Sysinternals
Advanced system utilities to manage, troubleshoot, and diagnose Windows and Linux systems and applications.
1,096 questions
Procmon 3.8x doesn't display process name, path, cmdline, nor user in the Event Properties page for PML files
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(288, 37%, 37%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EMM%3C/text%3E%3C/svg%3E)
Mike M
11
Reputation points
After upgrading to Procmon v3.83, 3.84, and 3.85 recently, I noticed that the Event Properties page \ Process tab doesn't populate with all of the expected info, when viewing events from saved PML files. If I view properties for events in a live trace, the info is populated, but the same thing on a saved trace results in an incomplete dialog. This issue cropped up with a recent upgrade; I don't remember seeing this issue prior to v3.80 (and I use it nearly every day). The process information is saved in the PML file as it's visible in the main window, but the properties page doesn't display it.
Sysinternals