🛡️ Windows Task Manager Process Hider & Win32 GUI Test Suite (C)

A lightweight, high-performance user-mode process hider written entirely in C for Windows Task Manager (Taskmgr.exe). It features an interactive Win32 GUI Controller for testing and dynamic target selection.

---

🌟 Key Features

• NtQuerySystemInformation User-Mode API Hooking: Intercepts SystemProcessInformation (0x05) system calls inside Taskmgr.exe using MinHook.
• Dynamic Inter-Process Memory (IPC): Real-time filtering configuration updates via Win32 Shared Memory (TaskmgrHiderSharedMemory). No re-injection required when changing targets.
• Win32 GUI Controller:
  • Auto-detects running Taskmgr.exe instances and displays injection status.
  • One-click Launch Taskmgr, Inject Hook DLL, and Eject Hook DLL controls.
  • Process Picker: Live system process list with search filtering. Clicking any running process populates its PID and process name.
  • Filter modes: Hide by Image Name (e.g. SecretTargetProcess.exe, notepad.exe) or Hide by PID.
  • Event log console tracking injection & unhooking activity.
• Standalone Test Target: Includes SecretTargetProcess.exe dummy target for immediate testing.

---

🏗️ Repository Structure

.
├── gui_main.c               # Win32 GUI Controller Application source
├── injector.c / injector.h  # Remote Thread Injection & Ejection engine
├── hook_dll.c               # Task Manager NtQuerySystemInformation Hook DLL
├── shared.h                 # Inter-process shared memory structure & definitions
├── test_dummy.c             # SecretTargetProcess dummy test application
├── build.bat                # Automated compilation script (64-bit MinGW GCC)
├── ProcessHiderGUI.exe      # Prebuilt GUI executable
├── hook_dll.dll             # Prebuilt Hook DLL
└── SecretTargetProcess.exe # Prebuilt Dummy Target executable

---

🛠️ Building from Source

Requires 64-bit MinGW GCC (matches 64-bit Taskmgr.exe architecture).

To compile all binaries:

build.bat

---

🚀 Usage & Testing Instructions

1. Launch Test Target:

   SecretTargetProcess.exe

2. Launch GUI Controller:

   ProcessHiderGUI.exe

3. Inject & Test:
   • Click Launch Taskmgr inside the GUI controller.
   • Click Inject Hook DLL.
   • Select SecretTargetProcess.exe from the Active System Processes list (or enter any process name / PID).
   • Click Apply Configuration.
   • Inspect Task Manager — SecretTargetProcess.exe will be hidden from the active process list!