49 Instances of Win32_Process

Node CommandLine CSName Description ExecutablePath ExecutionState Handle HandleCount InstallDate KernelModeTime MaximumWorkingSetSize MinimumWorkingSetSize Name OSName OtherOperationCount OtherTransferCount PageFaults PageFileUsage ParentProcessId PeakPageFileUsage PeakVirtualSize PeakWorkingSetSize Priority PrivatePageCount ProcessId QuotaNonPagedPoolUsage QuotaPagedPoolUsage QuotaPeakNonPagedPoolUsage QuotaPeakPagedPoolUsage ReadOperationCount ReadTransferCount SessionId Status TerminationDate ThreadCount UserModeTime VirtualSize WindowsVersion WorkingSetSize WriteOperationCount WriteTransferCount
WIN-R36GCF5UFEL . WIN-R36GCF5UFEL. System Idle Process. . . 0.
0
.
.
578236250000
.
. . System Idle Process. Microsoft Windows Technical Preview for Enterprise|C:\Windows|\Device\Harddisk0\Partition2.
0
.
0
.
1
.
0
.
0
.
0
.
65536
.
4
.
0
.
0
.
0
.
0
.
0
.
0
.
0
.
0
.
0
.
0
.
. .
1
.
0
.
65536
.
6.4.9841.
4096
.
0
.
0
.
WIN-R36GCF5UFEL . WIN-R36GCF5UFEL. System. . . 4.
930
.
.
165000000
.
. . System. Microsoft Windows Technical Preview for Enterprise|C:\Windows|\Device\Harddisk0\Partition2.
40091
.
7112128
.
24920
.
112
.
0
.
124
.
11612160
.
5796
.
8
.
114688
.
4
.
0
.
0
.
0
.
0
.
5347
.
238287392
.
0
.
. .
83
.
0
.
5492736
.
6.4.9841.
1822720
.
6996
.
196889081
.
WIN-R36GCF5UFEL . WIN-R36GCF5UFEL. smss.exe. . . 268.
49
.
.
1250000
.
. . smss.exe. Microsoft Windows Technical Preview for Enterprise|C:\Windows|\Device\Harddisk0\Partition2.
327
.
16482
.
720
.
308
.
4
.
400
.
2199049703424
.
1180
.
11
.
315392
.
268
.
3
.
13
.
7
.
55
.
4
.
29188
.
0
.
. .
2
.
0
.
2199027625984
.
6.4.9841.
1187840
.
1
.
32
.
WIN-R36GCF5UFEL . WIN-R36GCF5UFEL. csrss.exe. . . 352.
256
.
.
9062500
.
. . csrss.exe. Microsoft Windows Technical Preview for Enterprise|C:\Windows|\Device\Harddisk0\Partition2.
5070
.
119800
.
124097
.
1064
.
344
.
1192
.
2199080124416
.
38668
.
13
.
1089536
.
352
.
13
.
138
.
13
.
142
.
336
.
327518
.
0
.
. .
8
.
312500
.
2199073239040
.
6.4.9841.
4231168
.
0
.
0
.
WIN-R36GCF5UFEL . WIN-R36GCF5UFEL. wininit.exe. . . 420.
81
.
.
5156250
.
. . wininit.exe. Microsoft Windows Technical Preview for Enterprise|C:\Windows|\Device\Harddisk0\Partition2.
1873
.
22972
.
1810
.
740
.
344
.
1044
.
2199074185216
.
4892
.
13
.
757760
.
420
.
9
.
109
.
12
.
111
.
1
.
6656
.
0
.
. .
1
.
0
.
2199072055296
.
6.4.9841.
4947968
.
0
.
0
.
WIN-R36GCF5UFEL . WIN-R36GCF5UFEL. services.exe. . . 528.
223
.
.
28437500
.
. . services.exe. Microsoft Windows Technical Preview for Enterprise|C:\Windows|\Device\Harddisk0\Partition2.
4446
.
50882
.
17343
.
2080
.
420
.
2316
.
2199054254080
.
6472
.
9
.
2129920
.
528
.
10
.
103
.
16
.
115
.
5
.
291956
.
0
.
. .
5
.
3593750
.
2199048351744
.
6.4.9841.
6508544
.
1
.
160
.
WIN-R36GCF5UFEL C:\Windows\system32\lsass.exe. WIN-R36GCF5UFEL. lsass.exe. C:\Windows\system32\lsass.exe. . 536.
1092
.
.
71406250
.
1380
.
