These buttons open the developer's own site, repository or store listing in a new tab. wares.gg does not host downloads.
3 more ways to get Process Monitor
Other download sites
Run by third parties, not by Microsoft Sysinternals. Prefer the official page above when it works.
Package managers
- winget
winget install --id Microsoft.Sysinternals.ProcessMonitor
About Process Monitor
When an installer fails with no useful error, or a program cannot find a configuration file it insists exists, Process Monitor is the tool that tells you why. It records every file system and registry operation as it happens, with the result code, so you can see the exact path that returned NAME NOT FOUND or ACCESS DENIED.
It combines the old Filemon and Regmon utilities and adds rich non-destructive filtering, which matters because it captures tens of thousands of events a minute. You filter down after capturing rather than deciding in advance. Each event carries a full thread stack, session and user details and a timestamp.
It is a Sysinternals tool, distributed as a ZIP, and there is a Procmon for Linux too.
Strengths
- Shows the exact file or registry path that failed and the result code it returned
- Non-destructive filtering, so you can narrow down after capturing rather than before
- Full thread stack, session and user detail on every event
- A Linux version exists alongside the Windows one
Limitations
- Windows only for the main version
- Generates enormous volumes of events; filtering is mandatory, not optional
- Closed source
- Interpreting the output needs some understanding of how Windows loads things
Details
- Pricing
- Free · Free to download and use, published by Microsoft as part of the Sysinternals suite. The source is not published.
- License
- Proprietary
- Developer
- Microsoft Sysinternals
- Platforms
- Windows
- How it runs
- Downloadable app
- Account
- Not required
- Works offline
- Yes
- Best suited for
- Diagnosing why a program or installer is failing when the error message says nothing
- Categories
- System monitoring
- Last verified
- Added
- Provenance
- Selected from the TechWalrus downloads catalog (System Monitor); facts checked against the developer's own pages, 2 sources on file.