%3CLINGO-SUB%20id%3D%22lingo-sub-1073828%22%20slang%3D%22en-US%22%3EProcess%20Monitor%20v3.53%2C%20Process%20Explorer%20v16.31%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-1073828%22%20slang%3D%22en-US%22%3E%3CH2%20id%3D%22user-content-process-monitor-v3.53%22%20id%3D%22toc-hId--1438533757%22%20id%3D%22toc-hId--1438533730%22%20id%3D%22toc-hId--1438533730%22%20id%3D%22toc-hId--1438533730%22%20id%3D%22toc-hId--1438533730%22%20id%3D%22toc-hId--1438533730%22%20id%3D%22toc-hId--1438533730%22%3EProcess%20Monitor%20v3.53%3C%2FH2%3E%0A%3CP%3EThis%20update%20to%20Process%20Monitor%20includes%20the%20following%20changes%3A%3C%2FP%3E%0A%3CUL%3E%0A%3CLI%3EResolves%20a%20crash%20when%20reloading%20a%20saved%20file%3C%2FLI%3E%0A%3CLI%3EFixes%20issues%20where%20profiling%20events%20and%2For%20process%20activity%20summary%20stopped%20working%20after%20the%20GUI%20is%20closed%20and%20reopened%3C%2FLI%3E%0A%3CLI%3EAdds%20file%20information%20class%20for%20IRP_MN_QUERY_DIRECTORY%3C%2FLI%3E%0A%3C%2FUL%3E%0A%3CH2%20id%3D%22user-content-process-explorer-v16.31%22%20id%3D%22toc-hId-1048979076%22%20id%3D%22toc-hId-1048979103%22%20id%3D%22toc-hId-1048979103%22%20id%3D%22toc-hId-1048979103%22%20id%3D%22toc-hId-1048979103%22%20id%3D%22toc-hId-1048979103%22%20id%3D%22toc-hId-1048979103%22%3EProcess%20Explorer%20v16.31%3C%2FH2%3E%0A%3CP%3EThis%20update%20to%20Process%20Explorer%20resolves%20a%20number%20of%20crashes%20and%20addresses%20a%20GDI%20exhaustion%20issue%20on%20busy%20systems.%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-TEASER%20id%3D%22lingo-teaser-1073828%22%20slang%3D%22en-US%22%3E%3CP%3ELearn%20about%20the%20latest%20changes%20to%20Process%20Monitor%20(v3.53)%20and%20Process%20Explorer%20(v16.31)%3C%2FP%3E%3C%2FLINGO-TEASER%3E%3CLINGO-SUB%20id%3D%22lingo-sub-1119033%22%20slang%3D%22en-US%22%3ERe%3A%20Process%20Monitor%20v3.53%2C%20Process%20Explorer%20v16.31%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-1119033%22%20slang%3D%22en-US%22%3E%3CP%3Ewill%20there%20be%20update%20of%20how%20the%20filters%20are%20loaded%20because%20right%20now%20you%20cannot%20unload%20them%20and%20are%20stuck%20till%20next%20restart%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-1335497%22%20slang%3D%22en-US%22%3ERe%3A%20Process%20Monitor%20v3.53%2C%20Process%20Explorer%20v16.31%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-1335497%22%20slang%3D%22en-US%22%3E%3CP%3ECould%20you%20add%20please%20to%20the%20articles%20a%20link%20to%20download%20the%20app%3F%3C%2FP%3E%3CP%3EThank%20You%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-1494462%22%20slang%3D%22en-US%22%3ERe%3A%20Process%20Monitor%20v3.53%2C%20Process%20Explorer%20v16.31%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-1494462%22%20slang%3D%22en-US%22%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3E%3CSTRONG%3EQuestion%3C%2FSTRONG%3E%20-%20At%20work%2C%20on%20my%20Win%2010%201903%2064-bit%20machine%2C%20when%20I%20open%20a%20Word%20document%2C%20the%20PC%20shows%20me%20the%20doc%20full-size%2C%20but%20then%20the%20machine's%20%22focus%22%20goes%20somewhere%20else%2C%20so%20if%20I%20start%20typing%2C%20I%20discover%20I%E2%80%99m%20not%20in%20the%20doc%20that%20is%20right%20in%20front%20of%20me%2C%20but%20it%E2%80%99s%20not%20clear%20where%20I%20am%20or%20what%20stole%20the%20%E2%80%9Cfocus%E2%80%9D%20of%20the%20machine.%3C%2FP%3E%3CP%3E%3CSTRONG%3ECan%20Sysinternals%20help%20us%20figure%20out%20what%20is%20stealing%20the%20machine%E2%80%99s%20%E2%80%9Cfocus%E2%80%9D%20when%20I%20open%20a%20Word%20doc%3F%26nbsp%3B%20If%20so%2C%20how%2C%20or%20please%20give%20us%20a%20link%20that%20explains.%3C%2FSTRONG%3E%3C%2FP%3E%3CP%3EThanks.%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-1621038%22%20slang%3D%22en-US%22%3ERe%3A%20Process%20Monitor%20v3.53%2C%20Process%20Explorer%20v16.31%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-1621038%22%20slang%3D%22en-US%22%3E%3CP%3EI%20am%20still%20looking%20for%20an%20option%20to%20start%20procmon%20with%20an%20%22on-the-fly%22%20filter%20for%20a%20given%20executable%20name.%20Does%20this%20already%20exist%3F%20Will%20it%20ever%20come%3F%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-1670579%22%20slang%3D%22en-US%22%3ERe%3A%20Process%20Monitor%20v3.53%2C%20Process%20Explorer%20v16.31%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-1670579%22%20slang%3D%22en-US%22%3E%3CP%3ECarsten%2C%20are%20you%20aware%20that%20there%20is%20the%20%2Floadconfig%20switch%2C%20available%20via%20the%20command%20line%3F%20And%20that%20it%20can%20load%20a%20config%20file%20saved%20from%20the%20UI%20and%20its%20%22export%22%20feature%20(which%20can%20include%20a%20filter%2C%20thyus%20leading%20it%20to%20%22start%20on%20the%20fly%22%20with%20that%20filter%3F%20For%20more%2C%20see%20the%20help%20file%2C%20or%26nbsp%3B%3CA%20href%3D%22https%3A%2F%2Fdocumentation.help%2FProcess-Monitor%2FImporting_and_Exporting_Configuration.htm%22%20target%3D%22_blank%22%20rel%3D%22nofollow%20noopener%20noreferrer%20noopener%20noreferrer%22%3Ehttps%3A%2F%2Fdocumentation.help%2FProcess-Monitor%2FImporting_and_Exporting_Configuration.htm%3C%2FA%3E.%3C%2FP%3E%3C%2FLINGO-BODY%3E
Microsoft