200
.
lsass.exe. Microsoft Windows Technical Preview for Enterprise|C:\Windows|\Device\Harddisk0\Partition2.
4720
.
1412496
.
24208
.
4400
.
420
.
4652
.
2199071141888
.
14876
.
9
.
4505600
.
536
.
22
.
118
.
24
.
120
.
624
.
78107
.
0
.
. .
6
.
39531250
.
2199069331456
.
6.4.9841.
15110144
.
455
.
304188
.
WIN-R36GCF5UFEL C:\Windows\system32\svchost.exe -k DcomLaunch. WIN-R36GCF5UFEL. svchost.exe. C:\Windows\system32\svchost.exe. . 600.
409
.
.
13281250
.
1380
.
200
.
svchost.exe. Microsoft Windows Technical Preview for Enterprise|C:\Windows|\Device\Harddisk0\Partition2.
41748
.
400316
.
24758
.
3612
.
528
.
24140
.
2199096143872
.
14584
.
8
.
3698688
.
600
.
17
.
246
.
19
.
256
.
2
.
70144
.
0
.
. .
11
.
1562500
.
2199075155968
.
6.4.9841.
14675968
.
0
.
0
.
WIN-R36GCF5UFEL C:\Windows\system32\svchost.exe -k RPCSS. WIN-R36GCF5UFEL. svchost.exe. C:\Windows\system32\svchost.exe. . 632.
461
.
.
46093750
.
1380
.
200
.
svchost.exe. Microsoft Windows Technical Preview for Enterprise|C:\Windows|\Device\Harddisk0\Partition2.
974
.
1446
.
53168
.
3072
.
528
.
3368
.
2199068778496
.
8968
.
8
.
3145728
.
632
.
17
.
99
.
18
.
104
.
0
.
0
.
0
.
. .
10
.
12500000
.
2199065509888
.
6.4.9841.
8974336
.
0
.
0
.
WIN-R36GCF5UFEL C:\Windows\system32\svchost.exe -k LocalServiceNetworkRestricted. WIN-R36GCF5UFEL. svchost.exe. C:\Windows\system32\svchost.exe. . 800.
826
.
.
41562500
.
1380
.
200
.
svchost.exe. Microsoft Windows Technical Preview for Enterprise|C:\Windows|\Device\Harddisk0\Partition2.
17327
.
850030
.
40527
.
19432
.
528
.
23232
.
2199148642304
.
35752
.
8
.
19898368
.
800
.
33
.
162
.
37
.
204
.
1783
.
32039567
.
0
.
. .
22
.
12187500
.
2199127113728
.
6.4.9841.
33193984
.
976
.
31982891
.
WIN-R36GCF5UFEL C:\Windows\system32\svchost.exe -k LocalSystemNetworkRestricted. WIN-R36GCF5UFEL. svchost.exe. C:\Windows\system32\svchost.exe. . 840.
641
.
.
456250000
.
1380
.
200
.
svchost.exe. Microsoft Windows Technical Preview for Enterprise|C:\Windows|\Device\Harddisk0\Partition2.
333589
.
55715443
.
356794
.
42072
.
528
.
49824
.
2203503099904
.
65056
.
8
.
43081728
.
840
.
33
.
213
.
42
.
301
.
364
.
27804034
.
0
.
. .
21
.
603281250
.
2203452923904
.
6.4.9841.
61759488
.
33684
.
18473109
.
WIN-R36GCF5UFEL C:\Windows\system32\svchost.exe -k netsvcs. WIN-R36GCF5UFEL. svchost.exe. C:\Windows\system32\svchost.exe. . 864.
1758
.
.
230781250
.
1380
.
200
.
svchost.exe. Microsoft Windows Technical Preview for Enterprise|C:\Windows|\Device\Harddisk0\Partition2.
243134
.
21123353
.
795674
.
51944
.
528
.
143068
.
2199785631744
.
172280
.
8
.
53190656
.
864
.
88
.
418
.
223
.
593
.
29908
.
1116453056
.
0
.
. .
48
.
426406250
.
2199448129536
.
6.4.9841.
85438464
.
7668
.
919422548
.
WIN-R36GCF5UFEL C:\Windows\system32\svchost.exe -k LocalService. WIN-R36GCF5UFEL. svchost.exe. C:\Windows\system32\svchost.exe. . 888.
719
.
.
56250000
.
1380
.
200
.
svchost.exe. Microsoft Windows Technical Preview for Enterprise|C:\Windows|\Device\Harddisk0\Partition2.
65279
.
3845367
.
64021
.
8176
.
528
.
9692
.
2199163383808
.
26784
.
8
.
8372224
.
888
.
37
.
219
.
45
.
270
.
668
.
4199538
.
0
.
. .
19
.
15625000
.
2199129849856
.
6.4.9841.
23801856
.
1
.
214528
.
WIN-R36GCF5UFEL C:\Windows\system32\svchost.exe -k NetworkService. WIN-R36GCF5UFEL. svchost.exe. C:\Windows\system32\svchost.exe. . 688.
540
.
.
36875000
.
1380
.
200
.
svchost.exe. Microsoft Windows Technical Preview for Enterprise|C:\Windows|\Device\Harddisk0\Partition2.
114298
.
7404753
.
59433
.
7616
.
528
.
33960
.
2200285691904
.
46704
.
8
.
7798784
.
688
.
37
.
151
.
49
.
165
.
8473
.
13708508
.
0
.
. .
14
.
11250000
.
2200261701632
.
6.4.9841.
21426176
.
663
.
313249
.
WIN-R36GCF5UFEL C:\Windows\System32\spoolsv.exe. WIN-R36GCF5UFEL. spoolsv.exe. C:\Windows\System32\spoolsv.exe. . 1056.
389
.
.
3437500
.
1380
.
200
.
spoolsv.exe. Microsoft Windows Technical Preview for Enterprise|C:\Windows|\Device\Harddisk0\Partition2.
4209
.
278185
.
4224
.
3168
.
528
.
3304
.
2199077330944
.
12644
.
8
.
3244032
.
1056
.
22
.
115
.
27
.
120
.
3
.
1464
.
0
.
. .
14
.
156250
.
2199076790272
.
6.4.9841.
12783616
.
2
.
320
.
WIN-R36GCF5UFEL C:\Windows\system32\svchost.exe -k LocalServiceNoNetwork. WIN-R36GCF5UFEL. svchost.exe. C:\Windows\system32\svchost.exe. . 1080.
510
.
.
55156250
.
1380
.
200
.
svchost.exe. Microsoft Windows Technical Preview for Enterprise|C:\Windows|\Device\Harddisk0\Partition2.
26287
.
6793688
.
146599
.
16328
.
528
.
17256
.
2199757258752
.
28888
.
8
.
16719872
.
1080
.
42
.
180
.
67
.
188
.
158
.
5001216
.
0
.
. .
22
.
18906250
.
2199146139648
.
6.4.9841.
28602368
.
1437
.
11431936
.
WIN-R36GCF5UFEL . WIN-R36GCF5UFEL. MsMpEng.exe. . . 1388.
438
.
.
348437500
.
. . MsMpEng.exe. Microsoft Windows Technical Preview for Enterprise|C:\Windows|\Device\Harddisk0\Partition2.
230173
.
23609599
.
15211500
.
72860
.
528
.
499508
.
2199690964992
.
479160
.
8
.
74608640
.
1388
.
49
.
292
.
163
.
425
.
40283
.
4989257630
.
0
.
. .
17
.
2249531250
.
2199300128768
.
6.4.9841.
56090624
.
4546
.
503434153
.
WIN-R36GCF5UFEL C:\Windows\system32\svchost.exe -k LocalServiceAndNoImpersonation. WIN-R36GCF5UFEL. svchost.exe. C:\Windows\system32\svchost.exe. . 1576.
403
.
.
15000000
.
1380
.
200
.
svchost.exe. Microsoft Windows Technical Preview for Enterprise|C:\Windows|\Device\Harddisk0\Partition2.
54310
.
3725038
.
28166
.
4176
.
528
.
5240
.
2199098187776
.
15848
.
8
.
4276224
.
1576
.
26
.
126
.
37
.
129
.
163
.
592089
.
0
.
. .
15
.
3750000
.
2199086460928
.
6.4.9841.
15740928
.
2
.
67744
.
WIN-R36GCF5UFEL C:\Windows\System32\svchost.exe -k LocalServicePeerNet. WIN-R36GCF5UFEL. svchost.exe. C:\Windows\System32\svchost.exe. . 1864.
419
.
.
104843750
.
1380
.
200
.
svchost.exe. Microsoft Windows Technical Preview for Enterprise|C:\Windows|\Device\Harddisk0\Partition2.
329797
.
22632437
.
174322
.
3636
.
528
.
4352
.
2199685906432
.
14488
.
8
.
3723264
.
1864
.
31
.
98
.
76
.
102
.
215
.
6945333
.
