Skip to content

Instantly share code, notes, and snippets.

@m417z
m417z / 01.11-24H2_signing_dates.csv
Created October 3, 2024 19:44
Windows 11 version 24H2 ISO file data and signing times https://x.com/sixtyvividtails/status/1841920229355749499
We can't make this file beautiful and searchable because it's too large.
sha256,signingDate,path
f3e8ce1df045f0cc96bd06af8ae57c745d462146e4cc0e1dba5841aae605d352,2011-05-05T07:36:09,Windows\SysWOW64\sqlunirl.dll
b840090cf08c62f90d55ca33311ba57d06d4e614ff0b89e7e3630700d8708bb9,2011-05-05T07:36:10,Windows\SysWOW64\sqlwid.dll
9ce0c38723a273c31c45336042303dbb49e2513829e9dfc3cd195d9ef820e6bc,2011-06-23T12:24:10,Windows\SysWOW64\sqlwoa.dll
f77696ae55b992154a3b35f7660bd73e0ab35a6eceec1931c0d35748cfa605c0,2015-02-02T09:00:37,Windows\System32\drivers\iaLPSSi_GPIO.sys
f77696ae55b992154a3b35f7660bd73e0ab35a6eceec1931c0d35748cfa605c0,2015-02-02T09:00:37,Windows\System32\DriverStore\FileRepository\ialpssi_gpio.inf_amd64_62ffa3c95446bcfc\iaLPSSi_GPIO.sys
c93bf8ff0e515979213c98b9733b7d4a4a5e63ad70ca3bffe6b6c066826fd9c2,2015-12-01T22:30:24,Windows\SystemApps\Microsoft.Windows.SecureAssessmentBrowser_cw5n1h2txyewy\Microsoft.Diagnostics.Tracing.EventSource.dll
c93bf8ff0e515979213c98b9733b7d4a4a5e63ad70ca3bffe6b6c066826fd9c2,2015-12-01T22:30:24,Windows\SystemApps\Microsoft.XboxGameCallableUI_cw5n1h2
@m417z
m417z / process-shutdown-message-box-fix.wh.cpp
Last active May 1, 2025 00:21
⚠️ Note: The workaround is no longer needed for Windhawk v1.6 and newer. A mod that implements a workaround for Windhawk for https://github.com/mstorsjo/llvm-mingw/issues/459
// ==WindhawkMod==
// @id process-shutdown-message-box-fix
// @name Process shutdown message box fix
// @description Fixes message box and beep sound on process shutdown, e.g. when launching folders via an explorer shortcut
// @version 0.3
// @author m417z
// @github https://github.com/m417z
// @twitter https://twitter.com/m417z
// @homepage https://m417z.com/
// @include *
// ==WindhawkMod==
// @id disable-topmost-2-hang-fix
// @name Win10 taskbar disable_topmost=2 hang fix
// @description An attempt at fixing a taskbar hang when using disable_topmost=2
// @version 0.1
// @author m417z
// @github https://github.com/m417z
// @twitter https://twitter.com/m417z
// @homepage https://m417z.com/
// @include explorer.exe
@m417z
m417z / aerexplorer-fork.wh.cpp
Created August 1, 2024 15:16
Updated to be compatible with Windhawk 1.5
// ==WindhawkMod==
// @id aerexplorer-fork
// @name Aerexplorer - Fork
// @description Various tweaks for Windows Explorer to make it more like older versions.
// @version 1.6.2
// @author aubymori
// @github https://github.com/aubymori
// @include *
// @compilerOptions -lgdi32 -lcomctl32 -lole32 -loleaut32 -luxtheme -ldwmapi
// ==/WindhawkMod==
@m417z
m417z / WhSignalDrv.c
Created July 27, 2024 17:50 — forked from valinet/WhSignalDrv.c
Exmple of DLL and driver that signal Windhawk to scan for new processes
// Example of a driver that helps Windhawk
// inject processes created by inaccessible processes early on
// ==========================================================================
// Valentin-Gabriel Radu, [email protected]
//
// Upstream issue:
// https://github.com/ramensoftware/windhawk/issues/197
//
#include <ntifs.h>
#define INVALID_HANDLE_VALUE ((HANDLE)(LONG_PTR)-1)
// ==WindhawkMod==
// @id icon-resource-redirect-loadimagea-test
// @name Resource Redirect
// @description Define alternative files for loading various resources (e.g. instead of icons in imageres.dll) for simple theming without having to modify system files
// @version 1.1.2
// @author m417z
// @github https://github.com/m417z
// @twitter https://twitter.com/m417z
// @homepage https://m417z.com/
// @include *
// ==WindhawkMod==
// @id all-resource-redirect-experimental
// @name All Resource Redirect - Experimental
// @description Define alternative files for loading resources (e.g. instead of imageres.dll) for simple theming without having to modify system files
// @version 1.0
// @author m417z
// @github https://github.com/m417z
// @twitter https://twitter.com/m417z
// @homepage https://m417z.com/
// @include *
@m417z
m417z / early-create-remote-thread-test.wh.cpp
Last active February 12, 2024 20:03
Windhawk mod: A test of CreateRemoteThread called right after NtCreateUserProcess
// ==WindhawkMod==
// @id early-create-remote-thread-test
// @name Early CreateRemoteThread test
// @description A test of CreateRemoteThread called right after NtCreateUserProcess
// @version 0.1
// @author m417z
// @github https://github.com/m417z
// @twitter https://twitter.com/m417z
// @homepage https://m417z.com/
// @include cmd.exe
@m417z
m417z / StartResources.xbf
Created December 19, 2023 18:47
Start menu-related XAML resources extracted from C:\Windows\SystemApps\MicrosoftWindows.Client.Core_cw5n1h2txyewy\resources.pri, Windows 11 version 22H2 (OS Build 22621.2861)
<ResourceDictionary
xmlns="http://schemas.microsoft.com/winfx/2006/xaml/presentation"
xmlns:x="http://schemas.microsoft.com/winfx/2006/xaml"
xmlns:d="http://schemas.microsoft.com/expression/blend/2008"
xmlns:mc="http://schemas.openxmlformats.org/markup-compatibility/2006"
xmlns:StartMenu="using:StartMenu"
xmlns:muxc="using:Microsoft.UI.Xaml.Controls"
x:Class="StartMenu.StartResources">
<ResourceDictionary.ThemeDictionaries>
<ResourceDictionary x:Key="Light">
// ==WindhawkMod==
// @id explorer-features-test
// @name Explorer features test
// @description Enjoy experimenting
// @version 0.1
// @author m417z
// @github https://github.com/m417z
// @twitter https://twitter.com/m417z
// @homepage https://m417z.com/
// @include explorer.exe