Windows creation time

My name is Patrick Gruenauer. From Austria. Email Address:. Office Exchange Online: List inactive Mailboxes. Published by Patrick Gruenauer. Really cool thing. I have to try it out myself. Leave a Reply Cancel reply Enter your comment here Fill in your details below or click an icon to log in:.

Email required Address never made public. Name required. Search for Get-Author My name is Patrick Gruenauer. Follow SID This browser is no longer supported. Download Microsoft Edge More info. Contents Exit focus mode. File System Info. Creation Time Property Reference Is this page helpful?

Please rate your experience Yes No. Any additional feedback? Creationtime has some strange values Consider that CreationTime is: a point in time expressed as the amount of time that has elapsed since midnight on January 1, at Greenwich, England.

Hi Shimanov, i've considered that, but the value doesn't change. Even if there are lot's of seconds gone by since the value should change sometimes Do you observe a different CreationTime for different processes?

I should think before I write something stupid. Of course it never changes, since it's the creation time It's 2 o'clock in the morning here :- I can appreciate that. I noticed one other problem with the syntax of your call to GetProcessTimes. This function is not defined with a "cdecl" calling convention. Damn you markdown! Just the link to the regripper project above.

I haven't used it, personally, but it looks reasonably easy to deal with. It looks like it has been included in Kali Linux now bugs.

Apparently there was a book written around these tools. It looks pricey: amazon. I think Evan might owe Richard Mueller an apology ; — charleswj I didn't give the tools a try. Are you finding that the date isn't getting populated? Not sure if you saw my own answer below yet, but the field being referred to as "creation date" is actually "password last changed", which obviously will be the same value until the first post-account creation password change.

HopelessN00b HopelessN00b 53k 31 31 gold badges silver badges bronze badges. Mike Mike 1 1 bronze badge. How is this related? Have you read the question? You can right click the appropriate user account and go to properties and it will show you a date created, this should be the same as the creation of the user account Just my 2 cents. Kevin Kevin 1. That doesn't tell you when the account was created since the profile directory could be deleted and re-created at any time after the account was created.

I was always told to keep it simple