0
.
. .
9
.
30625000
.
2199678058496
.
6.4.9841.
14098432
.
2403
.
6925872
.
WIN-R36GCF5UFEL dashost.exe {d385252c-2b19-43f3-9b2914f2a59c2a38}. WIN-R36GCF5UFEL. dasHost.exe. C:\Windows\system32\dashost.exe. . 1908.
341
.
.
7187500
.
1380
.
200
.
dasHost.exe. Microsoft Windows Technical Preview for Enterprise|C:\Windows|\Device\Harddisk0\Partition2.
14820
.
1648158
.
15530
.
4924
.
840
.
6156
.
2199093370880
.
17252
.
8
.
5042176
.
1908
.
18
.
120
.
32
.
122
.
0
.
0
.
0
.
. .
3
.
2500000
.
2199082721280
.
6.4.9841.
16830464
.
0
.
0
.
WIN-R36GCF5UFEL C:\Windows\system32\SearchIndexer.exe /Embedding. WIN-R36GCF5UFEL. SearchIndexer.exe. C:\Windows\system32\SearchIndexer.exe. . 2720.
754
.
.
38906250
.
1380
.
200
.
SearchIndexer.exe. Microsoft Windows Technical Preview for Enterprise|C:\Windows|\Device\Harddisk0\Partition2.
103920
.
9614592
.
80708
.
27644
.
528
.
36540
.
2199367000064
.
33308
.
8
.
28307456
.
2720
.
73
.
201
.
116
.
204
.
9560
.
5867879
.
0
.
. .
16
.
53437500
.
2199362994176
.
6.4.9841.
30728192
.
4748
.
42186796
.
WIN-R36GCF5UFEL C:\Windows\system32\DllHost.exe /Processid:{30D49246-D217-465F-B00B-AC9DDD652EB7}. WIN-R36GCF5UFEL. dllhost.exe. C:\Windows\system32\DllHost.exe. . 2984.
124
.
.
468750
.
1380
.
200
.
dllhost.exe. Microsoft Windows Technical Preview for Enterprise|C:\Windows|\Device\Harddisk0\Partition2.
87
.
430
.
2913
.
1376
.
600
.
1612
.
2199086297088
.
9784
.
8
.
1409024
.
2984
.
8
.
107
.
10
.
109
.
1
.
5000
.
0
.
. .
3
.
0
.
2199079768064
.
6.4.9841.
9977856
.
0
.
0
.
WIN-R36GCF5UFEL "C:\Program Files\Windows Media Player\wmpnetwk.exe". WIN-R36GCF5UFEL. wmpnetwk.exe. C:\Program Files\Windows Media Player\wmpnetwk.exe. . 3720.
390
.
.
3281250
.
1380
.
200
.
wmpnetwk.exe. Microsoft Windows Technical Preview for Enterprise|C:\Windows|\Device\Harddisk0\Partition2.
3601
.
203390
.
18963
.
4712
.
528
.
4824
.
2199111106560
.
18984
.
8
.
4825088
.
3720
.
24
.
167
.
27
.
170
.
75
.
45607
.
0
.
. .
8
.
625000
.
2199109509120
.
6.4.9841.
4886528
.
18
.
912
.
WIN-R36GCF5UFEL taskhost.exe $(Arg0). WIN-R36GCF5UFEL. taskhost.exe. C:\Windows\system32\taskhost.exe. . 2560.
262
.
.
4843750
.
1380
.
200
.
taskhost.exe. Microsoft Windows Technical Preview for Enterprise|C:\Windows|\Device\Harddisk0\Partition2.
16840
.
208596
.
14668
.
10528
.
864
.
11724
.
2200316747776
.
20308
.
6
.
10780672
.
2560
.
23
.
131
.
29
.
141
.
886
.
13092612
.
0
.
. .
9
.
1562500
.
2200311017472
.
6.4.9841.
20201472
.
653
.
5923884
.
WIN-R36GCF5UFEL . WIN-R36GCF5UFEL. NisSrv.exe. . . 2276.
269
.
.
625000
.
. . NisSrv.exe. Microsoft Windows Technical Preview for Enterprise|C:\Windows|\Device\Harddisk0\Partition2.
1533
.
189895
.
16478
.
5888
.
528
.
7532
.
2199075241984
.
12072
.
8
.
6029312
.
2276
.
80
.
88
.
192
.
93
.
13
.
3157545
.
0
.
. .
6
.
2968750
.
2199070756864
.
6.4.9841.
2207744
.
555
.
20383
.
