There is no difference
procmon.exe checks the OS (mainly with IsWow64Process)
and if x64, it extracts Procmon64.exe from resources and launches it with ShellExecuteEx
procmon.exe vs procmon64.exe
Environment:
Windows 10 Pro 21H1 (64-bit)
Process Monitor 3.82
The 32-bit Procmon.exe contains the 64-bit exe inside it as a binary resource. When the 32-bit exe starts, it extracts the 64-bit version out to the %Temp% folder as Procmon64.exe and then executes that.
Question:
What is the difference between start Process Monitor 3.82 application from Procmon.exe and Procmon64.exe on Windows 10 (64-bit)?
Sysinternals
-
Castorix31 90,686 Reputation points
2021-06-13T10:12:53.187+00:00
1 additional answer
Sort by: Most helpful
-
WndSks 1 Reputation point
2021-06-13T00:33:31.59+00:00 Nano Server and other minimal SKUs don't have WoW64 support (at all or by default) and therefore the 32-bit process will not be able to run.
On systems with WoW64 there is no difference other than the minor overhead of extracting and running the embedded 64-bit binary.