Handle

NAME

SYNOPSIS

handle [[ -a ] [ -u ] | [ -c handle [ -l ] [ -y ]] | [ -s ]] [ -p processname | pid [ name ]

AVAILABILITY

DESCRIPTION

Handle output:

When not in search mode (enabled by specifying a name fragment as a parameter), Handle divides its output into sections for each process it is printing handle information for. Dashed lines are used as a separator, immediately below which you will see the process name and its process id (PID). Beneath the process name are listed handle values (in hexadecimal), the type of object the handle is associated with, and the name of the object if it has one.

When in search mode, Handle prints the process names and id's are listed on the left side and the names of the objects that had a match are on the right.

More information:

You can find more information on the Object Manager in Windows Internals, 4th Edition or by browsing the Object Manager name-space with WinObj (https://www.sysinternals.com/downloads/winobj).

OPTIONS

-?

print usage information.

-a

Dump information about all types of handles, not just those that refer to files. Other types include ports, Registry keys, synchronization primitives, threads, and processes.

-c

Closes the specified handle (interpreted as a hexadecimal number). You must specify the process by its PID. WARNING: Closing handles can cause application or system instability.

-l

Dump the sizes of pagefile-backed sections.

-y

Don't prompt for close handle confirmation.

-s

Print count of each type of handle open.

-u

Show the owning user name when searching for handles.

-p

Instead of examining all the handles in the system, this parameter narrows Handle's scan to those processes that begin with the name process. Thus: handle -p exp would dump the open files for all processes that start with "exp" which would include Explorer.

name

This parameter is present so that you can direct Handle to search for references to an object with a particular name. For example, if you wanted to now which process (if any) has "c:\windows\system32" open you could type:

  handle windows\system

The name match is case-insensitive and the fragment specified can be anywhere in the paths you are interested in.

ENVIRONMENT

EXIT STATUS

0

always.

FILES

EXAMPLES

SEE ALSO

NOTES

BUGS

AUTHOR

COPYRIGHT

This is free software; see WA2LWinTools/man/COPYING for copying conditions. There is ABSOLUTELY NO WARRANTY; not even for MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.