Locked Get process path from PID at kernel level in C

[dEEpEst]

At user-level, such a simple task is straightforward as it should, by the use of APIs like GetModuleFileNameEx().

 

However, there's no documented way to do it at kernel level. I found a lot of people asking for it, but didn't find any clear functioning snippet, so I figured it could be useful to share mine.

 

[HIDE-THANKS]

This is the hidden content, please

• Sign In
• or
• Sign Up

[/HIDE-THANKS]