Blog Post

Sysinternals Blog
1 MIN READ

Procmon v3.70, Sysmon v13.10, Autoruns v13.99, TCPView v4.01 and WinObj v3.03

Alex_Mihaiuc's avatar
Alex_Mihaiuc
Icon for Microsoft rankMicrosoft
Apr 21, 2021
Procmon v3.70 This update to Process Monitor allows constraining the number of events based on a requested number minutes and/or size of the events data, so that older events are dropped if neces...
Published Apr 21, 2021
Version 1.0
Алексей Долматов's avatar
Алексей Долматов
Copper Contributor
Apr 21, 2021

Note: before updating Autoruns v13.99, carefully check the operation of the program.

In Windows 10 20H2 (Russian localization) with up-to-date updates, crashes of the program were noticed right away when scanning in 64-bit, as well as incorrect data for receiving data about publisher (microsoft) for some objects in both bits.

Spoiler
Имя сбойного приложения: Autoruns64.exe, версия: 13.99.0.0, метка времени: 0x607c5a46
Имя сбойного модуля: Autoruns64.exe, версия: 13.99.0.0, метка времени: 0x607c5a46
Код исключения: 0xc0000005
Смещение ошибки: 0x000000000006cd15
Идентификатор сбойного процесса: 0xda0
Время запуска сбойного приложения: 0x01d736f22a6a924b
Путь сбойного приложения: C:\Users\Dolma\Downloads\Autoruns64.exe
Путь сбойного модуля: C:\Users\Dolma\Downloads\Autoruns64.exe
Идентификатор отчета: 68e81b15-e577-4cb1-86c2-1924064c08f0
Полное имя сбойного пакета:
Код приложения, связанного со сбойным пакетом:

I know that the code 0xc0000005 often means a problem outside a program. Sometimes in a program. In this case, multiple users reported the error.