Vol1-Mod1.4WoW64-Slide3 - Emulator vs Subsystem

[BlueSkeye]

AFAIU WoW64 is an emulator not a subsystem.

Microsoft itself defines WoW64 as an emulator : https://docs.microsoft.com/en-us/windows/win32/winprog64/wow64-implementation-details ... while it advertises WSL as a subsystem : https://docs.microsoft.com/en-us/windows/wsl/

[hasherezade]

AFAIU WoW64 is an emulator not a subsystem.

Microsoft itself defines WoW64 as an emulator : https://docs.microsoft.com/en-us/windows/win32/winprog64/wow64-implementation-details

Yes, and this emulator is also known as subsystem.

"In computing on Microsoft platforms, WoW64 (Windows 32-bit on Windows 64-bit) is a subsystem of the Windows operating system capable of running 32-bit applications on 64-bit Windows." - via Wikipedia

"Dive deep into the WOW64 subsystem and see how malware abuses Heavens Gate" - FireEye's tweet

Just Google for more if you need.