Procmon v3.70, Sysmon v13.10, Autoruns v13.99, TCPView v4.01 and WinObj v3.03

Published 04-21-2021 09:09 AM 8,432 Views
Microsoft

Procmon v3.70

This update to Process Monitor allows constraining the number of events based on a requested number minutes and/or size of the events data, so that older events are dropped if necessary. It also fixes a bug where the Drop Filtered Events option wasn’t always respected and contains other minor bug fixes and improvements.
 

Sysmon v13.10

This update to Sysmon adds a FileDeleteDetected rule that logs when files are deleted but doesn't archive, deletes clipboard archive if event is excluded and fixes an ImageLoad event bug.
 

Autoruns v13.99

This update to Autoruns fixes a bug that resulted in some empty locations being hidden when the Include Empty Locations option is selected.
 

TCPView v4.01

This update to TCPView refines Quick search to look in IP addresses and ports.
 

Theme Engine

This update to the theme engine uses a custom title bar in dark mode, similar to MS Office black theme. WinObj and TcpView have been updated. Expect more tools using the theme engine in the near future!
 
6 Comments

Note: before updating Autoruns v13.99, carefully check the operation of the program.

In Windows 10 20H2 (Russian localization) with up-to-date updates, crashes of the program were noticed right away when scanning in 64-bit, as well as incorrect data for receiving data about publisher (microsoft) for some objects in both bits.

Spoiler
Имя сбойного приложения: Autoruns64.exe, версия: 13.99.0.0, метка времени: 0x607c5a46
Имя сбойного модуля: Autoruns64.exe, версия: 13.99.0.0, метка времени: 0x607c5a46
Код исключения: 0xc0000005
Смещение ошибки: 0x000000000006cd15
Идентификатор сбойного процесса: 0xda0
Время запуска сбойного приложения: 0x01d736f22a6a924b
Путь сбойного приложения: C:\Users\Dolma\Downloads\Autoruns64.exe
Путь сбойного модуля: C:\Users\Dolma\Downloads\Autoruns64.exe
Идентификатор отчета: 68e81b15-e577-4cb1-86c2-1924064c08f0
Полное имя сбойного пакета:
Код приложения, связанного со сбойным пакетом:

I know that the code 0xc0000005 often means a problem outside a program. Sometimes in a program. In this case, multiple users reported the error.

Visitor

Same experience as above.

 

Autoruns64 13.99 crashes on launch Windows 10 20H2

 

Faulting application name: Autoruns64.exe, version: 13.99.0.0, time stamp: 0x607c5a46
Faulting module name: Autoruns64.exe, version: 13.99.0.0, time stamp: 0x607c5a46
Exception code: 0xc0000005
Fault offset: 0x000000000006cd15
Faulting process ID: 0x1fe0
Faulting application start time: 0x01d736f88a7e2447
Faulting application path: C:\Windows\Autoruns64.exe
Faulting module path: C:\Windows\Autoruns64.exe
Report ID: 01ca51c3-fcfa-4ebc-a8cf-5383a3c6ebb4
Faulting package full name:
Faulting package-relative application ID:

Valued Contributor

Thank you for these cool updates from sysinternals.

May I request update the Blue Screen (sysinternals) screen server too?

It is still showing styles for Windows 7 and Windows XP and I believe user need to select style to be like Windows 10 too.

 

Visitor

Autoruns64 13.99 crashes on launch Windows 10 20H2 for me too.  Autoruns works fine.  Please look into this.

Senior Member

Windows 10 21H1. Autoruns 13.99 crashes on startup, with the name of the faulty module CRYPT32.dll, unlike Autoruns64.

 

Faulting application name: Autoruns.exe, version: 13.99.0.0, time stamp: 0x607c5aa9
Faulting module name: CRYPT32.dll, version: 10.0.19041.844, time stamp: 0xa04ed391
Exception code: 0xc0000005
Fault offset: 0x0001f092
Faulting process ID: 0x172c
Faulting application start time: 0x01d73813100823b8
Faulting application path: Z:\Zagruzki\Autoruns\Autoruns.exe
Faulting module path: C:\WINDOWS\System32\CRYPT32.dll
Report ID: 109122c7-f54f-4232-bd00-4d6ecce1abc4\
Faulting package full name:
Faulting package-relative application ID:

MVP

Procmon64 v3.70 crashes on launch Windows 10 21H1

 

错误应用程序名称: Procmon64.exe,版本: 3.70.0.0,时间戳: 0x608049ce
错误模块名称: Procmon64.exe,版本: 3.70.0.0,时间戳: 0x608049ce
异常代码: 0xc0000409
错误偏移量: 0x0000000000091761
错误进程 ID: 0x4944
错误应用程序启动时间: 0x01d7431de345df5e
错误应用程序路径: C:\Users\fansu\SysinternalsSuite\Procmon64.exe
错误模块路径: C:\Users\fansu\SysinternalsSuite\Procmon64.exe
报告 ID: 6381c63b-5007-4249-b954-1bdb93208ca7
错误程序包全名:
错误程序包相对应用程序 ID:

