Open PolarGoose opened 1 year ago
The command: handle64.exe -accepteula -v -u C:\Windows provides the following output:
handle64.exe -accepteula -v -u C:\Windows
Nthandle v5.0 - Handle viewer Copyright (C) 1997-2022 Mark Russinovich Sysinternals - www.sysinternals.com Process,PID,User,Handle,Type,Share Flags,Name,Access ipf_helper.exe,20004,File,PcName\UserName,0x0000004C,C:\Windows\System32\DriverStore\FileRepository\ipf_cpu.inf_amd64_e sihost.exe,6616,File,PcName\UserName,0x00000050,C:\Windows\System32 sihost.exe,6616,File,PcName\UserName,0x0000082C,C:\Windows\System32\en-US\propsys.dll.mui sihost.exe,6616,File,PcName\UserName,0x000008E0,C:\Windows\WinSxS\amd64_microsoft.windows.common-controls_65 sihost.exe,6616,File,PcName\UserName,0x00000BC4,C:\Windows\System32\en-US\KernelBase.dll.mui svchost.exe,5672,File,PcName\UserName,0x00000054,C:\Windows\System32 svchost.exe,5672,File,PcName\UserName,0x00000158,C:\Windows\System32\en-US\svchost.exe.mui
The CSV header that Handle prints is Process,PID,User,Handle,Type,Share Flags,Name,Access. Instead, the header should be: Process,PID,Type,User,Handle,Name
Process,PID,User,Handle,Type,Share Flags,Name,Access
Process,PID,Type,User,Handle,Name
The command:
handle64.exe -accepteula -v -u C:\Windows
provides the following output:The CSV header that Handle prints is
Process,PID,User,Handle,Type,Share Flags,Name,Access
. Instead, the header should be:Process,PID,Type,User,Handle,Name