kext.dll

  • File Path: C:\Program Files (x86)\Windows Kits\10\Debuggers\arm\winext\kext.dll
  • Description: Debugger Extensions

Hashes

Type Hash
MD5 1393A936F594E198D8C622C0D712AF7E
SHA1 C92487A69E63EF9A262254EA1A82BD63C8519547
SHA256 3286F0FBDAE764E34695DFC8261D2D63ABCA13E9D8600B075E73E285A3145F41
SHA384 BDC179C083367BEB49059EE381677F02125432D0FFE3FFCBDD7240F3C075769636FE2273DE662F5AB249A4286E5CEFDC
SHA512 CA5EA7F62A35675652D7C65ACE24000040F56FAE5665372D5B81A144834B7305EA10E70A0E76D6B2156582B042E81A59D046AA824FFD4B4E1689D2104ABCA7DD
SSDEEP 3072:rsiKfYF22ZACz1QvKsUqQrIxz3/jLnTw6r0B4ajF3mTIHf9xBWPxc3xA:rsiKfc22SCz2xLnTw6U3mTsIxkA
IMP 9453EB1332E7ADBF0236001269671811
PESHA1 8EB7FAC352E82770D514EDE57839F3F320109850
PE256 1C62C434D6AD95A20C1F2A314648585A564F8DC03F0B04EC580F4B7F8AA76190

DLL Exports:

Function Name Ordinal Type
eb 17 Exported Function
ecb 18 Exported Function
ecd 19 Exported Function
dq 14 Exported Function
du 15 Exported Function
dw 16 Exported Function
exca 23 Exported Function
help 24 Exported Function
pci 25 Exported Function
ecs 20 Exported Function
ecw 21 Exported Function
ed 22 Exported Function
dp 13 Exported Function
cbreg 7 Exported Function
db 8 Exported Function
dc 9 Exported Function
_EFN_DumpCfgSpace 1 Exported Function
_EFN_GetPoolTagDescription 2 Exported Function
can_write_kdump 6 Exported Function
DebugExtensionNotify 4 Exported Function
DebugExtensionUninitialize 5 Exported Function
diskspace 12 Exported Function
dcs 10 Exported Function
dd 11 Exported Function
DebugExtensionInitialize 3 Exported Function

Signature

  • Status: Signature verified.
  • Serial: 33000002B7E8E007A82AEF13150000000002B7
  • Thumbprint: 5A68625F1A516670A744F7EF919500A479D32A5B
  • Issuer: CN=Microsoft Code Signing PCA 2010, O=Microsoft Corporation, L=Redmond, S=Washington, C=US
  • Subject: CN=Microsoft Windows Kits Publisher, O=Microsoft Corporation, L=Redmond, S=Washington, C=US

File Metadata

  • Original Filename: kext.dll
  • Product Name: Microsoft Windows Operating System
  • Company Name: Microsoft Corporation
  • File Version: 10.0.19041.1 (WinBuild.160101.0800)
  • Product Version: 10.0.19041.1
  • Language: English (United States)
  • Legal Copyright: Microsoft Corporation. All rights reserved.
  • Machine Type: 452

File Scan

  • VirusTotal Detections: Unknown

File Similarity (ssdeep match)

File Score
C:\Program Files (x86)\Windows Kits\10\Debuggers\arm64\winext\kext.dll 36
C:\Program Files (x86)\Windows Kits\10\Debuggers\x64\winext\kext.dll 33
C:\Program Files (x86)\Windows Kits\10\Debuggers\x86\winext\kext.dll 44

MIT License. Copyright (c) 2020-2021 Strontic.