New Update Windhawk: new version of the modular Windows customizer

silversurfer

Super Moderator
Thread author
Verified
Top Poster
Staff Member
Malware Hunter
Aug 17, 2014
11,775
Homepage: Windhawk
GitHub: GitHub - ramensoftware/windhawk


Windhawk 1.0 Beta is the culmination of about 10 months of user and developer feedback. The new version includes major improvements. Here is the list of the most important changes in the release:
  • Mods include a changelog now, which lists changes made to the individual releases. To access this, select details and switch to the changelog tab.
  • Advanced options are now available for mods; these include options to override target processes, export settings, and use debug logging functionality.
  • Advanced settings are available for all users. These support excluding processes from Windhawk, so that they are never touched by its mods, including processes, to hide the system tray icon, change the logging verbosity or the mod initialization dialog delay.
  • A right-click on the system tray icon displays an option to display all loaded mods.
  • Loading Windhawk's user interface does not require UAC anymore.
Windhawk 1.0 Beta includes several bug fixes. The developer improved compatibility with the Firefox web browser, an incorrect memory free that resulted in the showing of a warning, and that updates would enable disabled mods again.

Additional information about all changes, including those for developers, are found on the official site.
 
Last edited:

silversurfer

Super Moderator
Thread author
Verified
Top Poster
Staff Member
Malware Hunter
Aug 17, 2014
11,775
Windhawk version 1.4 is no longer in beta, gets offline installer and more
Changelog for Windhawk version 1.4

For users

  • After almost two years since the first release, Windhawk is no longer beta.
  • The Windhawk installer now comes in two variants, an online installer and an offline installer. The new online installer is much smaller (around 10 MB instead of around 120 MB), and it downloads the required dependencies only when needed.
  • Added an advanced option to control when mods are loaded for critical system processes.
  • Added an advanced mod option to ignore the original mod inclusion/exclusion lists.
  • Reduced Windhawk network activity (discussion #91).
  • Mod tasks in progress popup no longer stays open for suspended processes (issue #102).
  • Added Brazilian Portuguese, Korean, Polish, Romanian, Russian, Ukrainian translations.
  • Updated existing translations.
For developers
  • Changed Wh_GetBinaryValue, Wh_SetBinaryValue API signatures.
  • Updated the Wh_FindFirstSymbol API to allow enumerating only decorated symbols for better performance.
  • Added Wh_SetFunctionHookT to windhawk_utils.h (issue #85).
  • Added StringSetting to windhawk_utils.h, a RAII wrapper for string settings.
  • Added support for quotes in @compilerOptions.
  • The underscore symbol is now allowed in mod settings identifiers.
  • Added windows.ui.xaml.hosting.desktopwindowxamlsource.h, xamlom.h to the Windhawk compiler.
Bug fixes
  • Fixed symbol loading for 32-bit processes.
  • Fixed forking a local mod.
  • Fixed incorrect folder permissions for installations outside of the Program Files folder. This could cause several mods to fail to load.
  • Fixed compatibility with SentinelOne Antivirus (issue #79).
 

silversurfer

Super Moderator
Thread author
Verified
Top Poster
Staff Member
Malware Hunter
Aug 17, 2014
11,775

Windhawk v1.4.1​

  • Portable version: Fixed some helper apps crashing on startup, which broke functionality such as the start menu search.
  • Portable version: The installer now grants permissive access rights to the engine folder, which are required for some mods.
  • Standard version: Fixed schedule tasks being incorrectly enabled on update.
  • Fixed update notifications showing up when update checking is disabled.
  • Fixed the installer mistakenly showing the "Setup is already running" error message in some cases.
  • Windhawk no longer tries to use git outside of editing mode.
  • Mod development: Restored the default constructor of WindhawkUtils::SYMBOL_HOOK.
  • Mod development: Fixed a compilation error when calling Wh_FindFirstSymbol with NULL as the second parameter.
 

silversurfer

Super Moderator
Thread author
Verified
Top Poster
Staff Member
Malware Hunter
Aug 17, 2014
11,775

