No matter what, whenever I try to install sysmon64 using the command sysmon64.exe -i config.xml (using swift on security), from powershell or command prompt, logged in as admin and elevated (Not running as SYSTEM), it crashes with the following error. It doesn't seem to be a problem with my NGAV or EDR as nothing is logged and it works on newer versions of Windows Server.
Problem signature:
Problem Event Name: APPCRASH
Application Name: Sysmon64.exe
Application Version: 13.33.0.0
Application Timestamp: 620d7234
Fault Module Name: Sysmon64.exe
Fault Module Version: 13.33.0.0
Fault Module Timestamp: 620d7234
Exception Code: c0000005
Exception Offset: 00000000000a000d
OS Version: 6.3.9600.2.0.0.400.8
Locale ID: 1033
Additional Information 1: 077e
Additional Information 2: 077ea872e37c0bed723e6c91da1f40c1
Additional Information 3: 6f09
Additional Information 4: 6f09d1b41df8f0fbfa7b6992481611ed
Read our privacy statement online:
http://go.microsoft.com/fwlink/?linkid=280262
If the online privacy statement is not available, please read our privacy statement offline:
C:\Windows\system32\en-US\erofflps.txt
