Autoruns displays Office add-ins, more startup locations
Microsoft Sysinternals has announced the latest round of updates for its stellar PC maintenance tools.
Startup program detector Autoruns 13.4 now reports Office add-ins, showing you the associated DLLs, their location and VirusTotal score.
Autoruns now always displays hosting system executables (cmd.exe, powershell.exe etc), even when "Hide Windows" and "Hide Microsoft" filters are enabled, a smart move as they could be hosting (or have been launched by) non-system processes.
Process Monitor 3.2 has seen some developer-friendly tweaks, including support for extra file system control strings and error codes, and an option to show all file system values in hex.
VMMap 3.2 fixes a major bug which prevented it analyzing Control Flow Guard’s reserved memory region.
Finally, console-based permission checker AccessChk 6.0 can now report the permissions and security descriptors of event logs, while also "incorporating owner-rights accesses in its permissions evaluations". (No, we’re not quite sure about that, either.)
Autoruns 13.4, Process Monitor 3.2, VMMap 3.2 and AccessChk 6.0 are available now for Windows XP and later.