kext.dll

  • File Path: C:\Program Files (x86)\Windows Kits\10\Debuggers\x86\winext\kext.dll
  • Description: Debugger Extensions

Hashes

Type Hash
MD5 7811DF15EBDBD5FC982CC6E08A003BBA
SHA1 677CBDD7689FFFCB578D64702502C0397A7AE293
SHA256 9906FE0B12D5AB256DA7BB099A588BB5B77E6F13ABB27E61328E3A4FEA74C1E0
SHA384 EA9B15E3B0B4B9169151EF65543968AE1B2F000597281F687827855B776D301D33E642FF3B4445266B878F2F7A3455CD
SHA512 F42819D78E6F5350891C9F024E27A4BC7A9FCA76DF7F3EF7C28554D21BF3D41C0C4BBA15C46F650F7EFDB9C48E43173DDA7DD472AC70A24228C0D5956126B9AA
SSDEEP 3072:S/siKfYF22ZACz1QvKsUqQrdNiHrjxkrThW+CK5OGEcZR/E45JIMEEzHXyqC6VNr:S/siKfc22SCzFjSm4fKZXBZpt9
IMP 4A625F4261E0FDDD78260324B57D335B
PESHA1 89E2D2CED5D3C942C3783589A1A2233584CF7074
PE256 5E00F42C75FA7CD6F8B0C8022CC08E9350B108F7070672FB50CA0A62F82C8346

DLL Exports:

Function Name Ordinal Type
eb 17 Exported Function
ecb 18 Exported Function
ecd 19 Exported Function
dq 14 Exported Function
du 15 Exported Function
dw 16 Exported Function
exca 23 Exported Function
help 24 Exported Function
pci 25 Exported Function
ecs 20 Exported Function
ecw 21 Exported Function
ed 22 Exported Function
dp 13 Exported Function
cbreg 7 Exported Function
db 8 Exported Function
dc 9 Exported Function
_EFN_DumpCfgSpace 1 Exported Function
_EFN_GetPoolTagDescription 2 Exported Function
can_write_kdump 6 Exported Function
DebugExtensionNotify 4 Exported Function
DebugExtensionUninitialize 5 Exported Function
diskspace 12 Exported Function
dcs 10 Exported Function
dd 11 Exported Function
DebugExtensionInitialize 3 Exported Function

Signature

  • Status: Signature verified.
  • Serial: 33000002CF6D2CC57CAA65A6D80000000002CF
  • Thumbprint: 1A221B3B4FEF088B17BA6704FD088DF192D9E0EF
  • Issuer: CN=Microsoft Code Signing PCA 2010, O=Microsoft Corporation, L=Redmond, S=Washington, C=US
  • Subject: CN=Microsoft Corporation, O=Microsoft Corporation, L=Redmond, S=Washington, C=US

File Metadata

  • Original Filename: kext.dll
  • Product Name: Microsoft Windows Operating System
  • Company Name: Microsoft Corporation
  • File Version: 10.0.19041.1 (WinBuild.160101.0800)
  • Product Version: 10.0.19041.1
  • Language: English (United States)
  • Legal Copyright: Microsoft Corporation. All rights reserved.
  • Machine Type: 32-bit

File Scan

  • VirusTotal Detections: Unknown

File Similarity (ssdeep match)

File Score
C:\Program Files (x86)\Windows Kits\10\Debuggers\arm\winext\kext.dll 44
C:\Program Files (x86)\Windows Kits\10\Debuggers\arm64\winext\kext.dll 41
C:\Program Files (x86)\Windows Kits\10\Debuggers\x64\winext\kext.dll 43

MIT License. Copyright (c) 2020-2021 Strontic.