This build focuses on usability improvements and bug fixes. It solves an issue causing very high CPU usage introduced in the last build. And it introduces some mitigation to the issues caused by the driver not being signed properly.

Download: https://github.com/DavidXanatos/TaskExplorer/releases/tag/v1.2.8


ChangeLog

Added
"Original Token" button to inspect the original process token of sandboxed processes
-- SbieDrv driver 5.42 or higher required
added command line option to start multiple instances
added driver file obfuscation and driver installation dialog

Changed
reorganized settings pages
improved sandboxie support implementation

Fixed
fixed excessive CPU usage in new process filter
fixed outdated data shown in token panel when no token could be obtained

This build updates the PH Library to 3.0.3014 and adds minor usability improvements.

Download: Download: https://github.com/DavidXanatos/TaskExplorer/releases/tag/v1.2.9

ChangeLog

Added
added highest thread CPU percentage to the CPU column

Changed
tree graph background in dark mode is also dark now
updated PHlib to version 3.0.3476
merged ASLR, DEP, CFG, CET columns into a joined mitigations column

Really appreciate the screenshot. Maybe you could add some to xanasoft or github so its easier to see before downloading? :)

This build updates the PH Library to 3.0.3972 and adds fixes various minor bugs.

Download:

https://github.com/DavidXanatos/TaskExplorer/releases/tag/v1.3.0

ChangeLog:

Changed
changed memory search window layout
on debug log start stop the lists are now reset
updated MiscHelpers
updated PHlib to version 3.0.3972
updated QWT to version 6.1.6
updated to use Visual studio 2019

Fixed
fixed issues with hex string memory search
fixed issue with updating token privileges
fixed issues with disabled items in dark mode
fixed race condition in etw initialization

This is awesome, my new favourite Task Manager! Thank goodness I stumbled upon it.

Great work and also kudos for keeping this open source. :)

This build updates the PH Library to 3.0.4365 and adds fixes various minor bugs.

Download: https://github.com/DavidXanatos/TaskExplorer/releases/tag/v1.4.0

Important Note:
The driver is now only test signed as the leaked certificate was blacklisted in the windows kernel, hence you need to enable test mode to use all of the features.


ChangeLog

Added

added sandboxie tab with a lot of sandboxie related details
added option to freeze and unfreeze entire jobs
added "Original Impersonation Token" menu command to inspect the impersonation token of sandboxed thread
added rpc view listing all rpc endpoints on the system
added windows 11 detection

Changed

replaced all icons
updated PHlib to version 3.0.4365

Fixed

fixed issue resolving kernel symbols introduced with 1.3

This build updates the PH Library to 3.0.4706 and adds fixes various minor bugs.

Download: https://github.com/DavidXanatos/TaskExplorer/releases/tag/v1.4.1

ChangeLog

Fixed

fixed singleapp not working
the xprocesshacker.sys driver is now signed with a new certificate and shoudl load on win 11

Changed

updated PHlib to version 3.0.4706

You wrote that it was signed with a leaked certificate in the changelog, which leak is the cert from?

the nvidia leak

This build updates the PH Library to 3.0.5553 and adds fixes various minor bugs.

Download: https://github.com/DavidXanatos/TaskExplorer/releases/tag/v1.5.0

ChangeLog

Changed

Made Qt6 Compatible
updated QWT library to v6.2
updated PHlib to version 3.0.5553
updated DotNET counter code

Fixed

fixed issues with GPU usage not being displayed proeprly
fixed memory leak in RPC Endpoint View

Removed
removed ability to unprotect protected processes
removed kernel debug log dumping (will be re added later)

This build fixes various bugs.

Download: https://github.com/DavidXanatos/TaskExplorer/releases/tag/v1.5.1

ChangeLog

Added
re added kernel debug log dumping
added more handle information
added option to block processes from starting using the driver

Fixed
fixed issue with opening job objects

TaskExplorer v1.5.3
 

Changed:

• updated PHlib to version 3.0.7270

Home
Download

v1.5.5
 

TaskExplorer v1.5.5c Released 03.05.2024

Changes:

• updated PHlib to version 3.0.7579
• and fixed issues introduced in 1.5.5

Important Note:
this build has a unsigned driver hence it is required to enable test signign mode to use it

Home:
Download:

Task Explorer v1.5.6
 

TaskExplorer v1.5.6 Released 22.09.2024

Changes

• In the latest release, version 1.5.6, several key updates and changes were made to improve overall functionality and performance. One of the notable adjustments is that Task Explorer (TE) no longer lists mounted VHD/VHDX files as disks, focusing solely on real hardware. This change aims to streamline disk management and ensure the system resources are utilized more efficiently by disregarding virtual drives. Additionally, the PHlib library has been updated to version 3.1.24258, continuing the effort to maintain compatibility with the latest technology and ensuring smooth operation.

Home
Download

TaskExplorer v1.6.0
 

TaskExplorer v1.6.0 Released 27.01.2025

Added

• Added permissions button to the Process security tab
• Added options to confugire No-[Write|Read|Execute]-Up policy
• Added more columns to the memory panel: Signing level, Original protection, Region type, Priority
• added more info to token panel
• added more columns to service tab
• added more columns to module tab
• added more columns to threads tab
• added more columns to process tree
• added options to change thread/process priority boost
• added options to change process efficiency mode
• added option to freeze processes
• added more dump options
• added heaps info tab
• added modified pages info to module panel

Changed

• updated PHlib to version 3.2.25011
• updated Integrity levels
• now all PIDs/TIDs ate displayed booth in decimal and hex 1234 [0x4D2]
• reordered the process and thread menus
• moved TaskExplorer data folder from C:\Users\[User]\AppData\Local\TaskExplorer to C:\Users\[User]\AppData\Local\Xanasoft\TaskExplorer
• Note: the folder will be moved automatically, when downgrading to an older version you would need to move it back manually.

Fixed

• fixed issues with processes started from a voluem without a drive letter
• fixed service delete confirmation prompt was missing
• fixed issue listing net assemblies

Home

Download