kdexts.dll

  • File Path: C:\Program Files (x86)\Windows Kits\10\Debuggers\x64\winxp\kdexts.dll
  • Description: Microsoft Kernel Debugger Extensions

Hashes

Type Hash
MD5 F57837878916ACCC2AF170F0F9BE9EAB
SHA1 99C38965B9B50A4F8C10CCEE1D4A04BF0AA55C32
SHA256 FE7C38D2C30B770606DA6ECBFCE4310E5B7C88DC167A25D2B337CA40CC33E221
SHA384 A88297551D9337120E5BD7EBAC4EC4C13C5928660E4C26663EC167382140342887C1FCB611FF9D6C8BB4F6724C30BE20
SHA512 BC03044C84F75D58FAF457C382659106E86AA01530EFD25402D5C77849DAF2C80C8D14A70C7F0356172560B53CD5F4915D8A288868032FAD475B5A7F52A8C05A
SSDEEP 49152:cjbpU8jRXPNIACihSAoIUD/xh2Vu43AxLHIPJ5cXM8h/GdlzsR:ENU8jIACCoxzsw
IMP 19DA0F9AF22BC7784D3D858587F92ED6
PESHA1 437CF9EA72923121E9CA8AC122E0E4F7082D7284
PE256 61662F7464DF04246196A86AAE4032381FB2967C06D034DB90A638A0D7B2AD00

DLL Exports:

Function Name Ordinal Type
pool 219 Exported Function
poolfind 220 Exported Function
ponode 218 Exported Function
poidle 216 Exported Function
polist 217 Exported Function
popoldev 224 Exported Function
popolicy 225 Exported Function
poperf 223 Exported Function
poolused 221 Exported Function
poolval 222 Exported Function
poagg 209 Exported Function
poagglogentry 210 Exported Function
poaction 208 Exported Function
pnpthreads 206 Exported Function
pnptriage 207 Exported Function
pocaps 214 Exported Function
podev 215 Exported Function
pobatt 213 Exported Function
poaggstate 211 Exported Function
poaggtarget 212 Exported Function
poproc 226 Exported Function
ppmidlecontrol 240 Exported Function
ppmidlepolicy 241 Exported Function
ppmidleaccounting 239 Exported Function
ppmhelp 237 Exported Function
ppmidle 238 Exported Function
ppmsettings 245 Exported Function
ppmstate 246 Exported Function
ppmperfpolicy 244 Exported Function
ppmlpscenarios 242 Exported Function
ppmperf 243 Exported Function
posetting 230 Exported Function
posettings 231 Exported Function
porequests 229 Exported Function
poprocpolicy 227 Exported Function
poreqlist 228 Exported Function
ppm 235 Exported Function
ppmcheck 236 Exported Function
pplookaside 234 Exported Function
potrigger 232 Exported Function
powertriage 233 Exported Function
object 178 Exported Function
obsdcache 179 Exported Function
ob 177 Exported Function
numa 175 Exported Function
numa_hal 176 Exported Function
ow 183 Exported Function
pagefile 184 Exported Function
openmaps 182 Exported Function
obtrace 180 Exported Function
od 181 Exported Function
mps 168 Exported Function
msct 169 Exported Function
memusage 167 Exported Function
memlist 165 Exported Function
memoryblock 166 Exported Function
nsobj 173 Exported Function
nstree 174 Exported Function
npx 172 Exported Function
mtrr 170 Exported Function
npcb 171 Exported Function
partition 185 Exported Function
platformidle 199 Exported Function
platformidleaccounting 200 Exported Function
pic 198 Exported Function
pfn 196 Exported Function
pfnperf 197 Exported Function
pnpevent 204 Exported Function
pnplocks 205 Exported Function
pnpcompletion 203 Exported Function
platformidlecontrol 201 Exported Function
pnpaction 202 Exported Function
pcm 189 Exported Function
pcmcia 190 Exported Function
pcitree 188 Exported Function
pat 186 Exported Function
pcicfglog 187 Exported Function
pdclog 194 Exported Function
pdctriage 195 Exported Function
pdcclients 193 Exported Function
pcr 191 Exported Function
pdcclient 192 Exported Function
tzinfo 301 Exported Function
ubc 302 Exported Function
tz 300 Exported Function
trueref 298 Exported Function
tunnel 299 Exported Function
ubp 306 Exported Function
vad 307 Exported Function
ubl 305 Exported Function
ubd 303 Exported Function
ube 304 Exported Function
thread 291 Exported Function
threadfields 292 Exported Function
sysptes 290 Exported Function
swd 288 Exported Function
sysinfo 289 Exported Function
translator 296 Exported Function
traplog 297 Exported Function
tokenleak 295 Exported Function
ticks 293 Exported Function
timer 294 Exported Function
vad_reload 308 Exported Function
wheapfa 322 Exported Function
wnf 323 Exported Function
whea 321 Exported Function
whatperftime 319 Exported Function
whattime 320 Exported Function
xsave 327 Exported Function
zombies 328 Exported Function
xpoolmap 326 Exported Function
wpbt 324 Exported Function
wsle 325 Exported Function
version 312 Exported Function
vhd 313 Exported Function
verifyavl 311 Exported Function
validatelist 309 Exported Function
verifier 310 Exported Function
walklist 317 Exported Function
watchdoganalyze 318 Exported Function
vtop 316 Exported Function
vm 314 Exported Function
vpb 315 Exported Function
quota 260 Exported Function
range 261 Exported Function
qlocks 259 Exported Function
ptov 257 Exported Function
qlockperf 258 Exported Function
rellist 265 Exported Function
remlock 266 Exported Function
reg 264 Exported Function
rawrange 262 Exported Function
ready 263 Exported Function
processirps 250 Exported Function
providerinfo 251 Exported Function
processfields 249 Exported Function
prcb 247 Exported Function
process 248 Exported Function
ptetree 255 Exported Function
ptex 256 Exported Function
pte2va 254 Exported Function
psci 252 Exported Function
pte 253 Exported Function
rsdt 267 Exported Function
spmscenarios 281 Exported Function
spoolsum 282 Exported Function
spmpolicies 280 Exported Function
socket 278 Exported Function
spmaccounting 279 Exported Function
srb 286 Exported Function
stacks 287 Exported Function
srat 285 Exported Function
spoolused 283 Exported Function
sprocess 284 Exported Function
search 271 Exported Function
searchpte 272 Exported Function
scm 270 Exported Function
running 268 Exported Function
schedgroup 269 Exported Function
silo 276 Exported Function
smt 277 Exported Function
session 275 Exported Function
secidt 273 Exported Function
sendnmi 274 Exported Function
cstriage 60 Exported Function
dbgprint 61 Exported Function
csrt 59 Exported Function
cpuquota 57 Exported Function
cshelp 58 Exported Function
deadlock 65 Exported Function
DebugExtensionCanUnload 9 Exported Function
ddripstree 64 Exported Function
dblink 62 Exported Function
ddripsaction 63 Exported Function
cchelp 50 Exported Function
chklowmem 51 Exported Function
calldata 49 Exported Function
ca 47 Exported Function
callback 48 Exported Function
combine 55 Exported Function
cpuinfo 56 Exported Function
code12 54 Exported Function
cmci 52 Exported Function
cmreslist 53 Exported Function
DebugExtensionInitialize 10 Exported Function
diskrespin 76 Exported Function
dma 77 Exported Function
dflink 75 Exported Function
devpowerstate 73 Exported Function
devstack 74 Exported Function
dmarpt 81 Exported Function
dpa 82 Exported Function
dmarla 80 Exported Function
dmaguard 78 Exported Function
dmar 79 Exported Function
defwrites 66 Exported Function
depnode 67 Exported Function
DebugExtensionUnload 13 Exported Function
DebugExtensionNotify 11 Exported Function
DebugExtensionUninitialize 12 Exported Function
devnode 71 Exported Function
devobj 72 Exported Function
devinst 70 Exported Function
devext 68 Exported Function
devhandles 69 Exported Function
_EFN_GetPNPTriageInfo 6 Exported Function
_EFN_GetPoolData 22 Exported Function
_EFN_GetIrpInfo 21 Exported Function
_EFN_GetDrvObjInfo 20 Exported Function
_EFN_GetFullImageName 5 Exported Function
_EFN_GetSmbiosInfo 8 Exported Function
ablock 25 Exported Function
_EFN_GetPteInfo 24 Exported Function
_EFN_GetPoolRegion 23 Exported Function
_EFN_GetProcessCommit 7 Exported Function
_EFN_EnumeratePool 17 Exported Function
_EFN_EnumerateSystemLocks 18 Exported Function
_EFN_EnumerateJobProcesses 16 Exported Function
_EFN_AnalyzeWheaBugcheck 14 Exported Function
_EFN_EnumerateHandles 15 Exported Function
_EFN_GetCpuMicrocodeVersion 4 Exported Function
_EFN_GetDevObjInfo 19 Exported Function
_EFN_FindMatchingThread 3 Exported Function
_EFN_FindFileLockOwnerInfo 1 Exported Function
_EFN_FindMatchingProcess 2 Exported Function
acpicache 26 Exported Function
arblist 40 Exported Function
bcb 41 Exported Function
arbiter 39 Exported Function
apicerr 37 Exported Function
arbinst 38 Exported Function
bugdump 45 Exported Function
bushnd 46 Exported Function
bpid 44 Exported Function
biosreslist 42 Exported Function
blockeddrv 43 Exported Function
acpitable 30 Exported Function
ahcache 31 Exported Function
acpiresconflict 29 Exported Function
acpiinf 27 Exported Function
acpiirqarb 28 Exported Function
apc 35 Exported Function
apic 36 Exported Function
amli 34 Exported Function
alignmentfaults 32 Exported Function
alpc 33 Exported Function
iovdrv 137 Exported Function
iovirp 138 Exported Function
iort 136 Exported Function
ioresdes 134 Exported Function
ioreslist 135 Exported Function
irpzone 142 Exported Function
irql 143 Exported Function
irpfind 141 Exported Function
ipi 139 Exported Function
irp 140 Exported Function
icpleak 127 Exported Function
id 128 Exported Function
ib 126 Exported Function
hidppd 124 Exported Function
htrace 125 Exported Function
ioapic 132 Exported Function
ioctldecode 133 Exported Function
intsteer 131 Exported Function
idt 129 Exported Function
intstats 130 Exported Function
irt 144 Exported Function
locks 158 Exported Function
logonsession 159 Exported Function
lockedpages 157 Exported Function
lbt 155 Exported Function
loadermemorylist 156 Exported Function
mapic 163 Exported Function
mca 164 Exported Function
lpit 162 Exported Function
lookaside 160 Exported Function
lpc 161 Exported Function
iw 148 Exported Function
job 149 Exported Function
ivrs 147 Exported Function
isainfo 145 Exported Function
its 146 Exported Function
kv 153 Exported Function
kwmi 154 Exported Function
kb 152 Exported Function
joblist 150 Exported Function
jobtree 151 Exported Function
facs 96 Exported Function
fadt 97 Exported Function
exqueue 95 Exported Function
errrec 93 Exported Function
expirations 94 Exported Function
fileobj 101 Exported Function
filetime 102 Exported Function
filelock 100 Exported Function
fan 98 Exported Function
filecache 99 Exported Function
driveinfo 86 Exported Function
drivers 87 Exported Function
dpcwatchdog 85 Exported Function
dpchistory 83 Exported Function
dpcs 84 Exported Function
errlog 91 Exported Function
errpkt 92 Exported Function
e820reslist 90 Exported Function
drvobj 88 Exported Function
dskheap 89 Exported Function
findautochkblockers 103 Exported Function
gicd 117 Exported Function
gicr 118 Exported Function
gicc 116 Exported Function
gbl 114 Exported Function
gentable 115 Exported Function
handle 122 Exported Function
help 123 Exported Function
halpte 121 Exported Function
gicr_findapending 119 Exported Function
halext 120 Exported Function
findthreads 107 Exported Function
fpbnode 108 Exported Function
findhandle 106 Exported Function
finddata 104 Exported Function
findfilelockowner 105 Exported Function
frozen 112 Exported Function
fxdevice 113 Exported Function
frag 111 Exported Function
fpbres 109 Exported Function
fpsearch 110 Exported Function