WIN-R36GCF5UFEL . WIN-R36GCF5UFEL. csrss.exe. . . 3676.
236
.
.
35468750
.
. . csrss.exe. Microsoft Windows Technical Preview for Enterprise|C:\Windows|\Device\Harddisk0\Partition2.
3289
.
36976
.
49423
.
1120
.
580
.
1264
.
2199116648448
.
21084
.
13
.
1146880
.
3676
.
17
.
156
.
18
.
211
.
11255
.
696902
.
4
.
. .
9
.
625000
.
2199087546368
.
6.4.9841.
20926464
.
0
.
0
.
WIN-R36GCF5UFEL winlogon.exe. WIN-R36GCF5UFEL. winlogon.exe. C:\Windows\system32\winlogon.exe. . 2260.
168
.
.
937500
.
1380
.
200
.
winlogon.exe. Microsoft Windows Technical Preview for Enterprise|C:\Windows|\Device\Harddisk0\Partition2.
1506
.
2478
.
5000
.
1164
.
580
.
1536
.
2199083319296
.
9344
.
13
.
1191936
.
2260
.
9
.
110
.
14
.
123
.
2
.
6772
.
4
.
. .
2
.
0
.
2199074500608
.
6.4.9841.
6508544
.
1
.
160
.
WIN-R36GCF5UFEL "dwm.exe". WIN-R36GCF5UFEL. dwm.exe. C:\Windows\system32\dwm.exe. . 2792.
297
.
.
8281250
.
1380
.
200
.
dwm.exe. Microsoft Windows Technical Preview for Enterprise|C:\Windows|\Device\Harddisk0\Partition2.
261
.
2684
.
170056
.
26980
.
2260
.
33940
.
2199219785728
.
73568
.
13
.
27627520
.
2792
.
33
.
369
.
37
.
406
.
1
.
60
.
4
.
. .
9
.
11562500
.
2199200673792
.
6.4.9841.
67825664
.
0
.
0
.
WIN-R36GCF5UFEL C:\Windows\Explorer.EXE. WIN-R36GCF5UFEL. explorer.exe. C:\Windows\Explorer.EXE. . 620.
1693
.
.
45312500
.
1380
.
200
.
explorer.exe. Microsoft Windows Technical Preview for Enterprise|C:\Windows|\Device\Harddisk0\Partition2.
27465
.
1255769
.
60042
.
48584
.
3576
.
54604
.
2199566012416
.
124144
.
8
.
49750016
.
620
.
87
.
935
.
117
.
1077
.
4379
.
1412099
.
4
.
. .
52
.
20156250
.
2199491252224
.
6.4.9841.
118128640
.
42
.
37731
.
WIN-R36GCF5UFEL taskhostex.exe . WIN-R36GCF5UFEL. taskhostex.exe. C:\Windows\system32\taskhostex.exe. . 2552.
228
.
.
468750
.
1380
.
200
.
taskhostex.exe. Microsoft Windows Technical Preview for Enterprise|C:\Windows|\Device\Harddisk0\Partition2.
296
.
2372
.
3299
.
2228
.
864
.
2592
.
2199116349440
.
10672
.
8
.
2281472
.
2552
.
20
.
177
.
22
.
179
.
1
.
136136
.
4
.
. .
8
.
625000
.
2199115272192
.
6.4.9841.
10842112
.
0
.
0
.
WIN-R36GCF5UFEL C:\Windows\system32\DllHost.exe /Processid:{3EB3C877-1F16-487C-9050-104DBCD66683}. WIN-R36GCF5UFEL. dllhost.exe. C:\Windows\system32\DllHost.exe. . 468.
192
.
.
2500000
.
1380
.
200
.
dllhost.exe. Microsoft Windows Technical Preview for Enterprise|C:\Windows|\Device\Harddisk0\Partition2.
4451
.
25062
.
5551
.
3064
.
600
.
6280
.
2199322320896
.
14024
.
8
.
3137536
.
468
.
15
.
160
.
42
.
172
.
12
.
1142784
.
4
.
. .
3
.
1562500
.
2199312293888
.
6.4.9841.
11669504
.
225
.
6774784
.
WIN-R36GCF5UFEL "C:\Windows\system32\cmd.exe" . WIN-R36GCF5UFEL. cmd.exe. C:\Windows\system32\cmd.exe. . 2876.
44
.
.
156250
.
1380
.
200
.
cmd.exe. Microsoft Windows Technical Preview for Enterprise|C:\Windows|\Device\Harddisk0\Partition2.
