Skip to content

Instantly share code, notes, and snippets.

@daaximus
Last active February 24, 2023 04:12
Show Gist options
  • Star 4 You must be signed in to star a gist
  • Fork 1 You must be signed in to fork a gist
  • Save daaximus/2cd107e3c5077d569ca88f15ad287371 to your computer and use it in GitHub Desktop.
Save daaximus/2cd107e3c5077d569ca88f15ad287371 to your computer and use it in GitHub Desktop.
Windows 10/11 Object Type Names & Indexes

[WINDOWS 11 22621.1105]

"Type", 0x2
"Directory", 0x3
"SymbolicLink", 0x4
"Token", 0x5  
"Job", 0x6  
"Process", 0x7  
"Thread", 0x8  
"Partition", 0x9  
"UserApcReserve", 0xa  
"IoCompletionReserve", 0xb  
"ActivityReference", 0xc  
"ProcessStateChange", 0xd  
"ThreadStateChange", 0xe  
"CpuPartition", 0xf  
"PsSiloContextPaged", 0x10  
"PsSiloContextNonPaged", 0x11  
"DebugObject", 0x12  
"Event", 0x13  
"Mutant", 0x14  
"Callback", 0x15  
"Semaphore", 0x16  
"Timer", 0x17  
"IRTimer", 0x18  
"Profile", 0x19  
"KeyedEvent", 0x1a  
"WindowStation", 0x1b  
"Desktop", 0x1c  
"Composition", 0x1d  
"RawInputManager", 0x1e  
"CoreMessaging", 0x1f  
"ActivationObject", 0x20
"TpWorkerFactory", 0x21
"Adapter", 0x22
"Controller", 0x23 
"Device", 0x24 
"Driver", 0x25
"IoCompletion", 0x26 
"WaitCompletionPacket", 0x27
"File", 0x28 
"IoRing", 0x29 
"TmTm", 0x2a 
"TmTx", 0x2b 
"TmRm", 0x2c 
"TmEn", 0x2d 
"Section", 0x2e 
"Session", 0x2f 
"Key", 0x30 
"RegistryTransaction", 0x31 
"DmaAdapter", 0x32 
"ALPC Port", 0x33 
"EnergyTracker", 0x34 
"PowerRequest", 0x35 
"WmiGuid", 0x36 
"EtwRegistration", 0x37 
"EtwSessionDemuxEntry", 0x38 
"EtwConsumer", 0x39 
"CoverageSampler", 0x3a 
"PcwObject", 0x3b 
"FilterConnectionPort", 0x3c 
"FilterCommunicationPort", 0x3d 
"NdisCmState", 0x3e 
"DxgkSharedResource", 0x3f 
"DxgkSharedKeyedMutexObject", 0x40 
"DxgkSharedSyncObject", 0x41 
"DxgkSharedSwapChainObject", 0x42 
"DxgkDisplayManagerObject", 0x43 
"DxgkSharedProtectedSessionObject", 0x44 
"DxgkSharedBundleObject", 0x45 
"DxgkCompositionObject", 0x46 
"VRegConfigurationContext", 0x47

[WINDOWS 10 19045.2486]

"Type", 0x2
"Directory", 0x3
"SymbolicLink", 0x4
"Token", 0x5
"Job", 0x6
"Process", 0x7
"Thread", 0x8
"Partition", 0x9
"UserApcReserve", 0xa
"IoCompletionReserve", 0xb
"ActivityReference", 0xc
"PsSiloContextPaged", 0xd
"PsSiloContextNonPaged", 0xe
"DebugObject", 0xf
"Event", 0x10
"Mutant", 0x11
"Callback", 0x12
"Semaphore", 0x13
"Timer", 0x14
"IRTimer", 0x15
"Profile", 0x16
"KeyedEvent", 0x17
"WindowStation", 0x18 
"Desktop", 0x19
"Composition", 0x1a
"RawInputManager", 0x1b
"CoreMessaging", 0x1c
"ActivationObject", 0x1d
"TpWorkerFactory", 0x1e
"Adapter", 0x1f
"Controller", 0x20 
"Device", 0x21 
"Driver", 0x22 
"IoCompletion", 0x23 
"WaitCompletionPacket", 0x24 
"File", 0x25
"TmTm", 0x26 
"TmTx", 0x27 
"TmRm", 0x28 
"TmEn", 0x29 
"Section", 0x2a 
"Session", 0x2b 
"Key", 0x2c 
"RegistryTransaction", 0x2d 
"ALPC Port", 0x2e 
"EnergyTracker", 0x2f 
"PowerRequest", 0x30 
"WmiGuid", 0x31 
"EtwRegistration", 0x32 
"EtwSessionDemuxEntry", 0x33 
"EtwConsumer", 0x34 
"CoverageSampler", 0x35 
"DmaAdapter", 0x36 
"PcwObject", 0x37 
"FilterConnectionPort", 0x38 
"FilterCommunicationPort", 0x39 
"NdisCmState", 0x3a 
"DxgkSharedResource", 0x3b 
"DxgkSharedKeyedMutexObject", 0x3c 
"DxgkSharedSyncObject", 0x3d 
"DxgkSharedSwapChainObject", 0x3e 
"DxgkDisplayManagerObject", 0x3f 
"DxgkCurrentDxgThreadObject", 0x40 
"DxgkSharedProtectedSessionObject", 0x41 
"DxgkSharedBundleObject", 0x42 
"DxgkCompositionObject", 0x43 
"VRegConfigurationContext", 0x44 
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment