Procmon v3.70, Sysmon v13.10, Autoruns v13.99, TCPView v4.01 and WinObj v3.03

Published Apr 21 2021 09:09 AM 10.2K Views
Microsoft

Procmon v3.70

This update to Process Monitor allows constraining the number of events based on a requested number minutes and/or size of the events data, so that older events are dropped if necessary. It also fixes a bug where the Drop Filtered Events option wasn’t always respected and contains other minor bug fixes and improvements.
 

Sysmon v13.10

This update to Sysmon adds a FileDeleteDetected rule that logs when files are deleted but doesn't archive, deletes clipboard archive if event is excluded and fixes an ImageLoad event bug.
 

Autoruns v13.99

This update to Autoruns fixes a bug that resulted in some empty locations being hidden when the Include Empty Locations option is selected.
 

TCPView v4.01

This update to TCPView refines Quick search to look in IP addresses and ports.
 

Theme Engine

This update to the theme engine uses a custom title bar in dark mode, similar to MS Office black theme. WinObj and TcpView have been updated. Expect more tools using the theme engine in the near future!
 
6 Comments
%3CLINGO-SUB%20id%3D%22lingo-sub-2280263%22%20slang%3D%22en-US%22%3EProcmon%20v3.70%2C%20Sysmon%20v13.10%2C%20Autoruns%20v13.99%2C%20TCPView%20v4.01%20and%20WinObj%20v3.03%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-2280263%22%20slang%3D%22en-US%22%3E%3CDIV%3E%0A%3CP%3E%3CA%20href%3D%22https%3A%2F%2Fdocs.microsoft.com%2Fen-us%2Fsysinternals%2Fdownloads%2Fprocmon%22%20target%3D%22_self%22%20rel%3D%22noopener%20noreferrer%22%3E%3CSPAN%3EProcmon%20v3.70%3C%2FSPAN%3E%3C%2FA%3E%3C%2FP%3E%0A%3CDIV%3E%3CSPAN%3EThis%20update%20to%20Process%20Monitor%20allows%20constraining%20the%20number%20of%20events%20based%20on%20a%20requested%20number%20minutes%20and%2For%20size%20of%20the%20events%20data%2C%20so%20that%20older%20events%20are%20dropped%20if%20necessary.%20It%20also%20fixes%20a%20bug%20where%20the%20Drop%20Filtered%20Events%20option%20wasn%E2%80%99t%20always%20respected%20and%20contains%20other%20minor%20bug%20fixes%20and%20improvements.