Runtime Information ETW Events
These ETW events log information about the runtime, including the SKU, version number, the manner in which the runtime was activated, the command-line parameters it was started with, the GUID (if applicable), and other relevant information. If multiple runtimes are executing within a process, the information provided by these events (the ClrInstanceID) helps disambiguate the runtimes.
The following table shows the two runtime information events. The events can be raised under any keyword or mask. (For more information, see CLR ETW Keywords and Levels.)
Raised when a runtime is loaded.
Enumerates the runtimes that are loaded.
The following table shows event data.
Unique ID for the instance of CLR or CoreCLR.
1 – Desktop CLR.
2 – CoreCLR.
BclVersion – Major Version
Major version of mscorlib.dll.
BclVersion – Minor Version
Minor version number of mscorlib.dll.
BclVersion – Build Number
Build number of mscorlib.dll.
BclVersion – QFE
Hotfix version number of mscorlib.dll.
VMVersion – Major Version
Version of clr.dll or coreclr.dll, depending on SKU.
VMVersion – Minor Version
Minor version of clr.dll or coreclr.dll, depending on SKU.
VMVersion – Build Number
Build number of clr.dll or coreclr.dll.
VMVersion – QFE
Hotfix version number of clr.dll or coreclr.dll.
Startup flags defined in mscoree.h.
0x01 - Managed executable.
0x02 - Hosted CLR.
0x04 - C++ managed interop.
0x08 - COM-activated.
0x10 - Other.
Non-null only if StartupMode=0x01.
Non-null only if StartupMode=0x08.
Path to the CLR .dll file that was loaded into the process.