Windhawk v1.5​

Changelog for version 1.5​

  • Mods that use debug symbols now try the Windhawk cache server first. As a result, downloading the actual symbol files is skipped most of the time.
  • Improved simultaneous symbol file downloading by multiple processes. If a symbol file is being downloaded, new processes wait for the download to complete instead of initiating a new download of the same symbol file.
  • Removed conhost.exe, dllhost.exe and runtimebroker.exe from the list of critical system processes.
  • Changed %ProgramFiles% in exclude/include paths to always refer to the native (not 32-bit) Program Files folder.
  • Added Dutch, Swedish translations.
  • Fixed compatibility with some Microsoft Office versions, and reduced the chance of similar incompatibilities in the future.
  • Fixed the "Can not delete in empty document" error that could prevent Windhawk from loading on first launch.
  • Fixed a UAC dialog showing up on system startup in rare cases.
  • Fixed debug log not showing logs from packaged apps.
  • Fixed a privilege escalation vulnerability, reported by diversenok.
  • Other minor bug fixes and optimizations.
 

silversurfer

Super Moderator
Thread author
Verified
Top Poster
Staff Member
Malware Hunter
Aug 17, 2014
11,775

Windhawk v1.5.1​

  • Fixed a system crash (BSOD of type REFERENCE BY POINTER) in Windows 10 which could occur under heavy system load.
 

silversurfer

Super Moderator
Thread author
Verified
Top Poster
Staff Member
Malware Hunter
Aug 17, 2014
11,775
Windhawk v1.6
  • ARM64 support. Windhawk can now be installed on ARM64 versions of Windows, and customization of native ARM64 programs is fully supported. Customization of x86 and x64 programs on ARM64 Windows has some limitations, which might be improved in the future. Some mods may need to be adjusted by their authors to work correctly on ARM64 Windows.
  • Updated the default process exclusion rules to exclude known incompatible programs and some well-known games. Additionally, the special handling of pattern inclusion rules for critical system processes is now configurable per mod. For details, please refer to the documentation.
  • When exploring mods, the selected language is now used for the names and descriptions of localized mods. Previously, English was always used on the "Explore" page.
  • The toolkit dialog is no longer shown automatically when a fullscreen program or game is running.
  • The Windhawk UI no longer restarts when advanced settings are changed — only the background processes are.
  • Added the -safe-mode command-line switch.
  • Improved debug symbol iteration speed, especially noticeable with very large symbol files.
  • Improved mod unloading. Windhawk now attempts to wait for mods to finish running before unloading them, which could otherwise cause a crash.
  • Added support for non-ASCII text in debug logs.
  • Fixed an error caused by Windhawk in some cases: "Not enough space for thread data." To apply the fix, install or update at least one mod after the Windhawk update, then restart Windhawk.
  • Fixed an incompatibility error that could occur in some programs when certain mods were used: "The procedure entry point ... could not be located." To apply the fix, reinstall or update all affected mods.
  • Fixed an issue where Windhawk attempted to load winhttp.dll from the current directory, causing incompatibility problems in some cases.
  • Fixed an issue where Windhawk caused console programs to fail to launch in rare Windows configurations.
  • Added the following translations: Croatian, Czech, Danish, Greek, Hungarian, Indonesian, Tamil, and Vietnamese.
  • Other minor bug fixes and improvements.
 

silversurfer

Super Moderator
Thread author
Verified
Top Poster
Staff Member
Malware Hunter
Aug 17, 2014
11,775
Windhawk v1.6.1
  • Fixed context menus in the Windhawk UI causing a blank screen.
  • Improved the error message when loading the Windhawk engine library fails.
  • Updated Portuguese translation.
 

About us

  • MalwareTips is a community-driven platform providing the latest information and resources on malware and cyber threats. Our team of experienced professionals and passionate volunteers work to keep the internet safe and secure. We provide accurate, up-to-date information and strive to build a strong and supportive community dedicated to cybersecurity.

User Menu

Follow us

Follow us on Facebook or Twitter to know first about the latest cybersecurity incidents and malware threats.

Top