# Sysinternals changelog

> Microsoft's Windows troubleshooting utilities — Process Explorer, Process Monitor, Autoruns, ProcDump and the rest of the suite.

- Vendor: Microsoft
- Category: System Utilities
- Platforms: Windows
- Official site: https://learn.microsoft.com/en-us/sysinternals/
- Tracked by: What's New (https://whatsnew.fyi/product/sysinternals)
- Harvested from: Blog (https://techcommunity.microsoft.com/t5/s/gxcuf89792/rss/board?board.id=Sysinternals-Blog)
- Entries below: 15 (newest first)

What's New is an index, not a publisher: every entry below links to the vendor's own release notes, which are the authoritative source. Entries are labelled where they are hand-curated sample data, pre-releases, or drawn from a secondary source such as a developer blog.

Reuse: the summaries, labels and curation here are © What's New. Quote freely with attribution and a link back; wholesale republication of the corpus is not permitted — terms: https://whatsnew.fyi/terms. The vendors' own release notes remain their publishers'.

## Releases

### Process Monitor v4.1, ZoomIt 12.3 for macOS, RDCMan v3.21, and ZoomIt v12.21

- Date: 2026-08-19
- Original notes: https://techcommunity.microsoft.com/t5/sysinternals-blog/process-monitor-v4-1-zoomit-12-3-for-macos-rdcman-v3-21-and/ba-p/4548264
- Permalink: https://whatsnew.fyi/product/sysinternals/releases/2026-08-19-process-monitor-v4.1-zoomit-12.3-for-macos-rdcman
- Labels: Platforms: Windows

Process Monitor v4.1 This update to Process Monitor, a utility for observing real-time file system, Registry, and process or thread activity, adds the IPC event class for named pipes and mailslots. Zo…

- **added** — Add IPC event class for named pipes and mailslots in Process Monitor
- **added** — Introduce DemoMirror feature for mirroring the screen, a screen region, or a window onto a second monitor in ZoomIt for macOS
- **changed** — Re-enable remote desktop gateway support in RDCMan
- **fixed** — Fix application hang occurring when recording in ZoomIt

[Process Monitor v4.1](https://learn.microsoft.com/sysinternals/downloads/procmon)
This update to Process Monitor, a utility for observing real-time file system, Registry, and process or thread activity, adds the IPC event class for named pipes and mailslots.
[ZoomIt 12.3 for macOS](https://github.com/microsoft/ZoomitForMac/releases/tag/12.3.0)
This update to ZoomIt for macOS, a screen magnification and annotation tool, introduces DemoMirror for mirroring the screen, a screen region, or a window, onto a second monitor.
[RDCMan v3.21](https://learn.microsoft.com/sysinternals/downloads/rdcman)
This update to RDCMan, a tool for managing and connecting to Remote Desktop sessions, re-enables remote desktop gateway support.
[ZoomIt v12.21](https://learn.microsoft.com/sysinternals/downloads/zoomit)
This update to ZoomIt, a screen magnification and annotation tool, fixes an application hang occurring when recording.

### NotMyFault, RDCMan, ZoomIt, CoreInfo, Process Explorer, Process Monitor, and PsPing

- Date: 2026-08-12
- Original notes: https://techcommunity.microsoft.com/t5/sysinternals-blog/notmyfault-rdcman-zoomit-coreinfo-process-explorer-process/ba-p/4546406
- Permalink: https://whatsnew.fyi/product/sysinternals/releases/2026-08-12-notmyfault-rdcman-zoomit-coreinfo-process-explore
- Labels: Platforms: Windows

NotMyFault v4.6 This update to NotMyFault, a tool that creates on-demand Windows crashes, hangs, and kernel memory leaks, is now in Rust and has a modern UI. RDCMan v3.20 This update to RDCMan, a tool…

- **changed** — NotMyFault is now written in Rust and features a modern UI
- **added** — RDCMan adds Azure Virtual Desktop workspace feed support
- **added** — RDCMan adds Microsoft Dev Box support
- **added** — ZoomIt introduces DemoMirror for mirroring the screen, a screen region, or a window onto a second monitor
- **changed** — CoreInfo improves CPU vendor name detection
- **added** — CoreInfo adds Intel LP-E cores support
- **added** — Process Explorer adds core type information for Intel CPUs
- **added** — Process Monitor adds a new Process Tree PID filtering capability for matching based on any ancestor process ID in the process tree
- **fixed** — PsPing fixes a series of bugs

