.. / Process

Description:

Processes are a container for a set of resources that are initialized when a program instance is created. All processes are given a private virtual address space, meaning that no process shares memory with another process. For example, when you open Notepad, a process is automatically created and associated with that instance of the application.



Process Image

Functions:

Kernel32.dll

CreateProcess

CreateProcessAsUser

CreateProcessInternal

TerminateProcess

ExitProcess

OpenProcess

GetCurrentProcess

GetCurrentProcessId

AdvApi32.dll

CreateProcessWithLogonW

CreateProcessWithTokenW

Ntdll.dll

NtCreateProcess

NtOpenProcess

NtTerminateProcess

NtQueryInformationProcess

NtSetInformationProcess

RtlCreateUserProcess

RtlCreateProcessParameters


References: