how to find modules use in running process

P

Philip Nunn [MSFT]

I would suggest using an 'associators of' query something like this:

associators of {win32_process.handle='2604'} where AssocClass =
CIM_ProcessExecutable

It will return all the files that participate in execution of the process.
 

Ask a Question

Want to reply to this thread or ask your own question?

You'll need to choose a username for the site, which only take a couple of moments. After that, you can post your question and our members will help you out.

Ask a Question

Similar Threads

Access Modules empty 0
create and terminate process using wmi 0
how to prevent WBEM_E_SHUTTING_DOWN(0x80041033) error 0
nforce2 ultra400 chipset, why DS and SS modules ??? 1
What's the deal with cheap "AMD ONLY" RAM from eBay? 13
How to disabled RAM modules in the system? 2
ECHO OFF applying to MULTIPLE Macros or MODULES! 1
Windows XP 64-bit...where is wmiprvse.exe? 1

Top