Questions tagged [sysinternals]

Windows Sysinternals is a part of the Microsoft TechNet website which offers technical resources and utilities to manage, diagnose, troubleshoot, and monitor a Microsoft Windows environment.

The Sysinternals web site was created by Mark Russinovich and Bryce Cogswell to host their advanced system utilities and technical information.

The website featured several freeware tools that aid in the adminstration of local and remote Windows systems.

Sysinternals is now part of the Microsoft TechNet website.

166 questions
0
votes
1 answer

How to get the count of all file IO system calls in Windows

How do I get the number of all file IO calls produced within the Windows-based OS (to get it working at least on XP) for all processes? Something similar to the Process Monitor, but programmatically accessible from C# (can be via C++ or C) I don't…
oleksii
  • 35,458
  • 16
  • 93
  • 163
0
votes
1 answer

running UI tests remotely on a VM in Azure pipeline

I have to automate running UI tests remotely on a VM in Azure pipeline. I can't use build agent for it. I am using vsconsole.exe to execute the test cases. Now when i run it, through sysinternals psexec, it fails because it need "Active…
0
votes
2 answers

How to add startup apps in Windows 10 if Task Manager is replaced with SysInternals Process Explorer?

I'm on Windows 10 1809. I have installed SysInternals Process Explorer and have it substituted for Task Manager. I now need to add an application to the "Startup" list. I can see the Startup list in Control Panel, but I don't see a way to add to…
David M. Karr
  • 14,317
  • 20
  • 94
  • 199
0
votes
0 answers

Application crashes when Windows 10 left idle

I'm observing a problem that is getting really difficult to root cause. My WPF application which is pretty heavy on memory and disk I/O behaves very strangely in the below scenario: When the machine and application is left idle for about 15 minutes…
Manav Sharma
  • 1,053
  • 1
  • 13
  • 21
0
votes
0 answers

Failed to find RtlCopyMemory procedure in ntdll.dll, only when GOARCH=386

When GOARCH=386, the following code will return the following error package main import ( "syscall" ) var ( kernel32 = syscall.MustLoadDLL("kernel32.dll") ntdll = syscall.MustLoadDLL("ntdll.dll") VirtualAlloc =…
dkx22
  • 1,103
  • 1
  • 13
  • 25
0
votes
0 answers

"The handle is invalid" when invoking PSExec using PHP's exec function

Alright, I've read all the forums and other SO posts but to no avail. Been banging my head on the wall for this. I have a very minimal PHP page like this:
Tikiyetti
  • 445
  • 1
  • 4
  • 17
0
votes
0 answers

-notmatch '.JPG|.PNG' then to scan results with sigcheck

check users in $directory recursive and if no files contain extension JPG,PNG etc then run the results with sigcheck excluding those files? $directory = dir E:\Users $SigcheckPath = "C:\Windows\temp\sigcheck.exe" $path1 = "download" $path2 =…
0
votes
1 answer

Scripted method to find and kill process using a specific dll

I need your help to make a script to be used to alleviate symptoms of an issue while we dig into it and find the cause. Description of issue: We have a problem where a dll gets locked and this stops IIS from handling requests. There are a couple of…
Vanquished Wombat
  • 9,075
  • 5
  • 28
  • 67
0
votes
1 answer

How to batch or cli automate sigcheck.exe on running processes?

I'm trying to generate a list of running processes (full executable path), and then loop through that listing and perform a SysInternals "sigcheck.exe" against each of the files. For some reason this isn't performing as expected and I'm unsure if…
devnulldad
  • 25
  • 5
0
votes
1 answer

Procdump to capture service hangs

I am using below command to obtain procdump dump file when a service hangs but it not doing anything procdump -64 -ma -t -n 2 -s 10 MyProcess.exe C:\myprocess.exe.dmp
Karamzov
  • 343
  • 1
  • 4
  • 12
0
votes
2 answers

PowerShell Issue regarding entering a PS Session and setting permissions

I am currently making a script to create a folder which then creates an AD group and links them together. I then connect to our server in the data centre to set the permissions. To do this I need to enter a PSSession and find the folder and set the…
0
votes
1 answer

What does MS Sysinternals tool(Sysmon)'s guid meaning

I have a guid which Sysinternals tools named Sysmon left. It looks like this. 3/18 C591B94E-4BDD-5AAE-0000-001073B13706 4/4 C591B94E-1BFA-5AC5-0000-0010E76F3903 4/29 C591B94E-A33F-5AE5-0000-001074CA4C26 5/2(different windows account)…
0
votes
0 answers

Capture frame from remote surveillance system

I am trying to reverse engineer a surveillance system. The system contains a stand alone "box" which connects the cameras and records the video to an internal drive in the "box". The system connects by Ethernet to a windows system which controls…
rune711
  • 351
  • 1
  • 11
0
votes
1 answer

List dll not providing the dll details

As part of our TFS build definitions we included a custom PowerShell as a last build step to identify the left over process from the build and kill them. Inside the script we added below PowerShell command to list all the Dlls and the process…
Naresh
  • 35
  • 4
0
votes
1 answer

Autologon.exe via command line and get result

Is there a way I can execute sysinternals Autologon.exe from command line (Powershell) and get the result, i.e. know if the credentials entered were correct? If I use the GUI and not the command line then I do get message with this info.. Thanks.
Noam
  • 1,640
  • 4
  • 26
  • 55