wowreg32.exe
- File Path:
C:\Windows\SysWOW64\wowreg32.exe
- Description: SetupAPI 32-bit Surrogate
Hashes
Type |
Hash |
MD5 |
4806AEA6060A7D3809A6BBA3C523668B |
SHA1 |
A8C92B2ECB761A3F3F266FC28E7699FEEE3B5D2B |
SHA256 |
EB9048606C0CE6BE9F82F0B6B62A977133A6C43459E3DC6417F941D591FAB2A8 |
SHA384 |
DC4B4674E207DBD3B5CEA513642EF9150D3CF4807C7CB3352A201F127BF6FC7DC0C810C0E8D11790B11DB5E3646ED376 |
SHA512 |
FE58FBECEB4FAE6D25E0BBE2C3873527D127E3D2960600A4FB8D57E1DDB275B5829B08DC56EC481DF3334AC0E7EF8233ED2152AB01B75D55ED23A251A389EF66 |
SSDEEP |
192:H6FOum/QeKudI7IUtTb/QDFQmQc6ynD4LtYE2m4XxWgxZjHW3:Zg7bRbqQhA4JarBWgxZjHW3 |
IMP |
8B8A143002F5FC8DCA7CC0A0DC979CEF |
PESHA1 |
540B95BAE84186B3242CBD8931882FCED28BFB60 |
PE256 |
C899B0E6B19FDAB1FC0F1E1437434FFABB20C0F636C2F710C7806AA99EC8C223 |
Runtime Data
Loaded Modules:
Path |
C:\Windows\SYSTEM32\ntdll.dll |
C:\Windows\System32\wow64.dll |
C:\Windows\System32\wow64cpu.dll |
C:\Windows\System32\wow64win.dll |
C:\Windows\SysWOW64\wowreg32.exe |
Signature
- Status: Signature verified.
- Serial:
3300000266BD1580EFA75CD6D3000000000266
- Thumbprint:
A4341B9FD50FB9964283220A36A1EF6F6FAA7840
- Issuer: CN=Microsoft Windows Production PCA 2011, O=Microsoft Corporation, L=Redmond, S=Washington, C=US
- Subject: CN=Microsoft Windows, O=Microsoft Corporation, L=Redmond, S=Washington, C=US
- Original Filename: WOWREG32.EXE
- Product Name: Microsoft Windows Operating System
- Company Name: Microsoft Corporation
- File Version: 10.0.17763.1 (WinBuild.160101.0800)
- Product Version: 10.0.17763.1
- Language: English (United States)
- Legal Copyright: Microsoft Corporation. All rights reserved.
- Machine Type: 32-bit
File Scan
- VirusTotal Detections: 0/72
- VirusTotal Link: https://www.virustotal.com/gui/file/eb9048606c0ce6be9f82f0b6b62a977133a6c43459e3dc6417f941d591fab2a8/detection/
File Similarity (ssdeep match)
MIT License. Copyright (c) 2020-2021 Strontic.