CIM_ProcessExecutable, ROOT\CIMV2

Description

A link between a process and a data file indicating that the file participates in the execution of the process. Note: In order to receive all possible instances of this class, the SE_DEBUG_PRIVILEGE should be enabled.

CIM_ProcessExecutable properties

CIM_ProcessExecutable has 6 properties (4 Local, 2 Derived)

Name	Origin	CIMType
key Antecedent	CIM_Dependency	102 [ref:CIM_DataFile]
BaseAddress	CIM_ProcessExecutable	21 [uint64]
key Dependent	CIM_Dependency	102 [ref:CIM_Process]
GlobalProcessCount	CIM_ProcessExecutable	19 [uint32]
ModuleInstance	CIM_ProcessExecutable	19 [uint32]
ProcessCount	CIM_ProcessExecutable	19 [uint32]

Detailed description of CIM_ProcessExecutable properties

Local properties (4) of CIM_ProcessExecutable class

…

▲ BaseAddress property
CIMTYPE	'uint64'
Description	'BaseAddress represents the base address of the module in the address space of the associated process.'
read	True
Schema	'Win32'
BaseAddress property is in 1 class (CIM_ProcessExecutable) of ROOT\cimv2 and in 4 namespaces

…

▲ GlobalProcessCount property
CIMTYPE	'uint32'
Description	'GlobalProcessCount is the current number of processes that have the file loaded in memory.'
read	True
Schema	'Win32'
GlobalProcessCount property is in 1 class (CIM_ProcessExecutable) of ROOT\cimv2 and in 2 namespaces

…

▲ ModuleInstance property
CIMTYPE	'uint32'
DEPRECATED	True
Description	'ModuleInstance represents the Win32 instance handle.The ModuleInstance property has been deprecated. There is no replacement value and this property is now considered obsolete.'
read	True
Schema	'Win32'
ModuleInstance property is in 1 class (CIM_ProcessExecutable) of ROOT\cimv2 and in 2 namespaces

…

▲ ProcessCount property
CIMTYPE	'uint32'
Description	'ProcessCount represents the reference count of the file in the associated process.'
read	True
Schema	'Win32'
ProcessCount property is in 1 class (CIM_ProcessExecutable) of ROOT\cimv2 and in 2 namespaces

Derived properties (2) of CIM_ProcessExecutable class

…

▲ Antecedent property
CIMTYPE	'ref:CIM_DataFile'
Description	'The data file participating in the execution of the process.'
key	True
read	True
Antecedent property is in 103 classes of ROOT\cimv2 and in 15 namespaces

…

▲ Dependent property
CIMTYPE	'ref:CIM_Process'
Description	'The process.'
key	True
read	True
Dependent property is in 103 classes of ROOT\cimv2 and in 15 namespaces

CIM_ProcessExecutable Qualifiers

…

Name	Value	ToInstance	ToSubclass	Overridable	Amended	Local
Association	True	✓	✓	✗	✗	✗
Description	'A link between a process and a data file indicating that the file participates in the execution of the process. Note: In order to receive all possible instances of this class, the SE_DEBUG_PRIVILEGE should be enabled.'	✗	✓	✓	✓	✓
dynamic	True	✓	✗	✓	✗	✓
Locale	1033	✓	✗	✓	✓	✓
Privileges	['SeDebugPrivilege']	✗	✓	✓	✗	✓
provider	'CIMWin32'	✓	✗	✓	✗	✓
UUID	'{8502C542-5FBB-11D2-AAC1-006008C78BC7}'	✓	✗	✓	✗	✓

CIM_ProcessExecutable System properties

…

Name	Value	Origin	CIMType	Local	Array
__PATH	'\\.\ROOT\cimv2:CIM_ProcessExecutable'	___SYSTEM	8	✗	✗
__NAMESPACE	'ROOT\cimv2'	___SYSTEM	8	✗	✗
__SERVER	'.'	___SYSTEM	8	✗	✗
__DERIVATION	['CIM_Dependency']	___SYSTEM	8	✗	✓
__PROPERTY_COUNT	6	___SYSTEM	3	✗	✗
__RELPATH	'CIM_ProcessExecutable'	___SYSTEM	8	✗	✗
__DYNASTY	'CIM_Dependency'	___SYSTEM	8	✗	✗
__SUPERCLASS	'CIM_Dependency'	___SYSTEM	8	✗	✗
__CLASS	'CIM_ProcessExecutable'	___SYSTEM	8	✗	✗
__GENUS	1	___SYSTEM	3	✗	✗

WUtils.com

Includes&Samples