3.2.25011.2103

What's Changed

• New Name, Icons, UI by @winsiderss
• New ARM64 support by @jxy-s
• New kernel driver by @jxy-s
• New Dark Theme support [Experimental] by @dmex
• Add highlighting for Pico processes (Windows subsystem for linux) by @dmex in #57
• [peview] Add PE entrypoint address by @dmex in #33
• [peview] CFG property page for PE Viewer by @lucasg in #101
• [peview] New PE Viewer UI by @dmex in #102
• Use separate columns for network IP address and hostname by @dmex in #104
• [peview] Add loadconfig most recent members by @lucasg in #123
• Show CFG Bitmap regions in process memory view by @lucasg in #124
• [peview] List exports by ordinal as well as by name by @lucasg in #125
• Add CFG Bitmap support for wow64 processes by @lucasg in #134
• Add description for strict CFG and AuditNonSystemFont by @lucasg in #140
• Add undecorate C++ support by @lucasg in #139
• Add module filter options, Add modules tab search support by @dmex in #143
• Add memory tab search support by @dmex in #144
• Add shortcut keys by @Efreak in #151
• Show restricting SIDs when displaying the access token property page. by @kobykahane in #167
• Free token restricted SIDs when destroying the token property page. by @kobykahane in #169
• Improve security dialog AppContainer SID<>Name mappings by @dmex in https://github.com/winsiderss/systeminf
• Tagging Apiset memory page by @lucasg in #210
• Sort advanced options by name by @ge0rdi in #213
• Add aggregation support to more performance counters by @ge0rdi in #212
• Alternative dbghelp.dll support by @ge0rdi in #214
• [peview] Linux ELF image support for PE Viewer by @dmex in #220
• Add "Protection" column to process tree by @ge0rdi in #221
• Improve behavior of "Protection" column in process tree by @ge0rdi in #222
• Processes GF Guard column improvements by @ge0rdi in #224
• Get proper information for kernel modules by @ge0rdi in #226
• Lost check for abandoned mutexes by @diversenok in #238
• Handling atypical integrity levels by @diversenok in #249
• Fix bringing to front minimized window by @mrfeod in #250
• New properties page for file handles by @diversenok in #258
• UIAccess field in advanced token properties by @diversenok in #267
• ExtendedTools: Improve GPU details by @dmex in #270
• Improving the appearance of groups for tokens. by @diversenok in #310
• Highlight modified privileges and groups by @diversenok in #311
• Improve search of memory regions by @diversenok in #328
• Show dangerous flags for tokens by @diversenok in #338
• CET Retpoline support by @TheEragon in #343
• Add Image Machine for ARM64 and Hybrid PE by @fcharlie in #353
• Correct token mandatory label interpretation by @diversenok in #371
• Fix user-related environments by @diversenok in #372
• Fix "NaN" in network adapter utilisation by @gvanem in #392
• Use HTTPS for Microsoft Symbol server URL by @xiaoyinl in #399
• Optimize SID translation by @diversenok in #401
• Don't prepend "Computer" when open key by @xiaoyinl in #402
• RunFileDialog showing 'Run as Administrator' configurable by @RoccoMatano in #440
• Improve enumeration of processes in a job by @diversenok in #489
• Detect terminated threads correctly by @diversenok in #488
• Create CODE_OF_CONDUCT.md by @m-scha1337 in #517
• ToolStatus: Added auto focus search box on launch by @php940 in #533
• Add basic support for ARM64 by @Biswa96 in #574
• Improve string formatting performance by @dmex in #607
• Add ARM64 platform for plugins by @Biswa96 in #610
• ARM64 CPU info improvements by @ge0rdi in #632
• Enable deployment for project configurations by @ge0rdi in #636
• Add support for Shadow Stack (CET) related change by @TheEragon in #666
• Remove unnecessary defines by @TheEragon in #667
• Support for XFG by @TheEragon in #669
• Add Image Coherency by @jxy-s in #751
• KPH hardening, protected domination check and caller verification by @jxy-s in #767
• KPH enforce maximum security level always by @jxy-s in #768
• KPH add linker integrity and kernel compiler option by @jxy-s in #769
• Improve image coherency configuration by @jxy-s in #783
• Improve dbghelp.dll finding on ARM64 by @Mattiwatti in #790
• Implement GPU Performance Graphs by @jxy-s in #815
• Improve name generation for process and thread handles by @diversenok in #816
• Add a column that indicates thread impersonation by @diversenok in #817
• [peview] Add SSDEEP and TLSH to peview sections tab by @jxy-s in https://github.com/winsiderss/systeminformer/pull/
• [peview] Fix and add image relocation symbols by @jxy-s in #854
• Add support for kernel CET by @TheEragon in #903
• Don't append the start type for disabled in services list by @yfdyh000 in #918
• Add architecture to process tree by @jxy-s in #972
• ARMv7 process detection by @Biswa96 in #985
• XFG support for Process tree and Mitigation Policies by @TheEragon in #1059
• Add support for selecting process's subtree by middle clicking it by @TheEragon in #1066
• ToolStatus theme updates by @TheEragon in #1073
• Improve process heaps counters by @ge0rdi in #1076
• Recognize all heap regions in process memory tab by @ge0rdi in #1077
• Enable middle clicking on process tree in sorted mode by @TheEragon in #1080
• Fix selecting processes by middle click if they are not sorted by name by @TheEragon in #1084
• [peview] Add Windows 11 load config by @TheEragon in #1096
• Show token security attributes in hex by @diversenok in #1173
• Recognize more well-known memory regions by @diversenok in #1221
• Fix compilation against Windows 10 SDK by @PJB3005 in #1238
• Show window dpi context by @henrypp in #1235
• Add support for Audit XFG mode by @TheEragon in #1243
• And many other changes... +5,000 commits, 2,045 changed files and 2,019,682 additions: v2.39...v3.2.25011.2103

