# pywinhandle

**Repository Path**: yihleego/pywinhandle

## Basic Information

- **Project Name**: pywinhandle
- **Description**: Pywinhandle is a utility that displays information about open handles for any process in the system. You can use it to see the programs that have a file open, or to see the object types and names of all the handles of a program, or to close the any handles of a program.
- **Primary Language**: Unknown
- **License**: Not specified
- **Default Branch**: master
- **Homepage**: None
- **GVP Project**: No

## Statistics

- **Stars**: 0
- **Forks**: 0
- **Created**: 2022-04-26
- **Last Updated**: 2022-04-26

## Categories & Tags

**Categories**: Uncategorized

**Tags**: None

## README

# Pywinhandle

## Introduction

It is a utility that displays information about open handles for any process in the system.
You can use it to see the programs that have a file open,
or to see the object types and names of all the handles of a program,
or to close any handles of a program.

## Usage

### Find and close handles

```python
handles = find_handles(process_ids=[0x6600], handle_names=['HandleName'])
close_handles(handles)
```

```python
[
    {
        'process_id': 0x6600,
        'handle': 0x9900,
        'name': 'HandleName',
        'type': 'HandleType'
    }
]
```

## Links

### Win32 API

- [NtQuerySystemInformation function](https://docs.microsoft.com/en-us/windows/win32/api/winternl/nf-winternl-ntquerysysteminformation)
- [NtQueryObject function](https://docs.microsoft.com/en-us/windows/win32/api/winternl/nf-winternl-ntqueryobject)
- [ZwDuplicateObject function](https://docs.microsoft.com/en-us/windows-hardware/drivers/ddi/ntifs/nf-ntifs-zwduplicateobject)

### Process Utilities

- [Handle](https://docs.microsoft.com/en-us/sysinternals/downloads/handle)
- [Process Explorer](https://docs.microsoft.com/en-us/sysinternals/downloads/process-explorer)