Image_V0_Load class

This class is the event type class for image load events.

The following syntax is simplified from MOF code.

Syntax

[EventType(10), EventTypeName("Load")]
class Image_V0_Load
{
  uint32 BaseAddress;
  uint32 ModuleSize;
  string ImageFileName;
};

Members

The Image_V0_Load class has these types of members:

• Properties

Properties

The Image_V0_Load class has these properties.

BaseAddress

Data type: uint32

Access type: Read-only

Qualifiers: WmiDataId(1), Pointer

Base address of the application in which the image is loaded.

ImageFileName

Data type: string

Access type: Read-only

Qualifiers: WmiDataId(3), StringTermination("NullTerminated"), Format("w")

File name and extension of the DLL or executable image to load.

ModuleSize

Data type: uint32

Access type: Read-only

Qualifiers: WmiDataId(2)

Size of the image.

Requirements

See also

Image_V0