KB5074177

Microsoft has released cumulative update KB5074177 for Windows 11 version 25H2 for insiders on the Beta channel – Windows 11 Insider Preview Quality Update (26220.7752). In the Windows Insider program on the Beta channel, new updates for Windows 11 have appeared, and Windows 11 Insider Preview Build 26220.7752 (KB5074177) has been released. Users of this channel will now receive Windows 11 version 25H2 updates, which are available through the feature enablement package KB5066383 (build 26220.xxx).

• Sysmon integration. Microsoft is integrating Sysmon directly into Windows 11 and Windows Server 2025. In Windows 11 on the Beta channel, there is now built-in support for Sysmon – a system event monitoring tool previously available separately as part of the Sysinternals suite. Sysmon allows logging system events useful for threat detection and security analysis, as well as using custom configuration files to filter tracked events. All collected data is written to the Windows event log, making it easier to use in security tools and analytical scenarios.
• Dutch language support for Voice Access. Added support for the Dutch language (Netherlands) for the Voice Access voice control feature, expanding the list of supported locales and improving voice control accessibility in Windows.
• File Explorer fixes. Fixed several issues, including accessibility improvements (keyboard navigation and keyboard shortcuts), errors when renaming folders with custom names, and missing icons and tooltips for the Add to Favorites action.
• Fix for application freezes when working with cloud files. Resolved an issue where applications could freeze when working with files stored in cloud services such as OneDrive or Dropbox. In some configurations, Outlook with PST files on OneDrive could freeze or repeatedly reload email data.

Installation is done through Windows Update: go to Settings > Windows Update and click Check for updates. A computer restart is required to complete the installation.

How the new features work:

Sysmon integration: In Windows 11 and Server 2025, Sysmon is built into the OS as a component. It operates at the filesystem minifilter driver level and ETW audit subsystem. On boot, it loads a configuration from registry or XML file; kernel-mode hooks intercept process creation, network connections, and registry changes. Data is passed to sysmon.sys driver and written to Microsoft-Windows-Sysmon/Operational Event Log, compatible with SIEM tools.

Dutch language support for Voice Access: Voice Access loads a localized acoustic and language model for Dutch (Netherlands). The system pulls command grammar through Windows.Media.SpeechRecognition API with an nl-NL trained model. The phonetic command dictionary is compiled into a binary recognition graph; processing runs on CPU with DSP acceleration when available.

File Explorer fixes: Fixes address explorer.exe and its XAML Islands component — keyboard navigation fixed via proper focus handling for ListView and RecyclerViewer. The custom folder rename error originated from incorrect polling of IFileOperation in the main window thread; synchronous wait fixed. Missing icons for "Add to Favorites" relate to IShellLink redirection in shell32.dll — resource caching restored.

Fix for application freezes when working with cloud files: Freezes were caused by blocking async CfApi (Cloud Files API) calls. Outlook with PST on OneDrive used synchronous CfGetPlaceholderState, waiting for cloud filter cldflt.sys response. Network delays caused UI thread mutex hangs. The fix adds timeouts and background retry queue via RtlRunOnceExecuteOnce, not blocking window message loop.

The last 10 Windows updates: