000000; Executable = 0x00000000; ExecReadOnly = 0x00000000; ExecReadPerWrite = 0x00000000; ExecWriteCopy = 0x00000000; }; instance of Win32Perf_RawFullImage { Name = "CMD/C:\\WINNT50\\System32\\CMD.exe"; NoAccess = 0x00000000; ReadOnly = 0x00001000; ReadPerWrite = 0x00003000; WriteCopy = 0x00003000; Executable = 0x00000000; ExecReadOnly = 0x00000000; ExecReadPerWrite = 0x00000000; ExecWriteCopy = 0x00000000; }; instance of Win32Perf_RawFullImage { Name = "CMD/C:\\WINNT50\\System32\\ntdll.dll"; NoAccess = 0x00000000; ReadOnly = 0x00001000; ReadPerWrite = 0x00001000; WriteCopy = 0x00001000; Executable = 0x00000000; ExecReadOnly = 0x00000000; ExecReadPerWrite = 0x00000000; ExecWriteCopy = 0x00000000; }; instance of Win32Perf_RawFullImage { Name = "CMD/C:\\WINNT50\\system32\\ADVAPI32.dll"; NoAccess = 0x00000000; ReadOnly = 0x00001000; ReadPerWrite = 0x00001000; WriteCopy = 0x00001000; Executable = 0x00000000; ExecReadOnly = 0x00000000; ExecReadPerWrite = 0x00000000; ExecWriteCopy = 0x00000000; }; instance of Win32Perf_RawFullImage { Name = "CMD/C:\\WINNT50\\system32\\KERNEL32.dll"; NoAccess = 0x00000000; ReadOnly = 0x00001000; ReadPerWrite = 0x00002000; WriteCopy = 0x00000000; Executable = 0x00000000; ExecReadOnly = 0x00000000; ExecReadPerWrite = 0x00000000; ExecWriteCopy = 0x00000000; }; instance of Win32Perf_RawFullImage { Name = "CMD/C:\\WINNT50\\System32\\USER32.dll"; NoAccess = 0x00000000; ReadOnly = 0x00001000; ReadPerWrite = 0x00001000; WriteCopy = 0x00000000; Executable = 0x00000000; ExecReadOnly = 0x00000000; ExecReadPerWrite = 0x00000000; ExecWriteCopy = 0x00000000; }; instance of Win32Perf_RawFullImage { Name = "CMD/C:\\WINNT50\\system32\\GDI32.dll"; NoAccess = 0x00000000; ReadOnly = 0x00001000; ReadPerWrite = 0x00001000; WriteCopy = 0x00000000; Executable = 0x00000000; ExecReadOnly = 0x00000000; ExecReadPerWrite = 0x00000000; ExecWriteCopy = 0x00000000; }; instance of Win32Perf_RawFullImage { Name = "CMD/C:\\WINNT50\\system32\\cmd.exe"; NoAccess = 0x00000000; ReadOnly = 0x00001000; ReadPerWrite = 0x00003000; WriteCopy = 0x00003000; Executable = 0x00000000; ExecReadOnly = 0x00000000; ExecReadPerWrite = 0x00000000; ExecWriteCopy = 0x00000000; }; instance of Win32Perf_RawFullImage { Name = "CMD/C:\\WINNT50\\System32\\ntdll.dll"; NoAccess = 0x00000000; ReadOnly = 0x00001000; ReadPerWrite = 0x00001000; WriteCopy = 0x00001000; Executable = 0x00000000; ExecReadOnly = 0x00000000; ExecReadPerWrite = 0x00000000; ExecWriteCopy = 0x00000000; }; instance of Win32Perf_RawFullImage { Name = "CMD/C:\\WINNT50\\system32\\ADVAPI32.dll"; NoAccess = 0x00000000; ReadOnly = 0x00001000; ReadPerWrite = 0x00001000; WriteCopy = 0x00001000; Executable = 0x00000000; ExecReadOnly = 0x00000000; ExecReadPerWrite = 0x00000000; ExecWriteCopy = 0x00000000; }; instance of Win32Perf_RawFullImage { Name = "CMD/C:\\WINNT50\\system32\\KERNEL32.dll"; NoAccess = 0x00000000; ReadOnly = 0x00001000; ReadPerWrite = 0x00002000; WriteCopy = 0x00000000; Executable = 0x00000000; ExecReadOnly = 0x00000000; ExecReadPerWrite = 0x00000000; ExecWriteCopy = 0x00000000; }; instance of Win32Perf_RawFullImage { Name = "CMD/C:\\WINNT50\\system32\\USER32.dll"; NoAccess = 0x00000000; ReadOnly = 0x00001000; ReadPerWrite = 0x00001000; WriteCopy = 0x00000000; Executable = 0x00000000; ExecReadOnly = 0x00000000; ExecReadPerWrite = 0x00000000; ExecWriteCopy = 0x00000000; }; instance of Win32Perf_RawFullImage { Name = "CMD/C:\\WINNT50\\system32\\GDI32.dll"; NoAccess = 0x00000000; ReadOnly = 0x00001000; ReadPerWrite = 0x00001000; WriteCopy = 0x00000000; Executable = 0x00000000; ExecReadOnly = 0x00000000; ExecReadPerWrite = 0x00000000; ExecWriteCopy = 0x00000000; }; instance of Win32Perf_RawFullImage { Name = "notepad/C:\\WINNT50\\system32\\notepad.exe"; NoAccess = 0x00000000; ReadOnly = 0x00001000; ReadPerWrite = 0x00002000; WriteCopy = 0x00000000; Executable = 0x00000000; ExecReadOnly = 0x00000000; ExecReadPerWrite = 0x00000000; ExecWriteCopy = 0x00000000; }; instance of Win32Perf_RawFullImage { Name = "notepad/C:\\WINNT50\\System32\\ntdll.dll"; NoAccess = 0x00000000; ReadOnly = 0x00001000; ReadPerWrite = 0x00001000; WriteCopy = 0x00001000; Executable = 0x00000000; ExecReadOnly = 0x00000000; ExecReadPerWrite = 0x00000000; ExecWriteCopy = 0x00000000; }; instance of Win32Perf_RawFullImage { Name = "notepad/C:\\WINNT50\\system32\\comdlg32.dll"; NoAccess = 0x00000000; ReadOnly = 0x00001000; ReadPerWrite = 0x00001000; WriteCopy = 0x00003000; Executable = 0x00000000; ExecReadOnly = 0x00000000; ExecReadPerWrite = 0x00000000; ExecWriteCopy = 0x00000000; }; instance of Win32Perf_RawFullImage { Name = "notepad/C:\\WINNT50\\system32\\KERNEL32.dll"; NoAccess = 0x00000000; ReadOnly = 0x00001000; ReadPerWrite = 0x00002000; WriteCopy = 0x00000000; Executable = 0x00000000; ExecReadOnly = 0x00000000; ExecReadPerWrite = 0x00000000; ExecWriteCopy = 0x00000000; }; instance of Win32Perf_RawFullImage { Name = "notepad/C:\\WINNT50\\system32\\USER32.dll"; NoAccess = 0x00000000; ReadOnly = 0x00001000; ReadPerWrite = 0x00001000; WriteCopy = 0x00000000; Executable = 0x00000000; ExecReadOnly = 0x00000000; ExecReadPerWrite = 0x00000000; ExecWriteCopy = 0x00000000; }; instance of Win32Perf_RawFullImage { Name = "notepad/C:\\WINNT50\\system32\\GDI32.dll"; NoAccess = 0x00000000; ReadOnly = 0x00001000; ReadPerWrite = 0x00001000; WriteCopy = 0x00000000; Executable = 0x00000000; ExecReadOnly = 0x00000000; ExecReadPerWrite = 0x00000000; ExecWriteCopy = 0x00000000; }; instance of Win32Perf_RawFullImage { Name = "notepad/C:\\WINNT50\\system32\\ADVAPI32.dll"; NoAccess = 0x00000000; ReadOnly = 0x00001000; ReadPerWrite = 0x00001000; WriteCopy = 0x00001000; Executable = 0x00000000; ExecReadOnly = 0x00000000; ExecReadPerWrite = 0x00000000; ExecWriteCopy = 0x00000000; }; instance of Win32Perf_RawFullImage { Name = "notepad/C:\\WINNT50\\system32\\COMCTL32.dll"; NoAccess = 0x00000000; ReadOnly = 0x00001000; ReadPerWrite = 0x00001000; WriteCopy = 0x00000000; Executable = 0x00000000; ExecReadOnly = 0x00000000; ExecReadPerWrite = 0x00000000; ExecWriteCopy = 0x00000000; }; instance of Win32Perf_RawFullImage { Name = "notepad/C:\\WINNT50\\system32\\SHELL32.dll"; NoAccess = 0x00000000; ReadOnly = 0x00001000; ReadPerWrite = 0x00001000; WriteCopy = 0x00004000; Executable = 0x00000000; ExecReadOnly = 0x00000000; ExecReadPerWrite = 0x00000000; ExecWriteCopy = 0x00000000; }; instance of Win32Perf_RawFullImage { Name = "notepad/C:\\WINNT50\\system32\\SHLWAPI.dll"; NoAccess = 0x00000000; ReadOnly = 0x00001000; ReadPerWrite = 0x00001000; WriteCopy = 0x00001000; Executable = 0x00000000; ExecReadOnly = 0x00000000; ExecReadPerWrite = 0x00000000; ExecWriteCopy = 0x00000000; }; instance of Win32Perf_RawFullImage { Name = "notepad/C:\\WINNT50\\system32\\MPR.dll"; NoAccess = 0x00000000; ReadOnly = 0x00001000; ReadPerWrite = 0x00000000; WriteCopy = 0x00000000; Executable = 0x00000000; ExecReadOnly = 0x00000000; ExecReadPerWrite = 0x00000000; ExecWriteCopy = 0x00000000; }; instance of Win32Perf_RawFullImage { Name = "notepad/C:\\WINNT50\\system32\\WINSPOOL.DRV"; NoAccess = 0x00000000; ReadOnly = 0x00001000; ReadPerWrite = 0x00001000; WriteCopy = 0x00002000; Executable = 0x00000000; ExecReadOnly = 0x00000000; ExecReadPerWrite = 0x00000000; ExecWriteCopy = 0x00000000; }; instance of Win32Perf_RawFullImage { Name = "notepad/C:\\WINNT50\\system32\\RPCRT4.dll"; NoAccess = 0x00000000; ReadOnly = 0x00001000; ReadPerWrite = 0x00001000; WriteCopy = 0x00000000; Executable = 0x00000000; ExecReadOnly = 0x00000000; ExecReadPerWrite = 0x00000000; ExecWriteCopy = 0x00000000; }; instance of Win32Perf_RawFullImage { Name = "notepad/C:\\WINNT50\\system32\\ole32.dll"; NoAccess = 0x00000000; ReadOnly = 0x00001000; ReadPerWrite = 0x00002000; WriteCopy = 0x00004000; Executable = 0x00000000; ExecReadOnly = 0x00000000; ExecReadPerWrite = 0x00000000; ExecWriteCopy = 0x00000000; }; instance of Win32Perf_RawFullImage { Name = "notepad/C:\\WINNT50\\system32\\MSVCRT.dll"; NoAccess = 0x00000000; ReadOnly = 0x00001000; ReadPerWrite = 0x00000000; WriteCopy = 0x00001000; Executable = 0x00000000; ExecReadOnly = 0x00000000; ExecReadPerWrite = 0x00000000; ExecWriteCopy = 0x00000000; }; instance of Win32Perf_RawFullImage { Name = "ctrlist/G:\\nt\\private\\sdktools\\cntrtext\\ctrlist\\obj\\i386\\ctrlist.exe"; NoAccess = 0x00000000; ReadOnly = 0x00001000; ReadPerWrite = 0x00000000; WriteCopy = 0x00000000; Executable = 0x00000000; ExecReadOnly = 0x00000000; ExecReadPerWrite = 0x00000000; ExecWriteCopy = 0x00000000; }; instance of Win32Perf_RawFullImage { Name = "ctrlist/C:\\WINNT50\\System32\\ntdll.dll"; NoAccess = 0x00000000; ReadOnly = 0x00001000; ReadPerWrite = 0x00002000; WriteCopy = 0x00000000; Executable = 0x00000000; ExecReadOnly = 0x00000000; ExecReadPerWrite = 0x00000000; ExecWriteCopy = 0x00000000; }; instance of Win32Perf_RawFullImage { Name = "ctrlist/C:\\WINNT50\\system32\\ADVAPI32.dll"; NoAccess = 0x00000000; ReadOnly = 0x00001000; ReadPerWrite = 0x00001000; WriteCopy = 0x00001000; Executable = 0x00000000; ExecReadOnly = 0x00000000; ExecReadPerWrite = 0x00000000; ExecWriteCopy = 0x00000000; }; instance of Win32Perf_RawFullImage { Name = "ctrlist/C:\\WINNT50\\system32\\KERNEL32.dll"; NoAccess = 0x00000000; ReadOnly = 0x00001000; ReadPerWrite = 0x00002000; WriteCopy = 0x00000000; Executable = 0x00000000; ExecReadOnly = 0x00000000; ExecReadPerWrite = 0x00000000; ExecWriteCopy = 0x00000000; }; instance of Win32Perf_RawFullImage { Name = "ctrlist/C:\\WINNT50\\System32\\RPCRT4.dll"; NoAccess = 0x00000000; ReadOnly = 0x00001000; ReadPerWrite = 0x00001000; WriteCopy = 0x00000000; Executable = 0x00000000; ExecReadOnly = 0x00000000; ExecReadPerWrite = 0x00000000; ExecWriteCopy = 0x00000000; }; instance of Win32Perf_RawFullImage { Name = "ctrlist/C:\\WINNT50\\System32\\rpclt1.dll"; NoAccess = 0x00000000; ReadOnly = 0x00001000; ReadPerWrite = 0x00000000; WriteCopy = 0x00000000; Executable = 0x00000000; ExecReadOnly = 0x00000000; ExecReadPerWrite = 0x00000000; ExecWriteCopy = 0x00000000; }; instance of Win32Perf_RawFullImage { Name = "ctrlist/C:\\WINNT50\\system32\\MSVCRT.dll"; NoAccess = 0x00000000; ReadOnly = 0x00001000; ReadPerWrite = 0x00000000; WriteCopy = 0x00001000; Executable = 0x00000000; ExecReadOnly = 0x00000000; ExecReadPerWrite = 0x00000000; ExecWriteCopy = 0x00000000; }; instance of Win32Perf_RawFullImage { Name = "ctrlist/C:\\WINNT50\\system32\\GDI32.dll"; NoAccess = 0x00000000; ReadOnly = 0x00001000; ReadPerWrite = 0x00001000; WriteCopy = 0x00000000; Executable = 0x00000000; ExecReadOnly = 0x00000000; ExecReadPerWrite = 0x00000000; ExecWriteCopy = 0x00000000; }; instance of Win32Perf_RawFullImage { Name = "ctrlist/C:\\WINNT50\\system32\\USER32.dll"; NoAccess = 0x00000000; ReadOnly = 0x00001000; ReadPerWrite = 0x00001000; WriteCopy = 0x00000000; Executable = 0x00000000; ExecReadOnly = 0x00000000; ExecReadPerWrite = 0x00000000; ExecWriteCopy = 0x00000000; }; instance of Win32Perf_RawFullImage { Name = "ctrlist/C:\\WINNT50\\System32\\NetApi32.Dll"; NoAccess = 0x00000000; ReadOnly = 0x00001000; ReadPerWrite = 0x00001000; WriteCopy = 0x00001000; Executable = 0x00000000; ExecReadOnly = 0x00000000; ExecReadPerWrite = 0x00000000; ExecWriteCopy = 0x00000000; }; instance of Win32Perf_RawFullImage { Name = "ctrlist/C:\\WINNT50\\System32\\Secur32.dll"; NoAccess = 0x00000000; ReadOnly = 0x00001000; ReadPerWrite = 0x00000000; WriteCopy = 0x00000000; Executable = 0x00000000; ExecReadOnly = 0x00000000; ExecReadPerWrite = 0x00000000; ExecWriteCopy = 0x00000000; }; instance of Win32Perf_RawFullImage { Name = "ctrlist/C:\\WINNT50\\System32\\NETRAP.dll"; NoAccess = 0x00000000; ReadOnly = 0x00001000; ReadPerWrite = 0x00000000; WriteCopy = 0x00001000; Executable = 0x00000000; ExecReadOnly = 0x00000000; ExecReadPerWrite = 0x00000000; ExecWriteCopy = 0x00000000; }; instance of Win32Perf_RawFullImage { Name = "ctrlist/C:\\WINNT50\\System32\\SAMLIB.dll"; NoAccess = 0x00000000; ReadOnly = 0x00001000; ReadPerWrite = 0x00000000; WriteCopy = 0x00000000; Executable = 0x00000000; ExecReadOnly = 0x00000000; ExecReadPerWrite = 0x00000000; ExecWriteCopy = 0x00000000; }; instance of Win32Perf_RawFullImage { Name = "ctrlist/C:\\WINNT50\\System32\\WS2_32.dll"; NoAccess = 0x00000000; ReadOnly = 0x00001000; ReadPerWrite = 0x00001000; WriteCopy = 0x00000000; Executable = 0x00000000; ExecReadOnly = 0x00000000; ExecReadPerWrite = 0x00000000; ExecWriteCopy = 0x00000000; }; instance of Win32Perf_RawFullImage { Name = "ctrlist/C:\\WINNT50\\System32\\WS2HELP.dll"; NoAccess = 0x00000000; ReadOnly = 0x00001000; ReadPerWrite = 0x00000000; WriteCopy = 0x00000000; Executable = 0x00000000; ExecReadOnly = 0x00000000; ExecReadPerWrite = 0x00000000; ExecWriteCopy = 0x00000000; }; instance of Win32Perf_RawFullImage { Name = "ctrlist/C:\\WINNT50\\System32\\WLDAP32.dll"; NoAccess = 0x00000000; ReadOnly = 0x00001000; ReadPerWrite = 0x00000000; WriteCopy = 