wow64exts.dll

  • File Path: C:\Program Files (x86)\Windows Kits\10\Debuggers\x64\winxp\wow64exts.dll
  • Description: Win32 Emulation on NT64 debugger extensions

Hashes

Type Hash
MD5 A5229362545197569BE203D3129514A4
SHA1 4E6FC659AF689814430F490DF8F87D0C70560FFC
SHA256 7F4FF58AB64D9A58647E9344373A0BF6BE91494B1E17B870EAB2A0D4213610F9
SHA384 360726626C193F47C4E095165154D5DDC8B4E70D33F339755E5B62313C502F6EB0C0D26ED01AAA8328FCA198511B2500
SHA512 D9C7DD1E2429F13ACC6CDC6930908A004F9AB69DEA30425F7CF2ECFD28E99B30201AD38D8985B2BF6F9C45978A764E70472BB696C4F0033B7C23B916982E298B
SSDEEP 384:hwOJQFOOOPSVhNS92lWL9OY11ZQANgWIiJdZ0V9YZ+4NEA2orEaWwAuWfYwGyvfR:hHYXI92UOVvquV9Yk4NBAgEw
IMP 970E33A859BF0ACBBF3D12508591142A
PESHA1 93D13432BECD83DA0B30D9D55780DE0ADD7EF704
PE256 8C20488126BDE0673F5161CAE44FE5074985870E1AC3B3154B500258B0398990

DLL Exports:

Function Name Ordinal Type
lf 5 Exported Function
l2f 4 Exported Function
r 6 Exported Function
Wow64extsfn 10 Exported Function
sw 7 Exported Function
DebugExtensionUninitialize 9 Exported Function
DebugExtensionInitialize 8 Exported Function
help 1 Exported Function
k 3 Exported Function
info 2 Exported Function

Signature

  • Status: Signature verified.
  • Serial: 33000002CF6D2CC57CAA65A6D80000000002CF
  • Thumbprint: 1A221B3B4FEF088B17BA6704FD088DF192D9E0EF
  • Issuer: CN=Microsoft Code Signing PCA 2010, O=Microsoft Corporation, L=Redmond, S=Washington, C=US
  • Subject: CN=Microsoft Corporation, O=Microsoft Corporation, L=Redmond, S=Washington, C=US

File Metadata

  • Original Filename: wow64exts.dll
  • Product Name: Microsoft Windows Operating System
  • Company Name: Microsoft Corporation
  • File Version: 10.0.19041.1 (WinBuild.160101.0800)
  • Product Version: 10.0.19041.1
  • Language: English (United States)
  • Legal Copyright: Microsoft Corporation. All rights reserved.
  • Machine Type: 64-bit

File Scan

  • VirusTotal Detections: 0/74
  • VirusTotal Link: https://www.virustotal.com/gui/file/7f4ff58ab64d9a58647e9344373a0bf6be91494b1e17b870eab2a0d4213610f9/detection

File Similarity (ssdeep match)

File Score
C:\Program Files (x86)\Windows Kits\10\Debuggers\arm64\winxp\wow64exts.dll 33

MIT License. Copyright (c) 2020-2021 Strontic.