Sysinternals updates

Same behavior with Autoruns.



If you download from the right option (Run Process Explorer) it downloads the updated version (16.21).
If you download from the left option (.zip file) and the right option (Download Process Explorer) it downloads previous version (16.20).

 

Thanks. I got them now

 

The supposedly updated Sysinternals Suite contains old versions of Process Explorer and Autoruns.

 

I have downloaded the Sysinternals Suite and i can see updated versions
AutoRuns = v13.71
Process Explorer = v16.21

 

You have to download files individually from live.sysinternals.com to get the new versions. None of the distribution zips have yet been updated.

 

This may be the case for some Sysinternals applications, but this is not true for all Sysinternals applications.
I downloaded ProcessExplorer.zip and that has the new version procexp.exe and procexp64.exe 16.21.0.0

 

Yes they have. "About" tab is showing correct versions here.

 

Yes, they are now updated (.zip files).

Previously they weren't. A matter of a couple of hours though.

 

I downloaded ProcessExplorer.zip that has procexp.exe and procexp64.exe version 16.21.0.0, 20 hours ago.
I didn't try the other Sysinternals applications, though.
Good to know the .zip files are all updated, by now. Thanks, yeL.

 

Sysinternals Update: Sysmon v6.02, Sigcheck v2.55
https://blogs.technet.microsoft.com...internals-update-sysmon-v6-02-sigcheck-v2-55/

----------
Sysinternals Suite 2017.05.22
https://technet.microsoft.com/en-us/sysinternals/bb842062

 

After downloading of the Sysinternals Suite today, i can see that an additional Sysinternals tool "Not MyFault" has been added to the SysinternalsSuite.zip

Code:

notmyfaultc.exe    250.032    2017-06-08
notmyfaultc64.exe  270.520    2017-06-08
notmyfault.exe     242.344    2017-06-08
notmyfault64.exe   265.400    2017-06-08

 

Just in case it has been too many years since this was noticed last, or if you simply never knew about it:

http://www.wieldraaijer.nl/others.html

SysInternalsUpdater.exe SHA256: 677643f6c5b1dea93c72afaff056374add63a70b0b20fe1ab87f63940a330951

HTH

 

does Russ still update SMBChanger? Something Wannacry attacked.

 

Yes I could not find it on their site anymore but did find a download that claims it will work on 10.
http://smbchanger.windows10compatible.com/

 

I hear that. Too bad I don't have the original hash for the file.

 

Sysinternals Update: Autoruns v13.8, AccessChk, Sysmon.
Monday, September 11, 2017

https://live.sysinternals.com/

Edit:
Sysinternals Update: Sysmon v6.10, Process Monitor v3.40, Autoruns v13.80, AccessChk v6.11
September 12, 2017
https://blogs.technet.microsoft.com...-monitor-v3-4-autoruns-v13-8-accesschk-v6-11/

 

Btw: i have tried the 64-bit version of Autoruns v13.8 (Autoruns64.exe) and it is displaying a correct Image Path
The only quirk is, that for some entries in the Codecs-tab a long ID is being shown. The 32-bit version is showing a correct name ("Overlay Mixer")

 

Evading Autoruns, or: don’t rely solely on Autoruns for security
https://www.ghacks.net/2017/11/05/evading-autoruns-or-dont-rely-solely-on-autoruns-for-security/

 

Sysinternals Update: Autoruns v13.81
Tuesday, December 12, 2017
https://docs.microsoft.com/en-us/sysinternals/downloads/autoruns
&
https://live.sysinternals.com/

Run now from Sysinternals Live:
https://live.sysinternals.com/autoruns.exe