 
%3CLINGO-SUB%20id%3D%22lingo-sub-2280263%22%20slang%3D%22en-US%22%3EProcmon%20v3.70%2C%20Sysmon%20v13.10%2C%20Autoruns%20v13.99%2C%20TCPView%20v4.01%20and%20WinObj%20v3.03%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-2280263%22%20slang%3D%22en-US%22%3E%3CDIV%3E%0A%3CP%3E%3CA%20href%3D%22https%3A%2F%2Fdocs.microsoft.com%2Fen-us%2Fsysinternals%2Fdownloads%2Fprocmon%22%20target%3D%22_self%22%20rel%3D%22noopener%20noreferrer%22%3E%3CSPAN%3EProcmon%20v3.70%3C%2FSPAN%3E%3C%2FA%3E%3C%2FP%3E%0A%3CDIV%3E%3CSPAN%3EThis%20update%20to%20Process%20Monitor%20allows%20constraining%20the%20number%20of%20events%20based%20on%20a%20requested%20number%20minutes%20and%2For%20size%20of%20the%20events%20data%2C%20so%20that%20older%20events%20are%20dropped%20if%20necessary.%20It%20also%20fixes%20a%20bug%20where%20the%20Drop%20Filtered%20Events%20option%20wasn%E2%80%99t%20always%20respected%20and%20contains%20other%20minor%20bug%20fixes%20and%20improvements.%3C%2FSPAN%3E%3C%2FDIV%3E%0A%3CDIV%3E%26nbsp%3B%3C%2FDIV%3E%0A%3CP%3E%3CA%20href%3D%22https%3A%2F%2Fdocs.microsoft.com%2Fen-us%2Fsysinternals%2Fdownloads%2Fsysmon%22%20target%3D%22_self%22%20rel%3D%22noopener%20noreferrer%22%3E%3CSPAN%3ESysmon%20v13.10%3C%2FSPAN%3E%3C%2FA%3E%3C%2FP%3E%0A%3CDIV%3E%3CSPAN%3EThis%20update%20to%20Sysmon%20adds%20a%20FileDeleteDetected%20rule%20that%20logs%20when%20files%20are%20deleted%20but%20doesn't%20archive%2C%20deletes%20clipboard%20archive%20if%20event%20is%20excluded%20and%20fixes%20an%20ImageLoad%20event%20bug.%3C%2FSPAN%3E%3C%2FDIV%3E%0A%3CDIV%3E%26nbsp%3B%3C%2FDIV%3E%0A%3CP%3E%3CA%20href%3D%22https%3A%2F%2Fdocs.microsoft.com%2Fen-us%2Fsysinternals%2Fdownloads%2Fautoruns%22%20target%3D%22_self%22%20rel%3D%22noopener%20noreferrer%22%3E%3CSPAN%3EAutoruns%20v13.99%3C%2FSPAN%3E%3C%2FA%3E%3C%2FP%3E%0A%3CDIV%3E%3CSPAN%3EThis%20update%20to%20Autoruns%20fixes%20a%20bug%20that%20resulted%20in%20some%20empty%20locations%20being%20hidden%20when%20the%20Include%20Empty%20Locations%20option%20is%20selected.%3C%2FSPAN%3E%3C%2FDIV%3E%0A%3CDIV%3E%26nbsp%3B%3C%2FDIV%3E%0A%3CP%3E%3CA%20href%3D%22https%3A%2F%2Fdocs.microsoft.com%2Fen-us%2Fsysinternals%2Fdownloads%2Ftcpview%22%20target%3D%22_self%22%20rel%3D%22noopener%20noreferrer%22%3E%3CSPAN%3ETCPView%20v4.01%3C%2FSPAN%3E%3C%2FA%3E%3C%2FP%3E%0A%3CDIV%3E%3CSPAN%3EThis%20update%20to%20TCPView%20refines%20Quick%20search%20to%20look%20in%20IP%20addresses%20and%20ports.