|
Wireshark 4.7.2
The Wireshark network protocol analyzer
|
Describes a single loaded module (DLL or executable image) within a monitored process. More...
#include <procmon.h>
Public Attributes | |
| nstime_t | timestamp |
| uint64_t | base_address |
| uint32_t | size |
| const char * | image_path |
| const char * | version |
| const char * | company |
| const char * | description |
Describes a single loaded module (DLL or executable image) within a monitored process.
| uint64_t procmon_module_t::base_address |
Base virtual address at which this module is mapped in the process address space.
| const char* procmon_module_t::company |
Company name from the module's version resource; NULL if unavailable.
| const char* procmon_module_t::description |
File description from the module's version resource; NULL if unavailable.
| const char* procmon_module_t::image_path |
Full file system path to the module image on disk.
| uint32_t procmon_module_t::size |
Size in bytes of the mapped module image.
| nstime_t procmon_module_t::timestamp |
Timestamp at which this module was loaded into the process.
| const char* procmon_module_t::version |
Version string from the module's version resource; NULL if unavailable.