0x00000000; Executable = 0x00000000; ExecReadOnly = 0x00000000; ExecReadPerWrite = 0x00000000; ExecWriteCopy = 0x00000000; }; instance of Win32Perf_RawFullImage { Name = "ctrlist/C:\\WINNT50\\System32\\DNSAPI.dll"; NoAccess = 0x00000000; ReadOnly = 0x00001000; ReadPerWrite = 0x00000000; WriteCopy = 0x00000000; Executable = 0x00000000; ExecReadOnly = 0x00000000; ExecReadPerWrite = 0x00000000; ExecWriteCopy = 0x00000000; }; instance of Win32Perf_RawFullImage { Name = "ctrlist/C:\\WINNT50\\System32\\WSOCK32.dll"; NoAccess = 0x00000000; ReadOnly = 0x00001000; ReadPerWrite = 0x00000000; WriteCopy = 0x00000000; Executable = 0x00000000; ExecReadOnly = 0x00001000; ExecReadPerWrite = 0x00000000; ExecWriteCopy = 0x00000000; }; instance of Win32Perf_RawFullImage { Name = "ctrlist/C:\\WINNT50\\System32\\ntciutil.dll"; NoAccess = 0x00000000; ReadOnly = 0x00001000; ReadPerWrite = 0x00001000; WriteCopy = 0x00000000; Executable = 0x00000000; ExecReadOnly = 0x00000000; ExecReadPerWrite = 0x00000000; ExecWriteCopy = 0x00000000; }; instance of Win32Perf_RawFullImage { Name = "ctrlist/C:\\WINNT50\\System32\\query.dll"; NoAccess = 0x00000000; ReadOnly = 0x00001000; ReadPerWrite = 0x00000000; WriteCopy = 0x00000000; Executable = 0x00000000; ExecReadOnly = 0x00000000; ExecReadPerWrite = 0x00000000; ExecWriteCopy = 0x00000000; }; instance of Win32Perf_RawFullImage { Name = "ctrlist/C:\\WINNT50\\System32\\MSVCIRT.dll"; NoAccess = 0x00000000; ReadOnly = 0x00001000; ReadPerWrite = 0x00000000; WriteCopy = 0x00000000; Executable = 0x00000000; ExecReadOnly = 0x00000000; ExecReadPerWrite = 0x00000000; ExecWriteCopy = 0x00000000; }; instance of Win32Perf_RawFullImage { Name = "ctrlist/C:\\WINNT50\\system32\\OLEAUT32.dll"; NoAccess = 0x00000000; ReadOnly = 0x00001000; ReadPerWrite = 0x00000000; WriteCopy = 0x00000000; Executable = 0x00000000; ExecReadOnly = 0x00000000; ExecReadPerWrite = 0x00000000; ExecWriteCopy = 0x00000000; }; instance of Win32Perf_RawFullImage { Name = "ctrlist/C:\\WINNT50\\system32\\ole32.dll"; NoAccess = 0x00000000; ReadOnly = 0x00001000; ReadPerWrite = 0x00002000; WriteCopy = 0x00004000; Executable = 0x00000000; ExecReadOnly = 0x00000000; ExecReadPerWrite = 0x00000000; ExecWriteCopy = 0x00000000; }; instance of Win32Perf_RawFullImage { Name = "ctrlist/C:\\WINNT50\\system32\\COMCTL32.dll"; NoAccess = 0x00000000; ReadOnly = 0x00001000; ReadPerWrite = 0x00001000; WriteCopy = 0x00000000; Executable = 0x00000000; ExecReadOnly = 0x00000000; ExecReadPerWrite = 0x00000000; ExecWriteCopy = 0x00000000; }; instance of Win32Perf_RawFullImage { Name = "ctrlist/C:\\WINNT50\\system32\\faxperf.dll"; NoAccess = 0x00000000; ReadOnly = 0x00001000; ReadPerWrite = 0x00000000; WriteCopy = 0x00000000; Executable = 0x00000000; ExecReadOnly = 0x00001000; ExecReadPerWrite = 0x00000000; ExecWriteCopy = 0x00000000; }; instance of Win32Perf_RawFullImage { Name = "ctrlist/C:\\WINNT50\\System32\\perfctrs.dll"; NoAccess = 0x00000000; ReadOnly = 0x00001000; ReadPerWrite = 0x00000000; WriteCopy = 0x00001000; Executable = 0x00000000; ExecReadOnly = 0x00000000; ExecReadPerWrite = 0x00000000; ExecWriteCopy = 0x00000000; }; instance of Win32Perf_RawFullImage { Name = "ctrlist/C:\\WINNT50\\System32\\perfnw.dll"; NoAccess = 0x00000000; ReadOnly = 0x00001000; ReadPerWrite = 0x00001000; WriteCopy = 0x00000000; Executable = 0x00000000; ExecReadOnly = 0x00001000; ExecReadPerWrite = 0x00000000; ExecWriteCopy = 0x00000000; }; instance of Win32Perf_RawFullImage { Name = "ctrlist/C:\\WINNT50\\System32\\perfdisk.dll"; NoAccess = 0x00000000; ReadOnly = 0x00001000; ReadPerWrite = 0x00001000; WriteCopy = 0x00000000; Executable = 0x00000000; ExecReadOnly = 0x00000000; ExecReadPerWrite = 0x00000000; ExecWriteCopy = 0x00000000; }; instance of Win32Perf_RawFullImage { Name = "ctrlist/C:\\WINNT50\\System32\\wmi.dll"; NoAccess = 0x00000000; ReadOnly = 0x00001000; ReadPerWrite = 0x00000000; WriteCopy = 0x00000000; Executable = 0x00000000; ExecReadOnly = 0x00000000; ExecReadPerWrite = 0x00000000; ExecWriteCopy = 0x00000000; }; instance of Win32Perf_RawFullImage { Name = "ctrlist/C:\\WINNT50\\System32\\perfnet.dll"; NoAccess = 0x00000000; ReadOnly = 0x00001000; ReadPerWrite = 0x00001000; WriteCopy = 0x00001000; Executable = 0x00000000; ExecReadOnly = 0x00000000; ExecReadPerWrite = 