[NotMyFault v4.6](https://learn.microsoft.com/sysinternals/downloads/notmyfault)
This update to NotMyFault, a tool that creates on-demand Windows crashes, hangs, and kernel memory leaks, is now in Rust and has a modern UI.
[RDCMan v3.20](https://learn.microsoft.com/sysinternals/downloads/rdcman)
This update to RDCMan, a tool for managing and connecting to Remote Desktop sessions, adds Azure Virtual Desktop workspace feed, and Microsoft Dev Box support.
[ZoomIt v12.2](https://learn.microsoft.com/sysinternals/downloads/zoomit)
This update to ZoomIt, a screen magnification and annotation tool, introduces DemoMirror for mirroring the screen, a screen region, or a window, onto a second monitor.
[CoreInfo v4.02](https://learn.microsoft.com/sysinternals/downloads/coreinfo)
This update to Coreinfo, a tool that reports processor, socket, NUMA memory, and cache topology of a system, as well as processor features supported, improves CPU vendor name detection, and adds Intel LP-E cores support.
[Process Explorer v17.13](https://learn.microsoft.com/sysinternals/downloads/process-explorer)
This update to Process Explorer, an advanced process, DLL, and handle viewing utility, adds core type information for Intel CPUs.
[Process Monitor v4.05](https://learn.microsoft.com/sysinternals/downloads/procmon)
This update to Process Monitor, a utility for observing real-time file system, Registry, and process or thread activity, adds a new Process Tree PID filtering capability for matching based on any ancestor process ID in the process tree.
[PsPing v2.13](https://learn.microsoft.com/sysinternals/downloads/psping)
This update to PsPing, a tool implementing the standard ping functionality, alongside TCP/UDP latency and bandwidth measurements, fixes a series of bugs.

### LiveKd v5.65, ProcDump v12.01, and ZoomIt v12.11

- Date: 2026-07-09
- Original notes: https://techcommunity.microsoft.com/t5/sysinternals-blog/livekd-v5-65-procdump-v12-01-and-zoomit-v12-11/ba-p/4535408
- Permalink: https://whatsnew.fyi/product/sysinternals/releases/2026-07-09-livekd-v5.65-procdump-v12.01-and-zoomit-v12.11
- Labels: Platforms: Windows

LiveKd v5.65 This update to LiveKd, a utility that allows running the kernel debugger on a live system, protects generated dump files from non-admin readers. ProcDump v12.01 This update to ProcDump, a…

- **security** — Protect generated dump files from non-admin readers in LiveKd
- **added** — Add JPEG and WEBP snip support to ZoomIt
- **fixed** — Apply bug fixes to ProcDump

[LiveKd v5.65](https://learn.microsoft.com/sysinternals/downloads/livekd)
This update to LiveKd, a utility that allows running the kernel debugger on a live system, protects generated dump files from non-admin readers.
[ProcDump v12.01](https://learn.microsoft.com/sysinternals/downloads/procdump)
This update to ProcDump, a command-line utility for generating memory dumps from running processes, adds bug fixes.
[ZoomIt v12.11](https://learn.microsoft.com/sysinternals/downloads/zoomit)
This update to ZoomIt, a screen magnification and annotation tool, adds JPEG and WEBP snip support.

### Autoruns, ZoomIt, Coreinfo, DebugView, LiveKd, ProcDump for Linux, Process Monitor, and Sysmon

- Date: 2026-06-19
- Original notes: https://techcommunity.microsoft.com/t5/sysinternals-blog/autoruns-zoomit-coreinfo-debugview-livekd-procdump-for-linux/ba-p/4528947
- Permalink: https://whatsnew.fyi/product/sysinternals/releases/2026-06-19-autoruns-zoomit-coreinfo-debugview-livekd-procdum
- Labels: Platforms: Windows

Autoruns v14.3 This update to Autoruns, a utility for monitoring startup items, adds bug fixes and fully aligns the command-line autorunsc with the GUI capabilities, including packaged apps support. Z…