%3C%2FSPAN%3E%3C%2FDIV%3E%0A%3CDIV%3E%26nbsp%3B%3C%2FDIV%3E%0A%3CP%3ETheme%20Engine%3C%2FP%3E%0A%3CDIV%3E%3CSPAN%3EThis%20update%20to%20the%20theme%20engine%20uses%20a%20custom%20title%20bar%20in%20dark%20mode%2C%20similar%20to%20MS%20Office%20black%20theme.%20WinObj%20and%20TcpView%20have%20been%20updated.%20Expect%20more%20tools%20using%20the%20theme%20engine%20in%20the%20near%20future!%3C%2FSPAN%3E%3C%2FDIV%3E%0A%3CDIV%3E%26nbsp%3B%3C%2FDIV%3E%0A%3C%2FDIV%3E%3C%2FLINGO-BODY%3E%3CLINGO-TEASER%20id%3D%22lingo-teaser-2280263%22%20slang%3D%22en-US%22%3E%3CDIV%3E%0A%3CDIV%3E%3CSPAN%3ELearn%26nbsp%3Babout%26nbsp%3Bthe%26nbsp%3Blatest%26nbsp%3Bupdates%26nbsp%3Bto%26nbsp%3BProcmon%26nbsp%3Bv3.70%2C%26nbsp%3BSysmon%26nbsp%3Bv13.10%2C%26nbsp%3BAutoruns%26nbsp%3Bv13.99%2C%26nbsp%3B%26nbsp%3BTCPView%26nbsp%3Bv4.01%26nbsp%3Band%26nbsp%3BWinObj%26nbsp%3Bv3.03%3C%2FSPAN%3E%3C%2FDIV%3E%0A%3C%2FDIV%3E%3C%2FLINGO-TEASER%3E%3CLINGO-SUB%20id%3D%22lingo-sub-2282268%22%20slang%3D%22en-US%22%3ERe%3A%20Procmon%20v3.70%2C%20Sysmon%20v13.10%2C%20Autoruns%20v13.99%2C%20TCPView%20v4.01%20and%20WinObj%20v3.03%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-2282268%22%20slang%3D%22en-US%22%3E%3CP%3EWindows%2010%2021H1.%20Autoruns%2013.99%20crashes%20on%20startup%2C%20with%20the%20name%20of%20the%20faulty%20module%20CRYPT32.dll%2C%20unlike%20Autoruns64.%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EFaulting%20application%20name%3A%20Autoruns.exe%2C%20version%3A%2013.99.0.0%2C%20time%20stamp%3A%200x607c5aa9%3CBR%20%2F%3EFaulting%20module%20name%3A%20CRYPT32.dll%2C%20version%3A%2010.0.19041.844%2C%20time%20stamp%3A%200xa04ed391%3CBR%20%2F%3EException%20code%3A%200xc0000005%3CBR%20%2F%3EFault%20offset%3A%200x0001f092%3CBR%20%2F%3EFaulting%20process%20ID%3A%200x172c%3CBR%20%2F%3EFaulting%20application%20start%20time%3A%200x01d73813100823b8%3CBR%20%2F%3EFaulting%20application%20path%3A%20Z%3A%5CZagruzki%5CAutoruns%5CAutoruns.exe%3CBR%20%2F%3EFaulting%20module%20path%3A%20C%3A%5CWINDOWS%5CSystem32%5CCRYPT32.dll%3CBR%20%2F%3EReport%20ID%3A%20109122c7-f54f-4232-bd00-4d6ecce1abc4%5C%3CBR%20%2F%3EFaulting%20package%20full%20name%3A%3CBR%20%2F%3EFaulting%20package-relative%20application%20ID%3A%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-2281981%22%20slang%3D%22en-US%22%3ERe%3A%20Procmon%20v3.70%2C%20Sysmon%20v13.10%2C%20Autoruns%20v13.99%2C%20TCPView%20v4.01%20and%20WinObj%20v3.03%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-2281981%22%20slang%3D%22en-US%22%3E%3CP%3EAutoruns64%2013.99%20crashes%20on%20launch%20Windows%2010%2020H2%20for%20me%20too.%26nbsp%3B%20Autoruns%20works%20fine.%26nbsp%3B%20Please%20look%20into%20this.%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-2281488%22%20slang%3D%22en-US%22%3ERe%3A%20Procmon%20v3.70%2C%20Sysmon%20v13.10%2C%20Autoruns%20v13.99%2C%20TCPView%20v4.01%20and%20WinObj%20v3.03%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-2281488%22%20slang%3D%22en-US%22%3E%3CP%3EThank%20you%20for%20these%20cool%20updates%20from%20sysinternals.%3C%2FP%3E%3CP%3EMay%20I%20request%20update%20the%26nbsp%3B%3CSTRONG%3EBlue%20Screen%3C%2FSTRONG%3E%20(sysinternals)%20screen%20server%20too%3F%3C%2FP%3E%3CP%3EIt%20is%20still%20showing%20styles%20for%20Windows%207%20and%20Windows%20XP%20and%20I%20believe%20user%20need%20to%20select%20style%20to%20be%20like%20Windows%2010%20too.%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-2280825%22%20slang%3D%22en-US%22%3ERe%3A%20Procmon%20v3.70%2C%20Sysmon%20v13.10%2C%20Autoruns%20v13.99%2C%20TCPView%20v4.01%20and%20WinObj%20v3.03%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-2280825%22%20slang%3D%22en-US%22%3E%3CP%3ESame%20experience%20as%20above.%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EAutoruns64%2013.99%20crashes%20on%20launch%20Windows%2010%2020H2%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EFaulting%20application%20name%3A%20Autoruns64.exe%2C%20version%3A%2013.99.0.0%2C%20time%20stamp%3A%200x607c5a46%3CBR%20%2F%3EFaulting%20module%20name%3A%20Autoruns64.exe%2C%20version%3A%2013.99.0.0%2C%20time%20stamp%3A%200x607c5a46%3CBR%20%2F%3EException%20code%3A%200xc0000005%3CBR%20%2F%3EFault%20offset%3A%200x000000000006cd15%3CBR%20%2F%3EFaulting%20process%20ID%3A%200x1fe0%3CBR%20%2F%3EFaulting%20application%20start%20time%3A%200x01d736f88a7e2447%3CBR%20%2F%3EFaulting%20application%20path%3A%20C%3A%5CWindows%5CAutoruns64.exe%3CBR%20%2F%3EFaulting%20module%20path%3A%20C%3A%5CWindows%5CAutoruns64.exe%3CBR%20%2F%3EReport%20ID%3A%2001ca51c3-fcfa-4ebc-a8cf-5383a3c6ebb4%3CBR%20%2F%3EFaulting%20package%20full%20name%3A%3CBR%20%2F%3EFaulting%20package-relative%20application%20ID%3A%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-2280819%22%20slang%3D%22en-US%22%3ERe%3A%20Procmon%20v3.70%2C%20Sysmon%20v13.10%2C%20Autoruns%20v13.99%2C%20TCPView%20v4.01%20and%20WinObj%20v3.03%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-2280819%22%20slang%3D%22en-US%22%3E%3CP%3ENote%3A%20before%20updating%20Autoruns%20v13.99%2C%20carefully%20check%20the%20operation%20of%20the%20program.