0x00000000; ExecWriteCopy = 0x00000000; }; instance of Win32Perf_RawFullImage { Name = "ctrlist/C:\\WINNT50\\System32\\perfos.dll"; NoAccess = 0x00000000; ReadOnly = 0x00001000; ReadPerWrite = 0x00001000; WriteCopy = 0x00001000; Executable = 0x00000000; ExecReadOnly = 0x00000000; ExecReadPerWrite = 0x00000000; ExecWriteCopy = 0x00000000; }; instance of Win32Perf_RawFullImage { Name = "ctrlist/C:\\WINNT50\\System32\\perfproc.dll"; NoAccess = 0x00000000; ReadOnly = 0x00001000; ReadPerWrite = 0x00001000; WriteCopy = 0x00001000; Executable = 0x00000000; ExecReadOnly = 0x00000000; ExecReadPerWrite = 0x00000000; ExecWriteCopy = 0x00000000; }; [ costly, vendor("Microsoft"), guid("{5C7A4F6C-9E4D-11d1-BB3C-00A0C913CAD4}"), locale("ms:\\0x0409"), displayname("Thread Details"), perfindex(816), helpindex(817), perfdetail(400) ] class Win32Perf_ThreadDetails : Win32_PerfFormattedData { [key] string Name; uint64 Timestamp; [ perfdefault, displayname("User PC"), countertype(65536), perfindex(708), helpindex(709), defaultscale(0), perfdetail(400) ] uint32 UserPC; }; [ costly, vendor("Microsoft"), guid("{5C7A4F6C-9E4D-11d1-BB3C-00A0C913CAD4}"), locale("ms:\\0x0409"), displayname("Thread Details"), perfindex(816), helpindex(817), perfdetail(400) ] class Win32Perf_RawThreadDetails : Win32_PerfRawData { [key] string Name; uint64 Timestamp; [ perfdefault, displayname("User PC"), countertype(65536), perfindex(708), helpindex(709), defaultscale(0), perfdetail(400) ] uint32 UserPC; }; instance of Win32Perf_RawThreadDetails { Name = "Idle/0"; UserPC = 0x00000000; }; instance of Win32Perf_RawThreadDetails { Name = "System/0"; UserPC = 0x00000000; }; instance of Win32Perf_RawThreadDetails { Name = "System/1"; UserPC = 0x00000000; }; instance of Win32Perf_RawThreadDetails { Name = "System/2"; UserPC = 0x00000000; }; instance of Win32Perf_RawThreadDetails { Name = "System/3"; UserPC = 0x00000000; }; instance of Win32Perf_RawThreadDetails { Name = "System/4"; UserPC = 0x00000000; }; instance of Win32Perf_RawThreadDetails { Name = "System/5"; UserPC = 0x00000000; }; instance of Win32Perf_RawThreadDetails { Name = "System/6"; UserPC = 0x00000000; }; instance of Win32Perf_RawThreadDetails { Name = "System/7"; UserPC = 0x00000000; }; instance of Win32Perf_RawThreadDetails { Name = "System/8"; UserPC = 0x00000000; }; instance of Win32Perf_RawThreadDetails { Name = "System/9"; UserPC = 0x00000000; }; instance of Win32Perf_RawThreadDetails { Name = "System/10"; UserPC = 0x00000000; }; instance of Win32Perf_RawThreadDetails { Name = "System/11"; UserPC = 0x00000000; }; instance of Win32Perf_RawThreadDetails { Name = "System/12"; UserPC = 0x00000000; }; instance of Win32Perf_RawThreadDetails { Name = "System/13"; UserPC = 0x00000000; }; instance of Win32Perf_RawThreadDetails { Name = "System/14"; UserPC = 0x00000000; }; instance of Win32Perf_RawThreadDetails { Name = "System/15"; UserPC = 0x00000000; }; instance of Win32Perf_RawThreadDetails { Name = "System/16"; UserPC = 0x00000000; }; instance of Win32Perf_RawThreadDetails { Name = "System/17"; UserPC = 0x00000000; }; instance of Win32Perf_RawThreadDetails { Name = "System/18"; UserPC = 0x00000000; }; instance of Win32Perf_RawThreadDetails { Name = "System/19"; UserPC = 0x00000000; }; instance of Win32Perf_RawThreadDetails { Name = "System/20"; UserPC = 0x00000000; }; instance of Win32Perf_RawThreadDetails { Name = "System/21"; UserPC = 0x00000000; }; instance of Win32Perf_RawThreadDetails { Name = "System/22"; UserPC = 0x00000000; }; instance of Win32Perf_RawThreadDetails { Name = "System/23"; UserPC = 0x00000000; }; instance of Win32Perf_RawThreadDetails { Name = "System/24"; UserPC = 0x00000000; }; instance of Win32Perf_RawThreadDetails { Name = "System/25"; UserPC = 0x00000000; }; instance of Win32Perf_RawThreadDetails { Name = "System/26"; UserPC = 0x00000000; }; instance of Win32Perf_RawThreadDetails { Name = "System/27"; UserPC = 0x00000000; }; instance of Win32Perf_RawThreadDetails { Name = "System/28"; UserPC = 0x00000000; }; instance of Win32Perf_RawThreadDetails { Name = "System/29"; UserPC = 0x00000000; }; instance of Win32Perf_RawThreadDetails { Name = "System/30"; UserPC = 0x00000000; }; instance of Win32Perf_RawThreadDetails { Name = "System/31"; UserPC = 0x00000000; }; instance of Win32Perf_RawThreadDetails { Name = "System/32"; UserPC = 0x00000000; }; instance of Win32Perf_RawThreadDetails { Name = "smss/0"; UserPC = 0x77f910cb; }; instance of Win32Perf_RawThreadDetails { Name = "smss/1"; UserPC = 0x77f910a1; }; instance of Win32Perf_RawThreadDetails { Name = "smss/2"; UserPC = 0x77f910a1; }; instance of Win32Perf_RawThreadDetails { Name = "smss/3"; UserPC = 0x77f910a1; }; instance of Win32Perf_RawThreadDetails { Name = "smss/4"; UserPC = 0x77f910a1; }; instance of Win32Perf_RawThreadDetails { Name = "smss/5"; UserPC = 0x77f910a1; }; instance of Win32Perf_RawThreadDetails { Name = "csrss/0"; UserPC = 0x77f910cb; }; instance of Win32Perf_RawThreadDetails { Name = "csrss/1"; UserPC = 0x77f910a1; }; instance of Win32Perf_RawThreadDetails { Name = "csrss/2"; UserPC = 0x77f910a1; }; instance of Win32Perf_RawThreadDetails { Name = "csrss/3"; UserPC = 0x77f910a1; }; instance of Win32Perf_RawThreadDetails { Name = "csrss/4"; UserPC = 0x77f910a1; }; instance of Win32Perf_RawThreadDetails { Name = "csrss/5"; UserPC = 0x77e71d87; }; instance of Win32Perf_RawThreadDetails { Name = "csrss/6"; UserPC = 0x77f910a1; }; instance of Win32Perf_RawThreadDetails { Name = "winlogon/0"; UserPC = 0x77e717fd; }; instance of Win32Perf_RawThreadDetails { Name = "winlogon/1"; UserPC = 0x77f910cb; }; instance of Win32Perf_RawThreadDetails { Name = "winlogon/2"; UserPC = 0x77f910cb; }; instance of Win32Perf_RawThreadDetails { Name = "winlogon/3"; UserPC = 0x77f910cb; }; instance of Win32Perf_RawThreadDetails { Name = "winlogon/4"; UserPC = 0x77f92415; }; instance of Win32Perf_RawThreadDetails { Name = "winlogon/5"; UserPC = 0x77f910cb; }; instance of Win32Perf_RawThreadDetails { Name = "winlogon/6"; UserPC = 0x77f910d9; }; instance of Win32Perf_RawThreadDetails { Name = "winlogon/7"; UserPC = 0x77f910cb; }; instance of Win32Perf_RawThreadDetails { Name = "winlogon/8"; UserPC = 0x77f92415; }; instance of Win32Perf_RawThreadDetails { Name = "winlogon/9"; UserPC = 0x77f910cb; }; instance of Win32Perf_RawThreadDetails { Name = "winlogon/10"; UserPC = 0x77f910cb; }; instance of Win32Perf_RawThreadDetails { Name = "winlogon/11"; UserPC = 0x77e71d87; }; instance of Win32Perf_RawThreadDetails { Name = "services/0"; UserPC = 0x77f910cb; }; instance of Win32Perf_RawThreadDetails { Name = "services/1"; UserPC = 0x77f92415; }; instance of Win32Perf_RawThreadDetails { Name = "services/2"; UserPC = 0x77f92415; }; instance of Win32Perf_RawThreadDetails { Name = "services/3"; UserPC = 0x77f950e6; }; instance of Win32Perf_RawThreadDetails { Name = "services/4"; UserPC = 0x77f910a1; }; instance of Win32Perf_RawThreadDetails { Name = "services/5"; UserPC = 0x77f910cb; }; instance of Win32Perf_RawThreadDetails { Name = "services/6"; UserPC = 0x77f910cb; }; instance of Win32Perf_RawThreadDetails { Name = "services/7"; UserPC = 0x77f910d9; }; instance of Win32Perf_RawThreadDetails { Name = "services/8"; UserPC = 0x77fb372d; }; instance of Win32Perf_RawThreadDetails { Name = "services/9"; UserPC = 0x77f910cb; }; instance of Win32Perf_RawThreadDetails { Name = "services/10"; UserPC = 0x77f91077; }; instance of Win32Perf_RawThreadDetails { Name = "services/11"; UserPC = 0x77f910d9; }; instance of Win32Perf_RawThreadDetails { Name = "services/12"; UserPC = 0x77f910cb; }; instance of Win32Perf_RawThreadDetails { Name = "services/13"; UserPC = 0x77f910cb; }; instance of Win32Perf_RawThreadDetails { Name = "services/14"; UserPC = 0x77f910d9; }; instance of Win32Perf_RawThreadDetails { Name = "services/15"; UserPC = 0x77f910cb; }; instance of Win32Perf_RawThreadDetails { Name = "services/16"; UserPC = 0x77f910cb; }; instance of Win32Perf_RawThreadDetails { Name = "services/17"; UserPC = 0x77f910cb; }; instance of Win32Perf_RawThreadDetails { Name = "services/18"; UserPC = 0x77f910cb; }; instance of Win32Perf_RawThreadDetails { Name = "services/19"; UserPC = 0x77f910cb; }; instance of Win32Perf_RawThreadDetails { Name = "services/20"; UserPC = 0x77f910cb; }; instance of Win32Perf_RawThreadDetails { Name = "services/21"; UserPC = 0x77f910d9; }; instance of Win32Perf_RawThreadDetails { Name = "services/22"; UserPC = 0x77f910cb; }; instance of Win32Perf_RawThreadDetails { Name = "services/23"; UserPC = 0x77f910cb; }; instance of Win32Perf_RawThreadDetails { Name = "services/24"; UserPC = 0x77fb377f; }; instance of Win32Perf_RawThreadDetails { Name = "services/25"; UserPC = 0x77f910a1; }; instance of Win32Perf_RawThreadDetails { Name = "services/26"; UserPC = 0x77f910cb; }; instance of Win32Perf_RawThreadDetails { Name = "services/27"; UserPC = 0x77f910a1; }; instance of Win32Perf_RawThreadDetails { Name = "services/28"; UserPC = 0x77f92415; }; instance of Win32Perf_RawThreadDetails { Name = "lsass/0"; UserPC = 0x77f910cb; }; instance of Win32Perf_RawThreadDetails { Name = "lsass/1"; UserPC = 0x77f950e6; }; instance of Win32Perf_RawThreadDetails { Name = "lsass/2"; UserPC = 0x77f910cb; }; instance of Win32Perf_RawThreadDetails { Name = "lsass/3"; UserPC = 0x77f910a1; }; instance of Win32Perf_RawThreadDetails { Name = "lsass/4"; UserPC = 0x77f910cb; }; instance of Win32Perf_RawThreadDetails { Name = "lsass/5"; UserPC = 0x77f910a1; }; instance of Win32Perf_RawThreadDetails { Name = "lsass/6"; UserPC = 0x77f910d9; }; instance of Win32Perf_RawThreadDetails { Name = "lsass/7"; UserPC = 0x77f910d9; }; instance of Win32Perf_RawThreadDetails { Name = "lsass/8"; UserPC = 0x77f910cb; }; instance of Win32Perf_RawThreadDetails { Name = "lsass/9"; UserPC = 0x77f92415; }; instance of Win32Perf_RawThreadDetails { Name = "spoolsv/0"; UserPC = 0x77f950e6; }; instance of Win32Perf_RawThreadDetails { Name = "spoolsv/1"; UserPC = 0x77f92415; }; instance of Win32Perf_RawThreadDetails { Name = "spoolsv/2"; UserPC = 0x77f910a1; }; instance of Win32Perf_RawThreadDetails { Name = "spoolsv/3"; UserPC = 0x77f910cb; }; instance of Win32Perf_RawThreadDetails { Name = "spoolsv/4"; UserPC = 0x77ed69a3; }; instance of Win32Perf_RawThreadDetails { Name = "spoolsv/5"; UserPC = 0x77f910cb; }; instance of Win32Perf_RawThreadDetails { Name = "spoolsv/6"; UserPC = 0x77f910d9; }; instance of Win32Perf_RawThreadDetails { Name = "spoolsv/7"; UserPC = 0x77f910d9; }; instance of Win32Perf_RawThreadDetails { Name = "spoolsv/8"; UserPC = 0x77f91077; }; instance of Win32Perf_RawThreadDetails { Name = "RpcSs/0"; UserPC = 0x77f950e6; }; instance of Win32Perf_RawThreadDetails { Name = "RpcSs/1"; UserPC = 0x77f91077; }; instance of Win32Perf_RawThreadDetails { Name = "RpcSs/2"; UserPC = 0x77f910a1; }; instance of Win32Perf_RawThreadDetails { Name = "RpcSs/3"; UserPC = 0x77f92415; }; instance of Win32Perf_RawThreadDetails { Name = "RpcSs/4"; UserPC = 0x77f910a1; }; instance of Win32Perf_RawThreadDetails { Name = "RpcSs/5"; UserPC = 0x77f910cb; }; instance of Win32Perf_RawThreadDetails { Name = "RpcSs/6"; UserPC = 0x77f91077; }; instance of Win32Perf_RawThreadDetails { Name = "ntmssvc/0"; UserPC = 0x77f950e6; }; instance of Win32Perf_RawThreadDetails { Name = "ntmssvc/1"; UserPC = 0x77f910d9; }; instance of Win32Perf_RawThreadDetails { Name = "ntmssvc/2"; UserPC = 0x77f910a1; }; instance of Win32Perf_RawThreadDetails { Name = "ntmssvc/3"; UserPC = 0x77f910d9; }; instance of Win32Perf_RawThreadDetails { Name = "ntmssvc/4"; UserPC = 0x77e71d87; }; instance of Win32Perf_RawThreadDetails { Name = "ntmssvc/5"; UserPC = 0x77f910d9; }; instance of Win32Perf_RawThreadDetails { Name = "ntmssvc/6"; UserPC = 0x77f910d9; }; instance of Win32Perf_RawThreadDetails { Name = "ntmssvc/7"; UserPC = 0x77f910a1; }; instance of Win32Perf_RawThreadDetails { Name = "Explorer/0"; UserPC = 0x77e717fd; }; instance of Win32Perf_RawThreadDetails { Name = "Explorer/1"; UserPC = 0x77f910a1; }; instance of Win32Perf_RawThreadDetails { Name = "Explorer/2"; UserPC = 0x77e717fd; }; instance of Win32Perf_RawThreadDetails { Name = "Explorer/3"; UserPC = 0x77f910cb; }; instance of Win32Perf_RawThreadDetails { Name = "Explorer/4"; UserPC = 0x77f910cb; }; instance of Win32Perf_RawThreadDetails { Name = "Explorer/5"; UserPC = 0x77f910cb; }; instance of Win32Perf_RawThreadDetails { Name = "Explorer/6"; UserPC = 0x77e71d87; }; instance of Win32Perf_RawThreadDetails { Name = "Explorer/7"; UserPC = 0x77f910a1; }; instance of Win32Perf_RawThreadDetails { Name = "SysTray/0"; UserPC = 0x77e71d87; }; instance of Win32Perf_RawThreadDetails { Name = "netman/0"; UserPC = 0x77f950e6; }; instance of Win32Perf_RawThreadDetails { Name = "netman/1"; UserPC = 0x77f910cb; }; instance of Win32Perf_RawThreadDetails { Name = "netman/2"; UserPC = 0x77e71d87; }; instance of Win32Perf_RawThreadDetails { Name = "netman/3"; UserPC = 0x77f910a1; }; instance of Win32Perf_RawThreadDetails { Name = "netman/4"; UserPC = 0x77f910a1; }; instance of Win32Perf_RawThreadDetails { Name = "CMD/0"; UserPC = 0x77f910d9; }; instance of Win32Perf_RawThreadDetails { Name = "CMD/0"; UserPC = 0x77f910af; }; instance of Win32Perf_RawThreadDetails { Name = "findfast/0"; UserPC = 0x77e71d87; }; instance of Win32Perf_RawThreadDetails { Name = "findfast/1"; UserPC = 0x77f910d9; }; instance of Win32Perf_RawThreadDetails { Name = "CMD/0"; UserPC = 0x77f910d9; }; instance of Win32Perf_RawThreadDetails { Name = "CMD/0"; UserPC = 0x77f910d9; }; instance of Win32Perf_RawThreadDetails { Name = "notepad/0"; UserPC = 0x77e71d87; }; instance of Win32Perf_RawThreadDetails { Name = "ctrlist/0"; UserPC = 0x77fb371f; }; instance of Win32Perf_RawThreadDetails { Name = "ctrlist/1"; UserPC = 0x77f910a1; }; instance of Win32Perf_RawThreadDetails { Name = "ctrlist/2"; UserPC = 0x77f910cb; }; instance of Win32Perf_RawThreadDetails { Name = "ctrlist/3"; UserPC = 0x77f910a1; }; [ costly, vendor("Microsoft"), guid("{5C7A4F7C-9E4D-11d1-BB3C-00A0C913CAD4}"), locale("ms:\\0x0409"), displayname("Telephony"), perfindex(1150), helpindex(1151), perfdetail(100) ] class Win32Perf_Telephony : Win32_PerfFormattedData { [key] string Name; uint64 Timestamp; [ perfdefault, displayname("Lines"), countertype(65536), perfindex(1152), helpindex(1153), defaultscale(0), perfdetail(100) ] uint32 Lines; [ displayname("Telephone Devices"), countertype(65536), perfindex(1154), helpindex(1155), defaultscale(0), perfdetail(100) ] uint32 TelephoneDevices; [ displayname("Active Lines"), countertype(65536), perfindex(1156), helpindex(1157), defaultscale(0), perfdetail(100) ] uint32 ActiveLines; [ displayname("Active Telephones"), countertype(65536), perfindex(1158), helpindex(1159), defaultscale(0), perfdetail(100) ] uint32 ActiveTelephones; [ displayname("Outgoing Calls/sec"), countertype(272696320), perfindex(1160), helpindex(1161), defaultscale(0), perfdetail(100) ] real64 OutgoingCallsPerSec; [ displayname("Incoming Calls/sec"), countertype(272696320), perfindex(1162), helpindex(1163), defaultscale(0), perfdetail(100) ] real64 IncomingCallsPerSec; [ displayname("Client Apps"), countertype(65536), perfindex(1164), helpindex(1165), defaultscale(0), perfdetail(100) ] uint32 ClientApps; [ displayname("Current Outgoing Calls"), countertype(65536), perfindex(1166), helpindex(1167), defaultscale(0), perfdetail(100) ] uint32 CurrentOutgoingCalls; [ displayname("Current Incoming Calls"), countertype(65536), perfindex(1168), helpindex(1169), defaultscale(0), perfdetail(100) ] uint32 CurrentIncomingCalls; }; [ costly, vendor("Microsoft"), guid("{5C7A4F7C-9E4D-11d1-BB3C-00A0C913CAD4}"), locale("ms:\\0x0409"), displayname("Telephony"), perfindex(1150), helpindex(1151), perfdetail(100) ] class Win32Perf_RawTelephony : Win32_PerfRawData { [key] string Name; uint64 Timestamp; [ perfdefault, displayname("Lines"), countertype(65536), perfindex(1152), helpindex(1153), defaultscale(0), perfdetail(100) ] uint32 Lines; [ displayname("Telephone Devices"), countertype(65536), perfindex(1154), helpindex(1155), defaultscale(0), perfdetail(100) ] uint32 TelephoneDevices; [ displayname("Active Lines"), countertype(65536), perfindex(1156), helpindex(1157), defaultscale(0), perfdetail(100) ] uint32 ActiveLines; [ displayname("Active Telephones"), countertype(65536), perfindex(1158), helpindex(1159), defaultscale(0), perfdetail(100) ] uint32 ActiveTelephones; [ displayname("Outgoing Calls/sec"), countertype(272696320), perfindex(1160), helpindex(1161), defaultscale(0), perfdetail(100) ] uint32 OutgoingCallsPerSec; [ displayname("Incoming Calls/sec"), countertype(272696320), perfindex(1162), helpindex(1163), defaultscale(0), perfdetail(100) ] uint32 IncomingCallsPerSec; [ displayname("Client Apps"), countertype(65536), perfindex(1164), helpindex(1165), defaultscale(0), perfdetail(100) ] uint32 ClientApps; [ displayname("Current Outgoing Calls"), countertype(65536), perfindex(1166), helpindex(1167), defaultscale(0), perfdetail(100) ] uint32 CurrentOutgoingCalls; [ displayname("Current Incoming Calls"), countertype(65536), perfindex(1168), helpindex(1169), defaultscale(0), perfdetail(100) ] uint32 CurrentIncomingCalls; };