¿Para qué sirve la dll wow64.dll?
Win32 Emulation on NT64Dependencias de la dll wow64.dll
Microsoft (R) COFF/PE Dumper Version 14.16.27034.0
Copyright (C) Microsoft Corporation. All rights reserved.
Dump of file C:\Windows\System32\wow64.dll
File Type: DLL
Image has the following dependencies:
ntdll.dll
wow64win.dll
Summary
2000 .data
1000 .mrdata
5000 .pdata
15000 .rdata
1000 .reloc
1000 .rsrc
39000 .text
Funciones que tiene la dll wow64.dll
1 0 00010390 Wow64AllocThreadHeap
2 1 00021FE0 Wow64AllocateHeap
3 2 00010330 Wow64AllocateTemp
4 3 000010A0 Wow64ApcRoutine
5 4 00022990 Wow64CheckIfNXEnabled
6 5 000208B0 Wow64DispatchExceptionCHPE
7 6 00022A30 Wow64EmulateAtlThunk
8 7 00022010 Wow64FreeHeap
9 8 000102C0 Wow64FreeThreadHeap
10 9 Wow64IsControlFlowGuardEnforced (forwarded to NTDLL.LdrControlFlowGuardEnforced)
11 A 00001BE0 Wow64IsStackExtentsCheckEnforced
12 B 00003410 Wow64KiUserCallbackDispatcher
13 C 00003190 Wow64LdrpInitialize
14 D 00009FE0 Wow64LogPrint
15 E 00020F10 Wow64NotifyUnsimulateComplete
16 F 000220F0 Wow64PassExceptionToGuest
17 10 00022300 Wow64PrepareForDebuggerAttach
18 11 00019BC0 Wow64PrepareForException
19 12 00023650 Wow64ProcessPendingCrossProcessItems
20 13 00020A50 Wow64RaiseException
21 14 00009790 Wow64ShallowThunkAllocObjectAttributes32TO64_FNC
22 15 00009F20 Wow64ShallowThunkAllocSecurityQualityOfService32TO64_FNC
23 16 0000C2D0 Wow64ShallowThunkSIZE_T32TO64
24 17 0000E830 Wow64ShallowThunkSIZE_T64TO32
25 18 00021590 Wow64SuspendLocalProcess
26 19 00021740 Wow64SuspendLocalThread
27 1A 00008ED0 Wow64SystemServiceEx
28 1B 00022CB0 Wow64ValidateUserCallTarget
29 1C 00022DD0 Wow64ValidateUserCallTargetFilter
Información avanzada sobre funciones que tiene la dll wow64.dll
Microsoft (R) COFF/PE Dumper Version 14.16.27034.0
Copyright (C) Microsoft Corporation. All rights reserved.
Dump of file C:\Windows\System32\wow64.dll
File Type: DLL
Section contains the following exports for wow64.dll
00000000 characteristics
BACB8FFD time date stamp
0.00 version
1 ordinal base
29 number of functions
29 number of names
ordinal hint RVA name
1 0 00010390 Wow64AllocThreadHeap
2 1 00021FE0 Wow64AllocateHeap
3 2 00010330 Wow64AllocateTemp
4 3 000010A0 Wow64ApcRoutine
5 4 00022990 Wow64CheckIfNXEnabled
6 5 000208B0 Wow64DispatchExceptionCHPE
7 6 00022A30 Wow64EmulateAtlThunk
8 7 00022010 Wow64FreeHeap
9 8 000102C0 Wow64FreeThreadHeap
10 9 Wow64IsControlFlowGuardEnforced (forwarded to NTDLL.LdrControlFlowGuardEnforced)
11 A 00001BE0 Wow64IsStackExtentsCheckEnforced
12 B 00003410 Wow64KiUserCallbackDispatcher
13 C 00003190 Wow64LdrpInitialize
14 D 00009FE0 Wow64LogPrint
15 E 00020F10 Wow64NotifyUnsimulateComplete
16 F 000220F0 Wow64PassExceptionToGuest
17 10 00022300 Wow64PrepareForDebuggerAttach
18 11 00019BC0 Wow64PrepareForException
19 12 00023650 Wow64ProcessPendingCrossProcessItems
20 13 00020A50 Wow64RaiseException
21 14 00009790 Wow64ShallowThunkAllocObjectAttributes32TO64_FNC
22 15 00009F20 Wow64ShallowThunkAllocSecurityQualityOfService32TO64_FNC
23 16 0000C2D0 Wow64ShallowThunkSIZE_T32TO64
24 17 0000E830 Wow64ShallowThunkSIZE_T64TO32
25 18 00021590 Wow64SuspendLocalProcess
26 19 00021740 Wow64SuspendLocalThread
27 1A 00008ED0 Wow64SystemServiceEx
28 1B 00022CB0 Wow64ValidateUserCallTarget
29 1C 00022DD0 Wow64ValidateUserCallTargetFilter
Summary
2000 .data
1000 .mrdata
5000 .pdata
15000 .rdata
1000 .reloc
1000 .rsrc
39000 .text
Integridad de la dll wow64.dll
Algorithm Hash Path
--------- ---- ----
SHA256 0BDA79665605534CC86B33D65B4865060864540D75C0D1D2437A2A15999AD29C C:\Windows\System32\wow64.dll
Detalles sobre el fichero dll wow64.dll
PSPath : Microsoft.PowerShell.Core\FileSystem::C:\Windows\System32\wow64.dll
PSParentPath : Microsoft.PowerShell.Core\FileSystem::C:\Windows\System32
PSChildName : wow64.dll
PSDrive : C
PSProvider : Microsoft.PowerShell.Core\FileSystem
PSIsContainer : False
Mode : -a----
VersionInfo : File: C:\Windows\System32\wow64.dll
InternalName: wow64
OriginalFilename: wow64.dll
FileVersion: 10.0.19041.546 (WinBuild.160101.0800)
FileDescription: Win32 Emulation on NT64
Product: Microsoft® Windows® Operating System
ProductVersion: 10.0.19041.546
Debug: False
Patched: False
PreRelease: False
PrivateBuild: False
SpecialBuild: False
Language: Inglés (Estados Unidos)
BaseName : wow64
Target : {C:\Windows\WinSxS\amd64_microsoft-windows-wow64_31bf3856ad364e35_10.0.19041.546_none_461f0f0a361e7c40\wow64.dll}
LinkType : HardLink
Name : wow64.dll
Length : 352784
DirectoryName : C:\Windows\System32
Directory : C:\Windows\System32
IsReadOnly : False
Exists : True
FullName : C:\Windows\System32\wow64.dll
Extension : .dll
CreationTime : 21/11/2020 8:44:06
CreationTimeUtc : 21/11/2020 7:44:06
LastAccessTime : 03/12/2020 17:51:02
LastAccessTimeUtc : 03/12/2020 16:51:02
LastWriteTime : 21/11/2020 8:44:06
LastWriteTimeUtc : 21/11/2020 7:44:06
Attributes : Archive
Procesos que utilizan la dll wow64.dll
httpd
httpd
mspdbsrv
mysqld
TeamViewer
WDADesktopService
WinSCP
xampp-control