PageFault_VirtualAlloc class

This class is the event type class for virtual allocation events.

The following syntax is simplified from MOF code.

Syntax

[EventType{98, 99}, EventTypeName{"VirtualAlloc", "VirtualFree"}]
class PageFault_VirtualAlloc : PageFault_V2
{
  uint32 BaseAddress;
  object RegionSize;
  uint32 ProcessId;
  uint32 Flags;
};

Members

The PageFault_VirtualAlloc class has these types of members:

• Properties

Properties

The PageFault_VirtualAlloc class has these properties.

BaseAddress

Data type: uint32

Access type: Read-only

Qualifiers: WmiDataId(1), Pointer

The starting address at which memory was allocated or freed.

Flags

Data type: uint32

Access type: Read-only

Qualifiers: WmiDataId(4), Format("x")

The type of memory allocation that was performed. For possible values, see the flAllocationType parameter of the VirtualAllocEx function.

ProcessId

Data type: uint32

Access type: Read-only

Qualifiers: WmiDataId(3)

The process that owned the memory (can be different from the thread that performed the allocation).

RegionSize

Data type: object

Access type: Read-only

Qualifiers: WmiDataId(2), Extension("SizeT")

The size, in bytes, of the memory that was allocated or freed.

Requirements

See also

PageFault_V2