SYSTEM_HANDLE_TABLE_ENTRY_INFO_EX

The SYSTEM_HANDLE_TABLE_ENTRY_INFO_EX structure is a recurring element in the SYSTEM_HANDLE_INFORMATION_EX that a successful call to ZwQuerySystemInformation or NtQuerySystemInformation produces in its output buffer when given the information class SystemExtendedHandleInformation (0x40).

Documentation Status

The SYSTEM_HANDLE_TABLE_ENTRY_INFO_EX structure is not documented.

Layout

The SYSTEM_HANDLE_TABLE_ENTRY_INFO_EX structure is 0x1C or 0x28 bytes in 32-bit and 64-bit Windows, respectively.

PVOID Object;

ULONG_PTR UniqueProcessId;

ULONG_PTR HandleValue;

ULONG GrantedAccess;

USHORT CreatorBackTraceIndex;

USHORT ObjectTypeIndex;

ULONG HandleAttributes;

ULONG Reserved;