- **added** — Autoruns command-line autorunsc now fully aligns with GUI capabilities including packaged apps support
- **fixed** — Autoruns bug fixes
- **added** — ZoomIt image backgrounds support
- **added** — ZoomIt webcam background blur support
- **added** — ZoomIt microphone noise cancellation support
- **added** — Coreinfo support for new processor features
- **added** — DebugView Ctrl-Shift-A support for selecting all output
- **added** — DebugView agent skills support for the CLI utility
- **fixed** — LiveKd debugging privileges issue
- **added** — ProcDump for Linux .NET counters support
- **added** — ProcDump for Linux custom core dumper
- **fixed** — Process Monitor bug fixes
- **fixed** — Sysmon bug fixes

[Autoruns v14.3](https://learn.microsoft.com/sysinternals/downloads/autoruns)
This update to Autoruns, a utility for monitoring startup items, adds bug fixes and fully aligns the command-line autorunsc with the GUI capabilities, including packaged apps support.
[ZoomIt v12.1](https://learn.microsoft.com/sysinternals/downloads/zoomit)
This update to ZoomIt, a screen magnification and annotation tool, adds image backgrounds, webcam background blur and microphone noise cancellation support.
[Coreinfo v4.01](https://learn.microsoft.com/sysinternals/downloads/coreinfo)
This update to Coreinfo, a tool that reports processor, socket, NUMA memory, and cache topology of a system, as well as processor features supported, adds support for new processor features.
[DebugView v5.02](https://learn.microsoft.com/sysinternals/downloads/debugview)
This update to DebugView, a tool for displaying both kernel-mode and Win32 debug output, adds Ctrl-Shift-A support for selecting all output, and agent skills support for the CLI utility.
[LiveKd v5.64](https://learn.microsoft.com/sysinternals/downloads/livekd)
This update to LiveKd, a utility that allows running the kernel debugger on a live system, fixes a debugging privileges issue.
[ProcDump 3.5.2 for Linux](https://github.com/microsoft/procdump-for-linux/releases/tag/3.5.2)
This update to ProcDump for Linux, a tool for capturing process dumps, adds .NET counters and a custom core dumper.
[Process Monitor v4.04](https://learn.microsoft.com/sysinternals/downloads/procmon)
This update to Process Monitor, a utility for observing real-time file system, Registry, and process or thread activity, adds some bug fixes.
[Sysmon v15.21](https://learn.microsoft.com/sysinternals/downloads/sysmon)
This update to Sysmon, an advanced host security monitoring tool, adds some bug fixes.

### Process Monitor v4.03

- Date: 2026-06-10
- Original notes: https://techcommunity.microsoft.com/t5/sysinternals-blog/process-monitor-v4-03/ba-p/4527319
- Permalink: https://whatsnew.fyi/product/sysinternals/releases/2026-06-10-process-monitor-v4.03
- Labels: Platforms: Windows

Process Monitor v4.03 This update to Process Monitor, a utility for observing real-time file system, Registry, and process or thread activity, adds some bug fixes.

- **fixed** — Bug fixes

[Process Monitor v4.03](https://learn.microsoft.com/sysinternals/downloads/procmon)
This update to Process Monitor, a utility for observing real-time file system, Registry, and process or thread activity, adds some bug fixes.

### Autoruns, ProcDump, ZoomIt, DebugView, NotMyFault, ProcExp, Procmon, and Linux tools

- Date: 2026-05-07
- Original notes: https://techcommunity.microsoft.com/t5/sysinternals-blog/autoruns-procdump-zoomit-debugview-notmyfault-procexp-procmon/ba-p/4517553
- Permalink: https://whatsnew.fyi/product/sysinternals/releases/2026-05-07-autoruns-procdump-zoomit-debugview-notmyfault-pro
- Labels: Platforms: Windows

Autoruns v14.2 This update to Autoruns, a utility for monitoring startup items, adds support for Windows packaged apps. ProcDump v12.0 This update to ProcDump, a command-line utility for generating me…

- **added** — Autoruns now supports Windows packaged apps
- **added** — ProcDump adds process tree support with -pt flag
- **added** — ZoomIt adds webcam overlay support for video captures
- **added** — ZoomIt allows appending clips in the video trim editor
- **changed** — DebugView reinstates Windows 10 support
- **added** — DebugView enables highlighting on PID
- **fixed** — DebugView fixes a series of bugs
- **added** — NotMyFault adds a new type of crash for Level-0 Hyper-V virtualized machines
- **added** — NotMyFault adds a SecureKernel crash
- **added** — Process Explorer adds a parent PID column to the main view
- **fixed** — Process Explorer fixes a crash on exit
- **added** — Process Monitor adds Ctrl + PgUp/PgDn for longer scrolling in the main list view
- **changed** — Process Monitor shows milliseconds for the times in the Process Tree dialog
- **fixed** — Process Monitor fixes a series of API mismatches
- **changed** — Sysinternals EBPF, Sysmon for Linux, Procmon for Linux, ProcDump for Linux, and jcd now support RHEL10, Debian 13, and Fedora 43

[Autoruns v14.2](https://learn.microsoft.com/sysinternals/downloads/autoruns)
This update to Autoruns, a utility for monitoring startup items, adds support for Windows packaged apps.
[ProcDump v12.0](https://learn.microsoft.com/sysinternals/downloads/procdump)
This update to ProcDump, a command-line utility for generating memory dumps from running processes, adds process tree support with -pt.
[ZoomIt v12.0](https://learn.microsoft.com/sysinternals/downloads/zoomit)
ZoomIt, a screen magnification and annotation tool, brings webcam overlay support for video captures and allows appending clips in the video trim editor.
[DebugView v5.01](https://learn.microsoft.com/sysinternals/downloads/debugview)
This update to DebugView, a tool for displaying both kernel-mode and Win32 debug output, reinstates Windows 10 support, enables highlighting on PID, and fixes a series of bugs.
[NotMyFault v4.5](https://learn.microsoft.com/sysinternals/downloads/notmyfault)
This update to NotMyFault, a tool that can crash, hang, and cause kernel memory leaks on the Windows system, adds a new type of crash for Level-0 Hyper-V virtualized machines, and adds a SecureKernel crash.
[Process Explorer v17.12](https://learn.microsoft.com/sysinternals/downloads/process-explorer)
This update to Process Explorer, an advanced process, DLL, and handle viewing utility, adds a "parent PID" column to the main view and fixes a crash on exit.
[Process Monitor v4.02](https://learn.microsoft.com/sysinternals/downloads/procmon)
This update to Process Monitor, a utility for observing real-time file system, Registry, and process or thread activity, adds Ctrl + PgUp/PgDn for longer scrolling (10 page) in the main list view, shows milliseconds for the times in the Process Tree dialog, and fixes a series of API mismatches.
Linux tools
Sysinternals EBPF, Sysmon for Linux, Procmon for Linux, ProcDump for Linux, jcd (on Linux), have been updated with support for RHEL10, Debian 13, and Fedora 43.
- [Sysmon 1.5.2 for Linux](https://github.com/microsoft/sysmonforlinux/releases/tag/1.5.2)
- [Procmon 2.2.1 for Linux](https://github.com/microsoft/ProcMon-for-Linux/releases/tag/2.2.1)
- [ProcDump 3.5.1 for Linux](https://github.com/microsoft/procdump-for-linux/releases/tag/3.5.1)
- [jcd 1.0.2](https://github.com/microsoft/jcd/releases/tag/1.0.2)

### Process Explorer v17.11

- Date: 2026-04-09
- Original notes: https://techcommunity.microsoft.com/t5/sysinternals-blog/process-explorer-v17-11/ba-p/4510019
- Permalink: https://whatsnew.fyi/product/sysinternals/releases/2026-04-09-process-explorer-v17.11
- Labels: Platforms: Windows

Process Explorer v17.11 This update to Process Explorer, an advanced process, DLL, and handle viewing utility, includes stability fixes.

- **fixed** — Stability fixes

[Process Explorer v17.11](https://learn.microsoft.com/sysinternals/downloads/process-explorer)
This update to Process Explorer, an advanced process, DLL, and handle viewing utility, includes stability fixes.

