Autoruns v13.93, Handle v4.21, Process Explorer v16.22, SDelete v2.02, Sigcheck v2.71, Sysmon v8.02 and VMMap v3.25

Published Jun 27 2019 12:21 PM 1,521 Views
Microsoft
First published on TechNet on Dec 09, 2018
Autoruns 13.93
This Autoruns update fixes a bug that prevented UserInitMprLogonScript from being scanned and by-default enables HCKU scanning for the console version.

Handle 4.21
This Handle release fixes a race condition that could cause a bluescreen.

ProcessExplorer 16.22
This Process Explorer release fixes a race condition that could cause a bluescreen.

Sdelete 2.02
SDelete now includes a progress filter that reports progress for the disk cleaning phase that purges MFT resident files.

Sigcheck 2.71
This release fixes a crash when attempting to scan small files (< 512 bytes) and resolves issue with incorrect timestamp being reported.

Sysmon 8.2
This Sysmon release fixes several filtering bugs, resolves a handle leak and high CPU usage for certain filters when on Windows 7 and Windows Server 2008, and fixes a bug that could cause the service process to crash.

VMMap 3.25
This VMMap update fixes a bug that prevented profiling a 32-bit application on a 64-bit OS.
1 Comment
Visitor

@MarkRussinovich This is the last blog entry on Process Explorer. It is over two years old. The last release of Process Explorer is a full ten point releases later (16.32 vs 16.22) and dates from 2020-09-11 (according to the ZIP file). What was new? Why is this release notes blog not updating at all? COVID-19? 

