/// <summary>
/// Gets the parent process of a specified process.
/// </summary>
/// <param name="handle">The process handle.</param>
/// <returns>An instance of the Process class.</returns>
public static Process GetParentProcess(IntPtr handle) {
var pbi = new ParentProcess();
int returnLength;
int status = Ntdll.NtQueryInformationProcess(handle, 0, ref pbi, Marshal.SizeOf(pbi), out returnLength);
if (status != 0) {
throw new Win32Exception(status);
}
try {
return Process.GetProcessById(pbi.InheritedFromUniqueProcessId.ToInt32());
} catch (ArgumentException) {
// not found
return null;
}
}
/// <summary>
/// Gets the parent process of a specified process.
/// </summary>
/// <param name="handle">The process handle.</param>
/// <returns>An instance of the Process class.</returns>
public static Process GetParentProcess(IntPtr handle)
{
var pbi = new ParentProcess();
int returnLength;
int status = Ntdll.NtQueryInformationProcess(handle, 0, ref pbi, Marshal.SizeOf(pbi), out returnLength);
if (status != 0)
{
throw new Win32Exception(status);
}
try {
return(Process.GetProcessById(pbi.InheritedFromUniqueProcessId.ToInt32()));
} catch (ArgumentException) {
// not found
return(null);
}
}