### listent for macOS, ZoomIt, Sysmon, DebugView, NotMyFault, Procmon for Linux, and RAMMap

- Date: 2026-03-26
- Original notes: https://techcommunity.microsoft.com/t5/sysinternals-blog/listent-for-macos-zoomit-sysmon-debugview-notmyfault-procmon-for/ba-p/4506035
- Permalink: https://whatsnew.fyi/product/sysinternals/releases/2026-03-26-listent-for-macos-zoomit-sysmon-debugview-notmyfa
- Labels: Platforms: Windows

listent 1.0 for macOS listent is a macOS command-line tool to discover and list code signing entitlements for executable binaries. It supports static scanning, real-time process monitoring, and backgr…

- **added** — listent for macOS command-line tool to discover and list code signing entitlements for executable binaries with static scanning, real-time process monitoring, and background daemon operation
- **added** — ZoomIt panorama and scrolling screenshots support
- **added** — ZoomIt text extraction during snip
- **changed** — ZoomIt break timer improvements
- **added** — ZoomIt trimming clip editor for existing .mp4 files
- **changed** — Sysmon internal events queue handling to improve resilience to dropped events on high system load
- **changed** — DebugView Windows 11 support
- **added** — DebugView dark theme for modern UI
- **changed** — DebugView performance optimizations
- **added** — NotMyFault secure kernel and hypervisor crash triggers
- **added** — RAMMap visual feedback to save and load operations

[listent 1.0 for macOS](https://github.com/microsoft/Sysinternals-listent/releases/tag/1.0.0)
listent is a macOS command-line tool to discover and list code signing entitlements for executable binaries. It supports static scanning, real-time process monitoring, and background daemon operation.
[ZoomIt v11.0](https://learn.microsoft.com/sysinternals/downloads/zoomit)
This update to ZoomIt, a screen magnification and annotation tool, adds panorama / scrolling screenshots support, text extraction during snip, break timer improvements, and enables the trimming clip editor for existing .mp4 files.
[Sysmon v15.2](https://learn.microsoft.com/sysinternals/downloads/sysmon)
This update to Sysmon, an advanced host security monitoring tool, improves the handling of the internal events queue, making the service more resilient to dropped events on high system load.
[DebugView v5.0](https://learn.microsoft.com/sysinternals/downloads/debugview)
This update to DebugView, a tool for displaying both kernel-mode and Win32 debug output, improves Windows 11 support and offers a modern UI with a dark theme, and includes performance optimizations.
[NotMyFault v4.4](https://learn.microsoft.com/sysinternals/downloads/notmyfault)
This update to NotMyFault, a tool that can crash, hang, and cause kernel memory leaks on the Windows system, adds secure kernel and hypervisor crash triggers.
[Procmon 2.2 for Linux](https://github.com/microsoft/ProcMon-for-Linux/releases/tag/2.2.0)
Process Monitor for Linux, a convenient and efficient way for developers to trace the syscall activity on the system, updates to dependencies.
[RAMMap v1.63](https://learn.microsoft.com/sysinternals/downloads/rammap)
This update to RAMMap, an advanced physical memory usage analysis utility for Windows, adds visual feedback to save and load operations.

### Process Explorer v17.1, SDelete v2.06, and Sysmon 1.5.1 for Linux

- Date: 2026-03-05
- Original notes: https://techcommunity.microsoft.com/t5/sysinternals-blog/process-explorer-v17-1-sdelete-v2-06-and-sysmon-1-5-1-for-linux/ba-p/4499799
- Permalink: https://whatsnew.fyi/product/sysinternals/releases/2026-03-05-process-explorer-v17.1-sdelete-v2.06-and-sysmon-1
- Labels: Platforms: Windows

Process Explorer v17.1 This update to Process Explorer, an advanced process, DLL, and handle viewing utility, fixes a crash generated by processes with long names. SDelete v2.06 This update to SDelete…

- **fixed** — Fix a crash generated by processes with long names in Process Explorer
- **added** — Add support for long file paths in SDelete
- **changed** — Restrict MFT optimization to NTFS partitions in SDelete
- **fixed** — Fix a Red Hat Enterprise Linux 9 eBPF program validation bug in Sysmon for Linux

[Process Explorer v17.1](https://learn.microsoft.com/sysinternals/downloads/process-explorer)
This update to Process Explorer, an advanced process, DLL, and handle viewing utility, fixes a crash generated by processes with long names.
[SDelete v2.06](https://learn.microsoft.com/sysinternals/downloads/sdelete)
This update to SDelete, a command line utility for secure file deletion, adds support for long file paths and restricts MFT optimization to NTFS partitions.
[Sysmon 1.5.1 for Linux](https://github.com/microsoft/sysmonforlinux/releases/tag/1.5.1.0)
This update to Sysmon for Linux, a tool that monitors and logs system activity including process lifetime, network connections, file system writes, and more, fixes a Red Hat Enterprise Linux 9 eBPF program validation bug.