%3C%2FP%3E%3CP%3EIn%20Windows%2010%2020H2%20(Russian%20localization)%20with%20up-to-date%20updates%2C%20crashes%20of%20the%20program%20were%20noticed%20right%20away%20when%20scanning%20in%2064-bit%2C%20as%20well%20as%20incorrect%20data%20for%20receiving%20data%20about%20publisher%20(microsoft)%20for%20some%20objects%20in%20both%20bits.%3C%2FP%3E%3CDIV%20class%3D%22lia-spoiler-container%22%3E%3CA%20class%3D%22lia-spoiler-link%22%20href%3D%22%23%22%20rel%3D%22nofollow%20noopener%20noreferrer%22%20target%3D%22_blank%22%3ESpoiler%3C%2FA%3E%3CNOSCRIPT%3E(Highlight%20to%20read)%3C%2FNOSCRIPT%3E%3CDIV%20class%3D%22lia-spoiler-border%22%3E%3CDIV%20class%3D%22lia-spoiler-content%22%3E%D0%98%D0%BC%D1%8F%20%D1%81%D0%B1%D0%BE%D0%B9%D0%BD%D0%BE%D0%B3%D0%BE%20%D0%BF%D1%80%D0%B8%D0%BB%D0%BE%D0%B6%D0%B5%D0%BD%D0%B8%D1%8F%3A%20Autoruns64.exe%2C%20%D0%B2%D0%B5%D1%80%D1%81%D0%B8%D1%8F%3A%2013.99.0.0%2C%20%D0%BC%D0%B5%D1%82%D0%BA%D0%B0%20%D0%B2%D1%80%D0%B5%D0%BC%D0%B5%D0%BD%D0%B8%3A%200x607c5a46%3CBR%20%2F%3E%D0%98%D0%BC%D1%8F%20%D1%81%D0%B1%D0%BE%D0%B9%D0%BD%D0%BE%D0%B3%D0%BE%20%D0%BC%D0%BE%D0%B4%D1%83%D0%BB%D1%8F%3A%20Autoruns64.exe%2C%20%D0%B2%D0%B5%D1%80%D1%81%D0%B8%D1%8F%3A%2013.99.0.0%2C%20%D0%BC%D0%B5%D1%82%D0%BA%D0%B0%20%D0%B2%D1%80%D0%B5%D0%BC%D0%B5%D0%BD%D0%B8%3A%200x607c5a46%3CBR%20%2F%3E%D0%9A%D0%BE%D0%B4%20%D0%B8%D1%81%D0%BA%D0%BB%D1%8E%D1%87%D0%B5%D0%BD%D0%B8%D1%8F%3A%200xc0000005%3CBR%20%2F%3E%D0%A1%D0%BC%D0%B5%D1%89%D0%B5%D0%BD%D0%B8%D0%B5%20%D0%BE%D1%88%D0%B8%D0%B1%D0%BA%D0%B8%3A%200x000000000006cd15%3CBR%20%2F%3E%D0%98%D0%B4%D0%B5%D0%BD%D1%82%D0%B8%D1%84%D0%B8%D0%BA%D0%B0%D1%82%D0%BE%D1%80%20%D1%81%D0%B1%D0%BE%D0%B9%D0%BD%D0%BE%D0%B3%D0%BE%20%D0%BF%D1%80%D0%BE%D1%86%D0%B5%D1%81%D1%81%D0%B0%3A%200xda0%3CBR%20%2F%3E%D0%92%D1%80%D0%B5%D0%BC%D1%8F%20%D0%B7%D0%B0%D0%BF%D1%83%D1%81%D0%BA%D0%B0%20%D1%81%D0%B1%D0%BE%D0%B9%D0%BD%D0%BE%D0%B3%D0%BE%20%D0%BF%D1%80%D0%B8%D0%BB%D0%BE%D0%B6%D0%B5%D0%BD%D0%B8%D1%8F%3A%200x01d736f22a6a924b%3CBR%20%2F%3E%D0%9F%D1%83%D1%82%D1%8C%20%D1%81%D0%B1%D0%BE%D0%B9%D0%BD%D0%BE%D0%B3%D0%BE%20%D0%BF%D1%80%D0%B8%D0%BB%D0%BE%D0%B6%D0%B5%D0%BD%D0%B8%D1%8F%3A%20C%3A%5CUsers%5CDolma%5CDownloads%5CAutoruns64.exe%3CBR%20%2F%3E%D0%9F%D1%83%D1%82%D1%8C%20%D1%81%D0%B1%D0%BE%D0%B9%D0%BD%D0%BE%D0%B3%D0%BE%20%D0%BC%D0%BE%D0%B4%D1%83%D0%BB%D1%8F%3A%20C%3A%5CUsers%5CDolma%5CDownloads%5CAutoruns64.exe%3CBR%20%2F%3E%D0%98%D0%B4%D0%B5%D0%BD%D1%82%D0%B8%D1%84%D0%B8%D0%BA%D0%B0%D1%82%D0%BE%D1%80%20%D0%BE%D1%82%D1%87%D0%B5%D1%82%D0%B0%3A%2068e81b15