Signature

  • Status: Signature verified.
  • Serial: 33000002CF6D2CC57CAA65A6D80000000002CF
  • Thumbprint: 1A221B3B4FEF088B17BA6704FD088DF192D9E0EF
  • Issuer: CN=Microsoft Code Signing PCA 2010, O=Microsoft Corporation, L=Redmond, S=Washington, C=US
  • Subject: CN=Microsoft Corporation, O=Microsoft Corporation, L=Redmond, S=Washington, C=US

File Metadata

  • Original Filename: kdexts.DLL
  • Product Name: Microsoft Windows Operating System
  • Company Name: Microsoft Corporation
  • File Version: 10.0.19041.1 (WinBuild.160101.0800)
  • Product Version: 10.0.19041.1
  • Language: English (United States)
  • Legal Copyright: Microsoft Corporation. All rights reserved.
  • Machine Type: 64-bit

File Scan

  • VirusTotal Detections: 0/74
  • VirusTotal Link: https://www.virustotal.com/gui/file/fe7c38d2c30b770606da6ecbfce4310e5b7c88dc167a25d2b337ca40cc33e221/detection

File Similarity (ssdeep match)

File Score
C:\Program Files (x86)\Windows Kits\10\Debuggers\arm64\winxp\kdexts.dll 50

MIT License. Copyright (c) 2020-2021 Strontic.