%3C%2FSPAN%3E%3C%2FDIV%3E%0A%3CDIV%3E%26nbsp%3B%3C%2FDIV%3E%0A%3CP%3E%3CA%20href%3D%22https%3A%2F%2Fdocs.microsoft.com%2Fen-us%2Fsysinternals%2Fdownloads%2Fsysmon%22%20target%3D%22_self%22%20rel%3D%22noopener%20noreferrer%22%3E%3CSPAN%3ESysmon%20v13.10%3C%2FSPAN%3E%3C%2FA%3E%3C%2FP%3E%0A%3CDIV%3E%3CSPAN%3EThis%20update%20to%20Sysmon%20adds%20a%20FileDeleteDetected%20rule%20that%20logs%20when%20files%20are%20deleted%20but%20doesn't%20archive%2C%20deletes%20clipboard%20archive%20if%20event%20is%20excluded%20and%20fixes%20an%20ImageLoad%20event%20bug.%3C%2FSPAN%3E%3C%2FDIV%3E%0A%3CDIV%3E%26nbsp%3B%3C%2FDIV%3E%0A%3CP%3E%3CA%20href%3D%22https%3A%2F%2Fdocs.microsoft.com%2Fen-us%2Fsysinternals%2Fdownloads%2Fautoruns%22%20target%3D%22_self%22%20rel%3D%22noopener%20noreferrer%22%3E%3CSPAN%3EAutoruns%20v13.99%3C%2FSPAN%3E%3C%2FA%3E%3C%2FP%3E%0A%3CDIV%3E%3CSPAN%3EThis%20update%20to%20Autoruns%20fixes%20a%20bug%20that%20resulted%20in%20some%20empty%20locations%20being%20hidden%20when%20the%20Include%20Empty%20Locations%20option%20is%20selected.%3C%2FSPAN%3E%3C%2FDIV%3E%0A%3CDIV%3E%26nbsp%3B%3C%2FDIV%3E%0A%3CP%3E%3CA%20href%3D%22https%3A%2F%2Fdocs.microsoft.com%2Fen-us%2Fsysinternals%2Fdownloads%2Ftcpview%22%20target%3D%22_self%22%20rel%3D%22noopener%20noreferrer%22%3E%3CSPAN%3ETCPView%20v4.01%3C%2FSPAN%3E%3C%2FA%3E%3C%2FP%3E%0A%3CDIV%3E%3CSPAN%3EThis%20update%20to%20TCPView%20refines%20Quick%20search%20to%20look%20in%20IP%20addresses%20and%20ports.%3C%2FSPAN%3E%3C%2FDIV%3E%0A%3CDIV%3E%26nbsp%3B%3C%2FDIV%3E%0A%3CP%3ETheme%20Engine%3C%2FP%3E%0A%3CDIV%3E%3CSPAN%3EThis%20update%20to%20the%20theme%20engine%20uses%20a%20custom%20title%20bar%20in%20dark%20mode%2C%20similar%20to%20MS%20Office%20black%20theme.%20WinObj%20and%20TcpView%20have%20been%20updated.%20Expect%20more%20tools%20using%20the%20theme%20engine%20in%20the%20near%20future!%3C%2FSPAN%3E%3C%2FDIV%3E%0A%3CDIV%3E%26nbsp%3B%3C%2FDIV%3E%0A%3C%2FDIV%3E%3C%2FLINGO-BODY%3E%3CLINGO-TEASER%20id%3D%22lingo-teaser-2280263%22%20slang%3D%22en-US%22%3E%3CDIV%3E%0A%3CDIV%3E%3CSPAN%3ELearn%26nbsp%3Babout%26nbsp%3Bthe%26nbsp%3Blatest%26nbsp%3Bupdates%26nbsp%3Bto%26nbsp%3BProcmon%26nbsp%3Bv3.70%2C%26nbsp%3BSysmon%26nbsp%3Bv13.10%2C%26nbsp%3BAutoruns%26nbsp%3Bv13.99%2C%26nbsp%3B%26nbsp%3BTCPView%26nbsp%3Bv4.01%26nbsp%3Band%26nbsp%3BWinObj%26nbsp%3Bv3.03%3C%2FSPAN%3E%3C%2FDIV%3E%0A%3C%2FDIV%3E%3C%2FLINGO-TEASER%3E%3CLINGO-SUB%20id%3D%22lingo-sub-2282268%22%20slang%3D%22en-US%22%3ERe%3A%20Procmon%20v3.70%2C%20Sysmon%20v13.10%2C%20Autoruns%20v13.99%2C%20TCPView%20v4.01%20and%20WinObj%20v3.03%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-2282268%22%20slang%3D%22en-US%22%3E%3CP%3EWindows%2010%2021H1.