CIM_ProcessExecutable, ROOT\CIMV2\ms_409

Description

A link between a process and a data file indicating that the file participates in the execution of the process. Note: In order to receive all possible instances of this class, the SE_DEBUG_PRIVILEGE should be enabled.

CIM_ProcessExecutable properties

CIM_ProcessExecutable has 6 properties (4 Local, 2 Derived)

Name	Origin	CIMType
key Antecedent	CIM_Dependency	102 [ref:CIM_DataFile]
BaseAddress	CIM_ProcessExecutable	21 [uint64]
key Dependent	CIM_Dependency	102 [ref:CIM_Process]
GlobalProcessCount	CIM_ProcessExecutable	19 [uint32]
ModuleInstance	CIM_ProcessExecutable	19 [uint32]
ProcessCount	CIM_ProcessExecutable	19 [uint32]

Detailed description of CIM_ProcessExecutable properties

Local properties (4) of CIM_ProcessExecutable class

…

▲ BaseAddress property
CIMTYPE	'uint64'
Description	'BaseAddress represents the base address of the module in the address space of the associated process.'
BaseAddress property is in 1 class (CIM_ProcessExecutable) of ROOT\CIMV2\ms_409 and in 4 namespaces

…

▲ GlobalProcessCount property
CIMTYPE	'uint32'
Description	'GlobalProcessCount is the current number of processes that have the file loaded in memory.'
GlobalProcessCount property is in 1 class (CIM_ProcessExecutable) of ROOT\CIMV2\ms_409 and in 2 namespaces

…

▲ ModuleInstance property
CIMTYPE	'uint32'
Description	'ModuleInstance represents the Win32 instance handle.The ModuleInstance property has been deprecated. There is no replacement value and this property is now considered obsolete.'
ModuleInstance property is in 1 class (CIM_ProcessExecutable) of ROOT\CIMV2\ms_409 and in 2 namespaces

…

▲ ProcessCount property
CIMTYPE	'uint32'
Description	'ProcessCount represents the reference count of the file in the associated process.'
ProcessCount property is in 1 class (CIM_ProcessExecutable) of ROOT\CIMV2\ms_409 and in 2 namespaces

Derived properties (2) of CIM_ProcessExecutable class

…

▲ Antecedent property
CIMTYPE	'ref:CIM_DataFile'
Description	'The data file participating in the execution of the process.'
key	True
Antecedent property is in 97 classes of ROOT\CIMV2\ms_409 and in 15 namespaces

…

▲ Dependent property
CIMTYPE	'ref:CIM_Process'
Description	'The process.'
key	True
Dependent property is in 97 classes of ROOT\CIMV2\ms_409 and in 15 namespaces

CIM_ProcessExecutable Qualifiers

…

Name	Value	ToInstance	ToSubclass	Overridable	Amended	Local
AMENDMENT	True	✗	✗	✓	✗	✓
Description	'A link between a process and a data file indicating that the file participates in the execution of the process. Note: In order to receive all possible instances of this class, the SE_DEBUG_PRIVILEGE should be enabled.'	✗	✓	✓	✗	✓
LOCALE	1033	✓	✗	✓	✗	✓

CIM_ProcessExecutable System properties

…

Name	Value	Origin	CIMType	Local	Array
__PATH	'\\.\ROOT\CIMV2\ms_409:CIM_ProcessExecutable'	___SYSTEM	8	✗	✗
__NAMESPACE	'ROOT\CIMV2\ms_409'	___SYSTEM	8	✗	✗
__SERVER	'.'	___SYSTEM	8	✗	✗
__DERIVATION	['CIM_Dependency']	___SYSTEM	8	✗	✓
__PROPERTY_COUNT	6	___SYSTEM	3	✗	✗
__RELPATH	'CIM_ProcessExecutable'	___SYSTEM	8	✗	✗
__DYNASTY	'CIM_Dependency'	___SYSTEM	8	✗	✗
__SUPERCLASS	'CIM_Dependency'	___SYSTEM	8	✗	✗
__CLASS	'CIM_ProcessExecutable'	___SYSTEM	8	✗	✗
__GENUS	1	___SYSTEM	3	✗	✗

WUtils.com

Includes&Samples