Process Monitor v3.53

This update to Process Monitor includes the following changes:

  • Resolves a crash when reloading a saved file
  • Fixes issues where profiling events and/or process activity summary stopped working after the GUI is closed and reopened
  • Adds file information class for IRP_MN_QUERY_DIRECTORY

Process Explorer v16.31

This update to Process Explorer resolves a number of crashes and addresses a GDI exhaustion issue on busy systems.

5 Comments
Occasional Visitor

will there be update of how the filters are loaded because right now you cannot unload them and are stuck till next restart

Occasional Visitor

Could you add please to the articles a link to download the app?

Thank You

New Contributor

 

Question - At work, on my Win 10 1903 64-bit machine, when I open a Word document, the PC shows me the doc full-size, but then the machine's "focus" goes somewhere else, so if I start typing, I discover I’m not in the doc that is right in front of me, but it’s not clear where I am or what stole the “focus” of the machine.

Can Sysinternals help us figure out what is stealing the machine’s “focus” when I open a Word doc?  If so, how, or please give us a link that explains.

Thanks.

 

Occasional Visitor

I am still looking for an option to start procmon with an "on-the-fly" filter for a given executable name. Does this already exist? Will it ever come?

Frequent Visitor

Carsten, are you aware that there is the /loadconfig switch, available via the command line? And that it can load a config file saved from the UI and its "export" feature (which can include a filter, thyus leading it to "start on the fly" with that filter? For more, see the help file, or https://documentation.help/Process-Monitor/Importing_and_Exporting_Configuration.htm.