%20Autoruns%2013.99%20crashes%20on%20startup%2C%20with%20the%20name%20of%20the%20faulty%20module%20CRYPT32.dll%2C%20unlike%20Autoruns64.%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EFaulting%20application%20name%3A%20Autoruns.exe%2C%20version%3A%2013.99.0.0%2C%20time%20stamp%3A%200x607c5aa9%3CBR%20%2F%3EFaulting%20module%20name%3A%20CRYPT32.dll%2C%20version%3A%2010.0.19041.844%2C%20time%20stamp%3A%200xa04ed391%3CBR%20%2F%3EException%20code%3A%200xc0000005%3CBR%20%2F%3EFault%20offset%3A%200x0001f092%3CBR%20%2F%3EFaulting%20process%20ID%3A%200x172c%3CBR%20%2F%3EFaulting%20application%20start%20time%3A%200x01d73813100823b8%3CBR%20%2F%3EFaulting%20application%20path%3A%20Z%3A%5CZagruzki%5CAutoruns%5CAutoruns.exe%3CBR%20%2F%3EFaulting%20module%20path%3A%20C%3A%5CWINDOWS%5CSystem32%5CCRYPT32.dll%3CBR%20%2F%3EReport%20ID%3A%20109122c7-f54f-4232-bd00-4d6ecce1abc4%5C%3CBR%20%2F%3EFaulting%20package%20full%20name%3A%3CBR%20%2F%3EFaulting%20package-relative%20application%20ID%3A%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-2281981%22%20slang%3D%22en-US%22%3ERe%3A%20Procmon%20v3.70%2C%20Sysmon%20v13.10%2C%20Autoruns%20v13.99%2C%20TCPView%20v4.01%20and%20WinObj%20v3.03%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-2281981%22%20slang%3D%22en-US%22%3E%3CP%3EAutoruns64%2013.99%20crashes%20on%20launch%20Windows%2010%2020H2%20for%20me%20too.%26nbsp%3B%20Autoruns%20works%20fine.%26nbsp%3B%20Please%20look%20into%20this.%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-2281488%22%20slang%3D%22en-US%22%3ERe%3A%20Procmon%20v3.70%2C%20Sysmon%20v13.10%2C%20Autoruns%20v13.99%2C%20TCPView%20v4.01%20and%20WinObj%20v3.03%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-2281488%22%20slang%3D%22en-US%22%3E%3CP%3EThank%20you%20for%20these%20cool%20updates%20from%20sysinternals.%3C%2FP%3E%3CP%3EMay%20I%20request%20update%20the%26nbsp%3B%3CSTRONG%3EBlue%20Screen%3C%2FSTRONG%3E%20(sysinternals)%20screen%20server%20too%3F%3C%2FP%3E%3CP%3EIt%20is%20still%20showing%20styles%20for%20Windows%207%20and%20Windows%20XP%20and%20I%20believe%20user%20need%20to%20select%20style%20to%20be%20like%20Windows%2010%20too.