CIM_ProcessExecutable, ROOT\CIMV2

Class | Methods | Properties (6) | Qualifiers (7) | Instances (40) | Namespaces (2)
Samples: VB Script | C# | VB.Net | Search on:Microsoft

Description

A link between a process and a data file indicating that the file participates in the execution of the process. Note: In order to receive all possible instances of this class, the SE_DEBUG_PRIVILEGE should be enabled.

CIM_ProcessExecutable properties

CIM_ProcessExecutable has 6 properties (4 Local, 2 Derived)

NameOriginCIMType
key
Antecedent
CIM_Dependency102 [ref:CIM_DataFile]
BaseAddressCIM_ProcessExecutable21 [uint64]
key
Dependent
CIM_Dependency102 [ref:CIM_Process]
GlobalProcessCountCIM_ProcessExecutable19 [uint32]
ModuleInstanceCIM_ProcessExecutable19 [uint32]
ProcessCountCIM_ProcessExecutable19 [uint32]

Detailed description of CIM_ProcessExecutable properties

Local properties (4) of CIM_ProcessExecutable class

BaseAddress property
CIMTYPE'uint64'
Description'BaseAddress represents the base address of the module in the address space of the associated process.'
readTrue
Schema'Win32'
BaseAddress property is in 1 class (CIM_ProcessExecutable) of ROOT\cimv2 and in 4 namespaces
GlobalProcessCount property
CIMTYPE'uint32'
Description'GlobalProcessCount is the current number of processes that have the file loaded in memory.'
readTrue
Schema'Win32'
GlobalProcessCount property is in 1 class (CIM_ProcessExecutable) of ROOT\cimv2 and in 2 namespaces
ModuleInstance property
CIMTYPE'uint32'
DEPRECATEDTrue
Description'ModuleInstance represents the Win32 instance handle.The ModuleInstance property has been deprecated. There is no replacement value and this property is now considered obsolete.'
readTrue
Schema'Win32'
ModuleInstance property is in 1 class (CIM_ProcessExecutable) of ROOT\cimv2 and in 2 namespaces
ProcessCount property
CIMTYPE'uint32'
Description'ProcessCount represents the reference count of the file in the associated process.'
readTrue
Schema'Win32'
ProcessCount property is in 1 class (CIM_ProcessExecutable) of ROOT\cimv2 and in 2 namespaces

Derived properties (2) of CIM_ProcessExecutable class

Antecedent property
CIMTYPE'ref:CIM_DataFile'
Description'The data file participating in the execution of the process.'
keyTrue
readTrue
Antecedent property is in 103 classes of ROOT\cimv2 and in 15 namespaces
Dependent property
CIMTYPE'ref:CIM_Process'
Description'The process.'
keyTrue
readTrue
Dependent property is in 103 classes of ROOT\cimv2 and in 15 namespaces

CIM_ProcessExecutable Qualifiers

NameValueToInstanceToSubclassOverridableAmendedLocal
AssociationTrue
Description'A link between a process and a data file indicating that the file participates in the execution of the process.
Note: In order to receive all possible instances of this class, the SE_DEBUG_PRIVILEGE should be enabled.'
dynamicTrue
Locale1033
Privileges['SeDebugPrivilege']
provider'CIMWin32'
UUID'{8502C542-5FBB-11D2-AAC1-006008C78BC7}'

CIM_ProcessExecutable System properties

NameValueOriginCIMTypeLocalArray
__PATH'\\.\ROOT\cimv2:CIM_ProcessExecutable'___SYSTEM8
__NAMESPACE'ROOT\cimv2'___SYSTEM8
__SERVER'.'___SYSTEM8
__DERIVATION['CIM_Dependency']___SYSTEM8
__PROPERTY_COUNT6___SYSTEM3
__RELPATH'CIM_ProcessExecutable'___SYSTEM8
__DYNASTY'CIM_Dependency'___SYSTEM8
__SUPERCLASS'CIM_Dependency'___SYSTEM8
__CLASS'CIM_ProcessExecutable'___SYSTEM8
__GENUS1___SYSTEM3
comments powered by Disqus
WUtils.com