The Process object type is created when a program is run. All the threads in a process share the same address space and have access to the same data.
Privileged Time is the percentage of elapsed time that this process's threads have spent executing code in Privileged Mode. When a Windows NT system service is called, the service will often run in Privileged Mode to gain access to system-private data. Such data is protected from access by threads executing in User Mode. Calls to the system may be explicit, or they may be implicit such as when a page fault or an interrupt occurs. Unlike some early operating systems, Windows NT uses process boundaries for subsystem protection in addition to the traditional protection of User and Privileged modes. These subsystem processes provide additional protection. Therefore, some work done by Windows NT on behalf of your application may appear in other subsystem processes in addition to the Privileged Time in your process.
Index: 144 Default Scale: 1
Counter Type: PERF_100NSEC_TIMER Counter Size: 8 bytes
Processor Time is the percentage of elapsed time that all of the threads of this process used the processor to execute instructions. An instruction is the basic unit of execution in a computer, a thread is the object that executes instructions, and a process is the object created when a program is run. Code executed to handle certain hardware interrupts or trap conditions may be counted for this process.
Index: 006 Default Scale: 1
Counter Type: PERF_100NSEC_TIMER Counter Size: 8 bytes
User Time is the percentage of elapsed time that this process's threads have spent executing code in User Mode. Applications execute in User Mode, as do subsystems like the window manager and the graphics engine. Code executing in User Mode cannot damage the integrity of the Windows NT Executive, Kernel, and device drivers. Unlike some early operating systems, Windows NT uses process boundaries for subsystem protection in addition to the traditional protection of User and Privileged modes. These subsystem processes provide additional protection. Therefore, some work done by Windows NT on behalf of your application may appear in other subsystem processes in addition to the Privileged Time in your process.
Index: 142 Default Scale: 1
Counter Type: PERF_100NSEC_TIMER Counter Size: 8 bytes
The total elapsed time (in seconds) this process has been running.
Index: 684 Default Scale: 0.0001
Counter Type: PERF_ELAPSED_TIME Counter Size: 8 bytes
ID Process is the unique identifier of this process. ID Process numbers are reused, so they only identify a process for the lifetime of that process.
Index: 784 Default Scale: 0.1
Counter Type: PERF_COUNTER_RAWCOUNT Counter Size: 4 bytes
Page Faults/sec is the rate of Page Faults by the threads executing in this process. A page fault occurs when a thread refers to a virtual memory page that is not in its working set in main memory. This will not cause the page to be fetched from disk if it is on the standby list and hence already in main memory, or if it is in use by another process with whom the page is shared.
Index: 028 Default Scale: 0.1
Counter Type: PERF_COUNTER_COUNTER Counter Size: 4 bytes
Page File Bytes is the current number of bytes this process has used in the paging file(s). Paging files are used to store pages of memory used by the process that are not contained in other files. Paging files are shared by all processes, and lack of space in paging files can prevent other processes from allocating memory.
Index: 184 Default Scale: 0.000001
Counter Type: PERF_COUNTER_RAWCOUNT Counter Size: 4 bytes
Page File Bytes Peak is the maximum number of bytes this process has used in the paging file(s). Paging files are used to store pages of memory used by the process that are not contained in other files. Paging files are shared by all processes, and lack of space in paging files can prevent other processes from allocating memory.
Index: 182 Default Scale: 0.000001
Counter Type: PERF_COUNTER_RAWCOUNT Counter Size: 4 bytes
Pool Nonpaged Bytes is the number of bytes in the Nonpaged Pool, a system memory area where space is acquired by operating system components as they accomplish their appointed tasks. Nonpaged Pool pages cannot be paged out to the paging file, but instead remain in main memory as long as they are allocated.
Index: 058 Default Scale: 0.00001
Counter Type: PERF_COUNTER_RAWCOUNT Counter Size: 4 bytes
Pool Paged Bytes is the number of bytes in the Paged Pool, a system memory area where space is acquired by operating system components as they accomplish their appointed tasks. Paged Pool pages can be paged out to the paging file when not accessed by the system for sustained periods of time.
Index: 056 Default Scale: 0.00001
Counter Type: PERF_COUNTER_RAWCOUNT Counter Size: 4 bytes
The current base priority of this process. Threads within a process can raise and lower their own base priority relative to the process's base priority.
Index: 682 Default Scale: 1
Counter Type: PERF_COUNTER_RAWCOUNT Counter Size: 4 bytes
Private Bytes is the current number of bytes this process has allocated that cannot be shared with other processes.
Index: 186 Default Scale: 0.00001
Counter Type: PERF_COUNTER_RAWCOUNT Counter Size: 4 bytes
The number of threads currently active in this process. An instruction is the basic unit of execution in a processor, and a thread is the object that executes instructions. Every running process has at least one thread.
Index: 680 Default Scale: 1
Counter Type: PERF_COUNTER_RAWCOUNT Counter Size: 4 bytes
Virtual Bytes is the current size in bytes of the virtual address space the process is using. Use of virtual address space does not necessarily imply corresponding use of either disk or main memory pages. Virtual space is however finite, and by using too much, the process may limit its ability to load libraries.
Index: 174 Default Scale: 0.000001
Counter Type: PERF_COUNTER_RAWCOUNT Counter Size: 4 bytes
Virtual Bytes Peak is the maximum number of bytes of virtual address space the process has used at any one time. Use of virtual address space does not necessarily imply corresponding use of either disk or main memory pages. Virtual space is however finite, and by using too much, the process may limit its ability to load libraries.
Index: 172 Default Scale: 0.000001
Counter Type: PERF_COUNTER_RAWCOUNT Counter Size: 4 bytes
Working Set is the current number of bytes in the Working Set of this process. The Working Set is the set of memory pages touched recently by the threads in the process. If free memory in the computer is above a threshold, pages are left in the Working Set of a process even if they are not in use. When free memory falls below a threshold, pages are trimmed from Working Sets. If they are needed they will then be soft-faulted back into the Working Set before they leave main memory.
Index: 180 Default Scale: 0.00001
Counter Type: PERF_COUNTER_RAWCOUNT Counter Size: 4 bytes
Working Set Peak is the maximum number of bytes in the Working Set of this process at any point in time. The Working Set is the set of memory pages touched recently by the threads in the process. If free memory in the computer is above a threshold, pages are left in the Working Set of a process even if they are not in use. When free memory falls below a threshold, pages are trimmed from Working Sets. If they are needed they will then be soft-faulted back into the Working Set before they leave main memory.
Index: 178 Default Scale: 0.00001
Counter Type: PERF_COUNTER_RAWCOUNT Counter Size: 4 bytes