Group: Process and Thread - Library: kernel32
How to find when the application started
BOOL WINAPI GetProcessTimes(
__in HANDLE hProcess,
__out LPFILETIME lpCreationTime,
__out LPFILETIME lpExitTime,
__out LPFILETIME lpKernelTime,
__out LPFILETIME lpUserTime
); DECLARE INTEGER GetProcessTimes IN kernel32;
INTEGER hProcess,;
STRING @lpCreationTime,;
STRING @lpExitTime,;
STRING @lpKernelTime,;
STRING @lpUserTime hProcess A handle to the process whose timing information is sought. The handle must have the PROCESS_QUERY_INFORMATION or PROCESS_QUERY_LIMITED_INFORMATION access right.
lpCreationTime A pointer to a FILETIME structure that receives the creation time of the process.
lpExitTime A pointer to a FILETIME structure that receives the exit time of the process.
lpKernelTime A pointer to a FILETIME structure that receives the amount of time that the process has executed in kernel mode.
lpUserTime A pointer to a FILETIME structure that receives the amount of time that the process has executed in user mode.
If the function succeeds, the return value is nonzero.
This function provides a way to know when the process has started.
See also: GetProcessIoCounters, GetProcessVersion, GetProcessMemoryInfo.
Home