Blog Post

Sysinternals Blog

1 MIN READ

Process Explorer v17.02 and Sysmon v14.12

Icon for Microsoft rank

Microsoft

Nov 10, 2022

Process Explorer v17.02

This update to Process Explorer fixes two bugs that can lead to crashes and another that leads to an unexpected dialog in an error case.

This update to Sysmon fixes a bug related to volumes without file system security.

Updated Dec 13, 2022

Version 4.0

Icon for Microsoft rank

Microsoft

Joined August 30, 2020

Sysinternals Blog

Follow this blog board to get notified when there's new activity

2 Comments

AaronMargosis_Tanium
Iron Contributor
Mar 02, 2023
I just heard about this from an issue raised by a colleague of mine today. I had heard that Sentinel One was unhappy about that driver, but according to VirusTotal nobody currently considers it malicious:

VirusTotal - File - b0817483aa4af9cdb4aeb6967ef0317b98660b86135bb0021e69313684c4ad46
ScotHarkins
Copper Contributor
Mar 01, 2023
Process Explorer v17.02 is being tagged by XDR tools for vulnerable drivers "procexp.sys" and "procexp152.sys". There is an MS Learn Q&A thread running for this question, titled "https://learn.microsoft.com/en-us/answers/questions/989267/process-explorer-procexp152-sys-driver-flagged-as?page=1&orderby=helpful&comment=answer-1160944#answers". Has this been picked up for review?

Thanks!