%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-2280825%22%20slang%3D%22en-US%22%3ERe%3A%20Procmon%20v3.70%2C%20Sysmon%20v13.10%2C%20Autoruns%20v13.99%2C%20TCPView%20v4.01%20and%20WinObj%20v3.03%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-2280825%22%20slang%3D%22en-US%22%3E%3CP%3ESame%20experience%20as%20above.%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EAutoruns64%2013.99%20crashes%20on%20launch%20Windows%2010%2020H2%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EFaulting%20application%20name%3A%20Autoruns64.exe%2C%20version%3A%2013.99.0.0%2C%20time%20stamp%3A%200x607c5a46%3CBR%20%2F%3EFaulting%20module%20name%3A%20Autoruns64.exe%2C%20version%3A%2013.99.0.0%2C%20time%20stamp%3A%200x607c5a46%3CBR%20%2F%3EException%20code%3A%200xc0000005%3CBR%20%2F%3EFault%20offset%3A%200x000000000006cd15%3CBR%20%2F%3EFaulting%20process%20ID%3A%200x1fe0%3CBR%20%2F%3EFaulting%20application%20start%20time%3A%200x01d736f88a7e2447%3CBR%20%2F%3EFaulting%20application%20path%3A%20C%3A%5CWindows%5CAutoruns64.exe%3CBR%20%2F%3EFaulting%20module%20path%3A%20C%3A%5CWindows%5CAutoruns64.exe%3CBR%20%2F%3EReport%20ID%3A%2001ca51c3-fcfa-4ebc-a8cf-5383a3c6ebb4%3CBR%20%2F%3EFaulting%20package%20full%20name%3A%3CBR%20%2F%3EFaulting%20package-relative%20application%20ID%3A%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-2280819%22%20slang%3D%22en-US%22%3ERe%3A%20Procmon%20v3.70%2C%20Sysmon%20v13.10%2C%20Autoruns%20v13.99%2C%20TCPView%20v4.01%20and%20WinObj%20v3.03%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-2280819%22%20slang%3D%22en-US%22%3E%3CP%3ENote%3A%20before%20updating%20Autoruns%20v13.99%2C%20carefully%20check%20the%20operation%20of%20the%20program.%3C%2FP%3E%3CP%3EIn%20Windows%2010%2020H2%20(Russian%20localization)%20with%20up-to-date%20updates%2C%20crashes%20of%20the%20program%20were%20noticed%20right%20away%20when%20scanning%20in%2064-bit%2C%20as%20well%20as%20incorrect%20data%20for%20receiving%20data%20about%20publisher%20(microsoft)%20for%20some%20objects%20in%20both%20bits.