ktmw32.dll

File Path: C:\Windows\SysWOW64\ktmw32.dll
Description: Windows KTM Win32 Client DLL

Hashes

Type	Hash
MD5	`8C44C06934BA22FF7B27B58882999788`
SHA1	`D3C6AEE720D5733451F45EBC4BB5BEACED9C0DAF`
SHA256	`003AE8FAA246867119DD8E9D52256104D218FE40C280157CDA71A4BBCA95FAC4`
SHA384	`99252F8283255FC8570A7D83129B250A4EBA4F388A6C0C30A2E04B24620EF5B7EE5086C73CE2863F33CC366741AF6983`
SHA512	`52A2535F612EDF397FC03D35B5D8209C86A81D33609714CF27A785177F8DA3534F96F5716612530A016E5BB98DE25BBE40437AFA101996601A9F3EF30EF6E9DB`
SSDEEP	`384:CrgK6qa2SWkXumughClpw83eo6T1mLDcVlT0YHsWHfW4Spx:CrQriCCZOlv4YHtg`
IMP	`E49E00832408B653B7563D49FCB0DA7E`
PESHA1	`1E1D91EA7770621EBF0841EB5C709D31F0F9CB93`
PE256	`F78B5C9DE7246F08F249C05A18E80E35757C1A7825BDDA2BA636E9B20F2C7AF5`

DLL Exports:

Function Name	Ordinal	Type
`PrivRegisterProtocolAddressInformation`	30	Exported Function
`PrivPropagationFailed`	29	Exported Function
`ReadOnlyEnlistment`	31	Exported Function
`RecoverResourceManager`	33	Exported Function
`RecoverEnlistment`	32	Exported Function
`PrivPropagationComplete`	28	Exported Function
`PrePrepareComplete`	22	Exported Function
`PrepareEnlistment`	25	Exported Function
`PrePrepareEnlistment`	23	Exported Function
`PrivIsLogWritableTransactionManager`	27	Exported Function
`PrivCreateTransaction`	26	Exported Function
`SetEnlistmentRecoveryInformation`	41	Exported Function
`RollforwardTransactionManager`	40	Exported Function
`SetResourceManagerCompletionPort`	42	Exported Function
`SinglePhaseReject`	44	Exported Function
`SetTransactionInformation`	43	Exported Function
`RollbackTransactionAsync`	39	Exported Function
`RenameTransactionManager`	35	Exported Function
`RecoverTransactionManager`	34	Exported Function
`RollbackComplete`	36	Exported Function
`RollbackTransaction`	38	Exported Function
`RollbackEnlistment`	37	Exported Function
`CreateTransactionManager`	8	Exported Function
`CreateTransaction`	7	Exported Function
`GetCurrentClockTransactionManager`	9	Exported Function
`GetEnlistmentRecoveryInformation`	11	Exported Function
`GetEnlistmentId`	10	Exported Function
`CreateResourceManager`	6	Exported Function
`CommitEnlistment`	2	Exported Function
`CommitComplete`	1	Exported Function
`CommitTransaction`	3	Exported Function
`CreateEnlistment`	5	Exported Function
`CommitTransactionAsync`	4	Exported Function
`OpenTransaction`	19	Exported Function
`OpenResourceManager`	18	Exported Function
`OpenTransactionManager`	20	Exported Function
`PrepareComplete`	24	Exported Function
`OpenTransactionManagerById`	21	Exported Function
`OpenEnlistment`	17	Exported Function
`GetNotificationResourceManagerAsync`	13	Exported Function
`GetNotificationResourceManager`	12	Exported Function
`GetTransactionId`	14	Exported Function
`GetTransactionManagerId`	16	Exported Function
`GetTransactionInformation`	15	Exported Function

Signature

Status: Signature verified.
Serial: 3300000266BD1580EFA75CD6D3000000000266
Thumbprint: A4341B9FD50FB9964283220A36A1EF6F6FAA7840
Issuer: CN=Microsoft Windows Production PCA 2011, O=Microsoft Corporation, L=Redmond, S=Washington, C=US
Subject: CN=Microsoft Windows, O=Microsoft Corporation, L=Redmond, S=Washington, C=US

File Metadata

Original Filename: ktmw32
Product Name: Microsoft Windows Operating System
Company Name: Microsoft Corporation
File Version: 10.0.19041.1 (WinBuild.160101.0800)
Product Version: 10.0.19041.1
Language: English (United States)
Machine Type: 32-bit

File Scan

VirusTotal Detections: 0/71
VirusTotal Link: https://www.virustotal.com/gui/file/003ae8faa246867119dd8e9d52256104d218fe40c280157cda71a4bbca95fac4/detection/

File Similarity (ssdeep match)

File	Score
C:\Windows\system32\ktmw32.dll	38