Process Monitor v3.50

billon on 14 Feb 2018
  • 2MB (uncompressed)
  • Released on 12 Feb 2018
  • Suggested by ClausValca

Process Monitor displays both file system and registry activities in real-time, combining the features of FileMon and RegMon. Additional features includes live changes (autoscroll), non-destructive filtering, comprehensive event properties such session IDs and user names, reliable process information, full thread stacks with integrated symbol support for each operation, file logging etc.

Alternatively, Process Monitor Portable is also available, which is stealth.

System Requirements: Vista / Win7 / Win8 / Win10
Writes settings to: Windows registry
Dependencies: Administrator rights
Stealth: ? No
License: Freeware
How to extract: Download the ZIP package and extract to a folder of your choice. Delete Eula.txt. Launch Procmon.exe
Similar/alternative apps: Moo0 File Monitor
What's new?
  • A /runtime switch to control headless capture duration.
  • Correctly show picoprocesses.
  • Display details for file system APIs introduced in Windows 10.
  • Numerous minor improvements and bug fixes.

15 comments on Process Monitor  The Portable Freeware Collection Latest Entries Feed

Gluek 2007-04-07 10:19

Perfect software for system monitoring, not only for geeks :)

dot 2007-07-25 09:24

Requires XP SP2! Darn! Doesn't run on XP SP1.

(alireza: extracted or "uncompressed" it's 2.32 MB)

wagonman 2008-04-14 11:42

Very competent C3P0 to help you in your faultfinding efforts. For example: What makes the CPU to run at near top speed when I believe the machine to be idle? Iip: By clicking one of the big icons. top right, you get a graph showing the last half minute┬┤s activities when the cursor is left on the window. It also runs an icon in the quick tray showing angry colours when CPU is over-heating. Perfect companion to SysInternals┬┤ "Autoruns". :-) !!

An essential must for lap-top users for help in conserving power.

Easy to learn, both programs.

noob 2008-05-16 04:25

if someone were inclined to write a guide describing how to set this up to test for application portability, i am sure it would be appreciated by many :)

just not sure what to filter to see if files are created or if registry entries are made/deleted...

Roland 2008-05-23 07:22

If you're like me and don't like the bits it writes to the registry, you can try DTaskManager:

linuxamp 2008-10-06 17:35

Getting a warning "
This version of Dbghelp.dll configured does not support the Microsoft Symbol Server. Please download and install the Microsoft Debugging Tools for Windows to get a version that does."

Anyone else seeing this?

linuxamp 2008-10-06 18:39

It seems that this warning will continue to nag you upon launch unless you actually install the debugging tools which you may never otherwise use. Very irritating.

a 2008-11-03 07:56

Installs a driver and writes it's settings in the registry. Not portable by my standards. Quite a few times Windows XP has crashed/restarted after using new sysinternals software. Maybe it's an incompatibility with older software that has been used, I'll never know, What I do know is I will stick to the older releases. Process Explorer is indispensable.

Fox Cole 2009-03-28 13:34

On Vista Home Premium, it runs out of memory... can't allocate a memory block of 459893316; closing the error closes the program. This shouldn't be happening.

shodan816 2012-04-17 17:03

I would really like to know why this is considered 'PORTABLE freeware' when it writes it's settings to the system registry. Anyone?!


webfork 2012-04-17 23:41

shodan816: plz post in forums the registry settings in question. Thnx.


__philippe 2015-05-27 14:49

Process Monitor v3.2 (released 26-May-2015)

- adds an option to show all file system values in hexadecimal
- adds additional error code and file system control strings
- fixes a bug that prevented boot capture on Windows 10.


Checker 2015-05-27 19:06

@ __philippe: Thanks ... and updated ;)


__philippe 2016-07-29 13:17

Annoyingly, SysInternals' powers-that-be no longer deem worth their while to provide a changelog of their recent releases.

Current cases in point: ProcessMonitor v3.30, AutoRuns v13.62,

Sloppy version control management, if you ask me...:-(

On a positive point, they resumed adjusting correctly the internal PE tags version numbering of their updated utilities, which proved rather baffling for a while

(see smaragdus' related post:

Regrettably, some of SysInternals' recently updated tools now fail to run under WinXP......:-(
(e.g. Procmon v3.30 fails under winXP, despite the "Process Monitor runs on Windows XP SP2"
plain statement found in the Procmon.chm HTML help file)

Cases in point:
ProcessMonitor fails as of v3.30 (blue screen crash, last XP working version v3.20)
SigCheck fails as of v2.40 (last XP working version v2.30)


MIKLO 2016-08-29 18:10

@ __philippe do you know is there gonna be any effort made to correct this? I'm kinda surprised cuz I have always thought of SysInternals as being a first rate top notch entity, but they are not showing that in this case.Even if the changelogs are only interesting or necessary to a few people in my opinion that reason enough to continue with accurate data.


Post your comment