%3C%2FP%3E%3CDIV%20class%3D%22lia-spoiler-container%22%3E%3CA%20class%3D%22lia-spoiler-link%22%20href%3D%22%23%22%20rel%3D%22nofollow%20noopener%20noreferrer%22%20target%3D%22_blank%22%3ESpoiler%3C%2FA%3E%3CNOSCRIPT%3E(Highlight%20to%20read)%3C%2FNOSCRIPT%3E%3CDIV%20class%3D%22lia-spoiler-border%22%3E%3CDIV%20class%3D%22lia-spoiler-content%22%3E%D0%98%D0%BC%D1%8F%20%D1%81%D0%B1%D0%BE%D0%B9%D0%BD%D0%BE%D0%B3%D0%BE%20%D0%BF%D1%80%D0%B8%D0%BB%D0%BE%D0%B6%D0%B5%D0%BD%D0%B8%D1%8F%3A%20Autoruns64.exe%2C%20%D0%B2%D0%B5%D1%80%D1%81%D0%B8%D1%8F%3A%2013.99.0.0%2C%20%D0%BC%D0%B5%D1%82%D0%BA%D0%B0%20%D0%B2%D1%80%D0%B5%D0%BC%D0%B5%D0%BD%D0%B8%3A%200x607c5a46%3CBR%20%2F%3E%D0%98%D0%BC%D1%8F%20%D1%81%D0%B1%D0%BE%D0%B9%D0%BD%D0%BE%D0%B3%D0%BE%20%D0%BC%D0%BE%D0%B4%D1%83%D0%BB%D1%8F%3A%20Autoruns64.exe%2C%20%D0%B2%D0%B5%D1%80%D1%81%D0%B8%D1%8F%3A%2013.99.0.0%2C%20%D0%BC%D0%B5%D1%82%D0%BA%D0%B0%20%D0%B2%D1%80%D0%B5%D0%BC%D0%B5%D0%BD%D0%B8%3A%200x607c5a46%3CBR%20%2F%3E%D0%9A%D0%BE%D0%B4%20%D0%B8%D1%81%D0%BA%D0%BB%D1%8E%D1%87%D0%B5%D0%BD%D0%B8%D1%8F%3A%200xc0000005%3CBR%20%2F%3E%D0%A1%D0%BC%D0%B5%D1%89%D0%B5%D0%BD%D0%B8%D0%B5%20%D0%BE%D1%88%D0%B8%D0%B1%D0%BA%D0%B8%3A%200x000000000006cd15%3CBR%20%2F%3E%D0%98%D0%B4%D0%B5%D0%BD%D1%82%D0%B8%D1%84%D0%B8%D0%BA%D0%B0%D1%82%D0%BE%D1%80%20%D1%81%D0%B1%D0%BE%D0%B9%D0%BD%D0%BE%D0%B3%D0%BE%20%D0%BF%D1%80%D0%BE%D1%86%D0%B5%D1%81%D1%81%D0%B0%3A%200xda0%3CBR%20%2F%3E%D0%92%D1%80%D0%B5%D0%BC%D1%8F%20%D0%B7%D0%B0%D0%BF%D1%83%D1%81%D0%BA%D0%B0%20%D1%81%D0%B1%D0%BE%D0%B9%D0%BD%D0%BE%D0%B3%D0%BE%20%D0%BF%D1%80%D0%B8%D0%BB%D0%BE%D0%B6%D0%B5%D0%BD%D0%B8%D1%8F%3A%200x01d736f22a6a924b%3CBR%20%2F%3E%D0%9F%D1%83%D1%82%D1%8C%20%D1%81%D0%B1%D0%BE%D0%B9%D0%BD%D0%BE%D0%B3%D0%BE%20%D0%BF%D1%80%D0%B8%D0%BB%D0%BE%D0%B6%D0%B5%D0%BD%D0%B8%D1%8F%3A%20C%3A%5CUsers%5CDolma%5CDownloads%5CAutoruns64.exe%3CBR%20%2F%3E%D0%9F%D1%83%D1%82%D1%8C%20%D1%81%D0%B1%D0%BE%D0%B9%D0%BD%D0%BE%D0%B3%D0%BE%20%D0%BC%D0%BE%D0%B4%D1%83%D0%BB%D1%8F%3A%20C%3A%5CUsers%5CDolma%5CDownloads%5CAutoruns64.exe%3CBR%20%2F%3E%D0%98%D0%B4%D0%B5%D0%BD%D1%82%D0%B8%D1%84%D0%B8%D0%BA%D0%B0%D1%82%D0%BE%D1%80%20%D0%BE%D1%82%D1%87%D0%B5%D1%82%D0%B0%3A%2068e81b15-e577-4cb1-86c2-1924064c08f0%3CBR%20%2F%3E%D0%9F%D0%BE%D0%BB%D0%BD%D0%BE%D0%B5%20%D0%B8%D0%BC%D1%8F%20%D1%81%D0%B1%D0%BE%D0%B9%D0%BD%D0%BE%D0%B3%D0%BE%20%D0%BF%D0%B0%D0%BA%D0%B5%D1%82%D0%B0%3A%3CBR%20%2F%3E%D0%9A%D0%BE%D0%B4%20%D0%BF%D1%80%D0%B8%D0%BB%D0%BE%D0%B6%D0%B5%D0%BD%D0%B8%D1%8F%2C%20%D1%81%D0%B2%D1%8F%D0%B7%D0%B0%D0%BD%D0%BD%D0%BE%D0%B3%D0%BE%20%D1%81%D0%BE%20%D1%81%D0%B1%D0%BE%D0%B9%D0%BD%D1%8B%D0%BC%20%D0%BF%D0%B0%D0%BA%D0%B5%D1%82%D0%BE%D0%BC%3A%3C%2FDIV%3E%3CNOSCRIPT%3E%3CDIV%20class%3D%22lia-spoiler-noscript-container%22%3E%3CDIV%20class%3D%22lia-spoiler-noscript-content%22%3E%D0%98%D0%BC%D1%8F%20%D1%81%D0%B1%D0%BE%D0%B9%D0%BD%D0%BE%D0%B3%D0%BE%20%D0%BF%D1%80%D0%B8%D0%BB%D0%BE%D0%B6%D0%B5%D0%BD%D0%B8%D1%8F%3A%20Autoruns64.exe%2C%20%D0%B2%D0%B5%D1%80%D1%81%D0%B8%D1%8F%3A%2013.99.0.0%2C%20%D0%BC%D0%B5%D1%82%D0%BA%D0%B0%20%D0%B2%D1%80%D0%B5%D0%BC%D0%B5%D0%BD%D0%B8%3A%200x607c5a46%D0%98%D0%BC%D1%8F%20%D1%81%D0%B1%D0%BE%D0%B9%D0%BD%D0%BE%D0%B3%D0%BE%20%D0%BC%D0%BE%D0%B4%D1%83%D0%BB%D1%8F%3A%20Autoruns64.exe%2C%20%D0%B2%D0%B5%D1%80%D1%81%D0%B8%D1%8F%3A%2013.99.0.0%2C%20%D0%BC%D0%B5%D1%82%D0%BA%D0%B0%20%D0%B2%D1%80%D0%B5%D0%BC%D0%B5%D0%BD%D0%B8%3A%200x607c5a46%D0%9A%D0%BE%D0%B4%20%D0%B8%D1%81%D0%BA%D0%BB%D1%8E%D1%87%D0%B5%D0%BD%D0%B8%D1%8F%3A%200xc0000005%D0%A1%D0%BC%D0%B5%D1%89%D0%B5%D0%BD%D0%B8%D0%B5%20%D0%BE%D1%88%D0%B8%D0%B1%D0%BA%D0%B8%3A%200x000000000006cd15%D0%98%D0%B4%D0%B5%D0%BD%D1%82%D0%B8%D1%84%D0%B8%D0%BA%D0%B0%D1%82%D0%BE%D1%80%20%D1%81%D0%B1%D0%BE%D0%B9%D0%BD%D0%BE%D0%B3%D0%BE%20%D0%BF%D1%80%D0%BE%D1%86%D0%B5%D1%81%D1%81%D0%B0%3A%200xda0%D0%92%D1%80%D0%B5%D0%BC%D1%8F%20%D0%B7%D0%B0%D0%BF%D1%83%D1%81%D0%BA%D0%B0%20%D1%81%D0%B1%D0%BE%D0%B9%D0%BD%D0%BE%D0%B3%D0%BE%20%D0%BF%D1%80%D0%B8%D0%BB%D0%BE%D0%B6%D0%B5%D0%BD%D0%B8%D1%8F%3A%200x01d736f22a6a924b%D0%9F%D1%83%D1%82%D1%8C%20%D1%81%D0%B1%D0%BE%D0%B9%D0%BD%D0%BE%D0%B3%D0%BE%20%D0%BF%D1%80%D0%B8%D0%BB%D0%BE%D0%B6%D0%B5%D0%BD%D0%B8%D1%8F%3A%20C%3A%5CUsers%5CDolma%5CDownloads%5CAutoruns64.exe%D0%9F%D1%83%D1%82%D1%8C%20%D1%81%D0%B1%D0%BE%D0%B9%D0%BD%D0%BE%D0%B3%D0%BE%20%D0%BC%D0%BE%D0%B4%D1%83%D0%BB%D1%8F%3A%20C%3A%5CUsers%5CDolma%5CDownloads%5CAutoruns64.exe%D0%98%D0%B4%D0%B5%D0%BD%D1%82%D0%B8%D1%84%D0%B8%D0%BA%D0%B0%D1%82%D0%BE%D1%80%20%D0%BE%D1%82%D1%87%D0%B5%D1%82%D0%B0%3A%2068e81b15-e577-4cb1-86c2-1924064c08f0%D0%9F%D0%BE%D0%BB%D0%BD%D0%BE%D0%B5%20%D0%B8%D0%BC%D1%8F%20%D1%81%D0%B1%D0%BE%D0%B9%D0%BD%D0%BE%D0%B3%D0%BE%20%D0%BF%D0%B0%D0%BA%D0%B5%D1%82%D0%B0%3A%D0%9A%D0%BE%D0%B4%20%D0%BF%D1%80%D0%B8%D0%BB%D0%BE%D0%B6%D0%B5%D0%BD%D0%B8%D1%8F%2C%20%D1%81%D0%B2%D1%8F%D0%B7%D0%B0%D0%BD%D0%BD%D0%BE%D0%B3%D0%BE%20%D1%81%D0%BE%20%D1%81%D0%B1%D0%BE%D0%B9%D0%BD%D1%8B%D0%BC%20%D0%BF%D0%B0%D0%BA%D0%B5%D1%82%D0%BE%D0%BC%3A%3C%2FDIV%3E%3C%2FDIV%3E%3C%2FNOSCRIPT%3E%3C%2FDIV%3E%3C%2FDIV%3E%3CP%3EI%20know%20that%20the%20code%200xc0000005%20often%20means%20a%20problem%20outside%20a%20program.%20Sometimes%20in%20a%20program.%20In%20this%20case%2C%20multiple%20users%20reported%20the%20error.%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-2337347%22%20slang%3D%22en-US%22%3ERe%3A%20Procmon%20v3.70%2C%20Sysmon%20v13.10%2C%20Autoruns%20v13.99%2C%20TCPView%20v4.01%20and%20WinObj%20v3.03%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-2337347%22%20slang%3D%22en-US%22%3E%3CP%3EProcmon64%20v3.70%20crashes%20on%20launch%20Windows%2010%2021H1%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3E%E9%94%99%E8%AF%AF%E5%BA%94%E7%94%A8%E7%A8%8B%E5%BA%8F%E5%90%8D%E7%A7%B0%3A%20Procmon64.exe%EF%BC%8C%E7%89%88%E6%9C%AC%3A%203.70.0.0%EF%BC%8C%E6%97%B6%E9%97%B4%E6%88%B3%3A%200x608049ce%3CBR%20%2F%3E%E9%94%99%E8%AF%AF%E6%A8%A1%E5%9D%97%E5%90%8D%E7%A7%B0%3A%20Procmon64.exe%EF%BC%8C%E7%89%88%E6%9C%AC%3A%203.70.0.0%EF%BC%8C%E6%97%B6%E9%97%B4%E6%88%B3%3A%200x608049ce%3CBR%20%2F%3E%E5%BC%82%E5%B8%B8%E4%BB%A3%E7%A0%81%3A%200xc0000409%3CBR%20%2F%3E%E9%94%99%E8%AF%AF%E5%81%8F%E7%A7%BB%E9%87%8F%3A%200x0000000000091761%3CBR%20%2F%3E%E9%94%99%E8%AF%AF%E8%BF%9B%E7%A8%8B%20ID%3A%200x4944%3CBR%20%2F%3E%E9%94%99%E8%AF%AF%E5%BA%94%E7%94%A8%E7%A8%8B%E5%BA%8F%E5%90%AF%E5%8A%A8%E6%97%B6%E9%97%B4%3A%200x01d7431de345df5e%3CBR%20%2F%3E%E9%94%99%E8%AF%AF%E5%BA%94%E7%94%A8%E7%A8%8B%E5%BA%8F%E8%B7%AF%E5%BE%84%3A%20C%3A%5CUsers%5Cfansu%5CSysinternalsSuite%5CProcmon64.exe%3CBR%20%2F%3E%E9%94%99%E8%AF%AF%E6%A8%A1%E5%9D%97%E8%B7%AF%E5%BE%84%3A%20C%3A%5CUsers%5Cfansu%5CSysinternalsSuite%5CProcmon64.exe%3CBR%20%2F%3E%E6%8A%A5%E5%91%8A%20ID%3A%206381c63b-5007-4249-b954-1bdb93208ca7%3CBR%20%2F%3E%E9%94%99%E8%AF%AF%E7%A8%8B%E5%BA%8F%E5%8C%85%E5%85%A8%E5%90%8D%3A%20%3CBR%20%2F%3E%E9%94%99%E8%AF%AF%E7%A8%8B%E5%BA%8F%E5%8C%85%E7%9B%B8%E5%AF%B9%E5%BA%94%E7%94%A8%E7%A8%8B%E5%BA%8F%20ID%3A%3C%2FP%3E%0A%3CDIV%20id%3D%22gtx-trans%22%20style%3D%22position%3A%20absolute%3B%20left%3A%20501px%3B%20top%3A%20277.857px%3B%22%3E%0A%3CDIV%20class%3D%22gtx-trans-icon%22%3E%26nbsp%3B%3C%2FDIV%3E%0A%3C%2FDIV%3E%3C%2FLINGO-BODY%3E
Co-Authors
Version history
Last update:
‎Apr 21 2021 09:09 AM
Updated by: