vmmap crush on Launch and Trace New Process
I am using VMMAP 32 bit 3.31 on win 10 64 bit. After selecting new process to trace from fresh start and clicking Timeline, vmmap will open timeline window with no data, linger for a while and then close. Started 32bit process created with delphi will…
Sysinternals
How creat pdf file include folder
Sir, Pls, how can i creat pdf file include Folder, to work with powershell I find this link, but this link is inert :( https://social.technet.microsoft.com/wiki/contents/articles/30427.creating-pdf-files-using-powershell.aspx Thank for your Help Arnold
Sysinternals
how can i measure the bandwith on a connection reliable with psing ?
Hi folks, how can i measure the bandwith on a connection reliable with psing ? Because of problems with sound quality during online-meetings i's like to measure reliable the bandwith of our network. I'm using "psping -b -l 1000 -n 100 host.tld:2000.…
Sysinternals
Sysmon Event 1 : User SID
Hello! Why is there still no user SID in Sysmon Event id 1? Are you planning to add this field? (Perhaps this is some ancient legend that I have not heard).
Sysinternals
UI Bug - Some units disappearing for large values
In the System Information window, under the I/O tab, the Read/Write Bytes Delta values normally have a unit (KB) following them. For the values in the 'Disk' section, they can vanish if the number becomes large (5-6 digits). This does not seem to happen…
Sysinternals
Used Disk2VHD on a old Win10 box. Boots, but wants to chkdsk and this renders it unbootable.
I used Disk2VHD on a old Win10 box. Made the virtual hd, brought it over to a VM and setup a new VM. It boots and runs fine, but wants to chkdsk on every bootup and if I allow it to do this, it renders it unbootable. Ruined 2x virtual HDs and I've had…
Sysinternals
Feature request for Debug View
Unfortunately many shipping apps call OutputDebugString, even parts of Office, Windows and Visual Studio. The output is for their own developers but the end result is that Debug View gets spammed and anything I want to emit there is easily lost in the…
Developer technologies | Visual Studio | Debugging
Sysinternals
C0000005 Access Violation when running pslist
I can't run pslist without getting a 'C0000005 Access Violation' error (in %errorlevel%). Running with elevated privilege doesn't help. I suspect that I caused this by unintentionally changing the security settings on something, but I have no idea…
Sysinternals
How to undo disabled entry from command line?
I accidentally used Autoruns to disable several registry entries, and now Windows 10 is stuck in a boot loop. I'm unable to boot into safe mode, but I do have access to the command prompt. I don't know the exact keys I disabled, but I read that any…
Sysinternals
Still (at least) two bugs left in PsExec 2.3
PsExec 2.3 was initially released on Jan 11 with at least the three following bugs. One of them was fixed on January 12. The other two remain open and unfixed as of yet. These issues did not occur in version 2.2: FIXED on Jan 12: Error communicating…
Sysinternals

Autoruns: Two issues with HKCU/HKLM dual CLSID shellex registration
I've observed two issues with Explorer context menus when migrating from Beyond Compare 3 (registered to HKLM) to Beyond Compare 4 (registered to HKCU). HKCU\SOFTWARE\Classes*\shellex\ContextMenuHandlers\CirrusShellEx doesn't seem to be displayed by…
Sysinternals
Sysmon 12.03 - High CPU usage
Hello, Shortly after rolling out Sysmon 12.03 to several different Windows Servers (2012, 2016, 2019), users started to report they were not able to login to some of the servers. Upon further investigation, we realize there were high CPU usage on the…
Sysinternals

Can ZoomIt have Stopwatch/timer lapse feature along with existing features? Would be handy.
ZoomIt app has been very useful and instrumental in day to day work/tasks. I also feel that, it can have another feature - Stop watch ability , timers within, as to, come in handy with showing the timer, stopwatch time with the transparent background and…
Sysinternals
How is Process Explorer obtaining the entire list of loaded DLLs by a process?
Open Process Explorer Select a Process Ctrl+D to see the list of loaded DLLs Ctrl+A to save the information to a file I see 1050 DLLs loaded in the text file Using Listdlls for the same running process it only returns 230 DLLs . Any ideas…
Sysinternals
Possible bug in autoruns - maybe this is common - Jump To Entry does not get to the correct entry in regedit
When I run autoruns and use the "jump to entry" option on the context menu it does not always get me to the actual entry expected. Not sure how this functionality is provided so not sure if this is a bug in autoruns or in Regedit.…
Sysinternals


Unable to download the files from chrome using psexec64.exe command in windows
Hi I am trying to run a script from local system into windows remote machine using psexec64.exe . This selenium script needs to download few reports from web browser but each time download fails stating server problem network failed . Without using…
Sysinternals
Procmon Spawning Endless Processes
When I launch Procmon it starts to make endless sub-processes of itself. I'm not sure why it takes off like wildfire. Edition Windows 10 Pro Version 20H2 Installed on 10/27/20 OS build 19042.746 Experience Windows Feature Experience Pack…
Sysinternals
Pearson Vue webcam
I am testing my system to ensure it works for my Exam in March using Pearson Vue. However, the microphone and webcam have a loading icon next to it, the internet is good though. I have contacted Pearson Vue about the issue and they say it is a issue on…
Sysinternals

Converting P2V Server 2008 to Hyper V 2019 issues
I'm trying to convert a Physical server 2008r2 system to put on a Hyper V on a server 2019. I got them converted using DisktoVHD but it keeps bluescreening when I try to start it. Is there something else I have to do to get it to work? Drivers or…
Sysinternals

Sysmon Event ID 22 - Filter localhost DNS queries
Is it possible to somehow exclude / filter out DNS queries so machine doesn't log localhost resolving. In sysmon logs I see majority of DNS events are coming from machine trying to resolve itself (QueryName: "localmachinename"). The following…