CreateProcess

GPTKB entity

Statements (55)
Predicate Object
gptkbp:instanceOf Windows API
gptkbp:availableOn gptkb:Win32_API
gptkbp:canBe redirect input/output
set environment variables for new process
set process security attributes
spawn child processes
gptkbp:category System programming
Process management
gptkbp:definedIn Windows.h
gptkbp:documentation https://learn.microsoft.com/en-us/windows/win32/api/processthreadsapi/nf-processthreadsapi-createprocessa
gptkbp:eighthParameter LPCSTR lpCurrentDirectory
gptkbp:failureIndicatedBy return value FALSE
gptkbp:fifthParameter BOOL bInheritHandles
gptkbp:firstParameter LPCSTR lpApplicationName
gptkbp:fourthParameter LPSECURITY_ATTRIBUTES lpThreadAttributes
gptkbp:hasVersion CreateProcessA
https://www.w3.org/2000/01/rdf-schema#label CreateProcess
gptkbp:introducedIn gptkb:Windows_NT
gptkbp:ninthParameter LPSTARTUPINFO lpStartupInfo
gptkbp:relatedTo gptkb:software
gptkb:ShellExecute
CreateProcessAsUser
CreateProcessWithLogonW
CreateProcessWithTokenW
WinExec
gptkbp:requiresHeader windows.h
gptkbp:requiresLibrary Kernel32.lib
gptkbp:result BOOL
gptkbp:secondParameter LPSTR lpCommandLine
gptkbp:seventhParameter LPVOID lpEnvironment
gptkbp:sixthParameter DWORD dwCreationFlags
gptkbp:successIndicatedBy return value TRUE
gptkbp:supportedBy gptkb:Windows_8
gptkb:Windows_10
gptkb:Windows_11
gptkb:Windows_7
gptkb:Windows_95
gptkb:Windows_98
gptkb:Windows_Vista
gptkb:Windows_XP
gptkb:Windows_2000
gptkb:Windows_Me
gptkbp:tenthParameter LPPROCESS_INFORMATION lpProcessInformation
gptkbp:thirdParameter LPSECURITY_ATTRIBUTES lpProcessAttributes
gptkbp:threadSafe No
gptkbp:unicodeBlock CreateProcessW
gptkbp:usedBy software developers
system administrators
malware authors
gptkbp:usedFor creating new processes
launching executables
gptkbp:bfsParent gptkb:Kernel32
gptkb:Kernel32.dll
gptkb:kernel32.dll
gptkbp:bfsLayer 7