260
.
4458
.
844
.
1504
.
620
.
2620
.
2199038365696
.
3012
.
8
.
1540096
.
2876
.
5
.
26
.
5
.
27
.
0
.
0
.
4
.
. .
1
.
0
.
2199036891136
.
6.4.9841.
2990080
.
0
.
0
.
WIN-R36GCF5UFEL \??\C:\Windows\system32\conhost.exe 0x4. WIN-R36GCF5UFEL. conhost.exe. C:\Windows\system32\conhost.exe. . 3944.
112
.
.
14687500
.
1380
.
200
.
conhost.exe. Microsoft Windows Technical Preview for Enterprise|C:\Windows|\Device\Harddisk0\Partition2.
396
.
13422
.
66386
.
7672
.
2876
.
16676
.
2199161024512
.
20912
.
8
.
7856128
.
3944
.
12
.
187
.
13
.
197
.
14
.
4245
.
4
.
. .
2
.
2343750
.
2199156252672
.
6.4.9841.
14688256
.
1
.
1464
.
WIN-R36GCF5UFEL "C:\Program Files\Internet Explorer\iexplore.exe" . WIN-R36GCF5UFEL. iexplore.exe. C:\Program Files\Internet Explorer\iexplore.exe. . 276.
858
.
.
50625000
.
1380
.
200
.
iexplore.exe. Microsoft Windows Technical Preview for Enterprise|C:\Windows|\Device\Harddisk0\Partition2.
12518
.
1183121
.
58432
.
18904
.
620
.
24364
.
2199402373120
.
68044
.
8
.
19357696
.
276
.
60
.
546
.
74
.
683
.
4093
.
8926912
.
4
.
. .
12
.
16250000
.
2199322566656
.
6.4.9841.
64151552
.
1903
.
2980027
.
WIN-R36GCF5UFEL "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:276 CREDAT:267521 /prefetch:2. WIN-R36GCF5UFEL. iexplore.exe. C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE. . 756.
1019
.
.
29687500
.
1380
.
200
.
iexplore.exe. Microsoft Windows Technical Preview for Enterprise|C:\Windows|\Device\Harddisk0\Partition2.
19534
.
784072
.
138584
.
48368
.
276
.
88788
.
473550848
.
133560
.
8
.
49528832
.
756
.
81
.
524
.
180
.
644
.
1803
.
8407634
.
4
.
. .
22
.
42968750
.
412102656
.
6.4.9841.
96006144
.
816
.
3095691
.
WIN-R36GCF5UFEL "C:\Windows\System32\Macromed\Flash\FlashUtil_ActiveX.exe" -Embedding. WIN-R36GCF5UFEL. FlashUtil_ActiveX.exe. C:\Windows\System32\Macromed\Flash\FlashUtil_ActiveX.exe. . 1636.
177
.
.
1250000
.
1380
.
200
.
FlashUtil_ActiveX.exe. Microsoft Windows Technical Preview for Enterprise|C:\Windows|\Device\Harddisk0\Partition2.
8420
.
121766
.
3328
.
3592
.
600
.
3648
.
118870016
.
11764
.
8
.
3678208
.
1636
.
15
.
217
.
16
.
220
.
41
.
916200
.
4
.
. .
3
.
312500
.
114642944
.
6.4.9841.
11227136
.
20
.
5416
.
WIN-R36GCF5UFEL "C:\Program Files\Altap Salamander\salamand.exe" . WIN-R36GCF5UFEL. salamand.exe. C:\Program Files\Altap Salamander\salamand.exe. . 1456.
519
.
.
24375000
.
1380
.
200
.
salamand.exe. Microsoft Windows Technical Preview for Enterprise|C:\Windows|\Device\Harddisk0\Partition2.
16603
.
324712
.
85226
.
10132
.
620
.
10332
.
382955520
.
33348
.
8
.
10375168
.
1456
.
39
.
529
.
41
.
624
.
1585
.
5286645
.
4
.
. .
21
.
12187500
.
333844480
.
6.4.9841.
33374208
.
2338
.
139123289
.
WIN-R36GCF5UFEL "C:\Program Files\Altap Salamander\utils\salmon.exe" "Salmon160" "english.slg". WIN-R36GCF5UFEL. salmon.exe. C:\Program Files\Altap Salamander\utils\salmon.exe. . 960.
69
.
.
0
.
1380
.
200
.
salmon.exe. Microsoft Windows Technical Preview for Enterprise|C:\Windows|\Device\Harddisk0\Partition2.