### ZoomIt v10.0, Sysmon 1.5 for Linux, Sigcheck v2.91, RAMMap v1.62, and RDCMan v3.12

- Date: 2026-02-06
- Original notes: https://techcommunity.microsoft.com/t5/sysinternals-blog/zoomit-v10-0-sysmon-1-5-for-linux-sigcheck-v2-91-rammap-v1-62/ba-p/4492342
- Permalink: https://whatsnew.fyi/product/sysinternals/releases/2026-02-06-zoomit-v10.0-sysmon-1.5-for-linux-sigcheck-v2.91
- Labels: Platforms: Windows

ZoomIt v10.0 This update to ZoomIt, a screen magnification and annotation tool, adds a video clip editor for trimming recordings before saving them and supports recordings with system sounds. Sysmon 1…

- **added** — Add video clip editor for trimming recordings before saving them in ZoomIt
- **added** — Support recordings with system sounds in ZoomIt
- **added** — Add EbpfEvent for monitoring Linux EBPF program loading in Sysmon for Linux
- **changed** — Improve Windows 11 support in Sigcheck
- **fixed** — Fix display bug for file streams containing non-printable characters in RAMMap
- **fixed** — Fix IPv6 parsing in RDCMan
- **fixed** — Fix double click bug in RDCMan

[ZoomIt v10.0](https://learn.microsoft.com/sysinternals/downloads/zoomit)
This update to ZoomIt, a screen magnification and annotation tool, adds a video clip editor for trimming recordings before saving them and supports recordings with system sounds.
[Sysmon 1.5 for Linux](https://github.com/microsoft/sysmonforlinux/releases/tag/1.5.0.0)
This update to Sysmon for Linux, a tool that monitors and logs system activity including process lifetime, network connections, file system writes, and more, adds EbpfEvent for monitoring Linux EBPF program loading.
[Sigcheck v2.91](https://learn.microsoft.com/sysinternals/downloads/sigcheck)
This update to Sigcheck, a command-line utility that shows file version number, timestamp information, and digital signature details, including certificate chains, improves Windows 11 support.
[RAMMap v1.62](https://learn.microsoft.com/sysinternals/downloads/rammap)
This update to RAMMap, an advanced physical memory usage analysis utility for Windows, fixes a display bug for file streams containing non-printable characters.
[RDCMan v3.12](https://learn.microsoft.com/sysinternals/downloads/rdcman)
This update to RDCMan, a tool for managing and connecting to Remote Desktop sessions, fixes IPv6 parsing, and fixes a double click bug.

### Coreinfo v4.0, NotMyFault v4.30, and Process Explorer v17.09

- Date: 2025-12-17
- Original notes: https://techcommunity.microsoft.com/t5/sysinternals-blog/coreinfo-v4-0-notmyfault-v4-30-and-process-explorer-v17-09/ba-p/4478567
- Permalink: https://whatsnew.fyi/product/sysinternals/releases/2025-12-17-coreinfo-v4.0-notmyfault-v4.30-and-process-explor
- Labels: Platforms: Windows

Coreinfo v4.0 This update to Coreinfo, a tool that reports processor, socket, NUMA memory, and cache topology of a system, as well as processor features supported, now includes a GUI version and adds…

- **added** — Add GUI version to Coreinfo
- **added** — Add checks for features present in modern CPUs to Coreinfo
- **added** — Add Arm64 support to NotMyFault
- **added** — Add new crash type HalTimerWatchdogTriggerSystemReset to NotMyFault
- **fixed** — Fix image type bug in Process Explorer
- **changed** — Enable assemblies tab for .NET processes in Process Explorer

[Coreinfo v4.0](https://learn.microsoft.com/sysinternals/downloads/coreinfo)
This update to Coreinfo, a tool that reports processor, socket, NUMA memory, and cache topology of a system, as well as processor features supported, now includes a GUI version and adds checks for features present in modern CPUs.
[NotMyFault v4.30](https://learn.microsoft.com/sysinternals/downloads/notmyfault)
This update to NotMyFault, a tool that can crash, hang, and cause kernel memory leaks on the Windows system, adds Arm64 support and a new crash type for HalTimerWatchdogTriggerSystemReset.
[Process Explorer v17.09](https://learn.microsoft.com/sysinternals/downloads/process-explorer)
This update to Process Explorer, an advanced process, DLL, and handle viewing utility, fixes an image type bug, and enables the assemblies tab for .NET processes.