2.39

• HIGHLIGHTS:
  • Improved compatibility with security and anti-cheat software
  • Added ability to edit process environment variables
  • Fixed .NET process detection
• OTHER CHANGES:
  • Improved tooltip information for dllhost.exe
  • Removed Terminator
  • Updated DotNetTools plugin:
    • Fixed .NET assembly tab performance issues
    • Added extra .NET memory counters to the .NET performance tab
    • Added "Show sizes in bytes" checkbox to the .NET performance tab
    • Added right-click menu to the .NET assembly tab
  • Updated ExtendedTools plugin:
    • Fixed "No process" disk event bug
  • Updated HardwareDevices plugin:
    • Fixed incorrect drive letters
    • Fixed drive letter and panel clipping issue

2.38

• HIGHLIGHTS:
  • Added labels to indicate the maximum data point in each I/O graph
  • Graph grids now scale correctly when resized
  • Improved high DPI scaling
  • Added exploit mitigation policy information to process properties (Windows 8 and above)
  • Added File modified time and File size columns for processes and modules
  • Added Key modified time column for services
  • Clicking a tray icon now shows the pop-up UI (useful for touch-enabled devices)
  • The NetAdapters plugin has been renamed to HardwareDevices
    • This plugin shows network adapter and disk drive graphs
    • If you are manually upgrading, please delete NetAdapters.dll from the plugins folder
  • Updated UserNotes plugin:
    • Added "Collapse by default" option for processes
• OTHER CHANGES:
  • Added "Start when I log on" option
  • Added "Not responding" text to tray icon rich pop-up for programs that are hung
  • Added right-click menu and double-click action for environment variables
  • Added dialog box to show long command line strings
  • Added Time stamp column for processes
  • Added -sysinfo command line parameter for opening System Information at startup
  • Added 32x32 icons for high DPI displays
  • Digital signature verification is now performed with very low I/O priority
  • Improved performance when handling a large number of threads, modules or handles
  • The pop-up UI no longer displays when double-clicking the tray icon
  • Fixed ASLR state being shown as N/A in process properties
  • Fixed multi monitor window placement bug
  • Fixed handle enumeration bug affecting processes with PID >= 65536
  • Fixed Interrupts being missing from the max CPU usage history
  • Updated ToolStatus plugin:
    • Added 32x32 icons for high DPI displays
    • Fixed status bar crash
• NOTE:
  • This release has significant internal code changes. Please make sure all plugins are up-to-date.

2.37

• HIGHLIGHTS:
  • Updated for Windows 10
  • The "Include CPU (and other) usage of children in collapsed processes" option now aggregates memory and I/O statistics
  • Added regex search to "Find Handles or DLLs"
  • Added process exit codes to log
  • Fixed crash that occurred under some conditions when processes terminated
• OTHER CHANGES:
  • Added warning when trying to search for handles when the system has too many handles open
  • Upgraded to PCRE2
  • Updated DotNetTools plugin:
    • Rewrite of .NET Performance statistics and AppDomain enumeration
  • Updated OnlineChecks plugin:
    • Fixed virusscan.jotti.org uploader
  • Updated NetAdapters plugin:
    • Added adapter details window
  • Updated ToolStatus plugin:
    • Added CPU, Memory and I/O graphs to the toolbar (not enabled by default)
    • Added toolbar and status bar customization, as well as a new theme
    • Added option to auto-hide the main menu
  • Updated UserNotes plugin:
    • Added individual process highlighting support

2.36

• HIGHLIGHTS:
  • New rich pop-up UI when hovering the cursor over a tray icon, showing the most active processes
  • Completely new Memory tab for processes, with heap, stack and working set usage
  • Process Hacker now takes 32-bit dumps of 32-bit processes on 64-bit Windows
    • NOTE: When using the portable (.zip) release, the entire archive must be extracted
  • Updated DotNetTools plugin:
    • Process Hacker now displays managed stack traces for 32-bit .NET processes on 64-bit Windows
    • Fixed inaccurate stack traces when clicking Refresh
    • Added AppDomain column for threads in .NET programs
• OTHER CHANGES:
  • Added customizable bytes per row setting for memory editor
  • Dramatically faster handle listing and search when running without administrative privileges
  • Improved accuracy and speed of symbol resolution, especially when new modules are loaded
  • Added trigger and delayed start information to service list
  • Added file information to service list tooltips
  • Balloon tips for process/service notifications are now clickable
  • Added handle names for unnamed File objects
  • Added I/O Priority to tray icon process menu
  • Added warning for users who attempt to start the 32-bit version on 64-bit Windows
  • Updated ExtendedServices plugin:
    • Added service protection and SID information
    • Added auto-elevation when saving recovery information, triggers and other service settings
  • Updated ExtendedTools plugin:
    • Added tray icon mini info window support
    • Improved automatic GPU node selection
  • Updated UserNotes plugin:
    • Added tray icon mini info window support
  • Fixed a bug in phsvc that caused hangs when automatically elevating actions
  • Fixed hang when viewing handle security for certain File objects
  • Fixed lack of information on startup when using slower refresh intervals
  • Fixed Read/Write Address crash
  • Fixed service non-polling mode on Windows 8 and above
  • Fixed file dialog crash in Windows PE environments
  • Fixed string scanning false positive case
  • Fixed process window detection for Modern UI apps
  • Fixed handle list selection bug when disabling "Hide unnamed handles"
• NOTE:
  • This release has significant internal code changes. Please make sure all plugins are up-to-date.