Blog Post

Sysinternals Blog
1 MIN READ

AccessChk v6.15, RAMMap v1.61 and Sysmon v13.34

Alex_Mihaiuc's avatar
Alex_Mihaiuc
Icon for Microsoft rankMicrosoft
May 11, 2022

AccessChk v6.15

This update for AccessChk, a tool that shows what kind of accesses specific users or groups have to resources including files, directories, Registry keys, global objects and Windows services, fixes a crash with passing long strings on the command line. Parameters previously limited to MAX_PATH characters have no length restrictions now.
 

RAMMAp v1.61

This update for RAMMap, a utility that analyzes and displays physical memory usage, fixes problems with the processes tab under Windows 11 and improves the UI on scaled displays.
 

Sysmon v13.34

This Sysmon update improves performance for UDP network event tracing (the NetworkConnect global option), solves a rare system hang (blue screen) when monitoring ProcessCreate events and a memory/handle leak on ImageLoad events with several exclude clauses.
 
Published May 11, 2022
Version 1.0

5 Comments

  • LouisSolomons's avatar
    LouisSolomons
    Copper Contributor
    Aug 01, 2025

    Questions for RAMMap developers.

    I have a problem with limiting growth of the Standby List in the following Excel 365 application.

    I am assuming this growth is the problem and not something in another category of memory.

    Expert advice is nothing more can be done within Excel to restrict the RAM impediment.

    Using Google Chrome, information is data-linked to a macro-controlled Workbook updating and running cyclically for 6 hours continuously.

    After using RAMMap before starting, RAM is cleaned out to about 30Mb. After 6 hours this grows to 7 Gb and the cycles slow down progressively by 25% over the 6 hours running time.

    To date it has been found that attempts to use RAMMap again while system is running kills the data link and all that follows.

    Question 1. Is that what is expected?

    Question 2. Is there existing, a way around the problem that does not require stopping the process?

    Question 3. Is it conceivable that future versions might enable clearing the memory problem without breaking the data link?

    Question 4. Is this a matter for RAMMMap or is it more in the realm of Microsoft to fix?

  • hiwakarimi's avatar
    hiwakarimi
    Copper Contributor
    Jun 27, 2022

    Hi Everyone,

     

    I think there is still a bug. Some sysmon logs do not have parent process name.

    Can someone confirm this? Is there a solution to this issue?

     

    Best Regards

    Hiwa Karimi