135
.
2340
.
1215
.
864
.
1456
.
888
.
69853184
.
4388
.
13
.
884736
.
960
.
6
.
132
.
7
.
133
.
0
.
0
.
4
.
. .
1
.
0
.
68038656
.
6.4.9841.
4481024
.
0
.
0
.
WIN-R36GCF5UFEL "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:276 CREDAT:464224 /prefetch:2. WIN-R36GCF5UFEL. iexplore.exe. C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE. . 1104.
1193
.
.
43437500
.
1380
.
200
.
iexplore.exe. Microsoft Windows Technical Preview for Enterprise|C:\Windows|\Device\Harddisk0\Partition2.
15711
.
1985449
.
209674
.
101716
.
276
.
134460
.
543535104
.
198076
.
8
.
104157184
.
1104
.
128
.
616
.
464
.
670
.
2761
.
20905757
.
4
.
. .
30
.
92968750
.
484143104
.
6.4.9841.
165613568
.
2408
.
18706527
.
WIN-R36GCF5UFEL C:\Windows\splwow64.exe 4096. WIN-R36GCF5UFEL. splwow64.exe. C:\Windows\splwow64.exe. . 436.
148
.
.
312500
.
1380
.
200
.
splwow64.exe. Microsoft Windows Technical Preview for Enterprise|C:\Windows|\Device\Harddisk0\Partition2.
304
.
94
.
2921
.
2164
.
1056
.
2428
.
2199108485120
.
9824
.
8
.
2215936
.
436
.
11
.
144
.
13
.
155
.
66
.
23298
.
4
.
. .
4
.
0
.
2199100100608
.
6.4.9841.
9928704
.
0
.
0
.
WIN-R36GCF5UFEL "C:\Windows\System32\cmd.exe" /C "C:\wmi\wmi_html_12-16-2014.bat" . WIN-R36GCF5UFEL. cmd.exe. C:\Windows\System32\cmd.exe. . 1796.
37
.
.
468750
.
1380
.
200
.
cmd.exe. Microsoft Windows Technical Preview for Enterprise|C:\Windows|\Device\Harddisk0\Partition2.
4223
.
61412
.
757
.
2676
.
1456
.
2676
.
2199039361024
.
2896
.
8
.
2740224
.
1796
.
4
.
29
.
5
.
29
.
62
.
189283
.
4
.
. .
2
.
468750
.
2199039361024
.
6.4.9841.
2965504
.
0
.
0
.
WIN-R36GCF5UFEL \??\C:\Windows\system32\conhost.exe 0x4. WIN-R36GCF5UFEL. conhost.exe. C:\Windows\system32\conhost.exe. . 2348.
71
.
.
937500
.
1380
.
200
.
conhost.exe. Microsoft Windows Technical Preview for Enterprise|C:\Windows|\Device\Harddisk0\Partition2.
1814
.
103644
.
2958
.
10012
.
1796
.
10012
.
2199089442816
.
11492
.
8
.
10252288
.
2348
.
10
.
113
.
10
.
114
.
0
.
0
.
4
.
. .
3
.
0
.
2199089438720
.
6.4.9841.
11767808
.
0
.
0
.
WIN-R36GCF5UFEL C:\Windows\system32\wbem\wmiprvse.exe. WIN-R36GCF5UFEL. WmiPrvSE.exe. C:\Windows\system32\wbem\wmiprvse.exe. . 1716.
386
.
.
3125000
.
1380
.
200
.
WmiPrvSE.exe. Microsoft Windows Technical Preview for Enterprise|C:\Windows|\Device\Harddisk0\Partition2.
8916
.
146061
.
14068
.
6404
.
600
.
6416
.
2199120367616
.
18812
.
8
.
6557696
.
1716
.
24
.
177
.
26
.
178
.
288
.
9218112
.
0
.
. .
12
.
31718750
.
2199118872576
.
6.4.9841.
19263488
.
36
.
1680120
.
WIN-R36GCF5UFEL "C:\Windows\system32\SearchProtocolHost.exe" Global\UsGthrFltPipeMssGthrPipe53_ Global\UsGthrCtrlFltPipeMssGthrPipe53 1 -2147483646 "Software\Microsoft\Windows Search" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT; MS Search 4.0 Robot)" "C:\ProgramData\Microsoft\Search\Data\Temp\usgthrsvc" "DownLevelDaemon" . WIN-R36GCF5UFEL. SearchProtocolHost.exe. C:\Windows\system32\SearchProtocolHost.exe. . 2664.
