Process Explorer Error: Run Process Explorer from a writeable directory

The Problem

I came across the following error while trying to open Process Explorer.

Unable to extract 64-bit image. Run Process Explorer from a writeable directory.

What’s Going On?

Process Explorer extracts and executes the appropriate x86 or x64 binary for the platform you’re on, and therefore requires elevated privileges (i.e. “Administrative rights”).

This can sometimes be a headache if you’re operating in an environment where you have “limited” access rights.

Process Explorer error screenshot

The Solution

Extract the x86 or x64 binary from within the parent procexp.exe binary using a resource editor.

This is how you do it,

  1. Open Visual Studio 2013
  2. Click FILE > OPEN FILE
  3. Choose the procexp.exe executable.
  4. In the Resource Editor window. Expand the ‘BINRES’ folder and you should see the ‘150′ x86 binary and the ‘152′ x64 binary.
  5. Right click either the ‘150′ or ‘152’ binary depending on your platform and choose ‘Export’. Save the binary resource as an ‘*.exe’ file e.g. ‘C:\temp\ProcessExplorer\procexp_64.exe’.
  6. Now you can run Process Explorer without requiring elevated privileges!

Visual Studio screenshot

Visual Studio screenshot

 

Update: If the Resource Editor window does not appear when opening the executable. You do not have the Resource Editor installed.

Make sure you install the ‘Microsoft Foundation Classes for C++’ Visual Studio feature.

Shane Bartholomeusz

G’day, I’m a technical solutions consultant based in Perth, Australia that specialises in the Microsoft technology stack, including .NET, Dynamics 365, Azure and general web development etc.

This blog is my place to share my thoughts, helpful solutions and just random nerdy stuff.
Shane Bartholomeusz

Latest posts by Shane Bartholomeusz (see all)

6 thoughts on “Process Explorer Error: Run Process Explorer from a writeable directory

  1. Shane, Thanks for posting the solution to this problem.

    I need your help. You are clearly a master of this stuff.

    I’m not a user of Visual Studio and, even though I downloaded and installed it (VS 2015), I can’t figure out how to get PROCEXP.EXE to display the Accelerator, “BIN RES”, …display. When I open procexp.exe I just see what looks like a HEX editor view.

    Please tell me how to get the right display. I’ve poked and prodded every button and menu option but…no luck. 🙁

    -VS Noobee

    • @Dale in Colorado

      You’ll need to make sure you install the “Microsoft Foundation Classes for C++” Visual Studio 2015 feature. Then it should work 🙂

Leave a Reply