Task Explorer-x64 -
backdoor (linked to the SolarWinds supply chain attack), has been known to check for "Task Explorer-x64" as part of a blacklist. If the malware detects this or other forensic tools running, it may cease operations to avoid being analyzed by security researchers. False Positives:
Unlike the standard Windows tool, Task Explorer focuses on with high-frequency updates and deep-level integration with system handles, DLLs, and threads. Key Features of the x64 Version 1. Advanced Process Inspection Task Explorer-x64
While Task Explorer is a legitimate utility, its presence or name can be significant in security investigations: Analysis Detection: Sophisticated malware, such as the backdoor (linked to the SolarWinds supply chain attack),
A "handle" is a reference to an object (file, registry key, mutex, event, or process). Task Explorer-x64 allows you to view every handle owned by a process. You can: Key Features of the x64 Version 1