308
.
.
156250
.
32768
.
200
.
SearchProtocolHost.exe. Microsoft Windows Technical Preview for Enterprise|C:\Windows|\Device\Harddisk0\Partition2.
450
.
7042
.
2479
.
1680
.
2720
.
1680
.
2199087394816
.
9536
.
4
.
1720320
.
2664
.
12
.
133
.
13
.
133
.
1
.
174
.
0
.
. .
7
.
0
.
2199087394816
.
6.4.9841.
9764864
.
0
.
0
.
WIN-R36GCF5UFEL "C:\Windows\system32\SearchFilterHost.exe" 0 608 612 620 65536 616 . WIN-R36GCF5UFEL. SearchFilterHost.exe. C:\Windows\system32\SearchFilterHost.exe. . 3888.
109
.
.
156250
.
32768
.
200
.
SearchFilterHost.exe. Microsoft Windows Technical Preview for Enterprise|C:\Windows|\Device\Harddisk0\Partition2.
63
.
128
.
1488
.
1112
.
2720
.
1112
.
2199058571264
.
5692
.
4
.
1138688
.
3888
.
9
.
85
.
9
.
85
.
0
.
0
.
0
.
. .
5
.
0
.
2199058571264
.
6.4.9841.
5828608
.
0
.
0
.
WIN-R36GCF5UFEL C:\Windows\system32\wbem\wmiprvse.exe. WIN-R36GCF5UFEL. WmiPrvSE.exe. C:\Windows\system32\wbem\wmiprvse.exe. . 3240.
155
.
.
312500
.
1380
.
200
.
WmiPrvSE.exe. Microsoft Windows Technical Preview for Enterprise|C:\Windows|\Device\Harddisk0\Partition2.
104
.
122
.
2044
.
2088
.
600
.
2088
.
2199084654592
.
7880
.
8
.
2138112
.
3240
.
11
.
114
.
11
.
115
.
0
.
0
.
0
.
. .
9
.
0
.
2199084654592
.
6.4.9841.
8069120
.
0
.
0
.
WIN-R36GCF5UFEL C:\Windows\servicing\TrustedInstaller.exe. WIN-R36GCF5UFEL. TrustedInstaller.exe. C:\Windows\servicing\TrustedInstaller.exe. . 2336.
112
.
.
156250
.
1380
.
200
.
TrustedInstaller.exe. Microsoft Windows Technical Preview for Enterprise|C:\Windows|\Device\Harddisk0\Partition2.
76
.
210
.
1573
.
1500
.
528
.
1500
.
2199055556608
.
6024
.
8
.
1536000
.
2336
.
9
.
58
.
9
.
58
.
1
.
4561
.
0
.
. .
7
.
0
.
2199055556608
.
6.4.9841.
6168576
.
9
.
900
.
WIN-R36GCF5UFEL C:\Windows\winsxs\amd64_microsoft-windows-servicingstack_31bf3856ad364e35_6.4.9841.0_none_f09cf3a80d6773e8\TiWorker.exe -Embedding. WIN-R36GCF5UFEL. TiWorker.exe. C:\Windows\winsxs\amd64_microsoft-windows-servicingstack_31bf3856ad364e35_6.4.9841.0_none_f09cf3a80d6773e8\TiWorker.exe. . 3408.
152
.
.
625000
.
1380
.
200
.
TiWorker.exe. Microsoft Windows Technical Preview for Enterprise|C:\Windows|\Device\Harddisk0\Partition2.
238
.
1926
.
2709
.
2000
.
600
.
2620
.
2199071928320
.
9652
.
8
.
2048000
.
3408
.
12
.
86
.
13
.
87
.
10
.
172561
.
0
.
. .
6
.
312500
.
2199069962240
.
6.4.9841.
9314304
.
15
.
1818
.
WIN-R36GCF5UFEL wmic process list full /format:htable . WIN-R36GCF5UFEL. WMIC.exe. C:\Windows\System32\Wbem\WMIC.exe. . 3564.
150
.
.
0
.
1380
.
200
.
WMIC.exe. Microsoft Windows Technical Preview for Enterprise|C:\Windows|\Device\Harddisk0\Partition2.
158
.
424
.
2874
.
2668
.
1796
.
2668
.
2199097966592
.
10624
.
8
.
2732032
.
3564
.
13
.
130
.
13
.
130
.
2
.
2866
.
4
.
. .
5
.
156250
.
2199097966592
.
6.4.9841.
10686464
.
0
.
0
.