%3CLINGO-SUB%20id%3D%22lingo-sub-726094%22%20slang%3D%22en-US%22%3EAutoruns%20v13.93%2C%20Handle%20v4.21%2C%20Process%20Explorer%20v16.22%2C%20SDelete%20v2.02%2C%20Sigcheck%20v2.71%2C%20Sysmon%20v8.02%20and%20VMMap%20v3.25%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-726094%22%20slang%3D%22en-US%22%3E%0A%20%26lt%3Bmeta%20http-equiv%3D%22Content-Type%22%20content%3D%22text%2Fhtml%3B%20charset%3DUTF-8%22%20%2F%26gt%3B%3CSTRONG%3EFirst%20published%20on%20TechNet%20on%20Dec%2009%2C%202018%20%3C%2FSTRONG%3E%20%3CBR%20%2F%3E%20%3CA%20href%3D%22https%3A%2F%2Fdocs.microsoft.com%2Fen-us%2Fsysinternals%2Fdownloads%2Fautoruns%22%20target%3D%22_blank%22%20rel%3D%22noopener%20noreferrer%22%3E%20Autoruns%2013.93%20%3C%2FA%3E%20%3CBR%20%2F%3E%20This%20Autoruns%20update%20fixes%20a%20bug%20that%20prevented%20UserInitMprLogonScript%20from%20being%20scanned%20and%20by-default%20enables%20HCKU%20scanning%20for%20the%20console%20version.%20%3CBR%20%2F%3E%20%3CBR%20%2F%3E%20%3CA%20href%3D%22https%3A%2F%2Fdocs.microsoft.com%2Fen-us%2Fsysinternals%2Fdownloads%2Fhandle%22%20target%3D%22_blank%22%20rel%3D%22noopener%20noreferrer%22%3EHandle%204.21%20%3C%2FA%3E%20%3CBR%20%2F%3E%20This%20Handle%20release%20fixes%20a%20race%20condition%20that%20could%20cause%20a%20bluescreen.%20%3CBR%20%2F%3E%20%3CBR%20%2F%3E%20%3CA%20href%3D%22https%3A%2F%2Fdocs.microsoft.com%2Fen-us%2Fsysinternals%2Fdownloads%2Fprocess-explorer%22%20target%3D%22_blank%22%20rel%3D%22noopener%20noreferrer%22%3EProcessExplorer%2016.22%20%3C%2FA%3E%20%3CBR%20%2F%3E%20This%20Process%20Explorer%20release%20fixes%20a%20race%20condition%20that%20could%20cause%20a%20bluescreen.%20%3CBR%20%2F%3E%20%3CBR%20%2F%3E%20%3CA%20href%3D%22https%3A%2F%2Fdocs.microsoft.com%2Fen-us%2Fsysinternals%2Fdownloads%2Fsdelete%22%20target%3D%22_blank%22%20rel%3D%22noopener%20noreferrer%22%3ESdelete%202.02%20%3C%2FA%3E%20%3CBR%20%2F%3E%20SDelete%20now%20includes%20a%20progress%20filter%20that%20reports%20progress%20for%20the%20disk%20cleaning%20phase%20that%20purges%20MFT%20resident%20files.%20%3CBR%20%2F%3E%20%3CBR%20%2F%3E%20%3CA%20href%3D%22https%3A%2F%2Fdocs.microsoft.com%2Fen-us%2Fsysinternals%2Fdownloads%2Fsigcheck%22%20target%3D%22_blank%22%20rel%3D%22noopener%20noreferrer%22%3ESigcheck%202.71%20%3C%2FA%3E%20%3CBR%20%2F%3E%20This%20release%20fixes%20a%20crash%20when%20attempting%20to%20scan%20small%20files%20(%26lt%3B%20512%20bytes)%20and%20resolves%20issue%20with%20incorrect%20timestamp%20being%20reported.%20%3CBR%20%2F%3E%20%3CBR%20%2F%3E%20%3CA%20href%3D%22https%3A%2F%2Fdocs.microsoft.com%2Fen-us%2Fsysinternals%2Fdownloads%2Fsysmon%22%20target%3D%22_blank%22%20rel%3D%22noopener%20noreferrer%22%3ESysmon%208.2%20%3C%2FA%3E%20%3CBR%20%2F%3E%20This%20Sysmon%20release%20fixes%20several%20filtering%20bugs%2C%20resolves%20a%20handle%20leak%20and%20high%20CPU%20usage%20for%20certain%20filters%20when%20on%20Windows%207%20and%20Windows%20Server%202008%2C%20and%20fixes%20a%20bug%20that%20could%20cause%20the%20service%20process%20to%20crash.%20%3CBR%20%2F%3E%20%3CBR%20%2F%3E%20%3CA%20href%3D%22https%3A%2F%2Fdocs.microsoft.com%2Fen-us%2Fsysinternals%2Fdownloads%2Fvmmap%22%20target%3D%22_blank%22%20rel%3D%22noopener%20noreferrer%22%3EVMMap%203.25%20%3C%2FA%3E%20%3CBR%20%2F%3E%20This%20VMMap%20update%20fixes%20a%20bug%20that%20prevented%20profiling%20a%2032-bit%20application%20on%20a%2064-bit%20OS.%3C%2FLINGO-BODY%3E%3CLINGO-TEASER%20id%3D%22lingo-teaser-726094%22%20slang%3D%22en-US%22%3EFirst%20published%20on%20TechNet%20on%20Dec%2009%2C%202018%20Autoruns%2013.%3C%2FLINGO-TEASER%3E%3CLINGO-LABS%20id%3D%22lingo-labs-726094%22%20slang%3D%22en-US%22%3E%3CLINGO-LABEL%3Eautoruns%3C%2FLINGO-LABEL%3E%3CLINGO-LABEL%3Ehandle%3C%2FLINGO-LABEL%3E%3CLINGO-LABEL%3Eprocess%20explorer%3C%2FLINGO-LABEL%3E%3CLINGO-LABEL%3Esigcheck%3C%2FLINGO-LABEL%3E%3CLINGO-LABEL%3Esysmon%3C%2FLINGO-LABEL%3E%3CLINGO-LABEL%3Evmmap%3C%2FLINGO-LABEL%3E%3C%2FLINGO-LABS%3E%3CLINGO-SUB%20id%3D%22lingo-sub-2211365%22%20slang%3D%22en-US%22%3ERe%3A%20Autoruns%20v13.93%2C%20Handle%20v4.21%2C%20Process%20Explorer%20v16.22%2C%20SDelete%20v2.02%2C%20Sigcheck%20v2.71%2C%20Sysmon%20v8%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-2211365%22%20slang%3D%22en-US%22%3E%3CP%3E%3CA%20href%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fuser%2Fviewprofilepage%2Fuser-id%2F365340%22%20target%3D%22_blank%22%3E%40MarkRussinovich%3C%2FA%3E%26nbsp%3BThis%20is%20the%20last%20blog%20entry%20on%20Process%20Explorer.%20It%20is%20over%20two%20years%20old.%20The%20last%20release%20of%20Process%20Explorer%20is%20a%20full%20ten%20point%20releases%20later%20(16.32%20vs%2016.22)%20and%20dates%20from%202020-09-11%20(according%20to%20the%20ZIP%20file).%20What%20was%20new%3F%20Why%20is%20this%20release%20notes%20blog%20not%20updating%20at%20all%3F%20COVID-19%3F%26nbsp%3B%3C%2FP%3E%3C%2FLINGO-BODY%3E
Version history
Last update:
‎Jun 27 2019 12:21 PM
Updated by: