Task Explorer v1.5.6

In the latest release, version 1.5.6, several key updates and changes were made to improve overall functionality and performance. One of the notable adjustments is that Task Explorer (TE) no longer lists mounted VHD/VHDX files as disks, focusing solely on real hardware. This change aims to streamline disk management and ensure the system resources are utilized more efficiently by disregarding virtual drives. Additionally, the PHlib library has been updated to version 3.1.24258, continuing the effort to maintain compatibility with the latest technology and ensuring smooth operation.

Important Note:

this build has a unsigned driver hence it is required to enable test signign mode to use it

You can donate via paypal at https://xanasoft.com/ or patreon https://www.patreon.com/DavidXanatos

Task Explorer v1.5.5c

updated PHlib to version 3.0.7579

and fixed issues introduced in 1.5.5

Important Note:

this build has a unsigned driver hence it is required to enable test signign mode to use it

You can donate via paypal at https://xanasoft.com/ or patreon https://www.patreon.com/DavidXanatos

Task Explorer v1.5.5

updated PHlib to version 3.0.7579

this build has a few bugs please use: https://github.com/DavidXanatos/TaskExplorer/releases/tag/v1.5.5c

Important Note:

this build has a unsigned driver hence it is required to enable test signign mode to use it

You can donate via paypal at https://xanasoft.com/ or patreon https://www.patreon.com/DavidXanatos

Build v1.5.3

updated PHlib to version 3.0.7270

Important Note:

this build has a unsigned driver hence it is required to enable test signign mode to use it

You can donate via paypal at https://xanasoft.com/ or patreon https://www.patreon.com/DavidXanatos

Build v1.5.2

This build fixes a BSOD bug on windows 10 LTSC 2019

Important Note:

this build has a unsigned driver hence it is required to enable test signign mode to use it

You can donate via paypal at https://xanasoft.com/ or patreon https://www.patreon.com/DavidXanatos

Build v1.5.1

This build fixes various bugs.

Important Note:

this build has a unsigned driver hence it is required to enable test signign mode to use it

You can donate via paypal at https://xanasoft.com/ or patreon https://www.patreon.com/DavidXanatos

ChangeLog

Added

• re added kernel debug log dumping
• added more handle information
• added option to block processes from starting using the driver

Fixed

• fixed issue with opening job objects

Build v1.5.0

This build updates the PH Library to 3.0.5553 and adds fixes various minor bugs.

Important Note:

this build has a unsigned driver hence it is required to enable test signign mode to use it

You can donate via paypal at https://xanasoft.com/ or patreon https://www.patreon.com/DavidXanatos

ChangeLog

Changed

• Made Qt6 Compatible
• updated QWT library to v6.2
• updated PHlib to version 3.0.5553
• updated DotNET counter code

Fixed

• fixed issues with GPU usage not being displayed proeprly
• fixed memory leak in RPC Endpoint View

Removed

• removed aility to unprotect protected processes
• removed kernel debug log dumping (will be re added later)

Build v1.4.1

This build updates the PH Library to 3.0.4706 and adds fixes various minor bugs.

Important Note:

I found a new leaked certificate that works this build uses it, if it should happen to become blacklisted in future, please use the test signed driver from 1.0.4

You can donate via paypal at https://xanasoft.com/ or patreon https://www.patreon.com/DavidXanatos

ChangeLog

Fixed

• fixed singleapp not working
• the xprocesshacker.sys driver is now signed with a new certificate and shoudl load on win 11

Changed

• updated PHlib to version 3.0.4706

Build v1.4.0

This build updates the PH Library to 3.0.4365 and adds fixes various minor bugs.

Important Note:

The driver is now only test signed as the leaked certificate was blacklisted in the windows kernel, hence you need to enable test mode to use all of the features.

You can donate via paypal at https://xanasoft.com/ or patreon https://www.patreon.com/DavidXanatos

ChangeLog

Added

• added sandboxie tab with a lot of sandboxie related details
• added option to freeze and unfreeze entire jobs
• added "Original Impersonation Token" menu command to inspect the impersonation token of sandboxed thread
• added rpc view listing all rpc endpoints on the system
• added windows 11 detection

Changed

• replaced all icons
• updated PHlib to version 3.0.4365

Fixed

• fixed issue resolving kernel symbols introduced with 1.3

Buil v1.3.0

This build updates the PH Library to 3.0.3972 and adds fixes various minor bugs.

Important Note:

The xprocesshacker.sys driver must be signed, and since the appropriate certificates are prohibitively expensive, I head to use a leaked code signing certificate I found laying around the Internets. This means some anti malware applications wrongfully flag it as potentially dangerous or a virus.

You can donate via paypal at https://xanasoft.com/ or patreon https://www.patreon.com/DavidXanatos

ChangeLog

Changed

• changed memory search window layout
• on debug log start stop the lists are now reset
• updated MiscHelpers
• updated PHlib to version 3.0.3972
• updated QWT to version 6.1.6
• updated to use Visual studio 2019

Fixed

• fixed issues with hex string memory search
• fixed issue with updating token privileges
• fixed issues with disabled items in dark mode
• fixed race condition in etw initialization