¿Para qué sirve la dll wow64win.dll?

Wow64 Console and Win32 API Logging

Dependencias de la dll wow64win.dll


Microsoft (R) COFF/PE Dumper Version 14.16.27034.0
Copyright (C) Microsoft Corporation.  All rights reserved.


Dump of file C:\Windows\System32\wow64win.dll

File Type: DLL

  Image has the following dependencies:

    ntdll.dll
    wow64.dll

  Summary

        4000 .data
        D000 .pdata
       29000 .rdata
        2000 .reloc
        1000 .rsrc
       45000 .text

Funciones que tiene la dll wow64win.dll


1    0 00050E90 sdwhcon
2    1 00050EC0 sdwhwin32

Información avanzada sobre funciones que tiene la dll wow64win.dll


Microsoft (R) COFF/PE Dumper Version 14.16.27034.0
Copyright (C) Microsoft Corporation.  All rights reserved.


Dump of file C:\Windows\System32\wow64win.dll

File Type: DLL

  Section contains the following exports for wow64win.dll

    00000000 characteristics
    643A9377 time date stamp
        0.00 version
           1 ordinal base
           2 number of functions
           2 number of names

    ordinal hint RVA      name

          1    0 00050E90 sdwhcon
          2    1 00050EC0 sdwhwin32

  Summary

        4000 .data
        D000 .pdata
       29000 .rdata
        2000 .reloc
        1000 .rsrc
       45000 .text

Integridad de la dll wow64win.dll



Algorithm       Hash                                                                   Path                                                           
---------       ----                                                                   ----                                                           
SHA256          FA453BDD418A1B5ECBE37CD830E25C9F78027AAB647B4A2617DFF9EC977BB8C0       C:\Windows\System32\wow64win.dll                               


Detalles sobre el fichero dll wow64win.dll




PSPath            : Microsoft.PowerShell.Core\FileSystem::C:\Windows\System32\wow64win.dll
PSParentPath      : Microsoft.PowerShell.Core\FileSystem::C:\Windows\System32
PSChildName       : wow64win.dll
PSDrive           : C
PSProvider        : Microsoft.PowerShell.Core\FileSystem
PSIsContainer     : False
Mode              : -a----
VersionInfo       : File:             C:\Windows\System32\wow64win.dll
                    InternalName:     wow64lg2
                    OriginalFilename: wow64lg2.dll
                    FileVersion:      10.0.19041.508 (WinBuild.160101.0800)
                    FileDescription:  Wow64 Console and Win32 API Logging
                    Product:          Microsoft® Windows® Operating System
                    ProductVersion:   10.0.19041.508
                    Debug:            False
                    Patched:          False
                    PreRelease:       False
                    PrivateBuild:     False
                    SpecialBuild:     False
                    Language:         Inglés (Estados Unidos)
                    
BaseName          : wow64win
Target            : {C:\Windows\WinSxS\amd64_microsoft-windows-wow64-windows_31bf3856ad364e35_10.0.19041.508_none_d60c7e74e55e0daa\wow64win.dll}
LinkType          : HardLink
Name              : wow64win.dll
Length            : 531448
DirectoryName     : C:\Windows\System32
Directory         : C:\Windows\System32
IsReadOnly        : False
Exists            : True
FullName          : C:\Windows\System32\wow64win.dll
Extension         : .dll
CreationTime      : 20/09/2020 15:03:02
CreationTimeUtc   : 20/09/2020 13:03:02
LastAccessTime    : 03/12/2020 17:51:21
LastAccessTimeUtc : 03/12/2020 16:51:21
LastWriteTime     : 20/09/2020 15:03:02
LastWriteTimeUtc  : 20/09/2020 13:03:02
Attributes        : Archive



Procesos que utilizan la dll wow64win.dll


httpd
httpd
mspdbsrv
mysqld
TeamViewer
WDADesktopService
WinSCP
xampp-control