$strComputer = "." $objWMIService = ObjGet("winmgmts:\\" & $strComputer & "\root\cimv2") $colProcessList = $objWMIService.ExecQuery("Select * from Win32_Process where Name = 'cmd.exe'") For $objProcess In $colProcessList ConsoleWrite(WMIDateStringToDate($objProcess.CreationDate)&@CRLF) Next Func WMIDateStringToDate($dtmStart) $temp = StringMid($dtmStart, 5, 2) & "/" & StringMid($dtmStart, 7, 2) & "/" & StringLeft($dtmStart, 4) & " " & StringMid($dtmStart,