wow64.dll

  • File Path: C:\Windows\system32\wow64.dll
  • Description: Win32 Emulation on NT64

Hashes

Type Hash
MD5 21BBDC91CF4EDEB927BB06456D82556F
SHA1 8EC8F242A0AD29E03AB49278DE81B082598B65DB
SHA256 85CDB8646116D732D68D3A76C246BB825DDD7A9EE7B8491528C46422722BB867
SHA384 AE7354FF65FBF4BCE27B535659C41B1ABB766924A6013564F787AB94365971BE5075BB764F357F7B9558B45DA43D9606
SHA512 0B7F4A42FEDFE793B1D6E34B266D9443BCE75CB3152B03D46058DC8B0FFA36E2DFCD29ECD5E4E4EDE55B258F8AB8860715B66A8AEFFCE72E92EAD84C0400AF9E
SSDEEP 6144:uWujXA5fXbqDcgx6U5mXzzTOTunfGUU3QT:o7AslCGvs
IMP 744FD877C0939A2EE8523E2B7AF109C2
PESHA1 4EE202F5E21A9DB598129B5D38DA9ABC822E1D12
PE256 4230742D007C01739ECCDC8483A7ACF7F2C5C0BB43BCC7C20EEA5FCE4501EE4A

DLL Exports:

Function Name Ordinal Type
Wow64RaiseException 20 Exported Function
Wow64ShallowThunkAllocObjectAttributes32TO64_FNC 21 Exported Function
Wow64ShallowThunkAllocSecurityQualityOfService32TO64_FNC 22 Exported Function
Wow64ProcessPendingCrossProcessItems 19 Exported Function
Wow64PassExceptionToGuest 16 Exported Function
Wow64PrepareForDebuggerAttach 17 Exported Function
Wow64PrepareForException 18 Exported Function
Wow64SystemServiceEx 27 Exported Function
Wow64ValidateUserCallTarget 28 Exported Function
Wow64ValidateUserCallTargetFilter 29 Exported Function
Wow64SuspendLocalThread 26 Exported Function
Wow64ShallowThunkSIZE_T32TO64 23 Exported Function
Wow64ShallowThunkSIZE_T64TO32 24 Exported Function
Wow64SuspendLocalProcess 25 Exported Function
Wow64NotifyUnsimulateComplete 15 Exported Function
Wow64CheckIfNXEnabled 5 Exported Function
Wow64DispatchExceptionCHPE 6 Exported Function
Wow64EmulateAtlThunk 7 Exported Function
Wow64ApcRoutine 4 Exported Function
Wow64AllocateHeap 2 Exported Function
Wow64AllocateTemp 3 Exported Function
Wow64AllocThreadHeap 1 Exported Function
Wow64KiUserCallbackDispatcher 12 Exported Function
Wow64LdrpInitialize 13 Exported Function
Wow64LogPrint 14 Exported Function
Wow64IsStackExtentsCheckEnforced 11 Exported Function
Wow64FreeHeap 8 Exported Function
Wow64FreeThreadHeap 9 Exported Function
Wow64IsControlFlowGuardEnforced 10 Exported Function

Signature

  • Status: Signature verified.
  • Serial: 330000026551AE1BBD005CBFBD000000000265
  • Thumbprint: E168609353F30FF2373157B4EB8CD519D07A2BFF
  • Issuer: CN=Microsoft Windows Production PCA 2011, O=Microsoft Corporation, L=Redmond, S=Washington, C=US
  • Subject: CN=Microsoft Windows, O=Microsoft Corporation, L=Redmond, S=Washington, C=US

File Metadata

  • Original Filename: wow64.dll
  • Product Name: Microsoft Windows Operating System
  • Company Name: Microsoft Corporation
  • File Version: 10.0.19041.84 (WinBuild.160101.0800)
  • Product Version: 10.0.19041.84
  • Language: English (United States)
  • Legal Copyright: Microsoft Corporation. All rights reserved.
  • Machine Type: 64-bit

File Scan

  • VirusTotal Detections: 0/69
  • VirusTotal Link: https://www.virustotal.com/gui/file/85cdb8646116d732d68d3a76c246bb825ddd7a9ee7b8491528c46422722bb867/detection/

MIT License. Copyright (c) 2020-2021 Strontic.