-e577-4cb1-86c2-1924064c08f0%3CBR%20%2F%3E%D0%9F%D0%BE%D0%BB%D0%BD%D0%BE%D0%B5%20%D0%B8%D0%BC%D1%8F%20%D1%81%D0%B1%D0%BE%D0%B9%D0%BD%D0%BE%D0%B3%D0%BE%20%D0%BF%D0%B0%D0%BA%D0%B5%D1%82%D0%B0%3A%3CBR%20%2F%3E%D0%9A%D0%BE%D0%B4%20%D0%BF%D1%80%D0%B8%D0%BB%D0%BE%D0%B6%D0%B5%D0%BD%D0%B8%D1%8F%2C%20%D1%81%D0%B2%D1%8F%D0%B7%D0%B0%D0%BD%D0%BD%D0%BE%D0%B3%D0%BE%20%D1%81%D0%BE%20%D1%81%D0%B1%D0%BE%D0%B9%D0%BD%D1%8B%D0%BC%20%D0%BF%D0%B0%D0%BA%D0%B5%D1%82%D0%BE%D0%BC%3A%3C%2FDIV%3E%3CNOSCRIPT%3E%3CDIV%20class%3D%22lia-spoiler-noscript-container%22%3E%3CDIV%20class%3D%22lia-spoiler-noscript-content%22%3E%D0%98%D0%BC%D1%8F%20%D1%81%D0%B1%D0%BE%D0%B9%D0%BD%D0%BE%D0%B3%D0%BE%20%D0%BF%D1%80%D0%B8%D0%BB%D0%BE%D0%B6%D0%B5%D0%BD%D0%B8%D1%8F%3A%20Autoruns64.exe%2C%20%D0%B2%D0%B5%D1%80%D1%81%D0%B8%D1%8F%3A%2013.99.0.0%2C%20%D0%BC%D0%B5%D1%82%D0%BA%D0%B0%20%D0%B2%D1%80%D0%B5%D0%BC%D0%B5%D0%BD%D0%B8%3A%200x607c5a46%D0%98%D0%BC%D1%8F%20%D1%81%D0%B1%D0%BE%D0%B9%D0%BD%D0%BE%D0%B3%D0%BE%20%D0%BC%D0%BE%D0%B4%D1%83%D0%BB%D1%8F%3A%20Autoruns64.exe%2C%20%D0%B2%D0%B5%D1%80%D1%81%D0%B8%D1%8F%3A%2013.99.0.0%2C%20%D0%BC%D0%B5%D1%82%D0%BA%D0%B0%20%D0%B2%D1%80%D0%B5%D0%BC%D0%B5%D0%BD%D0%B8%3A%200x607c5a46%D0%9A%D0%BE%D0%B4%20%D0%B8%D1%81%D0%BA%D0%BB%D1%8E%D1%87%D0%B5%D0%BD%D0%B8%D1%8F%3A%200xc0000005%D0%A1%D0%BC%D0%B5%D1%89%D0%B5%D0%BD%D0%B8%D0%B5%20%D0%BE%D1%88%D0%B8%D0%B1%D0%BA%D0%B8%3A%200x000000000006cd15%D0%98%D0%B4%D0%B5%D0%BD%D1%82%D0%B8%D1%84%D0%B8%D0%BA%D0%B0%D1%82%D0%BE%D1%80%20%D1%81%D0%B1%D0%BE%D0%B9%D0%BD%D0%BE%D0%B3%D0%BE%20%D0%BF%D1%80%D0%BE%D1%86%D0%B5%D1%81%D1%81%D0%B0%3A%200xda0%D0%92%D1%80%D0%B5%D0%BC%D1%8F%20%D0%B7%D0%B0%D0%BF%D1%83%D1%81%D0%BA%D0%B0%20%D1%81%D0%B1%D0%BE%D0%B9%D0%BD%D0%BE%D0%B3%D0%BE%20%D0%BF%D1%80%D0%B8%D0%BB%D0%BE%D0%B6%D0%B5%D0%BD%D0%B8%D1%8F%3A%200x01d736f22a6a924b%D0%9F%D1%83%D1%82%D1%8C%20%D1%81%D0%B1%D0%BE%D0%B9%D0%BD%D0%BE%D0%B3%D0%BE%20%D0%BF%D1%80%D0%B8%D0%BB%D0%BE%D0%B6%D0%B5%D0%BD%D0%B8%D1%8F%3A%20C%3A%5CUsers%5CDolma%5CDownloads%5CAutoruns64.exe%D0%9F%D1%83%D1%82%D1%8C%20%D1%81%D0%B1%D0%BE%D0%B9%D0%BD%D0%BE%D0%B3%D0%BE%20%D0%BC%D0%BE%D0%B4%D1%83%D0%BB%D1%8F%3A%20C%3A%5CUsers%5CDolma%5CDownloads%5CAutoruns64.exe%D0%98%D0%B4%D0%B5%D0%BD%D1%82%D0%B8%D1%84%D0%B8%D0%BA%D0%B0%D1%82%D0%BE%D1%80%20%D0%BE%D1%82%D1%87%D0%B5%D1%82%D0%B0%3A%2068e81b15-e577-4cb1-86c2-1924064c08f0%D0%9F%D0%BE%D0%BB%D0%BD%D0%BE%D0%B5%20%D0%B8%D0%BC%D1%8F%20%D1%81%D0%B1%D0%BE%D0%B9%D0%BD%D0%BE%D0%B3%D0%BE%20%D0%BF%D0%B0%D0%BA%D0%B5%D1%82%D0%B0%3A%D0%9A%D0%BE%D0%B4%20%