| Win32_ModuleLoadTrace |
| The ModuleLoadTrace event class indicates a process has loaded a new module. |
| NameSpace Path |
| \ROOT\CIMV2 |
| PROPERTY | SMS_REPORT | CIMTYPE | DESCRIPTION |
| FileName | | String | The FileName property indicates the filename of the loaded module. |
| ImageBase | | UInt64 | The ImageBase property indicates the base address where the module was loaded into process memory. |
| ImageSize | | UInt32 | The ImageSize property indicates the size in bytes of the loaded module. |
| ProcessID | | UInt32 | The ProcessID property indentifies the process that loaded the module. |
| SECURITY_DESCRIPTOR | | UInt8 | NA |
| TIME_CREATED | | UInt64 | NA |
| SAMPLE DATA INSTANCE |
Class does not currently contain data instances
|