### Process Explorer v17.08

- Date: 2025-11-20
- Original notes: https://techcommunity.microsoft.com/t5/sysinternals-blog/process-explorer-v17-08/ba-p/4471908
- Permalink: https://whatsnew.fyi/product/sysinternals/releases/2025-11-20-process-explorer-v17.08
- Labels: Platforms: Windows

Process Explorer v17.08 This update to Process Explorer, an advanced process, DLL, and handle viewing utility, reenables the Image field in the process Properties dialog.

- **fixed** — Reenable the Image field in the process Properties dialog

[Process Explorer v17.08](https://learn.microsoft.com/sysinternals/downloads/process-explorer)
This update to Process Explorer, an advanced process, DLL, and handle viewing utility, reenables the Image field in the process Properties dialog.

### ZoomIt v9.21

- Date: 2025-11-17
- Original notes: https://techcommunity.microsoft.com/t5/sysinternals-blog/zoomit-v9-21/ba-p/4470760
- Permalink: https://whatsnew.fyi/product/sysinternals/releases/2025-11-17-zoomit-v9.21
- Labels: Platforms: Windows

ZoomIt v9.21 This update to ZoomIt, a screen magnification and annotation tool, fixes several minor bugs.

- **fixed** — Fixed several minor bugs

[ZoomIt v9.21](https://learn.microsoft.com/sysinternals/downloads/zoomit)
This update to ZoomIt, a screen magnification and annotation tool, fixes several minor bugs.

### ProcDump v11.1

- Date: 2025-11-13
- Original notes: https://techcommunity.microsoft.com/t5/sysinternals-blog/procdump-v11-1/ba-p/4469763
- Permalink: https://whatsnew.fyi/product/sysinternals/releases/2025-11-13-procdump-v11.1
- Labels: Platforms: Windows

ProcDump v11.1 This update to ProcDump, a command-line utility for generating memory dumps from running processes, fixes several minor bugs.

[ProcDump v11.1](https://learn.microsoft.com/sysinternals/downloads/procdump)
This update to ProcDump, a command-line utility for generating memory dumps from running processes, fixes several minor bugs.

### ZoomIt v9.20, Process Explorer v17.07, and RDCMan v3.11

- Date: 2025-11-11
- Original notes: https://techcommunity.microsoft.com/t5/sysinternals-blog/zoomit-v9-20-process-explorer-v17-07-and-rdcman-v3-11/ba-p/4469055
- Permalink: https://whatsnew.fyi/product/sysinternals/releases/2025-11-11-zoomit-v9.20-process-explorer-v17.07-and-rdcman-v
- Labels: Platforms: Windows

ZoomIt v9.20 This update to ZoomIt, a screen magnification and annotation tool, can now save screen recordings as either MP4 or GIF. Process Explorer v17.07 This update to Process Explorer, an advance…

- **added** — Save screen recordings as MP4 or GIF format
- **added** — Add strings support for Arm64 binaries
- **fixed** — Fix bug that disabled notification area icons
- **added** — Enable Entra ID logins

[ZoomIt v9.20](https://learn.microsoft.com/sysinternals/downloads/zoomit)
This update to ZoomIt, a screen magnification and annotation tool, can now save screen recordings as either MP4 or GIF.
[Process Explorer v17.07](https://learn.microsoft.com/sysinternals/downloads/process-explorer)
This update to Process Explorer, an advanced process, DLL, and handle viewing utility, adds strings for Arm64 binaries, and fixes a bug that disabled notification area icons.
[RDCMan v3.11](https://learn.microsoft.com/sysinternals/downloads/rdcman)
This update to RDCMan enables Entra ID logins.