kext.dll

  • File Path: C:\Program Files (x86)\Windows Kits\10\Debuggers\x64\winext\kext.dll
  • Description: Debugger Extensions

Hashes

Type Hash
MD5 58BC40006D0C22B6400F612F153AA600
SHA1 E1C4F3071B852884474E5953964694A54D051F29
SHA256 1BB38B600E0A7AE5E5726C5D95E6AED4F1C492C2F9C75EB7553FE85631FB4E2A
SHA384 EE5D508985EE68C4620033D4F5E660F7AE513B5B8B9D8F26EC5B9AC062A228B103DFD7539C4BD136801CC1F03808DE8E
SHA512 82D3DABD32F2DC77AF1412FDB515FDB1384473274087C54519EF053D9D8B75500A694D3E13385BCCC3D2F3BBCA6E00CE22389A3C3B85E5E89444B9E0FF6B1719
SSDEEP 3072:SqC8q+vVQF+eciKfIl22pY9SjVgPKTYojKqAbSTLnaznvlP1:SqC8DGZciKfc22SSjZ/n4nd
IMP 337216D887AE16D7F1CCF19BD04D2D8B
PESHA1 184F8C2D3013EC4EFB86DC762521E03A3E8F7CA0
PE256 15E0B816DE1DEF0CC50B469336295EC610FB7A6BEA6C25F6F8A0F4A6B81C2B5B

DLL Exports:

Function Name Ordinal Type
eb 17 Exported Function
ecb 18 Exported Function
ecd 19 Exported Function
dq 14 Exported Function
du 15 Exported Function
dw 16 Exported Function
exca 23 Exported Function
help 24 Exported Function
pci 25 Exported Function
ecs 20 Exported Function
ecw 21 Exported Function
ed 22 Exported Function
dp 13 Exported Function
cbreg 7 Exported Function
db 8 Exported Function
dc 9 Exported Function
_EFN_DumpCfgSpace 1 Exported Function
_EFN_GetPoolTagDescription 2 Exported Function
can_write_kdump 6 Exported Function
DebugExtensionNotify 4 Exported Function
DebugExtensionUninitialize 5 Exported Function
diskspace 12 Exported Function
dcs 10 Exported Function
dd 11 Exported Function
DebugExtensionInitialize 3 Exported Function

Signature

  • Status: Signature verified.
  • Serial: 33000002CF6D2CC57CAA65A6D80000000002CF
  • Thumbprint: 1A221B3B4FEF088B17BA6704FD088DF192D9E0EF
  • Issuer: CN=Microsoft Code Signing PCA 2010, O=Microsoft Corporation, L=Redmond, S=Washington, C=US
  • Subject: CN=Microsoft Corporation, O=Microsoft Corporation, L=Redmond, S=Washington, C=US

File Metadata

  • Original Filename: kext.dll
  • Product Name: Microsoft Windows Operating System
  • Company Name: Microsoft Corporation
  • File Version: 10.0.19041.1 (WinBuild.160101.0800)
  • Product Version: 10.0.19041.1
  • Language: English (United States)
  • Legal Copyright: Microsoft Corporation. All rights reserved.
  • Machine Type: 64-bit

File Scan

  • VirusTotal Detections: 0/75
  • VirusTotal Link: https://www.virustotal.com/gui/file/1bb38b600e0a7ae5e5726c5d95e6aed4f1c492c2f9c75eb7553fe85631fb4e2a/detection

File Similarity (ssdeep match)

File Score
C:\Program Files (x86)\Windows Kits\10\Debuggers\arm\winext\kext.dll 33
C:\Program Files (x86)\Windows Kits\10\Debuggers\arm64\winext\kext.dll 54
C:\Program Files (x86)\Windows Kits\10\Debuggers\x86\winext\kext.dll 43

MIT License. Copyright (c) 2020-2021 Strontic.