WMI classes often have several different associated or related classes--for example, each instance of Win32_Process has an associated class, CIM_DataFile.
Associations between two classes are expressed by a third class. In the case of Win32_Process and CIM_DataFile, the relationship is expressed by the class CIM_ProcessExecutable.
The relationship is defined using the antecedent and dependent properties, as shown in the following example:
PS> Get-CimInstance CIM_ProcessExecutable |
Where-Object { $_.Dependent -match $PID } |
Select-Object -First 1
Antecedent : CIM_DataFile (Name = "C:WINDOWSSystem32WindowsPowerShellv...)
Dependent : Win32_Process (Handle = "11672")
BaseAddress : 2340462460928
GlobalProcessCount :
ModuleInstance : 4000251904
ProcessCount : 0
PSComputerName :
This CIM_ProcessExecutable class does not need to be used directly.