D0%BF%D1%80%D0%B8%D0%BB%D0%BE%D0%B6%D0%B5%D0%BD%D0%B8%D1%8F%2C%20%D1%81%D0%B2%D1%8F%D0%B7%D0%B0%D0%BD%D0%BD%D0%BE%D0%B3%D0%BE%20%D1%81%D0%BE%20%D1%81%D0%B1%D0%BE%D0%B9%D0%BD%D1%8B%D0%BC%20%D0%BF%D0%B0%D0%BA%D0%B5%D1%82%D0%BE%D0%BC%3A%3C%2FDIV%3E%3C%2FDIV%3E%3C%2FNOSCRIPT%3E%3C%2FDIV%3E%3C%2FDIV%3E%3CP%3EI%20know%20that%20the%20code%200xc0000005%20often%20means%20a%20problem%20outside%20a%20program.%20Sometimes%20in%20a%20program.%20In%20this%20case%2C%20multiple%20users%20reported%20the%20error.%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-2337347%22%20slang%3D%22en-US%22%3ERe%3A%20Procmon%20v3.70%2C%20Sysmon%20v13.10%2C%20Autoruns%20v13.99%2C%20TCPView%20v4.01%20and%20WinObj%20v3.03%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-2337347%22%20slang%3D%22en-US%22%3E%3CP%3EProcmon64%20v3.70%20crashes%20on%20launch%20Windows%2010%2021H1%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3E%E9%94%99%E8%AF%AF%E5%BA%94%E7%94%A8%E7%A8%8B%E5%BA%8F%E5%90%8D%E7%A7%B0%3A%20Procmon64.exe%EF%BC%8C%E7%89%88%E6%9C%AC%3A%203.70.0.0%EF%BC%8C%E6%97%B6%E9%97%B4%E6%88%B3%3A%200x608049ce%3CBR%20%2F%3E%E9%94%99%E8%AF%AF%E6%A8%A1%E5%9D%97%E5%90%8D%E7%A7%B0%3A%20Procmon64.exe%EF%BC%8C%E7%89%88%E6%9C%AC%3A%203.70.0.0%EF%BC%8C%E6%97%B6%E9%97%B4%E6%88%B3%3A%200x608049ce%3CBR%20%2F%3E%E5%BC%82%E5%B8%B8%E4%BB%A3%E7%A0%81%3A%200xc0000409%3CBR%20%2F%3E%E9%94%99%E8%AF%AF%E5%81%8F%E7%A7%BB%E9%87%8F%3A%200x0000000000091761%3CBR%20%2F%3E%E9%94%99%E8%AF%AF%E8%BF%9B%E7%A8%8B%20ID%3A%200x4944%3CBR%20%2F%3E%E9%94%99%E8%AF%AF%E5%BA%94%E7%94%A8%E7%A8%8B%E5%BA%8F%E5%90%AF%E5%8A%A8%E6%97%B6%E9%97%B4%3A%200x01d7431de345df5e%3CBR%20%2F%3E%E9%94%99%E8%AF%AF%E5%BA%94%E7%94%A8%E7%A8%8B%E5%BA%8F%E8%B7%AF%E5%BE%84%3A%20C%3A%5CUsers%5Cfansu%5CSysinternalsSuite%5CProcmon64.exe%3CBR%20%2F%3E%E9%94%99%E8%AF%AF%E6%A8%A1%E5%9D%97%E8%B7%AF%E5%BE%84%3A%20C%3A%5CUsers%5Cfansu%5CSysinternalsSuite%5CProcmon64.exe%3CBR%20%2F%3E%E6%8A%A5%E5%91%8A%20ID%3A%206381c63b-5007-4249-b954-1bdb93208ca7%3CBR%20%2F%3E%E9%94%99%E8%AF%AF%E7%A8%8B%E5%BA%8F%E5%8C%85%E5%85%A8%E5%90%8D%3A%20%3CBR%20%2F%3E%E9%94%99%E8%AF%AF%E7%A8%8B%E5%BA%8F%E5%8C%85%E7%9B%B8%E5%AF%B9%E5%BA%94%E7%94%A8%E7%A8%8B%E5%BA%8F%20ID%3A%3C%2FP%3E%0A%3CDIV%20id%3D%22gtx-trans%22%20style%3D%22position%3A%20absolute%3B%20left%3A%20501px%3B%20top%3A%20277.857px%3B%22%3E%0A%3CDIV%20class%3D%22gtx-trans-icon%22%3E%26nbsp%3B%3C%2FDIV%3E%0A%3C%2FDIV%3E%3C%2FLINGO-BODY%3E
Co-Authors
Version history
Last update:
‎Apr 21 2021 09:09 AM
Updated by: